last executing test programs: 2m15.55554399s ago: executing program 3 (id=164): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x64000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2m14.535774005s ago: executing program 3 (id=172): setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="97", 0x1}], 0x1}}], 0x2, 0x4008860) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0xacb6, 0x8) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 2m13.640040267s ago: executing program 3 (id=182): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x68, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x68}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d0000180004003426f7b68ed1000008000500", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 2m13.574282868s ago: executing program 3 (id=183): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./file1\x00', 0x1008800, &(0x7f0000000b80)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d697865642c636f6465706167653d3821332c696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41e27af3a3a924308cb010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d0499ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f44363853e21373a9c3f450cb6d7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4cea22d95bd7bea39c0100fb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9eeeb2d0c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5dda71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d572ed87cf12b9ce4e527266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f327b3669c159abfa125ee992a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75a6901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b450c894a3e95d26e14259fdb65aa49761847cc1c13f18742072e80cbed0d5622618817583d0365f807882e539ff07c9205d3ee72efb8dd6853a02f49abd1b38d4571666a4d7d98c4f34f082eea025ac7b9e9fd030791df5d98a03ed76cdbb3241f96f22b6dd0da2bd8105c3408eeb8543ebc5de0849c1f31bd94033655fd11430fd1"], 0x4, 0x272, &(0x7f0000001f40)="$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") syz_clone3(&(0x7f0000000140)={0x104901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="cf", 0xffa6}], 0x1, &(0x7f00000006c0)=ANY=[], 0x7}}], 0x1, 0x4044044) 2m13.446523531s ago: executing program 3 (id=186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019580)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x7}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20000810) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m13.163743808s ago: executing program 3 (id=194): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000600)='4', 0x1}], 0x1, 0x0) 2m13.13474457s ago: executing program 32 (id=194): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000600)='4', 0x1}], 0x1, 0x0) 2.803938961s ago: executing program 1 (id=1725): r0 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000680)='\xec\xd2=(L\x9f\x1c&\xb7\x98\f\x87\xcf\xdb\xb4\xdc.\xc1\xec\xa3\x04\xa2\xb8H\xdc#\x06\npr:\x95\xb9\xbf7\xe6Z\x8aX\xbc\x1d\xd5\x15\x93\xd1\xadC\x18V\xbaO~\xfc\xaf\xce\x88+t\xb0\xf1\x8d;\xbd8(\xca\xc6%\xfcB\xea\x04<\x10#,\x05\xd4\xc9;\x17.\xc3\x13*]\x1crij', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000003200)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG\x10L\xab5\xb3\x04(\b\xcd0H-i\x8d\f\xb5\x1f1=\x87$C\xc2\xbb\x92\x0e\x06\xcb\xd4\x83a-\x82\x90\x93\x95\x00Q4\xff!\xfc\xb7\xcaG@\x96\x04\xed\x9f\xe9\x9e\xf9\xfb\xe4)\xc5\xa4\xca\xc1`x\xf4\xf6zX\x1b\xb3\x13\xa4W[E\x8a\x7f\x06\n\xd2\x1b\xce\xe2\xbd4\x93\xff \xb06\"\xbf\x1d\xfda\x00Z\xfb\xfe_I\xb8\xfc1\xdf\x82a\x93tx3\xda\xdeY\xc1\xdd\xdd\x84D\x1dy:\x9a%<\xd3X\xd9s\xe5r\xbdA9\x7f\b\x8fL\xa6=nJ\x16\x82\xd8\xb4X`\x03vY\xe3}\xae\t=pX\xc4\xb3\x8aTdv\x1a\a\xa1\xaeP\x8f\xfd\x03\xc5b\x80\xae\xdc\x99\xa4z\xbc\xe3Pz\xf5\xcf\x99u#\"[\'\xa3G\xf1\x18ls\x89D\xce\xd5\xbc\xff\x8b\x05\x1f\x14\xcf\x96Vu\xb93\x9d\x8bX\x16o !\xb8\xc9I\x8f\x9ei\xf5\xc1\xed\x97x\x01?\xa6~\x9c\xb5u\xe0r1I\xa67Q\xc9\a\x84\xe6\x1b\xebo\x85\x98\x9cib\xa7\x80U\xc8%\xa7\x11=\xa3\x02\x15\xe6\x85\xbf\x03vQ\xfe&\xf3\xb7\xdc3\b\xc0\'\x03\x97\xf9\xbf1\x03\x93\xff\x16\xb0\xf6\x97\x97\x80JO\x81\x97\x0f\x96\x93n\x95!\xff\xa52\"\nf\xe0h\xf6+5\xb6\x12\x14\xce\xdb?\x1a\xa5\x93\xca\xa0b\'\x04\xac\xc9*-;-\t(\xfd\x9e\xd8J9\xfa\xf8\xe3\x1a\xe9\x8f\xe5\xda\xc8\xed\xc7\x88\xc2\xa0\x02]noRVv\xc8\x81\x94\xb3\x10\xa6\x8b\xd0q\xddZ\x95\x16\x94\x94@\x0f\"\xc7\xde\x87\x16;\xd0\xc1\x04=\t\xba\xe5', &(0x7f0000000a80)='\x1e\x04\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000580)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f0000000640)='y', 0x1) close(r0) 2.709268984s ago: executing program 1 (id=1727): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff8, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) unshare(0x2c020400) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.48868973s ago: executing program 4 (id=1729): syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff4]}, 0x8, 0x800) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0xe}) epoll_pwait2(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 2.4331505s ago: executing program 1 (id=1730): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.551569782s ago: executing program 1 (id=1735): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80143, 0x1ff) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="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", 0x1b0, 0x805, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x3, 0x3}, 0x20) socket(0xa, 0x3, 0x87) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {0x0, 0x12}], 0x4}, 0x2}], 0x2, 0x22, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x4008050}, 0x40) 1.504578083s ago: executing program 4 (id=1737): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='m', 0x1}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.503249554s ago: executing program 1 (id=1747): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r2, &(0x7f0000001fc0)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r2, 