last executing test programs: 21m13.742551221s ago: executing program 32 (id=417): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0x25}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d", 0x0) 20m41.92763621s ago: executing program 33 (id=839): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000007, 0x20132, 0xffffffffffffffff, 0xb2999000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 20m20.169548767s ago: executing program 34 (id=1641): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x40051) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) close(r0) 18m6.644590417s ago: executing program 35 (id=4123): r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 16m23.413296855s ago: executing program 36 (id=5260): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0xc40, 0x8, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x40000029) close(r0) 15m11.308699141s ago: executing program 37 (id=5814): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x20000800) read(r0, &(0x7f0000001b00)=""/179, 0xb3) 12m31.646616722s ago: executing program 38 (id=6848): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) 12m17.139705048s ago: executing program 39 (id=6923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000000082b00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 12m14.628322797s ago: executing program 40 (id=6932): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300ea0000000000000000007d"], 0x0}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 12m10.126430114s ago: executing program 41 (id=6952): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xfff3}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 11m7.050325426s ago: executing program 42 (id=7033): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="8800000000020104000000000000000002000005240002801400018008000100"], 0x88}}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xe}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x24048090) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd0"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 10m34.064673001s ago: executing program 43 (id=7051): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e734fdc2da8c998a8700232e5263a04392efa56fc98553afa5a498c8c3a3206f2b25a00c0ec0d1202c822ab708037a4c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750af696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6badebdc0048aa9956828007502b62", @ANYRES16, @ANYRES64, @ANYBLOB="f47d9d"], 0x1, 0x65c, &(0x7f0000002280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m8.012033672s ago: executing program 44 (id=7366): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x4a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 9m20.19912027s ago: executing program 45 (id=8070): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x4) 8m45.348902969s ago: executing program 46 (id=8571): io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) 8m21.615223384s ago: executing program 47 (id=8673): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x20c, 0x7}, &(0x7f0000000100)=0x10) 7m35.271976408s ago: executing program 48 (id=9354): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) 7m33.227411536s ago: executing program 49 (id=9486): socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x48100, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 6m30.890143589s ago: executing program 50 (id=10788): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 6m8.314414556s ago: executing program 51 (id=11244): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3, 0x3}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)=')(', 0x2}], 0x1}, 0x41) 5m8.260542267s ago: executing program 52 (id=12433): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x3, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x22008d0, 0x0) 4m40.592040963s ago: executing program 53 (id=12978): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m16.428675096s ago: executing program 54 (id=13135): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000b40)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0x1002}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x39d442c, 0x0, 0x3, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3m58.468108535s ago: executing program 55 (id=13857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0xd, 0x40, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @local, 0xfff}, 0x34) 3m44.501998022s ago: executing program 56 (id=14118): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus/file0\x00', 0x14552, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8], 0x7b, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0xc216ad4a50a0ac11) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x107000, 0x0) read$msr(r1, &(0x7f0000000600)=""/175, 0xfffffe51) 2m32.027558362s ago: executing program 57 (id=14990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073007a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m7.671744561s ago: executing program 1 (id=15379): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000001", @ANYBLOB="0102"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 2m7.563668663s ago: executing program 1 (id=15382): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) listns(&(0x7f0000000b80)={0x20, 0x0, 0xfffffffffffffff5, 0x20000, 0x0, 0x9}, 0x0, 0x0, 0x0) 2m7.450814616s ago: executing program 1 (id=15385): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000880)=""/240, 0xf0}], 0x20) 2m6.517042888s ago: executing program 1 (id=15400): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) 2m6.43235535s ago: executing program 1 (id=15415): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2m6.200215095s ago: executing program 1 (id=15406): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) unshare(0x62040200) 1m51.368737751s ago: executing program 58 (id=15406): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) unshare(0x62040200) 1m32.532824581s ago: executing program 9 (id=15802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 1m32.14678694s ago: executing program 9 (id=15812): memfd_create(0x0, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, 0x0) io_setup(0x5, &(0x7f0000000e80)) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x1) 1m31.990375373s ago: executing program 9 (id=15817): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000640)) 1m31.015186436s ago: executing program 9 (id=15830): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f00000002c0)='./bus\x00', 0x14927d, 0x8) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6f8, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c432004cbc329834c9b1b167263bdbcef549ba197fce47d0100173400fff7ffffff000000f3e7f29b00000200000000000600", "b73200000000000000000d00000000000000000000080100", [0x40000000004, 0x670]}) 1m30.514426828s ago: executing program 9 (id=15839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x10c}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='1', 0x1) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)='veth0\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x40, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @private=0xa010102}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) 1m30.044084529s ago: executing program 9 (id=15841): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendmsg$rds(r0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000c}, 0x8000) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 1m29.904884362s ago: executing program 59 (id=15841): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendmsg$rds(r0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000c}, 0x8000) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 1m22.815873287s ago: executing program 7 (id=15966): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1m22.815314777s ago: executing program 7 (id=15968): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x6}, 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0x2}], 0x1, 0x40032060, 0x0) 1m22.648170401s ago: executing program 7 (id=15971): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x468, @remote, 0x8}}, 0xa, 0xfffd}, &(0x7f0000000000)=0x90) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f000000000095000000000000005d894491301e6616ee4b6e30641f9c310851a48bbcfbdb93e004b5dc6c6c0b56190d3b4cba49b9263b20b78e4f294d875ca38efe1b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) 1m22.584753962s ago: executing program 7 (id=15972): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000180)=0x3, 0x4) 1m22.584288593s ago: executing program 7 (id=15973): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m22.489794345s ago: executing program 7 (id=15975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x2b) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x1000}}}}}}}, 0x0) 1m7.945209214s ago: executing program 60 (id=15975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x2b) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x1000}}}}}}}, 0x0) 58.522427244s ago: executing program 6 (id=16365): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c00", @ANYRES32=0x41424344], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 58.386704957s ago: executing program 6 (id=16368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x7, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9b, 0x59}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 58.005936616s ago: executing program 6 (id=16375): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 57.900935629s ago: executing program 6 (id=16376): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x84, 0x0, 0xd, 0x400009, 0x8, 0xa, 0xfffffffe}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0xab7f) 57.83019802s ago: executing program 6 (id=16378): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e24, 0xb, @remote, 0x1}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x22f}, {0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, r3, 0x7}}, 0x48) 57.324046602s ago: executing program 6 (id=16387): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 57.315042932s ago: executing program 61 (id=16387): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 54.656614165s ago: executing program 8 (id=16416): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a2a, 0x823}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6704c4551d39f6c}, 0x40080) 54.294761253s ago: executing program 8 (id=16421): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xca71d000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000013c0)=[@in={0x2, 0x4e1e, @private=0xa010102}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 53.477185692s ago: executing program 8 (id=16436): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004005) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x1a, "e2e6a141cd18cb820abf00386d51a2edab535ea30308a7ebcb45"}, &(0x7f0000000480)=0x22) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 53.174516359s ago: executing program 8 (id=16451): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) clock_gettime(0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, 0x0) 52.043629295s ago: executing program 8 (id=16458): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 51.86190565s ago: executing program 8 (id=16462): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x2a, 0x6, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3}, 0x3022, 0x36, 0x43a1bd52, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x200000001, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1200408, &(0x7f0000000180)={[{@delalloc}, {@lazytime}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7a5, &(0x7f00000007c0)="$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") r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000280)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 37.232322341s ago: executing program 62 (id=16462): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x2a, 0x6, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3}, 0x3022, 0x36, 0x43a1bd52, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x200000001, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1200408, &(0x7f0000000180)={[{@delalloc}, {@lazytime}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7a5, &(0x7f00000007c0)="$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") r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000280)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.202143009s ago: executing program 5 (id=17220): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r3, @ANYBLOB="080002007f0000010800"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2.192718749s ago: executing program 5 (id=17221): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 1.193504812s ago: executing program 5 (id=17240): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0xa}}, 0x26) sendmmsg$inet(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107678bfecb64da14096962db497a0299399ab6101c3b", 0x18}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000002c0), 0x1a}}], 0x2, 0x8040) 987.861157ms ago: executing program 5 (id=17241): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17) read(r0, &(0x7f0000002fc0)=""/52, 0x34) 985.853537ms ago: executing program 2 (id=17251): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r1, 0xf5f) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, "d92984bd1ca44c226af5160e961711a077b88375b78411e88509de05000000020010000080000000000000000aabeb00", 0x3c}, 0x60) 938.077938ms ago: executing program 3 (id=17242): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x4ffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r1}, 0x38) 773.241662ms ago: executing program 2 (id=17243): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 752.584172ms ago: executing program 0 (id=17244): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000000}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 707.159693ms ago: executing program 0 (id=17246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 650.202645ms ago: executing program 3 (id=17247): ioprio_set$pid(0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1410, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0x2, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x40, 0xc4852ef}, 0x109068, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000700000000000feffffffb7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa10000000000000701", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 641.012645ms ago: executing program 0 (id=17248): setresuid(0xee01, 0x0, 0x0) r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 604.190906ms ago: executing program 2 (id=17249): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x21, &(0x7f0000000040)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000755af0fff0ffffffb7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a5000000182200", @ANYRES32, @ANYBLOB="0000000009000000180100002020642500a2e110252d7d00000000202020"], 0x0, 0x5e, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2a78c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000d23000/0x3000)=nil, 0x0}, 0x68) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x89b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x4, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 598.614876ms ago: executing program 0 (id=17250): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x10, 0x11, 0xff, @remote, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 569.819277ms ago: executing program 4 (id=17252): eventfd(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 548.430637ms ago: executing program 2 (id=17253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007002000850000009e0000001801000020644d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 514.846017ms ago: executing program 3 (id=17254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000c300)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 431.94869ms ago: executing program 4 (id=17255): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 429.66779ms ago: executing program 4 (id=17256): socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b3c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003300)='C', 0x1}], 0x1}}], 0x1, 0x20000081) 300.726843ms ago: executing program 0 (id=17257): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bda4, 0x25dfdbfd, {0x1, 0x1f, 0x88, 0x10, {0x4e24, 0x4e22, [0x3, 0xffffffff, 0xf, 0xc3], [0x6, 0x0, 0x5, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x2, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) 273.129523ms ago: executing program 0 (id=17258): setrlimit(0x40000000000008, &(0x7f0000000000)) syz_emit_ethernet(0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x6, 0x2) mlock2(&(0x7f00001f6000/0x2000)=nil, 0x2000, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 199.315335ms ago: executing program 2 (id=17259): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d05, &(0x7f0000000900)="0000010000000000000001") close_range(r0, 0xffffffffffffffff, 0x0) 199.102245ms ago: executing program 4 (id=17260): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tracing={0x0, 0xfffffffffffffffc}}, 0x20) syz_emit_ethernet(0x19, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x4}}, {@llc={0x4, {@llc={0xe, 0x1, ' '}}}}}, 0x0) 183.150756ms ago: executing program 2 (id=17261): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x1d57, 0xc000, 0x7, 0x20002f9}) clock_adjtime(0x17, &(0x7f0000000000)={0x0, 0x7, 0xb, 0xffffffffffffffff, 0x8001, 0x7ff, 0x5, 0x3, 0x100000000000006, 0x200, 0x3, 0x4, 0x9, 0x80000000000005, 0x11, 0xffffffffffffffff, 0xfffffffe, 0x5, 0xc, 0xfffffffd, 0x5, 0x1, 0x11cb, 0xffffffff, 0xd, 0x8000000c}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff8, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 182.553006ms ago: executing program 3 (id=17262): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) close(r0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r3 = dup3(r2, r1, 0x0) fchdir(r3) 146.844137ms ago: executing program 4 (id=17263): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xa}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x200, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 125.134097ms ago: executing program 5 (id=17264): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'veth0_to_team\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) close(r0) 92.396607ms ago: executing program 3 (id=17265): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xe4b7, 0xffffffffffffffe3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000003a000/0x1000)=nil, &(0x7f00006ef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 89.683348ms ago: executing program 4 (id=17266): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 25.551719ms ago: executing program 5 (id=17267): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 0s ago: executing program 3 (id=17268): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x220602, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0x4) kernel console output (not intermixed with test programs): b1e159 code=0x7ffc0000 [ 1240.196757][ T29] audit: type=1326 audit(1788268434.482:9728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18170 comm="syz.4.15948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1662d7ef31 code=0x7ffc0000 [ 1240.196846][ T29] audit: type=1326 audit(1788268434.482:9729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18170 comm="syz.4.15948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1662b1e159 code=0x7ffc0000 [ 1240.387988][T18174] loop8: detected capacity change from 0 to 512 [ 1240.431547][T18174] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1240.453478][T18174] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1240.453578][T18174] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1240.602226][T18185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15952'. [ 1240.648971][T18186] coredump: 21(syz.7.15951): |/bin/ca pipe failed [ 1240.675685][T15038] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.145271][T18216] coredump: 2459(syz.5.15961): |/bin/ca pipe failed [ 1241.161913][T18223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.162102][T18223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.702826][T18254] netlink: 'syz.4.15981': attribute type 1 has an invalid length. [ 1241.702854][T18254] netlink: 'syz.4.15981': attribute type 4 has an invalid length. [ 1241.702871][T18254] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15981'. [ 1241.705060][T18254] netlink: 'syz.4.15981': attribute type 1 has an invalid length. [ 1241.705096][T18254] netlink: 'syz.4.15981': attribute type 4 has an invalid length. [ 1241.705198][T18254] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15981'. [ 1242.901382][T18296] block device autoloading is deprecated and will be removed. [ 1242.918595][T18298] coredump: 1(syz.5.15996): |/bin/ca pipe failed [ 1243.551164][T18330] sctp: [Deprecated]: syz.4.16012 (pid 18330) Use of int in max_burst socket option deprecated. [ 1243.551164][T18330] Use struct sctp_assoc_value instead [ 1243.747768][T18341] loop8: detected capacity change from 0 to 1024 [ 1243.756825][T18341] EXT4-fs: Ignoring removed bh option [ 1243.777175][T18341] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1243.845607][T15038] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.055258][T18352] veth0: entered promiscuous mode [ 1244.061346][T18352] veth0_virt_wifi: entered promiscuous mode [ 1244.068134][T18351] veth0_virt_wifi: left promiscuous mode [ 1244.068247][T18351] veth0: left promiscuous mode [ 1245.082668][T18400] loop8: detected capacity change from 0 to 1024 [ 1245.087080][T18400] EXT4-fs: Ignoring removed bh option [ 1245.125463][T18400] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1245.141449][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 1245.141507][ T29] audit: type=1400 audit(1788268439.669:10277): avc: denied { setattr } for pid=18399 comm="syz.8.16040" path="/233/file1" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1245.141545][ T29] audit: type=1400 audit(1788268439.669:10278): avc: denied { write } for pid=18399 comm="syz.8.16040" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1245.197013][ T29] audit: type=1400 audit(1788268439.669:10279): avc: denied { write } for pid=18399 comm="syz.8.16040" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1245.197057][ T29] audit: type=1400 audit(1788268439.669:10280): avc: denied { write } for pid=18399 comm="syz.8.16040" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1245.197110][ T29] audit: type=1400 audit(1788268439.669:10281): avc: denied { write } for pid=18399 comm="syz.8.16040" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1245.197184][ T29] audit: type=1400 audit(1788268439.669:10282): avc: denied { rename } for pid=18399 comm="syz.8.16040" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1245.197349][ T29] audit: type=1400 audit(1788268439.669:10283): avc: denied { rmdir } for pid=18399 comm="syz.8.16040" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1245.197526][ T29] audit: type=1400 audit(1788268439.669:10284): avc: denied { unlink } for pid=18399 comm="syz.8.16040" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1245.248621][T15038] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.558735][T18408] loop8: detected capacity change from 0 to 4096 [ 1245.576475][T18408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1245.623205][ T29] audit: type=1400 audit(1788268440.173:10285): avc: denied { write } for pid=18405 comm="syz.8.16041" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1245.702585][T15038] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.817627][T18420] net_ratelimit: 3545 callbacks suppressed [ 1245.817658][T18420] ip_tables: iptables: counters copy to user failed while replacing table [ 1246.267561][T18448] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16060'. [ 1246.388345][T18452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16061'. [ 1246.586274][ T29] audit: type=1400 audit(1788268441.181:10286): avc: denied { write } for pid=18449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1247.558829][T18514] coredump: 570(syz.8.16072): |/bin/ca pipe failed [ 1247.733802][T18527] netdevsim netdevsim8: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component [ 1248.326500][T18581] bridge0: entered allmulticast mode [ 1248.352293][T18581] bridge_slave_1: left allmulticast mode [ 1248.352388][T18581] bridge_slave_1: left promiscuous mode [ 1248.352594][T18581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.366917][T18581] bridge_slave_0: left allmulticast mode [ 1248.366987][T18581] bridge_slave_0: left promiscuous mode [ 1248.372239][T18581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.535493][T18598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.553454][T18598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1248.639775][T18598] batadv_slave_0: left promiscuous mode [ 1248.641111][T18598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.658855][T18598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.668576][T18598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1248.680766][T18598] veth1_macvtap: left promiscuous mode [ 1248.681645][T18598] veth0_macvtap: left promiscuous mode [ 1248.682641][T18598] veth0_macvtap: entered promiscuous mode [ 1248.683412][T18598] veth1_macvtap: entered promiscuous mode [ 1248.683442][T18598] veth1_macvtap: entered allmulticast mode [ 1248.683570][T18598] macsec0: left promiscuous mode [ 1248.724104][T18598] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1248.754362][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.754512][ T36] bridge0: port 1(bridge_slave_0) entered listening state [ 1248.773607][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.773670][ T36] bridge0: port 2(bridge_slave_1) entered listening state [ 1249.441240][T18657] netlink: 52 bytes leftover after parsing attributes in process `syz.4.16125'. [ 1249.525875][T18666] tipc: Started in network mode [ 1249.525945][T18666] tipc: Node identity 86b92960d2bd, cluster identity 4711 [ 1249.526038][T18666] tipc: Enabled bearer , priority 2 [ 1249.546727][T18665] tipc: Resetting bearer [ 1249.563727][T18665] tipc: Disabling bearer [ 1249.713114][T18684] loop8: detected capacity change from 0 to 256 [ 1249.733053][T18685] coredump: 1(syz.4.16135): |/bin/ca pipe failed [ 1250.072786][T18703] loop8: detected capacity change from 0 to 764 [ 1250.612046][T18725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16154'. [ 1250.973611][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1250.973699][ T29] audit: type=1326 audit(1788268445.790:10342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.16158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa583b69f31 code=0x7ffc0000 [ 1250.973742][ T29] audit: type=1326 audit(1788268445.790:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.16158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa582d9e159 code=0x7ffc0000 [ 1250.973782][ T29] audit: type=1326 audit(1788268445.790:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.16158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa582d9e159 code=0x7ffc0000 [ 1250.975619][ T29] audit: type=1326 audit(1788268445.790:10345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.16158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa582d9e159 code=0x7ffc0000 [ 1250.976031][ T29] audit: type=1326 audit(1788268445.790:10346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.16158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa583b69f31 code=0x7ffc0000 [ 1250.980179][ T29] audit: type=1326 audit(1788268445.790:10347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.16158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa582d9e159 code=0x7ffc0000 [ 1250.980931][ T29] audit: type=1326 audit(1788268445.800:10348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.16158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa583b69f31 code=0x7ffc0000 [ 1250.980972][ T29] audit: type=1326 audit(1788268445.800:10349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.16158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa582d9e159 code=0x7ffc0000 [ 1250.981149][ T29] audit: type=1326 audit(1788268445.800:10350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.16158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa583b69f31 code=0x7ffc0000 [ 1250.981296][ T29] audit: type=1326 audit(1788268445.800:10351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.16158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa582d9e159 code=0x7ffc0000 [ 1251.973564][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16165'. [ 1252.129630][ T3493] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 1252.659066][T18785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16187'. [ 1252.885171][T18792] loop0: detected capacity change from 0 to 4096 [ 1252.908045][T18792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.997796][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1253.087320][T18780] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1253.855390][ T8780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.286338][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16186'. [ 1254.306167][T18827] bond4: Invalid ad_actor_system MAC address. [ 1254.306199][T18827] bond4: option ad_actor_system: invalid value (1) [ 1254.323732][T18827] bond4 (unregistering): Released all slaves [ 1254.758603][T18826] Set syz1 is full, maxelem 65536 reached [ 1254.934805][T18852] SELinux: invalid class [ 1254.938425][T18852] SELinux: failed to load policy [ 1256.168528][T32184] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.265026][T32184] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.331807][T32184] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.413646][T32184] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.652591][T32184] bridge_slave_1: left allmulticast mode [ 1256.652626][T32184] bridge_slave_1: left promiscuous mode [ 1256.652802][T32184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.683504][T32184] bridge_slave_0: left allmulticast mode [ 1256.683620][T32184] bridge_slave_0: left promiscuous mode [ 1256.683784][T32184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.776554][T18934] netlink: 'syz.5.16231': attribute type 1 has an invalid length. [ 1256.776591][T18934] netlink: 'syz.5.16231': attribute type 4 has an invalid length. [ 1256.776611][T18934] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.16231'. [ 1256.802715][T18934] netlink: 'syz.5.16231': attribute type 1 has an invalid length. [ 1256.802748][T18934] netlink: 'syz.5.16231': attribute type 4 has an invalid length. [ 1256.802844][T18934] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.16231'. [ 1256.899944][T32184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1256.914523][T32184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1256.926147][T32184] bond0 (unregistering): Released all slaves [ 1257.027429][T32184] hsr_slave_0: left promiscuous mode [ 1257.033024][T32184] hsr_slave_1: left promiscuous mode [ 1257.039128][T32184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1257.039187][T32184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.042222][T32184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.042274][T32184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.079115][T32184] veth1_macvtap: left promiscuous mode [ 1257.079184][T32184] veth0_macvtap: left promiscuous mode [ 1257.079323][T32184] veth1_vlan: left promiscuous mode [ 1257.079658][T32184] veth0_vlan: left promiscuous mode [ 1257.132885][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1257.132967][ T29] audit: type=1400 audit(1788268452.257:10368): avc: denied { write } for pid=18931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1257.208453][ T29] audit: type=1400 audit(1788268452.341:10369): avc: denied { write } for pid=18954 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1257.472733][T32184] team0 (unregistering): Port device team_slave_1 removed [ 1257.492097][T32184] team0 (unregistering): Port device team_slave_0 removed [ 1257.647735][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1257.786932][T18969] coredump: 1(syz.4.16241): |/bin/ca pipe failed [ 1258.017341][ T29] audit: type=1400 audit(1788268453.191:10370): avc: denied { write } for pid=18967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1258.070929][ T29] audit: type=1400 audit(1788268453.244:10371): avc: denied { write } for pid=18988 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1258.106727][T18908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.106830][T18908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.114031][T18908] bridge_slave_0: entered allmulticast mode [ 1258.121925][T18908] bridge_slave_0: entered promiscuous mode [ 1258.131822][T18908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.134120][T18908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.134365][T18908] bridge_slave_1: entered allmulticast mode [ 1258.141921][T18908] bridge_slave_1: entered promiscuous mode [ 1258.185309][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1258.223150][T18908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.239662][T18908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.305782][T18908] team0: Port device team_slave_0 added [ 1258.315164][T18908] team0: Port device team_slave_1 added [ 1258.359513][T18908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.359539][T18908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.359585][T18908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.368946][T18908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.368990][T18908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.372218][T18908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.475618][T18908] hsr_slave_0: entered promiscuous mode [ 1258.476053][T18908] hsr_slave_1: entered promiscuous mode [ 1258.476325][T18908] debugfs: 'hsr0' already exists in 'hsr' [ 1258.476345][T18908] Cannot create hsr debugfs directory [ 1258.615443][ T29] audit: type=1400 audit(1788268453.811:10372): avc: denied { write } for pid=18993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1258.676376][ T29] audit: type=1400 audit(1788268453.884:10373): avc: denied { write } for pid=19009 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1258.725855][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1258.780212][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888103e5b600: rx timeout, send abort [ 1258.780373][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888103e5b600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1258.957975][ T29] audit: type=1400 audit(1788268454.168:10374): avc: denied { write } for pid=19020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1258.988583][T19038] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16251'. [ 1259.027170][ T29] audit: type=1400 audit(1788268454.252:10375): avc: denied { write } for pid=19040 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.050410][T18908] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1259.066214][T18908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1259.067342][T18908] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1259.086208][T18908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1259.096666][T18908] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1259.108823][T18908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1259.118480][T18908] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1259.130072][T18908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1259.152393][ T3021] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1259.275785][T18908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.308225][T18908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.335065][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.335111][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.356021][T15259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.356107][T15259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.394724][ T29] audit: type=1400 audit(1788268454.630:10376): avc: denied { unmount } for pid=8780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1259.421194][T19067] xt_hashlimit: size too large, truncated to 1048576 [ 1259.461769][ T29] audit: type=1400 audit(1788268454.703:10377): avc: denied { write } for pid=19057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.733060][T18908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.851111][T19125] IPv6: NLM_F_CREATE should be specified when creating new route [ 1259.851263][T19125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1259.851283][T19125] IPv6: NLM_F_CREATE should be set when creating new route [ 1259.876736][T19125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1259.876816][T19125] IPv6: NLM_F_CREATE should be set when creating new route [ 1260.033888][T18908] veth0_vlan: entered promiscuous mode [ 1260.045553][T18908] veth1_vlan: entered promiscuous mode [ 1260.085330][T18908] veth0_macvtap: entered promiscuous mode [ 1260.094300][T18908] veth1_macvtap: entered promiscuous mode [ 1260.111083][T18908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.123104][T18908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.205754][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.207044][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.207161][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.210316][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.265146][T19155] FAULT_INJECTION: forcing a failure. [ 1260.265146][T19155] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.265210][T19155] CPU: 0 UID: 0 PID: 19155 Comm: syz.8.16269 Tainted: G S syzkaller #0 PREEMPT(lazy) [ 1260.265257][T19155] Tainted: [S]=CPU_OUT_OF_SPEC [ 1260.265266][T19155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1260.265287][T19155] Call Trace: [ 1260.265294][T19155] [ 1260.265303][T19155] __dump_stack+0x1d/0x30 [ 1260.265343][T19155] dump_stack_lvl+0x95/0xd0 [ 1260.265374][T19155] dump_stack+0x15/0x1b [ 1260.265423][T19155] should_fail_ex+0x262/0x280 [ 1260.265453][T19155] ? alloc_workqueue_va+0x500/0x1630 [ 1260.265517][T19155] should_failslab+0x8c/0xb0 [ 1260.265548][T19155] __kmalloc_cache_node_noprof+0x81/0x420 [ 1260.265593][T19155] ? alloc_workqueue_va+0x500/0x1630 [ 1260.265648][T19155] alloc_workqueue_va+0x500/0x1630 [ 1260.265688][T19155] alloc_workqueue_noprof+0x84/0xb0 [ 1260.265750][T19155] ? nci_hci_allocate+0x33/0x180 [ 1260.265798][T19155] nci_register_device+0x20c/0x510 [ 1260.265852][T19155] virtual_ncidev_open+0xca/0x130 [ 1260.265893][T19155] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1260.265989][T19155] misc_open+0x1df/0x220 [ 1260.266022][T19155] chrdev_open+0x2eb/0x3a0 [ 1260.266056][T19155] do_dentry_open+0x49f/0xa60 [ 1260.266084][T19155] ? __pfx_chrdev_open+0x10/0x10 [ 1260.266138][T19155] vfs_open+0x37/0x1e0 [ 1260.266166][T19155] path_openat+0xc01/0x10d0 [ 1260.266207][T19155] do_file_open+0x16c/0x290 [ 1260.266300][T19155] do_sys_openat2+0xa0/0x130 [ 1260.266334][T19155] __x64_sys_openat+0xf2/0x120 [ 1260.266367][T19155] x64_sys_call+0x1f72/0x2550 [ 1260.266405][T19155] do_syscall_64+0x112/0x360 [ 1260.266452][T19155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.266548][T19155] RIP: 0033:0x7fbcf340e159 [ 1260.266566][T19155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.266586][T19155] RSP: 002b:00007fbcf1e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1260.266628][T19155] RAX: ffffffffffffffda RBX: 00007fbcf3695fa0 RCX: 00007fbcf340e159 [ 1260.266668][T19155] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1260.266688][T19155] RBP: 00007fbcf34a5024 R08: 0000000000000000 R09: 0000000000000000 [ 1260.266777][T19155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1260.266831][T19155] R13: 00007fbcf3696038 R14: 00007fbcf3695fa0 R15: 00007fff66240488 [ 1260.266926][T19155] [ 1260.751087][T19190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16277'. [ 1260.908366][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16285'. [ 1261.357286][T19268] batadv_slave_0: entered promiscuous mode [ 1261.375090][T19268] batadv_slave_0: left promiscuous mode [ 1261.513816][T19275] coredump: 1(syz.0.16298): |/bin/ca pipe failed [ 1261.548019][T19274] cgroup: Setting release_agent not allowed [ 1262.049444][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1262.049481][ T29] audit: type=1400 audit(1788268457.422:10393): avc: denied { read append } for pid=19350 comm="syz.8.16318" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1262.049518][ T29] audit: type=1400 audit(1788268457.422:10394): avc: denied { open } for pid=19350 comm="syz.8.16318" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1262.069475][ T29] audit: type=1400 audit(1788268457.443:10395): avc: denied { ioctl } for pid=19350 comm="syz.8.16318" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1262.148063][ T29] audit: type=1400 audit(1788268457.517:10396): avc: denied { write } for pid=19335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1262.220800][ T29] audit: type=1400 audit(1788268457.601:10397): avc: denied { write } for pid=19358 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1262.344514][T15259] Bluetooth: hci0: Frame reassembly failed (-84) [ 1262.409740][ T29] audit: type=1400 audit(1788268457.800:10398): avc: denied { write } for pid=19372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1262.465125][ T29] audit: type=1400 audit(1788268457.863:10399): avc: denied { write } for pid=19393 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1262.656624][ T29] audit: type=1400 audit(1788268458.063:10400): avc: denied { write } for pid=19395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1262.707425][ T29] audit: type=1400 audit(1788268458.105:10401): avc: denied { write } for pid=19418 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1262.848620][ T29] audit: type=1400 audit(1788268458.262:10402): avc: denied { write } for pid=19426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1263.358089][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1263.358188][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1263.863180][T19469] bond0: (slave bond_slave_0): Releasing backup interface [ 1263.878143][T19469] bond0: (slave bond_slave_1): Releasing backup interface [ 1263.913855][T19469] team0: Port device team_slave_0 removed [ 1263.937808][T19469] team0: Port device team_slave_1 removed [ 1263.952676][T19469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.952709][T19469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.969347][T19469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.969371][T19469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.995179][T19469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1264.158051][T15259] Bluetooth: hci1: Frame reassembly failed (-84) [ 1264.184394][T19490] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1264.195040][T19490] bond4: (slave lo): Enslaving as an active interface with an up link [ 1264.207876][T19490] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1264.275009][T19496] Bluetooth: hci0: command 0x1003 tx timeout [ 1264.275080][T21136] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1265.336362][T19499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.337066][T19499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.592532][T19499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.603041][T19499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.621835][T19499] veth1_macvtap: left allmulticast mode [ 1265.801603][T19548] netlink: 'syz.8.16374': attribute type 17 has an invalid length. [ 1265.914476][T19552] loop6: detected capacity change from 0 to 128 [ 1265.933594][T19552] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1265.946582][T19552] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1265.986000][T18908] EXT4-fs error (device loop6): ext4_readdir:226: inode #11: comm syz-executor: path /13/file1/lost+found: directory fails checksum at offset 1024 [ 1265.986931][T18908] EXT4-fs error (device loop6): ext4_readdir:226: inode #11: comm syz-executor: path /13/file1/lost+found: directory fails checksum at offset 8192 [ 1265.992629][T18908] EXT4-fs error (device loop6): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 1265.993604][T18908] EXT4-fs error (device loop6): ext4_readdir:226: inode #11: comm syz-executor: path /13/file1/lost+found: directory fails checksum at offset 1024 [ 1265.994832][T18908] EXT4-fs error (device loop6): ext4_readdir:226: inode #11: comm syz-executor: path /13/file1/lost+found: directory fails checksum at offset 8192 [ 1265.995768][T18908] EXT4-fs error (device loop6): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 1265.997036][T18908] EXT4-fs error (device loop6): ext4_readdir:226: inode #11: comm syz-executor: path /13/file1/lost+found: directory fails checksum at offset 1024 [ 1265.997890][T18908] EXT4-fs error (device loop6): ext4_readdir:226: inode #11: comm syz-executor: path /13/file1/lost+found: directory fails checksum at offset 8192 [ 1265.998904][T18908] EXT4-fs error (device loop6): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 1265.999868][T18908] EXT4-fs error (device loop6): ext4_readdir:226: inode #11: comm syz-executor: path /13/file1/lost+found: directory fails checksum at offset 1024 [ 1266.110720][T31764] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1266.442329][T19573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16385'. [ 1266.463906][T15323] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.476645][T18908] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1266.522932][T15323] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.584287][T15323] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.633447][T15323] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.796612][T15323] bridge_slave_1: left allmulticast mode [ 1266.796665][T15323] bridge_slave_1: left promiscuous mode [ 1266.796775][T15323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.803814][T15323] bridge_slave_0: left allmulticast mode [ 1266.803839][T15323] bridge_slave_0: left promiscuous mode [ 1266.804155][T15323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.972948][T15323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.987563][T15323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.997851][T15323] bond0 (unregistering): Released all slaves [ 1267.006895][T19601] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967291 > 32) [ 1267.052351][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 1267.052382][ T29] audit: type=1400 audit(1788268462.672:10561): avc: denied { write } for pid=19591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1267.120579][T15323] hsr_slave_0: left promiscuous mode [ 1267.128534][T15323] hsr_slave_1: left