0x2220}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(r0) 1.386533786s ago: executing program 2 (id=1740): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x7}}}, 0x24}}, 0x4004004) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632", 0x2}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.385972386s ago: executing program 5 (id=1741): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x4000090) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xffffffffffffffb2, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.370490996s ago: executing program 4 (id=1742): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x80000000, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) 1.360552627s ago: executing program 2 (id=1743): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000240)=""/215, 0xd7}], 0x1, 0xfffffffd, 0x7) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 1.337571688s ago: executing program 5 (id=1744): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e1000/0x2000)=nil, 0x2000, 0x13) perf_event_open(0x0, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 1.303267538s ago: executing program 2 (id=1745): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) fchdir(r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353d, 0x1}}, 0x20) r6 = dup(r5) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r6}, 0x18) 1.264977589s ago: executing program 5 (id=1746): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.23533491s ago: executing program 2 (id=1748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000001340)="58ddb007", 0x4}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) close(0x3) 993.309996ms ago: executing program 2 (id=1750): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x25, 0x8, @void}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40c6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x1004, 0x3, 0x10080, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x10001, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='4', 0x1) ioctl$KDENABIO(r2, 0x4b36) 802.69758ms ago: executing program 0 (id=1752): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/regulator/regulator_summary\x00', 0x0, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x10001}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) close(0xffffffffffffffff) syz_emit_ethernet(0x42, &(0x7f0000000140)={@link_local, @random, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x3, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) 694.964763ms ago: executing program 0 (id=1753): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/66, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$sock(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x4000000) 622.419575ms ago: executing program 0 (id=1754): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='m', 0x1}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 622.259765ms ago: executing program 1 (id=1755): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x5}}, 0x3, 0x88b1, 0x401, 0x8, 0x8}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x2ab, 0x100}, 0x0) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000500)={0x0, &(0x7f0000000480)}, 0x10) getpeername(r1, 0x0, &(0x7f0000000900)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 505.487268ms ago: executing program 0 (id=1756): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10, &(0x7f0000001a80), 0x0, &(0x7f0000001b40)="cd45d3e0079153758e3ecb4c67e6c89e0ba1bf8e960db10250a1098c33d61d2818701dea502d71d82f9c007d2d8fa963a4714d308e7ab10fb089fe", 0x3b, 0x40804}, 0x8001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 480.318868ms ago: executing program 4 (id=1757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2e, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xc}, {0x0, 0xfff1}, {0x0, 0xf}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 399.914261ms ago: executing program 0 (id=1758): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 388.320001ms ago: executing program 5 (id=1759): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x1a386, 0x2, 0x3ff, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) pread64(r0, &(0x7f0000000080)=""/195, 0xc3, 0x591f) bind$pptp(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f00000001c0)="f6", 0x1, 0x8000c62) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 373.346541ms ago: executing program 4 (id=1760): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x1e) 332.012322ms ago: executing program 4 (id=1761): r0 = syz_io_uring_setup(0x2fff, &(0x7f0000000780)={0x0, 0x5222, 0x80, 0x1, 0x139}, &(0x7f0000000280)=0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 215.917405ms ago: executing program 5 (id=1762): socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00008cc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 164.199666ms ago: executing program 5 (id=1763): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) 81.475048ms ago: executing program 2 (id=1764): socket$nl_route(0x10, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000100)='./file0\x00') 0s ago: executing program 0 (id=1765): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = io_uring_setup(0x57e, &(0x7f0000000300)={0x0, 0x375, 0x10, 0x0, 0x2c4}) close(r0) r1 = socket$inet6(0xa, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) listen(r1, 0x2) readv(r0, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) kernel console output (not intermixed with test programs): 00 r/w without journal. Quota mode: writeback. [ 60.076003][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.253485][ T4563] loop5: detected capacity change from 0 to 512 [ 60.253834][ T4563] EXT4-fs: Ignoring removed i_version option [ 60.253898][ T4563] ext2: Unknown parameter 'obj_user' [ 60.385389][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 60.385441][ T29] audit: type=1326 audit(1788570706.892:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.4.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34ade4e159 code=0x0 [ 60.400034][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 60.409136][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 60.535177][ T29] audit: type=1400 audit(1788570707.042:383): avc: denied { read } for pid=4558 comm="syz.0.333" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 60.535218][ T29] audit: type=1400 audit(1788570707.042:384): avc: denied { open } for pid=4558 comm="syz.0.333" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 60.571787][ T4587] loop2: detected capacity change from 0 to 512 [ 60.581300][ T4587] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.342: inode has both inline data and extents flags [ 60.581466][ T4587] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.582632][ T4587] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.342: couldn't read orphan inode 15 (err -117) [ 60.582662][ T4587] loop2: lost filesystem error report for type 5 error -117 [ 60.583266][ T4587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.668641][ T4591] veth0_macvtap: left promiscuous mode [ 60.728862][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.786900][ T29] audit: type=1400 audit(1788570707.292:385): avc: denied { create } for pid=4596 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.937532][ T29] audit: type=1400 audit(1788570707.442:386): avc: denied { write } for pid=4601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.994399][ T29] audit: type=1400 audit(1788570707.502:387): avc: denied { write } for pid=4617 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.041426][ T3021] veth0_macvtap: entered promiscuous mode [ 61.172988][ T4629] loop2: detected capacity change from 0 to 512 [ 61.195547][ T4629] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.195574][ T4629] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 61.211789][ T4629] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 61.226287][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 61.226311][ C1] EXT4-fs (loop2): initial error at time 1788570707: ext4_mb_generate_buddy:1317 [ 61.226354][ C1] EXT4-fs (loop2): last error at time 1788570707: ext4_mb_generate_buddy:1317 [ 61.232935][ T4629] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.351: attempt to clear invalid blocks 33619980 len 1 [ 61.232969][ T4629] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 61.243789][ T4629] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.351: invalid indirect mapped block 1819239214 (level 0) [ 61.243893][ T4629] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 61.246730][ T4629] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.351: invalid indirect mapped block 1819239214 (level 1) [ 61.246763][ T4629] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 61.253567][ T4629] EXT4-fs (loop2): 1 truncate cleaned up [ 61.253961][ T4629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.342165][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 61.374906][ T4638] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 61.390542][ T4638] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 61.466643][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.476826][ T29] audit: type=1400 audit(1788570707.972:388): avc: denied { write } for pid=4628 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.539028][ T29] audit: type=1400 audit(1788570708.052:389): avc: denied { write } for pid=4649 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.669271][ T29] audit: type=1400 audit(1788570708.182:390): avc: denied { mmap_zero } for pid=4663 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 62.549778][ T29] audit: type=1400 audit(1788570709.062:391): avc: denied { bind } for pid=4688 comm="syz.4.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.717544][ T4704] loop2: detected capacity change from 0 to 512 [ 62.757330][ T4704] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.757360][ T4704] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 62.776661][ T4704] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 62.786008][ T4704] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 62.786085][ T4704] System zones: 0-2, 18-18, 34-35 [ 62.786953][ T4704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.835218][ T4704] EXT4-fs warning (device loop2): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 62.933904][ T4715] syz.0.374 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.051040][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.810924][ T4747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.387'. [ 65.007305][ T4810] netlink: 'syz.5.400': attribute type 16 has an invalid length. [ 65.007343][ T4810] netlink: 'syz.5.400': attribute type 17 has an invalid length. [ 65.399926][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 65.399970][ T29] audit: type=1400 audit(1788570717.914:472): avc: denied { write } for pid=4816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.462232][ T29] audit: type=1400 audit(1788570717.974:473): avc: denied { write } for pid=4830 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.593042][ T29] audit: type=1400 audit(1788570718.104:474): avc: denied { write } for pid=4834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.639325][ T29] audit: type=1400 audit(1788570718.154:475): avc: denied { write } for pid=4846 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.809891][ T29] audit: type=1400 audit(1788570718.324:476): avc: denied { write } for pid=4850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.867352][ T29] audit: type=1400 audit(1788570718.374:477): avc: denied { write } for pid=4866 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.256641][ T29] audit: type=1400 audit(1788570718.764:478): avc: denied { create } for pid=4873 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.279848][ T29] audit: type=1400 audit(1788570718.794:479): avc: denied { read } for pid=4873 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.330830][ T29] audit: type=1400 audit(1788570718.844:480): avc: denied { write } for pid=4873 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.330907][ T4874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4874 comm=syz.1.408 [ 66.364772][ T4877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 66.374962][ T4877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 66.375391][ T4877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 66.375687][ T4877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 66.521078][ T29] audit: type=1400 audit(1788570719.034:481): avc: denied { write } for pid=4875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.677467][ T4896] loop1: detected capacity change from 0 to 1024 [ 66.720646][ T4896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.724540][ T4898] syzkaller1: entered promiscuous mode [ 66.724581][ T4898] syzkaller1: entered allmulticast mode [ 66.784695][ T4914] sock: sock_set_timeout: `syz.4.413' (pid 4914) tries to set negative timeout [ 66.817004][ T4856] loop5: detected capacity change from 0 to 164 [ 66.910150][ T4923] program syz.0.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.971054][ T4929] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 66.971094][ T4929] netlink: 'syz.0.416': attribute type 4 has an invalid length. [ 66.971154][ T4929] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.416'. [ 67.048929][ T4755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 67.150457][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.150616][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.176041][ T4856] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 67.276596][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.506306][ T4935] gretap1: entered promiscuous mode [ 67.506705][ T4941] »»»»»»: renamed from vlan0 (while UP) [ 67.527334][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.527384][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.527422][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.527530][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.619108][ T4950] netlink: 40 bytes leftover after parsing attributes in process `syz.2.424'. [ 67.840684][ T4959] hsr_slave_0: left promiscuous mode [ 67.848467][ T4959] hsr_slave_1: left promiscuous mode [ 67.892269][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.428'. [ 67.897896][ T4963] bond0: entered promiscuous mode [ 67.902227][ T4963] gretap0: entered promiscuous mode [ 67.904713][ T4963] debugfs: 'hsr0' already exists in 'hsr' [ 67.904730][ T4963] Cannot create hsr debugfs directory [ 67.925233][ T4959] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 68.255374][ T4979] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.434'. [ 68.327335][ T4983] netlink: 'syz.1.436': attribute type 6 has an invalid length. [ 68.327364][ T4983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 68.356024][ T4982] loop2: detected capacity change from 0 to 2048 [ 68.370076][ T4982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.441307][ T4989] FAULT_INJECTION: forcing a failure. [ 68.441307][ T4989] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.441346][ T4989] CPU: 1 UID: 0 PID: 4989 Comm: syz.1.437 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.441377][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.441392][ T4989] Call Trace: [ 68.441400][ T4989] [ 68.441483][ T4989] __dump_stack+0x1d/0x30 [ 68.441514][ T4989] dump_stack_lvl+0x95/0xd0 [ 68.441569][ T4989] dump_stack+0x15/0x1b [ 68.441628][ T4989] should_fail_ex+0x262/0x280 [ 68.441668][ T4989] should_fail+0xb/0x20 [ 68.441690][ T4989] should_fail_usercopy+0x1a/0x20 [ 68.441762][ T4989] _copy_from_user+0x1c/0xb0 [ 68.441855][ T4989] tls_setsockopt+0x560/0xe00 [ 68.441884][ T4989] sock_common_setsockopt+0x69/0x80 [ 68.441967][ T4989] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 68.441993][ T4989] __sys_setsockopt+0x184/0x200 [ 68.442024][ T4989] __x64_sys_setsockopt+0x64/0x80 [ 68.442101][ T4989] x64_sys_call+0x248f/0x2550 [ 68.442164][ T4989] do_syscall_64+0x112/0x360 [ 68.442194][ T4989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.442219][ T4989] RIP: 0033:0x7f43f3a1e159 [ 68.442238][ T4989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.442315][ T4989] RSP: 002b:00007f43f2477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.442418][ T4989] RAX: ffffffffffffffda RBX: 00007f43f3ca5fa0 RCX: 00007f43f3a1e159 [ 68.442435][ T4989] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 68.442450][ T4989] RBP: 00007f43f3ab5024 R08: 0000000000000028 R09: 0000000000000000 [ 68.442464][ T4989] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 68.442479][ T4989] R13: 00007f43f3ca6038 R14: 00007f43f3ca5fa0 R15: 00007fff9c441f48 [ 68.442499][ T4989] [ 68.646249][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.873626][ T4998] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 69.256783][ T5011] lo: Caught tx_queue_len zero misconfig [ 69.256813][ T5011] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 69.273081][ T5012] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 69.290475][ T5012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.333562][ T5015] loop2: detected capacity change from 0 to 128 [ 69.353408][ T5012] bond2: (slave veth3): Enslaving as an active interface with a down link [ 69.381700][ T5012] veth0_virt_wifi: entered promiscuous mode [ 69.395688][ T5012] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 69.414768][ T5012] bond2: (slave veth0_virt_wifi): Releasing active interface [ 69.616764][ T5020] netlink: 'syz.0.449': attribute type 3 has an invalid length. [ 69.616791][ T5020] netlink: 'syz.0.449': attribute type 1 has an invalid length. [ 69.616847][ T5020] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.449'. [ 69.739584][ T5033] netlink: 'syz.5.455': attribute type 11 has an invalid length. [ 69.749518][ T5033] netlink: 'syz.5.455': attribute type 11 has an invalid length. [ 69.759761][ T355] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.760120][ T355] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.760172][ T355] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.760219][ T355] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.876316][ T5050] capability: warning: `syz.0.458' uses deprecated v2 capabilities in a way that may be insecure [ 70.791866][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 70.791903][ T29] audit: type=1326 audit(1788570724.310:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.2.