promiscuous mode [ 1267.135543][T15323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.135633][T15323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.152844][T15323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.152879][T15323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.177392][T15323] veth1_macvtap: left promiscuous mode [ 1267.177476][T15323] veth0_macvtap: left promiscuous mode [ 1267.177567][T15323] veth1_vlan: left promiscuous mode [ 1267.177609][T15323] veth0_vlan: left promiscuous mode [ 1267.227925][ T29] audit: type=1400 audit(1788268462.861:10562): avc: denied { write } for pid=19620 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1267.441667][T15323] team0 (unregistering): Port device team_slave_1 removed [ 1267.455314][T15323] team0 (unregistering): Port device team_slave_0 removed [ 1267.529550][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1267.682159][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16399'. [ 1267.682341][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16399'. [ 1267.949569][T19581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.949629][T19581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.949885][T19581] bridge_slave_0: entered allmulticast mode [ 1267.961271][T19581] bridge_slave_0: entered promiscuous mode [ 1267.965950][T19581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.966060][T19581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.966341][T19581] bridge_slave_1: entered allmulticast mode [ 1267.969183][T19581] bridge_slave_1: entered promiscuous mode [ 1268.032982][T19581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.040880][T19581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.062177][T19639] coredump: 2145(syz.4.16398): |/bin/ca pipe failed [ 1268.103049][T19656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.103382][T19656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.166501][ T29] audit: type=1400 audit(1788268463.837:10563): avc: denied { write } for pid=19638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1268.185354][T19581] team0: Port device team_slave_0 added [ 1268.200679][T19581] team0: Port device team_slave_1 added [ 1268.262894][ T29] audit: type=1400 audit(1788268463.942:10564): avc: denied { write } for pid=19663 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1268.289430][T19581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.289566][T19581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.289624][T19581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.298717][T19581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.298759][T19581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.305001][T19581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.399348][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1268.409761][T19581] hsr_slave_0: entered promiscuous mode [ 1268.410420][T19581] hsr_slave_1: entered promiscuous mode [ 1268.410894][T19581] debugfs: 'hsr0' already exists in 'hsr' [ 1268.410928][T19581] Cannot create hsr debugfs directory [ 1268.769427][ T29] audit: type=1400 audit(1788268464.478:10565): avc: denied { write } for pid=19671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1268.894050][ T29] audit: type=1400 audit(1788268464.614:10566): avc: denied { write } for pid=19691 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1268.937962][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1269.094862][T19581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1269.105760][T19581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1269.115422][T19581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1269.135217][T19581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1269.144756][T19581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1269.156653][T19581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1269.164795][T19581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1269.180995][T19581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1269.264440][T19718] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16416'. [ 1269.264594][T19718] FAULT_INJECTION: forcing a failure. [ 1269.264594][T19718] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.264640][T19718] CPU: 1 UID: 0 PID: 19718 Comm: syz.8.16416 Tainted: G S syzkaller #0 PREEMPT(lazy) [ 1269.264691][T19718] Tainted: [S]=CPU_OUT_OF_SPEC [ 1269.264780][T19718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1269.264844][T19718] Call Trace: [ 1269.264852][T19718] [ 1269.264862][T19718] __dump_stack+0x1d/0x30 [ 1269.265009][T19718] dump_stack_lvl+0x95/0xd0 [ 1269.265084][T19718] dump_stack+0x15/0x1b [ 1269.265158][T19718] should_fail_ex+0x262/0x280 [ 1269.265265][T19718] should_failslab+0x8c/0xb0 [ 1269.265428][T19718] __kvmalloc_node_noprof+0x168/0x5c0 [ 1269.265537][T19718] ? alloc_netdev_mqs+0x581/0xa90 [ 1269.265737][T19718] ? dev_addr_init+0xb1/0x120 [ 1269.265833][T19718] ? alloc_netdev_mqs+0x581/0xa90 [ 1269.265943][T19718] alloc_netdev_mqs+0x581/0xa90 [ 1269.266080][T19718] rtnl_create_link+0x239/0x720 [ 1269.266204][T19718] rtnl_newlink_create+0x17a/0x4a0 [ 1269.266307][T19718] ? security_capable+0x7b/0x90 [ 1269.266567][T19718] ? netlink_ns_capable+0x86/0xa0 [ 1269.266646][T19718] rtnl_newlink+0x1255/0x1510 [ 1269.266813][T19718] ? mas_wr_store_entry+0x34df/0x5ac0 [ 1269.266893][T19718] ? __memcg_slab_free_hook+0x154/0x340 [ 1269.266997][T19718] ? __rcu_read_unlock+0x4e/0x70 [ 1269.267155][T19718] ? avc_has_perm_noaudit+0xa3/0x120 [ 1269.267242][T19718] ? cred_has_capability+0x224/0x2a0 [ 1269.267374][T19718] ? selinux_capable+0x31/0x40 [ 1269.267473][T19718] ? security_capable+0x7b/0x90 [ 1269.267623][T19718] ? ns_capable+0x80/0xb0 [ 1269.267705][T19718] ? __pfx_rtnl_newlink+0x10/0x10 [ 1269.267854][T19718] rtnetlink_rcv_msg+0x64b/0x720 [ 1269.267949][T19718] netlink_rcv_skb+0x11e/0x220 [ 1269.268035][T19718] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1269.268208][T19718] rtnetlink_rcv+0x1c/0x30 [ 1269.268344][T19718] netlink_unicast+0x5a9/0x680 [ 1269.268430][T19718] netlink_sendmsg+0x5be/0x6f0 [ 1269.268543][T19718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.268733][T19718] ____sys_sendmsg+0x532/0x580 [ 1269.268906][T19718] ___sys_sendmsg+0x195/0x1e0 [ 1269.269089][T19718] __x64_sys_sendmsg+0xd4/0x160 [ 1269.269214][T19718] x64_sys_call+0x22ab/0x2550 [ 1269.269348][T19718] do_syscall_64+0x112/0x360 [ 1269.269538][T19718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.269615][T19718] RIP: 0033:0x7fbcf340e159 [ 1269.269675][T19718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.269702][T19718] RSP: 002b:00007fbcf1e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.269788][T19718] RAX: ffffffffffffffda RBX: 00007fbcf3695fa0 RCX: 00007fbcf340e159 [ 1269.269894][T19718] RDX: 0000000000040080 RSI: 0000200000000000 RDI: 0000000000000004 [ 1269.269938][T19718] RBP: 00007fbcf34a5024 R08: 0000000000000000 R09: 0000000000000000 [ 1269.269988][T19718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.270031][T19718] R13: 00007fbcf3696038 R14: 00007fbcf3695fa0 R15: 00007fff66240488 [ 1269.270104][T19718] [ 1269.560526][T19581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1269.611717][T19581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1269.626646][T15259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.626694][T15259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1269.646458][T15323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.646537][T15323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1269.809499][ T29] audit: type=1400 audit(1788268465.569:10567): avc: denied { write } for pid=19722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1269.872037][T15244] Bluetooth: hci0: Frame reassembly failed (-84) [ 1269.904021][ T29] audit: type=1400 audit(1788268465.674:10568): avc: denied { write } for pid=19759 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1269.956512][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1270.156973][T19581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1270.201815][ T29] audit: type=1400 audit(1788268465.979:10569): avc: denied { write } for pid=19768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1270.259533][ T29] audit: type=1400 audit(1788268466.042:10570): avc: denied { write } for pid=19799 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1270.505937][T19581] veth0_vlan: entered promiscuous mode [ 1270.583364][T19581] veth1_vlan: entered promiscuous mode [ 1270.586956][T19835] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1270.688856][T19581] veth0_macvtap: entered promiscuous mode [ 1270.703768][T19581] veth1_macvtap: entered promiscuous mode [ 1270.722761][T19581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.740071][T19581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.806432][T15259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.806508][T15259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.806647][T15259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.806712][T15259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.815439][T21136] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1271.917570][T19941] loop3: detected capacity change from 0 to 128 [ 1271.935057][T19941] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1271.949605][T19941] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1271.982253][ T29] kauditd_printk_skb: 782 callbacks suppressed [ 1271.982284][ T29] audit: type=1400 audit(1788268467.848:11353): avc: denied { write } for pid=19939 comm="syz.3.16459" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1272.013427][ T29] audit: type=1400 audit(1788268467.879:11354): avc: denied { ioctl } for pid=19939 comm="syz.3.16459" path="/6/mnt/bus" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1272.047929][ T29] audit: type=1400 audit(1788268467.921:11355): avc: denied { write } for pid=19939 comm="syz.3.16459" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1272.073467][ T29] audit: type=1400 audit(1788268467.953:11356): avc: denied { setattr } for pid=19939 comm="syz.3.16459" name="bus" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1272.099375][ T29] audit: type=1400 audit(1788268467.974:11357): avc: denied { write } for pid=19927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1272.146005][T19581] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1272.226354][T19954] loop3: detected capacity change from 0 to 512 [ 1272.257139][T19954] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.16464: corrupted in-inode xattr: e_value size too large [ 1272.257198][T19954] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1272.260471][T19954] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.16464: couldn't read orphan inode 15 (err -117) [ 1272.260623][T19954] loop3: lost filesystem error report for type 5 error -117 [ 1272.263530][T19954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1272.304844][ T29] audit: type=1400 audit(1788268468.152:11358): avc: denied { write } for pid=19955 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1272.350782][ T29] audit: type=1400 audit(1788268468.236:11359): avc: denied { write } for pid=19953 comm="syz.3.16464" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1272.474709][T19581] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.665406][ T29] audit: type=1400 audit(1788268468.572:11360): avc: denied { write } for pid=19961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1272.772199][ T29] audit: type=1400 audit(1788268468.677:11361): avc: denied { write } for pid=19984 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1272.968385][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 1273.133822][T20002] coredump: 30(syz.3.16474): |/bin/ca pipe failed [ 1273.147511][ T29] audit: type=1400 audit(1788268469.066:11362): avc: denied { write } for pid=19991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1274.120469][T20089] coredump: 1(syz.3.16490): |/bin/ca pipe failed [ 1274.235286][T20102] loop3: detected capacity change from 0 to 512 [ 1274.256180][T20102] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1274.267470][T20102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 1274.267562][T20102] System zones: 1-12 [ 1274.271014][T20102] EXT4-fs (loop3): 1 truncate cleaned up [ 1274.279749][T20102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1274.405094][T19581] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.889378][T20155] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 1274.939261][T31764] Bluetooth: hci0: command 0x1003 tx timeout [ 1274.940723][T21136] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1275.000982][T20165] netlink: 'syz.4.16505': attribute type 7 has an invalid length. [ 1275.001028][T20165] netlink: 140 bytes leftover after parsing attributes in process `syz.4.16505'. [ 1275.224565][T20184] C: renamed from veth1_to_team (while UP) [ 1275.238722][T20184] netlink: 'syz.4.16510': attribute type 2 has an invalid length. [ 1275.238755][T20184] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16510'. [ 1275.240206][T20184] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1276.414253][T20255] loop0: detected capacity change from 0 to 4096 [ 1276.426873][T20255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1276.537446][ T8780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.749658][T20272] batman_adv: batadv0: Adding interface: gretap1 [ 1276.749714][T20272] batman_adv: batadv0: Interface activated: gretap1 [ 1277.245667][T20292] coredump: 2231(syz.4.16544): |/bin/ca pipe failed [ 1277.553139][T20311] netlink: 7 bytes leftover after parsing attributes in process `syz.5.16551'. [ 1277.989952][T20335] netlink: 'syz.0.16562': attribute type 1 has an invalid length. [ 1278.406161][T20360] loop3: detected capacity change from 0 to 256 [ 1278.429065][T20360] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 1278.429141][T20360] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1278.585890][T20366] netlink: 276 bytes leftover after parsing attributes in process `syz.3.16574'. [ 1278.732654][T20373] geneve2: entered allmulticast mode [ 1278.878381][T20375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16578'. [ 1278.986345][T20379] ./dev/sda1: Can't lookup blockdev [ 1279.018091][T20381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16581'. [ 1279.018186][T20381] bridge_slave_1: left allmulticast mode [ 1279.018838][T20381] bridge_slave_1: left promiscuous mode [ 1279.019377][T20381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.053135][T20381] bridge_slave_0: left allmulticast mode [ 1279.053168][T20381] bridge_slave_0: left promiscuous mode [ 1279.053543][T20381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.724037][T20391] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1280.031768][T20434] loop3: detected capacity change from 0 to 512 [ 1280.047809][T20434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1280.047967][T20434] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1280.073105][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1280.073133][ T29] audit: type=1400 audit(1788268477.342:11382): avc: denied { write } for pid=20432 comm="syz.3.16602" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1280.102715][T20439] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16603'. [ 1280.134641][T19581] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.328126][T20444] netlink: 'syz.0.16605': attribute type 21 has an invalid length. [ 1280.328165][T20444] netlink: 'syz.0.16605': attribute type 13 has an invalid length. [ 1280.328187][T20444] netlink: 6188 bytes leftover after parsing attributes