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872cf4e159 code=0x7ffc0000 [ 70.792320][ T29] audit: type=1326 audit(1788570724.310:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.2.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872cf4e159 code=0x7ffc0000 [ 70.792386][ T29] audit: type=1326 audit(1788570724.310:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.2.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872cf4e159 code=0x7ffc0000 [ 70.792857][ T29] audit: type=1326 audit(1788570724.310:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.2.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f872cf4e159 code=0x7ffc0000 [ 70.792953][ T29] audit: type=1326 audit(1788570724.310:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.2.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872cf4e159 code=0x7ffc0000 [ 70.793274][ T29] audit: type=1326 audit(1788570724.310:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.2.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872cf4e159 code=0x7ffc0000 [ 70.793377][ T29] audit: type=1326 audit(1788570724.310:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.2.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872cf4e159 code=0x7ffc0000 [ 70.793471][ T29] audit: type=1326 audit(1788570724.310:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.2.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f872cf4e159 code=0x7ffc0000 [ 70.793579][ T29] audit: type=1326 audit(1788570724.310:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.2.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872cf4e159 code=0x7ffc0000 [ 70.793850][ T29] audit: type=1326 audit(1788570724.310:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.2.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872cf4e159 code=0x7ffc0000 [ 71.732141][ T5206] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 71.745740][ T5206] bond2: (slave lo): Enslaving as an active interface with an up link [ 71.754534][ T5206] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 71.770095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.600124][ T5231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.600249][ T5231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.751972][ T5240] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 73.046000][ T5264] validate_nla: 1 callbacks suppressed [ 73.046134][ T5264] netlink: 'syz.2.498': attribute type 2 has an invalid length. [ 73.067997][ T5264] __nla_validate_parse: 3 callbacks suppressed [ 73.068073][ T5264] netlink: 14 bytes leftover after parsing attributes in process `syz.2.498'. [ 73.228287][ T5272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.228389][ T5272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.986411][ T5324] netlink: 'syz.1.513': attribute type 1 has an invalid length. [ 75.009677][ T5324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.050640][ T5324] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 75.083298][ T5324] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 75.097779][ T5324] bond3 (unregistering): Released all slaves [ 75.204647][ T5338] hsr0: left promiscuous mode [ 75.204679][ T5338] hsr0: left allmulticast mode [ 75.204736][ T5338] hsr_slave_0: left allmulticast mode [ 75.204819][ T5338] hsr_slave_1: left allmulticast mode [ 75.205006][ T5338] veth0_virt_wifi: left promiscuous mode [ 75.207057][ T5338] xfrm1: left promiscuous mode [ 75.207073][ T5338] xfrm1: left allmulticast mode [ 75.371774][ T5350] netlink: 'syz.5.520': attribute type 1 has an invalid length. [ 75.399752][ T5350] bond2: entered promiscuous mode [ 75.399903][ T5350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.418340][ T5350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.520'. [ 75.418426][ T5350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.520'. [ 75.442650][ T5350] bond2: (slave bridge2): making interface the new active one [ 75.442680][ T5350] bridge2: entered promiscuous mode [ 75.451210][ T5350] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 75.581887][ T5355] loop5: detected capacity change from 0 to 2048 [ 75.617856][ T5355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.911483][ T5364] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 76.159616][ T5373] netlink: 'syz.1.528': attribute type 15 has an invalid length. [ 76.159734][ T5373] netlink: 11870 bytes leftover after parsing attributes in process `syz.1.528'. [ 76.177486][ T5373] netlink: 'syz.1.528': attribute type 6 has an invalid length. [ 76.177555][ T5373] netlink: 'syz.1.528': attribute type 7 has an invalid length. [ 76.193198][ T5373] netlink: 'syz.1.528': attribute type 11 has an invalid length. [ 76.193247][ T5373] netlink: 'syz.1.528': attribute type 15 has an invalid length. [ 76.193295][ T5373] netlink: 'syz.1.528': attribute type 16 has an invalid length. [ 76.193349][ T5373] netlink: 'syz.1.528': attribute type 21 has an invalid length. [ 76.416100][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.513500][ T3424] IPVS: starting estimator thread 0... [ 76.597384][ T5381] IPVS: using max 2160 ests per chain, 108000 per kthread [ 76.643774][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 76.643822][ T29] audit: type=1326 audit(1788570730.160:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.5.535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 76.643859][ T29] audit: type=1326 audit(1788570730.160:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.5.535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 76.700986][ T29] audit: type=1326 audit(1788570730.170:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.5.535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 76.701028][ T29] audit: type=1326 audit(1788570730.170:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.5.535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 76.701086][ T29] audit: type=1326 audit(1788570730.170:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.5.535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 76.717965][ T29] audit: type=1326 audit(1788570730.220:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.5.535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 76.718087][ T29] audit: type=1326 audit(1788570730.220:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.5.535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87a3e8dec2 code=0x7ffc0000 [ 76.718190][ T29] audit: type=1326 audit(1788570730.220:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.5.535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f87a3e8df57 code=0x7ffc0000 [ 76.718266][ T29] audit: type=1326 audit(1788570730.220:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.5.535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f87a3e4ae51 code=0x7ffc0000 [ 76.718301][ T29] audit: type=1326 audit(1788570730.220:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.5.535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f87a3e8ef49 code=0x7ffc0000 [ 77.046255][ T5400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5400 comm=syz.5.536 [ 77.210485][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 77.404624][ T5416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 77.512993][ T5422] loop1: detected capacity change from 0 to 512 [ 77.521669][ T5422] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.535892][ T5422] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 77.536116][ T5422] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.545: bg 0: block 248: padding at end of block bitmap is not set [ 77.536206][ T5422] loop1: lost filesystem error report for type 5 error -117 [ 77.536388][ T5422] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.545: Failed to acquire dquot type 1 [ 77.536417][ T5422] loop1: lost filesystem error report for type 5 error -28 [ 77.551355][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 77.551399][ C0] EXT4-fs (loop1): last error at time 1788570731: ext4_acquire_dquot:7069 [ 77.551775][ T5422] EXT4-fs (loop1): 1 truncate cleaned up [ 77.600912][ T5422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 77.687736][ T5422] syz.1.545 (5422) used greatest stack depth: 9512 bytes left [ 77.703785][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 79.081914][ T5477] pim6reg1: entered promiscuous mode [ 79.081981][ T5477] pim6reg1: entered allmulticast mode [ 79.147351][ T5479] erspan0: entered promiscuous mode [ 79.149179][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.561'. [ 79.199663][ T5473] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 79.210171][ T5484] ip6gre1: entered promiscuous mode [ 79.210191][ T5484] ip6gre1: entered allmulticast mode [ 80.771551][ T5548] loop2: detected capacity change from 0 to 512 [ 80.779808][ T5548] EXT4-fs: test_dummy_encryption option not supported [ 81.673221][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 81.673247][ T29] audit: type=1400 audit(1788570735.190:653): avc: denied { connect } for pid=5594 comm="syz.4.605" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.674326][ T5595] xt_hashlimit: size too large, truncated to 1048576 [ 81.679687][ T29] audit: type=1400 audit(1788570735.190:654): avc: denied { setopt } for pid=5594 comm="syz.4.605" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.732935][ T29] audit: type=1400 audit(1788570735.250:655): avc: denied { write } for pid=5594 comm="syz.4.605" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.738400][ T5598] bridge0: port 3(syz_tun) entered blocking state [ 81.738435][ T5598] bridge0: port 3(syz_tun) entered disabled state [ 81.738514][ T5598] syz_tun: entered allmulticast mode [ 81.739152][ T5598] syz_tun: entered promiscuous mode [ 81.739350][ T5598] bridge0: port 3(syz_tun) entered blocking state [ 81.739458][ T5598] bridge0: port 3(syz_tun) entered listening state [ 82.149635][ T29] audit: type=1400 audit(1788570735.660:656): avc: denied { create } for pid=5614 comm="syz.0.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.208535][ T29] audit: type=1400 audit(1788570735.730:657): avc: denied { name_connect } for pid=5616 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 82.229011][ T29] audit: type=1400 audit(1788570735.730:658): avc: denied { accept } for pid=5616 comm="syz.0.613" lport=47134 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.229048][ T29] audit: type=1400 audit(1788570735.730:659): avc: denied { setopt } for pid=5616 comm="syz.0.613" lport=47134 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 82.488539][ T5631] loop1: detected capacity change from 0 to 256 [ 82.731685][ T29] audit: type=1400 audit(1788570736.250:660): avc: denied { getopt } for pid=5633 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.488836][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 83.548003][ T5655] loop1: detected capacity change from 0 to 512 [ 83.552339][ T5655] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.552367][ T5655] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 83.552848][ T5655] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 83.552971][ T5655] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 83.553013][ T5655] System zones: 0-2, 18-18, 34-35 [ 83.553720][ T5655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.725535][ T5655] EXT4-fs warning (device loop1): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 83.737243][ T29] audit: type=1400 audit(1788570737.240:661): avc: denied { bind } for pid=5660 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.737350][ T29] audit: type=1400 audit(1788570737.240:662): avc: denied { listen } for pid=5660 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.867186][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.940054][ T5671] bridge0: port 3(syz_tun) entered disabled state [ 83.962480][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.972755][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.984176][ T5672] validate_nla: 6 callbacks suppressed [ 83.984202][ T5672] netlink: 'syz.2.632': attribute type 16 has an invalid length. [ 83.984219][ T5672] netlink: 'syz.2.632': attribute type 17 has an invalid length. [ 84.104395][ T5672] bridge0: port 3(syz_tun) entered blocking state [ 84.104447][ T5672] bridge0: port 3(syz_tun) entered listening state [ 84.182602][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.182656][ T5672] bridge0: port 1(bridge_slave_0) entered listening state [ 84.190312][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.190348][ T5672] bridge0: port 2(bridge_slave_1) entered listening state [ 84.281747][ T5672] bond1: left allmulticast mode [ 84.281857][ T5672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.283069][ T5672] gretap1: left promiscuous mode [ 84.305074][ T5673] syzkaller0: entered promiscuous mode [ 84.305110][ T5673] syzkaller0: entered allmulticast mode [ 84.496185][ T5689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 84.960245][ T5706] ./dev/sda1: Can't lookup blockdev [ 84.960394][ T5707] loop0: detected capacity change from 0 to 512 [ 84.976909][ T5707] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.976937][ T5707] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 84.977753][ T5707] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 84.977887][ T5707] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 84.977946][ T5707] System zones: 0-2, 18-18, 34-35 [ 84.978501][ T5707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.044929][ T5707] EXT4-fs warning (device loop0): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 85.233684][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.316738][ T5724] FAULT_INJECTION: forcing a failure. [ 85.316738][ T5724] name failslab, interval 1, probability 0, space 0, times 0 [ 85.316786][ T5724] CPU: 1 UID: 0 PID: 5724 Comm: syz.2.650 Not tainted syzkaller #0 PREEMPT(lazy) [ 85.316878][ T5724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.316943][ T5724] Call Trace: [ 85.316950][ T5724] [ 85.316959][ T5724] __dump_stack+0x1d/0x30 [ 85.316987][ T5724] dump_stack_lvl+0x95/0xd0 [ 85.317012][ T5724] dump_stack+0x15/0x1b [ 85.317100][ T5724] should_fail_ex+0x262/0x280 [ 85.317122][ T5724] ? key_alloc+0x275/0x940 [ 85.317147][ T5724] should_failslab+0x8c/0xb0 [ 85.317224][ T5724] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 85.317256][ T5724] ? key_alloc+0x275/0x940 [ 85.317283][ T5724] key_alloc+0x275/0x940 [ 85.317324][ T5724] keyring_alloc+0x45/0xb0 [ 85.317428][ T5724] look_up_user_keyrings+0x2e8/0x400 [ 85.317456][ T5724] call_sbin_request_key+0x109/0x740 [ 85.317483][ T5724] ? request_key_auth_free_preparse+0x9/0x10 [ 85.317510][ T5724] ? key_instantiate_and_link+0x2ad/0x2f0 [ 85.317601][ T5724] request_key_and_link+0x95b/0xe20 [ 85.317629][ T5724] ? __pfx_key_default_cmp+0x10/0x10 [ 85.317659][ T5724] ? __pfx_keyring_search_iterator+0x10/0x10 [ 85.317747][ T5724] __se_sys_request_key+0x1e9/0x2a0 [ 85.317783][ T5724] __x64_sys_request_key+0x55/0x70 [ 85.317853][ T5724] x64_sys_call+0x1741/0x2550 [ 85.317880][ T5724] do_syscall_64+0x112/0x360 [ 85.317960][ T5724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.317985][ T5724] RIP: 0033:0x7f872cf4e159 [ 85.318003][ T5724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.318023][ T5724] RSP: 002b:00007f872b9a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 85.318046][ T5724] RAX: ffffffffffffffda RBX: 00007f872d1d5fa0 RCX: 00007f872cf4e159 [ 85.318095][ T5724] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 85.318111][ T5724] RBP: 00007f872cfe5024 R08: 0000000000000000 R09: 0000000000000000 [ 85.318125][ T5724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.318140][ T5724] R13: 00007f872d1d6038 R14: 00007f872d1d5fa0 R15: 00007ffcd65b8168 [ 85.318266][ T5724] [ 85.533513][ T5730] bond3: entered allmulticast mode [ 85.552039][ T5735] macvlan2: entered promiscuous mode [ 85.552067][ T5735] macvlan2: entered allmulticast mode [ 85.563418][ T5735] bond3: (slave macvlan2): Opening slave failed [ 85.645371][ T5733] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.656'. [ 85.645651][ T5733] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 85.645891][ T5733] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.656'. [ 85.995476][ T5753] veth1_macvtap: left promiscuous mode [ 85.995503][ T5753] macsec0: entered promiscuous mode [ 86.003142][ T5753] veth1_macvtap: entered promiscuous mode [ 86.003259][ T5753] macsec0: entered allmulticast mode [ 86.003276][ T5753] veth1_macvtap: entered allmulticast mode [ 86.151015][ T5763] netlink: 'syz.5.665': attribute type 1 has an invalid length. [ 86.151093][ T5763] netlink: 'syz.5.665': attribute type 4 has an invalid length. [ 86.151154][ T5763] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.665'. [ 86.250385][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 86.251774][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 86.252147][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 