in process `syz.0.16605'. [ 1280.484366][T20449] loop0: detected capacity change from 0 to 1024 [ 1280.538933][T20449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1280.553627][ T29] audit: type=1400 audit(1788268477.846:11383): avc: denied { write } for pid=20448 comm="syz.0.16607" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1280.584334][T15244] Trying to write to read-only block-device loop0 [ 1280.706220][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16609'. [ 1280.859254][ T29] audit: type=1400 audit(1788268478.172:11384): avc: denied { write } for pid=20455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1280.987229][ T29] audit: type=1400 audit(1788268478.298:11385): avc: denied { write } for pid=20480 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1281.133720][T16202] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1281.146528][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.207740][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.279290][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.342136][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.849654][ T12] bond0 (unregistering): Released all slaves [ 1281.857356][ T12] bond1 (unregistering): Released all slaves [ 1281.909490][ T12] tipc: Left network mode [ 1281.926869][ T12] hsr_slave_0: left promiscuous mode [ 1281.942772][ T12] veth1_vlan: left promiscuous mode [ 1281.943033][ T12] veth0_vlan: left promiscuous mode [ 1282.106488][T20561] lo: left promiscuous mode [ 1282.122140][T20561] tunl0: left promiscuous mode [ 1282.129193][T20561] gre0: left promiscuous mode [ 1282.135194][T20561] gretap0: left promiscuous mode [ 1282.135876][T20561] erspan0: left promiscuous mode [ 1282.147526][T20561] ip_vti0: left promiscuous mode [ 1282.148365][T20561] ip6_vti0: left promiscuous mode [ 1282.163696][T20561] sit0: left promiscuous mode [ 1282.164367][T20561] ip6tnl0: left promiscuous mode [ 1282.177604][T20561] ip6gre0: left promiscuous mode [ 1282.178451][T20561] syz_tun: left promiscuous mode [ 1282.178694][T20561] vcan0: left promiscuous mode [ 1282.195636][T20561] bond0: left promiscuous mode [ 1282.225742][T20561] dummy0: left promiscuous mode [ 1282.231583][T20561] nlmon0: left promiscuous mode [ 1282.232495][T20561] vxcan0: left promiscuous mode [ 1282.245022][T20561] vxcan1: left promiscuous mode [ 1282.245761][T20561] veth0: left promiscuous mode [ 1282.254302][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1282.265553][T20561] veth1: left promiscuous mode [ 1282.271560][T20561] wg0: left promiscuous mode [ 1282.272294][T20561] wg2: left promiscuous mode [ 1282.283142][T20561] veth0_to_bridge: left promiscuous mode [ 1282.284117][T20561] bridge_slave_0: left promiscuous mode [ 1282.284985][ T29] audit: type=1400 audit(1788268479.673:11386): avc: denied { write } for pid=20552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.331590][T20561] veth1_to_bridge: left promiscuous mode [ 1282.332475][T20561] bridge_slave_1: left promiscuous mode [ 1282.344821][T20561] veth0_to_bond: left promiscuous mode [ 1282.351358][T20561] bond_slave_0: left promiscuous mode [ 1282.352331][T20561] veth1_to_bond: left promiscuous mode [ 1282.365150][T20561] bond_slave_1: left promiscuous mode [ 1282.372672][T20576] netlink: 11870 bytes leftover after parsing attributes in process `syz.3.16621'. [ 1282.388082][T20561] veth0_to_team: left promiscuous mode [ 1282.388821][T20561] team_slave_0: left promiscuous mode [ 1282.401033][T20561] C: left promiscuous mode [ 1282.406430][T20561] team_slave_1: left promiscuous mode [ 1282.407266][T20561] veth1_to_batadv: left promiscuous mode [ 1282.419437][T20561] batadv_slave_1: left promiscuous mode [ 1282.420196][T20561] xfrm0: left promiscuous mode [ 1282.420334][ T29] audit: type=1400 audit(1788268479.809:11387): avc: denied { write } for pid=20577 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.468014][T20561] veth0_to_hsr: left promiscuous mode [ 1282.481329][T20561] veth1_to_hsr: left promiscuous mode [ 1282.491601][T20561] hsr0: left promiscuous mode [ 1282.497458][T20561] veth1_virt_wifi: left promiscuous mode [ 1282.504135][T20561] veth0_virt_wifi: left promiscuous mode [ 1282.512898][T20561] vlan0: left promiscuous mode [ 1282.513972][T20561] vlan1: left promiscuous mode [ 1282.524837][T20561] macvlan0: left promiscuous mode [ 1282.525763][T20561] macvlan1: left promiscuous mode [ 1282.537877][T20561] ipvlan1: left promiscuous mode [ 1282.538636][T20561] geneve0: left promiscuous mode [ 1282.549858][T20561] geneve1: left promiscuous mode [ 1282.550757][T20561] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1282.565282][T20561] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 1282.566541][T20561] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 1282.582166][T20561] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 1282.596239][T20561] ip6gre1: left promiscuous mode [ 1282.604957][T20561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1282.616725][ T70] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1282.639206][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1282.785256][ T12] IPVS: stop unused estimator thread 0... [ 1282.843245][ T29] audit: type=1400 audit(1788268480.250:11388): avc: denied { write } for pid=20586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.904248][ T29] audit: type=1400 audit(1788268480.324:11389): avc: denied { write } for pid=20601 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1283.020029][T20532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.020096][T20532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.020886][T20532] bridge_slave_0: entered allmulticast mode [ 1283.022403][T20532] bridge_slave_0: entered promiscuous mode [ 1283.027048][T20532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.027150][T20532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.027479][T20532] bridge_slave_1: entered allmulticast mode [ 1283.028739][T20532] bridge_slave_1: entered promiscuous mode [ 1283.057675][T20532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.060071][T20532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.102595][T20532] team0: Port device team_slave_0 added [ 1283.112532][T20532] team0: Port device team_slave_1 added [ 1283.133346][T20532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.133379][T20532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.133458][T20532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.134463][T20532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1283.134496][T20532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.134637][T20532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.170815][T20532] hsr_slave_0: entered promiscuous mode [ 1283.171856][T20532] hsr_slave_1: entered promiscuous mode [ 1283.172445][T20532] debugfs: 'hsr0' already exists in 'hsr' [ 1283.172486][T20532] Cannot create hsr debugfs directory [ 1283.338255][ T29] audit: type=1400 audit(1788268480.765:11390): avc: denied { write } for pid=20612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1283.384755][ T29] audit: type=1400 audit(1788268480.817:11391): avc: denied { write } for pid=20624 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1283.429298][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1283.573077][T20532] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1283.582873][T20532] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1283.590934][T20532] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1283.602398][T20532] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1283.610395][T20532] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1283.619907][T20532] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1283.627935][T20532] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1283.637922][T20532] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1283.714471][T20532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.726507][T20532] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.735609][T15323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.735660][T15323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.754036][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.754129][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.953712][T20532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.046229][T20532] veth0_vlan: entered promiscuous mode [ 1284.051984][T20532] veth1_vlan: entered promiscuous mode [ 1284.070026][T20532] veth0_macvtap: entered promiscuous mode [ 1284.076501][T20532] veth1_macvtap: entered promiscuous mode [ 1284.087271][T20532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.098545][T20532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.121225][T15323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.121654][T15323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.121831][T15323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.121938][T15323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.444642][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1286.784878][T32184] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1286.784939][T32184] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.834460][T32184] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1286.834699][T32184] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.874126][T20710] bridge0: port 3(syz_tun) entered blocking state [ 1286.874176][T20710] bridge0: port 3(syz_tun) entered disabled state [ 1286.874358][T20710] syz_tun: entered allmulticast mode [ 1286.894736][T20710] syz_tun: entered promiscuous mode [ 1286.918508][T32184] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1286.918653][T32184] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.994350][T32184] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1286.994508][T32184] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.071303][T20722] coredump: 1(syz.5.16640): |/bin/ca pipe failed [ 1287.211225][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1287.211250][ T29] audit: type=1400 audit(1788268484.838:11396): avc: denied { write } for pid=20718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.243408][T32184] bond0 (unregistering): Released all slaves [ 1287.277825][ T29] audit: type=1400 audit(1788268484.912:11397): avc: denied { write } for pid=20740 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.312344][T32184] hsr_slave_0: left promiscuous mode [ 1287.317913][T32184] hsr_slave_1: left promiscuous mode [ 1287.328128][T32184] veth1_macvtap: left promiscuous mode [ 1287.328293][T32184] veth0_macvtap: left promiscuous mode [ 1287.331100][T32184] veth1_vlan: left promiscuous mode [ 1287.331211][T32184] veth0_vlan: left promiscuous mode [ 1287.462683][T20747] program syz.3.16646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1287.477757][T20748] coredump: 134(syz.3.16646): |/bin/ca pipe failed [ 1287.662384][T20697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.662424][T20697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.662515][T20697] bridge_slave_0: entered allmulticast mode [ 1287.668559][T20697] bridge_slave_0: entered promiscuous mode [ 1287.688200][T20697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.688313][T20697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.692171][T20697] bridge_slave_1: entered allmulticast mode [ 1287.697457][T20697] bridge_slave_1: entered promiscuous mode [ 1287.718141][ T29] audit: type=1400 audit(1788268485.374:11398): avc: denied { write } for pid=20758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.756805][T20697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.770345][T20697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.838919][ T29] audit: type=1400 audit(1788268485.500:11399): avc: denied { write } for pid=20779 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.869921][T20697] team0: Port device team_slave_0 added [ 1287.882145][T20697] team0: Port device team_slave_1 added [ 1287.920166][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1287.924249][ T36] IPVS: starting estimator thread 0... [ 1287.945723][T20697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.945797][T20697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.945838][T20697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.952444][T20697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.952494][T20697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.952588][T20697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.006303][T20783] IPVS: using max 384 ests per chain, 19200 per kthread [ 1288.094254][T20697] hsr_slave_0: entered promiscuous mode [ 1288.102050][T20697] hsr_slave_1: entered promiscuous mode [ 1288.102266][T20697] debugfs: 'hsr0' already exists in 'hsr' [ 1288.102285][T20697] Cannot create hsr debugfs directory [ 1288.193893][ T29] audit: type=1400 audit(1788268485.867:11400): avc: denied { write } for pid=20786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.249297][T20806] loop0: detected capacity change from 0 to 1024 [ 1288.256719][T20806] EXT4-fs: Ignoring removed bh option [ 1288.270234][ T29] audit: type=1400 audit(1788268485.951:11401): avc: denied { write } for pid=20808 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.513952][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16658'. [ 1288.528082][T20825] erspan0: entered promiscuous mode [ 1288.528150][T20825] macvtap1: entered promiscuous mode [ 1288.528285][T20825] macvtap1: entered allmulticast mode [ 1288.528338][T20825] erspan0: entered allmulticast mode [ 1288.561441][ T29] audit: type=1400 audit(1788268486.256:11402): avc: denied { write } for pid=20812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.595552][T20825] erspan0: left allmulticast mode [ 1288.595751][T20825] erspan0: left promiscuous mode [ 1288.607640][T20825] macvtap1: left promiscuous mode [ 1288.607683][T20825] macvtap1: left allmulticast mode [ 1288.649571][ T29] audit: type=1400 audit(1788268486.350:11403): avc: denied { write } for pid=20830 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.702896][T20697] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1288.712237][T20833] loop3: detected capacity change from 0 to 512 [ 1288.721224][T20697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1288.729600][T20697] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1288.743456][T20833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1288.743604][T20833] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1288.770590][T20697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1288.771507][T20697] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1288.793395][T20697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1288.803644][T20697] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1288.815068][T20697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1288.824141][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1288.854799][T19581] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1288.955759][T20697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1288.984316][T20697] 8021q: adding VLAN 0 to HW filter on device team0 [ 1288.995358][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.995464][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.023599][T15323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.023708][T15323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1289.116966][ T29] audit: type=1400 audit(1788268486.844:11404): avc: denied { create } for pid=20856 comm="syz.5.16663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1289.189127][ T29] audit: type=1400 audit(1788268486.907:11405): avc: denied { write } for pid=20848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.412284][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1289.572643][T20697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1289.813039][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1289.918502][T20697] veth0_vlan: entered promiscuous mode [ 1289.935319][T20697] veth1_vlan: entered promiscuous mode [ 1289.972945][T20697] veth0_macvtap: entered promiscuous mode [ 1289.979279][T20697] veth1_macvtap: entered promiscuous mode [ 1290.003670][T20697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1290.018717][T20697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1290.073813][T15323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.075681][ T97] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.075806][ T97] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.075934][ T97] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.651057][T20991] FAULT_INJECTION: forcing a failure. [ 1290.651057][T20991] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1290.651225][T20991] CPU: 1 UID: 0 PID: 20991 Comm: syz.2.16686 Tainted: G S syzkaller #0 PREEMPT(lazy) [ 1290.651344][T20991] Tainted: [S]=CPU_OUT_OF_SPEC [ 1290.651356][T20991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1290.651375][T20991] Call Trace: [ 1290.651384][T20991] [ 1290.651395][T20991] __dump_stack+0x1d/0x30 [ 1290.651510][T20991] dump_stack_lvl+0x95/0xd0 [ 1290.651542][T20991] dump_stack+0x15/0x1b [ 1290.651579][T20991] should_fail_ex+0x262/0x280 [ 1290.651610][T20991] should_fail+0xb/0x20 [ 1290.651714][T20991] get_futex_key+0x12d/0xb10 [ 1290.651755][T20991] futex_wake+0x89/0x400 [ 1290.651850][T20991] ? __sys_bpf+0x20a/0xc30 [ 1290.651889][T20991] do_futex+0x3f8/0x460 [ 1290.652008][T20991] ? should_fail_ex+0xdb/0x280 [ 1290.652031][T20991] __se_sys_futex+0x2f6/0x370 [ 1290.652079][T20991] __x64_sys_futex+0x78/0x90 [ 1290.652110][T20991] x64_sys_call+0x22e2/0x2550 [ 1290.652171][T20991] do_syscall_64+0x112/0x360 [ 1290.652284][T20991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.652314][T20991] RIP: 0033:0x7fcdb63be159 [ 1290.652337][T20991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.652373][T20991] RSP: 002b:00007fcdb4e170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1290.652401][T20991] RAX: ffffffffffffffda RBX: 00007fcdb6645fa8 RCX: 00007fcdb63be159 [ 1290.652436][T20991] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcdb6645fac [ 1290.652450][T20991] RBP: 00007fcdb6645fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1290.652464][T20991] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1290.652479][T20991] R13: 00007fcdb6646038 R14: 00007ffde1c03590 R15: 00007ffde1c03678 [ 1290.652508][T20991] [ 1291.661080][T21054] lo: entered promiscuous mode [ 1291.666739][T21054] tunl0: entered promiscuous mode [ 1291.673767][T21054] gre0: entered promiscuous mode [ 1291.680846][T21054] gretap0: entered promiscuous mode [ 1291.680906][T21054] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1291.766342][T21080] loop3: detected capacity change from 0 to 1024 [ 1291.776406][T21080] EXT4-fs: Ignoring removed bh option [ 1291.801898][T21080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1291.931716][T19581] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.098193][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1292.098223][ T29] audit: type=1400 audit(1788268489.972:11430): avc: denied { write } for pid=21098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.215052][ T29] audit: type=1400 audit(1788268490.088:11431): avc: denied { write } for pid=21119 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.369914][ T29] audit: type=1400 audit(1788268490.256:11432): avc: denied { accept } for pid=21126 comm="syz.4.16715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1292.487068][ T29] audit: type=1400 audit(1788268490.382:11433): avc: denied { write } for pid=21123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.544358][ T29] audit: type=1400 audit(1788268490.434:11434): avc: denied { write } for pid=21139 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.803776][ T29] audit: type=1400 audit(1788268490.707:11435): avc: denied { write } for pid=21141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.903121][ T29] audit: type=1400 audit(1788268490.823:11436): avc: denied { write } for pid=21152 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.150413][T21159] netlink: 44 bytes leftover after parsing attributes in process `syz.5.16717'. [ 1293.189351][T21159] batman_adv: batadv0: Adding interface: macsec1 [ 1293.189390][T21159] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.189504][T21159] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 1293.286000][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16718'. [ 1293.320634][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16718'. [ 1293.340118][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.340279][ T70] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.340328][ T70] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.340374][ T70] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.489236][ T29] audit: type=1400 audit(1788268491.432:11437): avc: denied { write } for pid=21156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.546600][T21191] loop3: detected capacity change from 0 to 512 [ 1293.600044][T21191] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.16725: bg 0: block 393: padding at end of block bitmap is not set [ 1293.600167][T21191] loop3: lost filesystem error report for type 5 error -117 [ 1293.615077][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1293.615097][ C0] EXT4-fs (loop3): initial error at time 1788268491: ext4_validate_block_bitmap:445 [ 1293.615145][ C0] EXT4-fs (loop3): last error at time 1788268491: ext4_validate_block_bitmap:445 [ 1293.662910][T21191] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1293.662982][T21191] loop3: lost filesystem error report for type 5 error -117 [ 1293.677519][T21191] EXT4-fs (loop3): 2 truncates cleaned up [ 1293.693891][T21191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1293.756686][ T29] audit: type=1400 audit(1788268491.705:11438): avc: denied { write } for pid=21197 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.812752][ T29] audit: type=1400 audit(1788268491.768:11439): avc: denied { write } for pid=21190 comm="syz.3.16725" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1294.057506][T19581] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.109733][T21222] coredump: 1(syz.0.16729): |/bin/ca pipe failed [ 1294.277118][T21245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16736'. [ 1294.289254][T21245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.423162][T21254] 9p: Bad value for 'rfdno' [ 1294.444607][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1295.044475][T21303] ip_tables: iptables: counters copy to user failed while replacing table [ 1295.239389][T21320] ref_ctr_offset mismatch. inode: 0x14b6 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x0 [ 1295.306154][T21325] loop2: detected capacity change from 0 to 2048 [ 1295.326619][T21325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1295.415252][T20697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.470434][T21340] loop0: detected capacity change from 0 to 512 [ 1295.755979][T21359] loop0: detected capacity change from 0 to 512 [ 1296.710736][T21397] loop2: detected capacity change from 0 to 128 [ 1296.723185][T21397] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1296.781579][T21397] FAT-fs (loop2): error, parent dir link count too low (2) [ 1296.781635][T21397] FAT-fs (loop2): Filesystem has been set read-only [ 1296.865155][T20697] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1298.029120][T21439] xt_hashlimit: size too large, truncated to 1048576 [ 1298.200470][T21447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16817'. [ 1298.200499][T21447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16817'. [ 1298.200526][T21447] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 1298.358074][T21452] ./dev/sda1: Can't lookup blockdev [ 1299.605143][T21520] loop3: detected capacity change from 0 to 1024 [ 1299.606111][T21520] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1299.833667][T21535] loop2: detected capacity change from 0 to 512 [ 1299.869249][T21535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1299.869349][T21535] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1299.913143][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1299.913170][ T29] audit: type=1400 audit(1788268498.182:11443): avc: denied { write } for pid=21534 comm="syz.2.16848" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1299.986739][T20697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.192860][T21558] batadv_slave_0: entered promiscuous mode [ 1300.201031][T21558] batadv_slave_0: left promiscuous mode [ 1300.556618][T21568] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1300.556654][T21568] SELinux: failed to load policy [ 1300.624667][T21588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16861'. [ 1300.653705][T21588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16861'. [ 1300.670229][T21594] loop3: detected capacity change from 0 to 256 [ 1300.797502][T21594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1300.797567][T21594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1300.797669][T21594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1300.797871][T21594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1300.797950][T21594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1300.797992][T21594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1300.798082][T21594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1300.798172][T21594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1300.798288][T21594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1300.798335][T21594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1301.025778][T21606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16872'. [ 1301.025879][T21606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16872'. [ 1301.048800][ T29] audit: type=1326 audit(1788268499.369:11444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21605 comm="syz.4.16871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1662d7ef31 code=0x7ffc0000 [ 1301.048869][ T29] audit: type=1326 audit(1788268499.369:11445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21605 comm="syz.4.16871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1662b1e159 code=0x7ffc0000 [ 1301.048916][ T29] audit: type=1326 audit(1788268499.369:11446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21605 comm="syz.4.16871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1662b1e159 code=0x7ffc0000 [ 1301.058243][ T29] audit: type=1326 audit(1788268499.369:11447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21605 comm="syz.4.16871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1662b1e159 code=0x7ffc0000 [ 1301.058387][ T29] audit: type=1326 audit(1788268499.369:11448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21605 comm="syz.4.16871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1662d7ef31 code=0x7ffc0000 [ 1301.058493][ T29] audit: type=1326 audit(1788268499.369:11449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21605 comm="syz.4.16871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1662b1e159 code=0x7ffc0000 [ 1301.060685][ T29] audit: type=1326 audit(1788268499.369:11450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21605 comm="syz.4.16871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1662d7ef31 code=0x7ffc0000 [ 1301.060796][ T29] audit: type=1326 audit(1788268499.369:11451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21605 comm="syz.4.16871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1662b1e159 code=0x7ffc0000 [ 1301.060890][ T29] audit: type=1326 audit(1788268499.369:11452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21605 comm="syz.4.16871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1662d7ef31 code=0x7ffc0000 [ 1301.832847][T21630] loop3: detected capacity change from 0 to 4096 [ 1301.859037][T21630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1302.780410][T19581] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.604356][T21669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16897'. [ 1303.648889][T21669] batman_adv: batadv0: Removing interface: macsec1 [ 1303.959661][T21677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1304.367212][T21706] tipc: Started in network mode [ 1304.367258][T21706] tipc: Node identity 72d9a9bde9f6, cluster identity 4711 [ 1304.367375][T21706] tipc: Enabled bearer , priority 2 [ 1304.390965][T21703] tipc: Resetting bearer [ 1304.406568][T21703] tipc: Disabling bearer [ 1304.621314][T21730] netlink: 'syz.3.16915': attribute type 1 has an invalid length. [ 1304.738439][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 1304.738520][ T29] audit: type=1326 audit(1788268503.243:11580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.4.16917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1662d7ef31 code=0x7ffc0000 [ 1304.740952][ T29] audit: type=1326 audit(1788268503.243:11581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.4.16917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1662b1e159 code=0x7ffc0000 [ 1304.743109][ T29] audit: type=1326 audit(1788268503.243:11582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.4.16917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1662b1e159 code=0x7ffc0000 [ 1304.743554][ T29] audit: type=1326 audit(1788268503.243:11583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.4.16917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1662d7ef31 code=0x7ffc0000 [ 1304.746055][ T29] audit: type=1326 audit(1788268503.243:11584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.4.16917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1662b1e159 code=0x7ffc0000 [ 1304.749651][ T29] audit: type=1326 audit(1788268503.243:11585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.4.16917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1662d7ef31 code=0x7ffc0000 [ 1304.749778][ T29] audit: type=1326 audit(1788268503.253:11586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.4.16917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1662b1e159 code=0x7ffc0000 [ 1304.754265][ T29] audit: type=1326 audit(1788268503.253:11587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.4.16917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1662d7ef31 code=0x7ffc0000 [ 1304.756604][ T29] audit: type=1326 audit(1788268503.253:11588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.4.16917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1662b1e159 code=0x7ffc0000 [ 1304.758615][ T29] audit: type=1326 audit(1788268503.253:11590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.4.16917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1662b1e159 code=0x7ffc0000 [ 1305.113186][T21751] netlink: 276 bytes leftover after parsing attributes in process `syz.2.16920'. [ 1305.687474][T21804] loop2: detected capacity change from 0 to 764 [ 1306.236533][T21831] coredump: 1(syz.5.16941): |/bin/ca pipe failed [ 1306.250301][T21830] VFS: Mount too revealing [ 1306.425781][T21849] ip_tables: iptables: counters copy to user failed while replacing table [ 1306.954065][T21886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.954181][T21886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.981828][T21886] netlink: 'syz.0.16965': attribute type 1 has an invalid length. [ 1307.002340][T21886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1307.526898][T21922] loop0: detected capacity change from 0 to 512 [ 1308.015760][T21939] FAULT_INJECTION: forcing a failure. [ 1308.015760][T21939] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.015802][T21939] CPU: 1 UID: 0 PID: 21939 Comm: syz.2.16989 Tainted: G S syzkaller #0 PREEMPT(lazy) [ 1308.015866][T21939] Tainted: [S]=CPU_OUT_OF_SPEC [ 1308.015894][T21939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1308.015919][T21939] Call Trace: [ 1308.015935][T21939] [ 1308.015953][T21939] __dump_stack+0x1d/0x30 [ 1308.015985][T21939] dump_stack_lvl+0x95/0xd0 [ 1308.016036][T21939] dump_stack+0x15/0x1b [ 1308.016060][T21939] should_fail_ex+0x262/0x280 [ 1308.016104][T21939] ? sctp_add_bind_addr+0x71/0x1e0 [ 1308.016219][T21939] should_failslab+0x8c/0xb0 [ 1308.016344][T21939] __kmalloc_cache_noprof+0x7a/0x400 [ 1308.016466][T21939] ? sctp_add_bind_addr+0x71/0x1e0 [ 1308.016549][T21939] sctp_add_bind_addr+0x71/0x1e0 [ 1308.016692][T21939] sctp_copy_local_addr_list+0x1b4/0x250 [ 1308.016824][T21939] sctp_copy_one_addr+0x7f/0x280 [ 1308.016901][T21939] sctp_bind_addr_copy+0x79/0x290 [ 1308.017038][T21939] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 1308.017159][T21939] sctp_connect_new_asoc+0x1c3/0x3a0 [ 1308.017274][T21939] sctp_sendmsg+0x105f/0x1d00 [ 1308.017401][T21939] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1308.017511][T21939] inet_sendmsg+0xc5/0xd0 [ 1308.017575][T21939] ? __pfx_inet_sendmsg+0x10/0x10 [ 1308.017662][T21939] ____sys_sendmsg+0x4e8/0x580 [ 1308.017869][T21939] ___sys_sendmsg+0x195/0x1e0 [ 1308.018032][T21939] __sys_sendmmsg+0x185/0x320 [ 1308.018342][T21939] __x64_sys_sendmmsg+0x57/0x70 [ 1308.018462][T21939] x64_sys_call+0x1fb4/0x2550 [ 1308.018555][T21939] do_syscall_64+0x112/0x360 [ 1308.018705][T21939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.018866][T21939] RIP: 0033:0x7fcdb63be159 [ 1308.018926][T21939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.018992][T21939] RSP: 002b:00007fcdb4e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1308.019081][T21939] RAX: ffffffffffffffda RBX: 00007fcdb6645fa0 RCX: 00007fcdb63be159 [ 1308.019139][T21939] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000004 [ 1308.019249][T21939] RBP: 00007fcdb6455024 R08: 0000000000000000 R09: 0000000000000000 [ 1308.019351][T21939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1308.019393][T21939] R13: 00007fcdb6646038 R14: 00007fcdb6645fa0 R15: 00007ffde1c03678 [ 1308.019544][T21939] [ 1308.923185][T21976] Cannot find add_set index 15887 as target [ 1308.965576][T21978] loop3: detected capacity change from 0 to 512 [ 1308.977623][T21978] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1309.006174][T21978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.006441][T21978] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1309.248955][T19581] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.443425][T22006] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1309.462132][T22006] bond2: (slave lo): Enslaving as an active interface with an up link [ 1309.466491][T22006] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1309.577057][ T38] kernel write not supported for file bpf-map (pid: 38 comm: kworker/1:1) [ 1309.601120][T22019] loop0: detected capacity change from 0 to 512 [ 1309.713600][T22025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17020'. [ 1309.734033][T22027] netlink: 'syz.0.17022': attribute type 1 has an invalid length. [ 1309.734057][T22027] netlink: 'syz.0.17022': attribute type 4 has an invalid length. [ 1309.734080][T22027] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.17022'. [ 1309.815376][T15323] IPVS: starting estimator thread 0... [ 1309.903514][T22036] IPVS: using max 336 ests per chain, 16800 per kthread [ 1310.215073][T22053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17034'. [ 1310.229375][T22053] erspan0: entered promiscuous mode [ 1310.236533][T22053] macvtap0: entered promiscuous mode [ 1310.236661][T22053] macvtap0: entered allmulticast mode [ 1310.236681][T22053] erspan0: entered allmulticast mode [ 1310.265388][T22053] erspan0: left allmulticast mode [ 1310.265514][T22053] erspan0: left promiscuous mode [ 1310.277778][T22053] macvtap0: left promiscuous mode [ 1310.277833][T22053] macvtap0: left allmulticast mode [ 1310.329611][T22062] loop3: detected capacity change from 0 to 128 [ 1310.336867][T22062] vfat: Unknown parameter '00000000000000000000" 9)&7ީV1Kg |sdS:ӳW@q'h{Հ4E> #Nr Rb' [ 1310.458586][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17039'. [ 1310.745492][T22092] loop2: detected capacity change from 0 to 512 [ 1310.760028][T22092] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.17048: bg 0: block 7: invalid block bitmap [ 1310.760126][T22092] loop2: lost filesystem error report for type 5 error -117 [ 1310.772774][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1310.772837][ C1] EXT4-fs (loop2): initial error at time 1788268509: ext4_validate_block_bitmap:436 [ 1310.772896][ C1] EXT4-fs (loop2): last error at time 1788268509: ext4_validate_block_bitmap:436 [ 1310.806578][T22092] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1310.806612][T22092] loop2: lost filesystem error report for type 5 error -117 [ 1310.817983][T22092] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2933: inode #11: comm syz.2.17048: corrupted xattr block 95: invalid header [ 1310.818096][T22092] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1310.826519][T22092] EXT4-fs warning (device loop2): ext4_evict_inode:288: xattr delete (err -117) [ 1310.826821][T22092] EXT4-fs (loop2): 1 orphan inode deleted [ 1310.827942][T22092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1310.902154][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1311.003726][T20697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.068047][T22105] loop2: detected capacity change from 0 to 512 [ 1311.086092][T22105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.086229][T22105] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1311.099016][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1311.099079][ T29] audit: type=1400 audit(1788268509.910:11615): avc: denied { write } for pid=22104 comm="syz.2.17054" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1311.166475][T20697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.242342][T22115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17057'. [ 1311.242711][T22115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17057'. [ 1311.520613][T22122] syz.5.17060: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 1311.520849][T22122] CPU: 1 UID: 0 PID: 22122 Comm: syz.5.17060 Tainted: G S syzkaller #0 PREEMPT(lazy) [ 1311.521029][T22122] Tainted: [S]=CPU_OUT_OF_SPEC [ 1311.521040][T22122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1311.521054][T22122] Call Trace: [ 1311.521061][T22122] [ 1311.521069][T22122] __dump_stack+0x1d/0x30 [ 1311.521096][T22122] dump_stack_lvl+0x95/0xd0 [ 1311.521178][T22122] dump_stack+0x15/0x1b [ 1311.521207][T22122] warn_alloc+0x146/0x1c0 [ 1311.521286][T22122] ? cpu_clock_event_del+0x1a/0x30 [ 1311.521320][T22122] __vmalloc_node_range_noprof+0xa3/0x1000 [ 1311.521381][T22122] ? __rcu_read_unlock+0x4e/0x70 [ 1311.521415][T22122] ? __rcu_read_unlock+0x4e/0x70 [ 1311.521449][T22122] ? should_fail_ex+0x31/0x280 [ 1311.521478][T22122] ? xskq_create+0x38/0x160 [ 1311.521508][T22122] ? should_failslab+0x8c/0xb0 [ 1311.521554][T22122] ? __kmalloc_cache_noprof+0x19b/0x400 [ 1311.521601][T22122] xskq_create+0xea/0x160 [ 1311.521661][T22122] ? xsk_init_queue+0x70/0xb0 [ 1311.521773][T22122] xsk_init_queue+0x70/0xb0 [ 1311.521813][T22122] xsk_setsockopt+0x3ef/0x640 [ 1311.521907][T22122] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1311.522020][T22122] __sys_setsockopt+0x184/0x200 [ 1311.522055][T22122] __x64_sys_setsockopt+0x64/0x80 [ 1311.522097][T22122] x64_sys_call+0x248f/0x2550 [ 1311.522211][T22122] do_syscall_64+0x112/0x360 [ 1311.522294][T22122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.522317][T22122] RIP: 0033:0x7f64d7d7e159 [ 1311.522335][T22122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1311.522369][T22122] RSP: 002b:00007f64d67d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1311.522398][T22122] RAX: ffffffffffffffda RBX: 00007f64d8005fa0 RCX: 00007f64d7d7e159 [ 1311.522507][T22122] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1311.522539][T22122] RBP: 00007f64d7e15024 R08: 0000000000000004 R09: 0000000000000000 [ 1311.522604][T22122] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1311.522654][T22122] R13: 00007f64d8006038 R14: 00007f64d8005fa0 R15: 00007ffe71bf1f98 [ 1311.522735][T22122] [ 1311.715309][T22122] Mem-Info: [ 1311.715345][T22122] active_anon:3612 inactive_anon:11129 isolated_anon:0 [ 1311.715345][T22122] active_file:7134 inactive_file:13559 isolated_file:0 [ 1311.715345][T22122] unevictable:0 dirty:265 writeback:0 [ 1311.715345][T22122] slab_reclaimable:3033 slab_unreclaimable:30776 [ 1311.715345][T22122] mapped:29292 shmem:312 pagetables:3921 [ 1311.715345][T22122] sec_pagetables:0 bounce:0 [ 1311.715345][T22122] kernel_misc_reclaimable:0 [ 1311.715345][T22122] free:1824272 free_pcp:8537 free_cma:0 [ 1311.715620][T22122] Node 0 active_anon:14448kB inactive_anon:44516kB active_file:28536kB inactive_file:54236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117168kB dirty:1060kB writeback:0kB shmem:1248kB kernel_stack:5776kB pagetables:15684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1311.715875][T22122] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1311.716170][T22122] lowmem_reserve[]: 0 2877 7856 7856 [ 1311.716290][T22122] Node 0 DMA32 free:2943356kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946920kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 1311.716539][T22122] lowmem_reserve[]: 0 0 4978 4978 [ 1311.716658][T22122] Node 0 Normal free:4338372kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:14448kB inactive_anon:44516kB active_file:28536kB inactive_file:54236kB unevictable:0kB writepending:1060kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:30624kB local_pcp:10292kB free_cma:0kB [ 1311.716978][T22122] lowmem_reserve[]: 0 0 0 0 [ 1311.717081][T22122] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1311.717745][T22122] Node 0 DMA32: 1*4kB (M) 3*8kB (UM) 4*16kB (UM) 1*32kB (M) 4*64kB (UM) 2*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 716*4096kB (M) = 2943356kB [ 1311.763320][T22122] Node 0 Normal: 47*4kB (E) 935*8kB (UM) 1247*16kB (UME) 719*32kB (UME) 576*64kB (UME) 316*128kB (UME) 103*256kB (UME) 34*512kB (UME) 33*1024kB (UME) 24*2048kB (UM) 997*4096kB (UM) = 4338372kB [ 1311.763941][T22122] Node 0 hugepages_total=46 hugepages_free=46 hugepages_surp=0 hugepages_size=2048kB [ 1311.764002][T22122] 21111 total pagecache pages [ 1311.764042][T22122] 117 pages in swap cache [ 1311.764065][T22122] Free swap = 124528kB [ 1311.764094][T22122] Total swap = 124996kB [ 1311.764124][T22122] 2097051 pages RAM [ 1311.764146][T22122] 0 pages HighMem/MovableOnly [ 1311.764168][T22122] 81924 pages reserved [ 1312.377441][T22138] loop2: detected capacity change from 0 to 256 [ 1312.617510][T22148] loop2: detected capacity change from 0 to 512 [ 1312.812485][T22159] loop2: detected capacity change from 0 to 512 [ 1312.824752][T22159] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 1312.824852][T22159] System zones: 1-12 [ 1312.838827][T22159] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.17077: error while reading EA inode 32 err=-116 [ 1312.838869][T22159] loop2: lost filesystem error report for type 5 error -117 [ 1312.852115][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1312.852136][ C1] EXT4-fs (loop2): initial error at time 1788268511: ext4_xattr_inode_iget:442 [ 1312.852169][ C1] EXT4-fs (loop2): last error at time 1788268511: ext4_xattr_inode_iget:442 [ 1312.888981][T22159] EXT4-fs (loop2): 1 orphan inode deleted [ 1312.889516][T22159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1312.953675][ T29] audit: type=1400 audit(1788268511.873:11616): avc: denied { relabelto } for pid=22157 comm="syz.2.17077" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1312.980730][ T29] audit: type=1400 audit(1788268511.894:11617): avc: denied { setattr } for pid=22157 comm="syz.2.17077" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1313.049603][T20697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.151308][T22172] syz.0.17083 (22172): attempted to duplicate a private mapping with mremap. This is not supported. [ 1313.191179][T22176] coredump: 1(syz.5.17084): |/bin/ca pipe failed [ 1313.201348][ T29] audit: type=1400 audit(1788268512.125:11618): avc: denied { remount } for pid=22173 comm="syz.5.17084" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1313.422347][T22197] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967291 > 32) [ 1313.497683][T22204] loop2: detected capacity change from 0 to 512 [ 1313.532929][T22204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1313.533020][T22204] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1313.610548][T20697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1314.650333][T22255] loop0: detected capacity change from 0 to 128 [ 1314.896395][ T29] audit: type=1326 audit(1788268513.910:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22258 comm="syz.5.17115" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7f64d8b46f31 code=0x0 [ 1315.302349][T22283] 9p: Bad value for 'rfdno' [ 1315.329515][T22286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17127'. [ 1315.379203][ T29] audit: type=1400 audit(1788268514.424:11620): avc: denied { read } for pid=22287 comm="syz.0.17128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1316.312429][T15323] rpcbind: server 127.0.0.1 not responding, timed out [ 1316.404880][T22319] FAULT_INJECTION: forcing a failure. [ 1316.404880][T22319] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.404924][T22319] CPU: 0 UID: 0 PID: 22319 Comm: syz.2.17140 Tainted: G S syzkaller #0 PREEMPT(lazy) [ 1316.405102][T22319] Tainted: [S]=CPU_OUT_OF_SPEC [ 1316.405114][T22319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1316.405204][T22319] Call Trace: [ 1316.405212][T22319] [ 1316.405277][T22319] __dump_stack+0x1d/0x30 [ 1316.405311][T22319] dump_stack_lvl+0x95/0xd0 [ 1316.405357][T22319] dump_stack+0x15/0x1b [ 1316.405385][T22319] should_fail_ex+0x262/0x280 [ 1316.405415][T22319] ? alloc_workqueue_va+0x105/0x1630 [ 1316.405443][T22319] should_failslab+0x8c/0xb0 [ 1316.405496][T22319] __kmalloc_noprof+0xd0/0x4d0 [ 1316.405531][T22319] ? alloc_workqueue_va+0x105/0x1630 [ 1316.405659][T22319] alloc_workqueue_va+0x105/0x1630 [ 1316.405842][T22319] alloc_workqueue_noprof+0x84/0xb0 [ 1316.405946][T22319] ? nci_hci_allocate+0x33/0x180 [ 1316.406182][T22319] nci_register_device+0x20c/0x510 [ 1316.406308][T22319] virtual_ncidev_open+0xca/0x130 [ 1316.406444][T22319] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1316.406540][T22319] misc_open+0x1df/0x220 [ 1316.406623][T22319] chrdev_open+0x2eb/0x3a0 [ 1316.406828][T22319] do_dentry_open+0x49f/0xa60 [ 1316.406904][T22319] ? __pfx_chrdev_open+0x10/0x10 [ 1316.407079][T22319] vfs_open+0x37/0x1e0 [ 1316.407140][T22319] path_openat+0xc01/0x10d0 [ 1316.407259][T22319] do_file_open+0x16c/0x290 [ 1316.407436][T22319] do_sys_openat2+0xa0/0x130 [ 1316.407564][T22319] __x64_sys_openat+0xf2/0x120 [ 1316.407649][T22319] x64_sys_call+0x1f72/0x2550 [ 1316.407738][T22319] do_syscall_64+0x112/0x360 [ 1316.407852][T22319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.407957][T22319] RIP: 0033:0x7fcdb63be159 [ 1316.408019][T22319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.408082][T22319] RSP: 002b:00007fcdb4e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1316.408156][T22319] RAX: ffffffffffffffda RBX: 00007fcdb6645fa0 RCX: 00007fcdb63be159 [ 1316.408207][T22319] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1316.408326][T22319] RBP: 00007fcdb6455024 R08: 0000000000000000 R09: 0000000000000000 [ 1316.408379][T22319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1316.408422][T22319] R13: 00007fcdb6646038 R14: 00007fcdb6645fa0 R15: 00007ffde1c03678 [ 1316.408511][T22319] [ 1316.738945][T22336] coredump: 1(syz.2.17146): |/bin/ca pipe failed [ 1316.994731][T22346] ip_tables: iptables: counters copy to user failed while replacing table [ 1317.053945][T22348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17150'. [ 1318.955587][T22391] coredump: 1(syz.3.17167): |/bin/ca pipe failed [ 1319.213714][T22399] syzkaller0: entered promiscuous mode [ 1319.214371][T22399] syzkaller0: entered allmulticast mode [ 1319.310625][T22416] bridge0: port 3(syz_tun) entered blocking state [ 1319.310674][T22416] bridge0: port 3(syz_tun) entered listening state [ 1319.317632][T22416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.324743][T22416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.394669][T22416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1319.402127][T22416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1319.441878][T22416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1319.449663][T22416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1319.489022][T22416] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1319.500842][T32184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.500978][T32184] bridge0: port 1(bridge_slave_0) entered listening state [ 1319.507963][T32184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.508072][T32184] bridge0: port 2(bridge_slave_1) entered listening state [ 1319.680435][T22432] FAULT_INJECTION: forcing a failure. [ 1319.680435][T22432] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.680510][T22432] CPU: 0 UID: 0 PID: 22432 Comm: syz.0.17184 Tainted: G S syzkaller #0 PREEMPT(lazy) [ 1319.680607][T22432] Tainted: [S]=CPU_OUT_OF_SPEC [ 1319.680643][T22432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1319.680687][T22432] Call Trace: [ 1319.680712][T22432] [ 1319.680770][T22432] __dump_stack+0x1d/0x30 [ 1319.680865][T22432] dump_stack_lvl+0x95/0xd0 [ 1319.680951][T22432] dump_stack+0x15/0x1b [ 1319.681075][T22432] should_fail_ex+0x262/0x280 [ 1319.681150][T22432] ? alloc_workqueue_va+0x500/0x1630 [ 1319.681266][T22432] should_failslab+0x8c/0xb0 [ 1319.681371][T22432] __kmalloc_cache_node_noprof+0x81/0x420 [ 1319.681572][T22432] ? alloc_workqueue_va+0x500/0x1630 [ 1319.681681][T22432] alloc_workqueue_va+0x500/0x1630 [ 1319.681858][T22432] alloc_workqueue_noprof+0x84/0xb0 [ 1319.682032][T22432] ? nci_hci_allocate+0x33/0x180 [ 1319.682157][T22432] nci_register_device+0x20c/0x510 [ 1319.682280][T22432] virtual_ncidev_open+0xca/0x130 [ 1319.682459][T22432] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1319.682551][T22432] misc_open+0x1df/0x220 [ 1319.682665][T22432] chrdev_open+0x2eb/0x3a0 [ 1319.682782][T22432] do_dentry_open+0x49f/0xa60 [ 1319.682854][T22432] ? __pfx_chrdev_open+0x10/0x10 [ 1319.683074][T22432] vfs_open+0x37/0x1e0 [ 1319.683148][T22432] path_openat+0xc01/0x10d0 [ 1319.683261][T22432] do_file_open+0x16c/0x290 [ 1319.683411][T22432] do_sys_openat2+0xa0/0x130 [ 1319.683494][T22432] __x64_sys_openat+0xf2/0x120 [ 1319.683577][T22432] x64_sys_call+0x1f72/0x2550 [ 1319.683785][T22432] do_syscall_64+0x112/0x360 [ 1319.683891][T22432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.684005][T22432] RIP: 0033:0x7f9e7cade159 [ 1319.684068][T22432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.684132][T22432] RSP: 002b:00007f9e7b537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1319.684213][T22432] RAX: ffffffffffffffda RBX: 00007f9e7cd65fa0 RCX: 00007f9e7cade159 [ 1319.684266][T22432] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1319.684316][T22432] RBP: 00007f9e7cb75024 R08: 0000000000000000 R09: 0000000000000000 [ 1319.684359][T22432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1319.684441][T22432] R13: 00007f9e7cd66038 R14: 00007f9e7cd65fa0 R15: 00007ffe4444bed8 [ 1319.684515][T22432] [ 1319.964665][T22436] loop0: detected capacity change from 0 to 8192 [ 1319.965689][T22436] vfat: Unknown parameter '0x0000000000000000' [ 1320.241354][T22459] gretap0 speed is unknown, defaulting to 1000 [ 1320.241385][T22459] gretap0 speed is unknown, defaulting to 1000 [ 1320.241571][T22459] gretap0 speed is unknown, defaulting to 1000 [ 1320.267895][T22459] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1320.303514][T22459] gretap0 speed is unknown, defaulting to 1000 [ 1320.311006][T22459] gretap0 speed is unknown, defaulting to 1000 [ 1320.311373][T22459] gretap0 speed is unknown, defaulting to 1000 [ 1320.336535][T22459] gretap0 speed is unknown, defaulting to 1000 [ 1320.336993][T22459] gretap0 speed is unknown, defaulting to 1000 [ 1320.337367][T22459] gretap0 speed is unknown, defaulting to 1000 [ 1320.337823][T22459] gretap0 speed is unknown, defaulting to 1000 [ 1320.338218][T22459] gretap0 speed is unknown, defaulting to 1000 [ 1320.399942][T22448] coredump: 2571(syz.4.17189): |/bin/ca pipe failed [ 1320.536783][T22474] loop3: detected capacity change from 0 to 512 [ 1320.547425][T22474] EXT4-fs: Invalid want_extra_isize 4 [ 1320.591825][T22482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.595899][T22482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.611809][T22482] netlink: zone id is out of range [ 1320.611869][T22482] netlink: zone id is out of range [ 1320.611886][T22482] netlink: zone id is out of range [ 1320.611905][T22482] netlink: zone id is out of range [ 1320.611914][T22482] netlink: zone id is out of range [ 1320.611934][T22482] netlink: zone id is out of range [ 1320.621271][T22482] netlink: set zone limit has 4 unknown bytes [ 1320.767070][T22497] loop3: detected capacity change from 0 to 512 [ 1320.783839][T22497] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.17208: bg 0: block 5: invalid block bitmap [ 1320.783883][T22497] loop3: lost filesystem error report for type 5 error -117 [ 1320.796768][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1320.796801][ C0] EXT4-fs (loop3): initial error at time 1788268521: ext4_validate_block_bitmap:436 [ 1320.796829][ C0] EXT4-fs (loop3): last error at time 1788268521: ext4_validate_block_bitmap:436 [ 1320.823775][T22497] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1320.823799][T22497] loop3: lost filesystem error report for type 5 error -117 [ 1320.837152][T22497] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.17208: invalid indirect mapped block 3 (level 2) [ 1320.837267][T22497] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1320.838511][T22497] EXT4-fs (loop3): 1 orphan inode deleted [ 1320.838573][T22497] EXT4-fs (loop3): 1 truncate cleaned up [ 1320.841318][T22497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1320.902453][ T29] audit: type=1400 audit(1788268521.221:11621): avc: denied { write } for pid=22496 comm="syz.3.17208" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1320.906884][T22497] EXT4-fs (loop3): shut down requested (0) [ 1320.972046][T19581] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.401096][T22520] ip6gre1: entered promiscuous mode [ 1321.401126][T22520] ip6gre1: entered allmulticast mode [ 1321.617606][T22531] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17220'. [ 1321.785083][T22537] netlink: 25 bytes leftover after parsing attributes in process `syz.2.17223'. [ 1321.804893][T22537] netlink: 'syz.2.17223': attribute type 4 has an invalid length. [ 1321.909232][T22541] netlink: 'syz.2.17225': attribute type 1 has an invalid length. [ 1321.934791][T22541] bond1: entered promiscuous mode [ 1321.935197][T22541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1321.978547][T22541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1321.981280][T22541] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1321.981350][T22541] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1322.009837][T22541] bond1: (slave ip6gre2): making interface the new active one [ 1322.009919][T22541] ip6gre2: entered promiscuous mode [ 1322.018281][T22541] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 1322.115017][T22549] netlink: 'syz.0.17227': attribute type 3 has an invalid length. [ 1322.115048][T22549] netlink: 'syz.0.17227': attribute type 4 has an invalid length. [ 1322.115093][T22549] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.17227'. [ 1322.677043][T22583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17239'. [ 1322.677172][T22583] FAULT_INJECTION: forcing a failure. [ 1322.677172][T22583] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.677368][T22583] CPU: 0 UID: 0 PID: 22583 Comm: syz.2.17239 Tainted: G S syzkaller #0 PREEMPT(lazy) [ 1322.677453][T22583] Tainted: [S]=CPU_OUT_OF_SPEC [ 1322.677471][T22583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1322.677496][T22583] Call Trace: [ 1322.677514][T22583] [ 1322.677556][T22583] __dump_stack+0x1d/0x30 [ 1322.677774][T22583] dump_stack_lvl+0x95/0xd0 [ 1322.677844][T22583] dump_stack+0x15/0x1b [ 1322.677929][T22583] should_fail_ex+0x262/0x280 [ 1322.678004][T22583] ? __hw_addr_create+0x3f/0x140 [ 1322.678163][T22583] should_failslab+0x8c/0xb0 [ 1322.678269][T22583] __kmalloc_cache_noprof+0x7a/0x400 [ 1322.678384][T22583] ? __hw_addr_create+0x3f/0x140 [ 1322.678530][T22583] ? _raw_spin_unlock_irq+0x9/0x30 [ 1322.678645][T22583] __hw_addr_create+0x3f/0x140 [ 1322.678750][T22583] ? __hw_addr_add_ex+0x13c/0x310 [ 1322.678824][T22583] __hw_addr_add_ex+0x157/0x310 [ 1322.678854][T22583] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 1322.678886][T22583] dev_addr_init+0xb1/0x120 [ 1322.678960][T22583] alloc_netdev_mqs+0x1cc/0xa90 [ 1322.679089][T22583] rtnl_create_link+0x239/0x720 [ 1322.679273][T22583] rtnl_newlink_create+0x17a/0x4a0 [ 1322.679372][T22583] ? security_capable+0x7b/0x90 [ 1322.679527][T22583] ? netlink_ns_capable+0x86/0xa0 [ 1322.679608][T22583] rtnl_newlink+0x1255/0x1510 [ 1322.679722][T22583] ? mas_wr_store_entry+0x34df/0x5ac0 [ 1322.679871][T22583] ? strlen+0x19/0x40 [ 1322.679967][T22583] ? perf_trace_kmem_cache_free+0x5d/0x170 [ 1322.680048][T22583] ? __rcu_read_unlock+0x4e/0x70 [ 1322.680163][T22583] ? avc_has_perm_noaudit+0xa3/0x120 [ 1322.680246][T22583] ? cred_has_capability+0x224/0x2a0 [ 1322.680457][T22583] ? selinux_capable+0x31/0x40 [ 1322.680512][T22583] ? security_capable+0x7b/0x90 [ 1322.680600][T22583] ? ns_capable+0x80/0xb0 [ 1322.680714][T22583] ? __pfx_rtnl_newlink+0x10/0x10 [ 1322.680791][T22583] rtnetlink_rcv_msg+0x64b/0x720 [ 1322.680897][T22583] netlink_rcv_skb+0x11e/0x220 [ 1322.680981][T22583] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1322.681147][T22583] rtnetlink_rcv+0x1c/0x30 [ 1322.681219][T22583] netlink_unicast+0x5a9/0x680 [ 1322.681311][T22583] netlink_sendmsg+0x5be/0x6f0 [ 1322.681476][T22583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1322.681570][T22583] ____sys_sendmsg+0x532/0x580 [ 1322.681694][T22583] ___sys_sendmsg+0x195/0x1e0 [ 1322.681881][T22583] __x64_sys_sendmsg+0xd4/0x160 [ 1322.682014][T22583] x64_sys_call+0x22ab/0x2550 [ 1322.682140][T22583] do_syscall_64+0x112/0x360 [ 1322.682264][T22583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.682381][T22583] RIP: 0033:0x7fcdb63be159 [ 1322.682436][T22583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.682505][T22583] RSP: 002b:00007fcdb4e17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1322.682572][T22583] RAX: ffffffffffffffda RBX: 00007fcdb6645fa0 RCX: 00007fcdb63be159 [ 1322.682625][T22583] RDX: 0000000000040080 RSI: 0000200000000000 RDI: 0000000000000004 [ 1322.682690][T22583] RBP: 00007fcdb6455024 R08: 0000000000000000 R09: 0000000000000000 [ 1322.682704][T22583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1322.682717][T22583] R13: 00007fcdb6646038 R14: 00007fcdb6645fa0 R15: 00007ffde1c03678 [ 1322.682762][T22583] [ 1322.973260][ T29] audit: type=1400 audit(1788268523.394:11622): avc: denied { listen } for pid=22586 comm="syz.2.17251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1323.283781][T22612] xt_hashlimit: size too large, truncated to 1048576 [ 1323.707173][T22638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17263'. [ 1323.707259][T22638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17263'. [ 1323.794777][T22642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17266'. [ 1323.812834][T22642] bond4: entered promiscuous mode [ 1323.812883][T22642] bond4: entered allmulticast mode [ 1323.813071][T22642] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1323.870006][T22648] erspan1: entered allmulticast mode [ 1323.882656][T22648] erspan1: entered promiscuous mode [ 1323.888449][T22648] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 1323.888569][T18720] ================================================================== [ 1323.888600][T18720] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 1323.888639][T18720] [ 1323.888655][T18720] write to 0xffffffff86e6cd90 of 8 bytes by task 22648 on cpu 0: [ 1323.888683][T18720] data_alloc+0x2fc/0x380 [ 1323.888712][T18720] prb_reserve+0x8e3/0xaf0 [ 1323.888742][T18720] vprintk_store+0x54e/0x910 [ 1323.888797][T18720] vprintk_emit+0x1a4/0x610 [ 1323.888830][T18720] vprintk_default+0x26/0x30 [ 1323.888861][T18720] vprintk+0x1d/0x30 [ 1323.888879][T18720] _printk+0x79/0xa0 [ 1323.888895][T18720] __netdev_printk+0x310/0x370 [ 1323.888934][T18720] netdev_info+0xa6/0xd0 [ 1323.888962][T18720] bond_enslave+0x1f92/0x2050 [ 1323.888993][T18720] do_set_master+0x37b/0x450 [ 1323.889025][T18720] rtnl_newlink_create+0x346/0x4a0 [ 1323.889055][T18720] rtnl_newlink+0x1255/0x1510 [ 1323.889082][T18720] rtnetlink_rcv_msg+0x64b/0x720 [ 1323.889110][T18720] netlink_rcv_skb+0x11e/0x220 [ 1323.889141][T18720] rtnetlink_rcv+0x1c/0x30 [ 1323.889164][T18720] netlink_unicast+0x5a9/0x680 [ 1323.889191][T18720] netlink_sendmsg+0x5be/0x6f0 [ 1323.889222][T18720] ____sys_sendmsg+0x532/0x580 [ 1323.889251][T18720] ___sys_sendmsg+0x195/0x1e0 [ 1323.889280][T18720] __x64_sys_sendmsg+0xd4/0x160 [ 1323.889317][T18720] x64_sys_call+0x22ab/0x2550 [ 1323.889344][T18720] do_syscall_64+0x112/0x360 [ 1323.889372][T18720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.889394][T18720] [ 1323.889400][T18720] read to 0xffffffff86e6cd90 of 16 bytes by task 18720 on cpu 1: [ 1323.889418][T18720] _prb_read_valid+0x183/0x930 [ 1323.889449][T18720] prb_read_valid+0x3c/0x60 [ 1323.889481][T18720] printk_get_next_message+0xea/0x550 [ 1323.889513][T18720] nbcon_emit_next_record+0x4af/0x1bc0 [ 1323.889545][T18720] nbcon_kthread_func+0x3fd/0x690 [ 1323.889573][T18720] kthread+0x223/0x270 [ 1323.889592][T18720] ret_from_fork+0x146/0x330 [ 1323.889622][T18720] ret_from_fork_asm+0x1a/0x30 [ 1323.889649][T18720] [ 1323.889654][T18720] Reported by Kernel Concurrency Sanitizer on: [ 1323.889673][T18720] CPU: 1 UID: 0 PID: 18720 Comm: pr/ttyS0 Tainted: G S syzkaller #0 PREEMPT(lazy) [ 1323.889705][T18720] Tainted: [S]=CPU_OUT_OF_SPEC [ 1323.889713][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1323.889727][T18720] ================================================================== [ 1323.921786][ T29] audit: type=1400 audit(1788268524.391:11623): avc: denied { getopt } for pid=22649 comm="syz.3.17268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1