86.252494][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 86.648056][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 86.874477][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 86.880333][ T5794] team0: entered promiscuous mode [ 86.880353][ T5794] team0: entered allmulticast mode [ 86.960236][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 86.960262][ T29] audit: type=1400 audit(1788570740.480:671): avc: denied { setopt } for pid=5796 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.805114][ T29] audit: type=1400 audit(1788570741.320:672): avc: denied { watch } for pid=5814 comm="syz.5.684" path="/proc/274/task/275" dev="proc" ino=17042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 87.828070][ T29] audit: type=1400 audit(1788570741.320:673): avc: denied { setopt } for pid=5818 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.870276][ T29] audit: type=1400 audit(1788570741.390:674): avc: denied { bind } for pid=5818 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.889729][ T29] audit: type=1400 audit(1788570741.390:675): avc: denied { map } for pid=5818 comm="syz.4.685" path="socket:[17039]" dev="sockfs" ino=17039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.889849][ T29] audit: type=1400 audit(1788570741.390:676): avc: denied { read } for pid=5818 comm="syz.4.685" path="socket:[17039]" dev="sockfs" ino=17039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.027972][ T29] audit: type=1400 audit(1788570741.540:677): avc: denied { write } for pid=5821 comm="syz.5.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.028007][ T29] audit: type=1400 audit(1788570741.540:678): avc: denied { nlmsg_write } for pid=5821 comm="syz.5.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.034383][ T5825] loop5: detected capacity change from 0 to 164 [ 88.048438][ T5825] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 89.402449][ T5853] program syz.5.697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.425174][ T5855] lo: entered promiscuous mode [ 89.433891][ T5855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.544308][ T5869] hsr_slave_0: left promiscuous mode [ 89.549839][ T5869] hsr_slave_1: left promiscuous mode [ 89.570074][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.578747][ T5869] __nla_validate_parse: 1 callbacks suppressed [ 89.578786][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 89.595722][ T5869] bond0: entered promiscuous mode [ 89.595749][ T5869] bond_slave_0: entered promiscuous mode [ 89.595824][ T5869] bond_slave_1: entered promiscuous mode [ 89.597648][ T5869] gretap0: entered promiscuous mode [ 89.602591][ T5869] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 89.647325][ T29] audit: type=1400 audit(1788570743.160:679): avc: denied { read } for pid=5873 comm="syz.4.704" path="socket:[17137]" dev="sockfs" ino=17137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.724422][ T29] audit: type=1400 audit(1788570743.190:680): avc: denied { nlmsg_read } for pid=5875 comm="syz.4.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.726788][ T5879] veth1_to_hsr: entered promiscuous mode [ 89.727527][ T5879] bond0: (slave veth1_to_hsr): Enslaving as an active interface with an up link [ 89.730460][ T5876] netlink: 48 bytes leftover after parsing attributes in process `syz.4.705'. [ 89.929275][ T5797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.011737][ T5887] program syz.1.709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.055053][ T5892] netlink: 'syz.2.711': attribute type 1 has an invalid length. [ 90.078047][ T5892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.106516][ T5892] bond2: (slave geneve2): making interface the new active one [ 90.114338][ T5892] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 90.177228][ T5901] netlink: 'syz.2.715': attribute type 1 has an invalid length. [ 90.177341][ T5901] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.715'. [ 90.519635][ T5912] netlink: 48 bytes leftover after parsing attributes in process `syz.2.719'. [ 90.600838][ T5913] bond0: (slave veth1_to_hsr): Error: Device can not be enslaved while up [ 90.705746][ T5921] loop5: detected capacity change from 0 to 512 [ 90.715461][ T5921] FAT-fs (loop5): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 90.982099][ T68] FAT-fs (loop5): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 91.116552][ T5933] netlink: 'syz.4.728': attribute type 1 has an invalid length. [ 91.116581][ T5933] netlink: 63743 bytes leftover after parsing attributes in process `syz.4.728'. [ 91.654753][ T5942] loop1: detected capacity change from 0 to 512 [ 91.655232][ T5942] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.839590][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 91.839651][ T5945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.732'. [ 91.902356][ T5947] bond0: (slave veth1_to_hsr): Enslaving as an active interface with an up link [ 91.977375][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 91.977410][ T29] audit: type=1400 audit(1788570745.480:682): avc: denied { ioctl } for pid=5948 comm="syz.4.734" path="socket:[17278]" dev="sockfs" ino=17278 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.725941][ T5967] loop5: detected capacity change from 0 to 512 [ 92.728112][ T5967] EXT4-fs: Ignoring removed oldalloc option [ 92.820310][ T5967] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.853340][ T5967] EXT4-fs (loop5): 1 truncate cleaned up [ 92.853718][ T5967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.862755][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.741'. [ 92.888413][ T29] audit: type=1400 audit(1788570746.410:683): avc: denied { write } for pid=5964 comm="syz.5.740" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.888451][ T29] audit: type=1400 audit(1788570746.410:684): avc: denied { add_name } for pid=5964 comm="syz.5.740" name="blkio.bfq.empty_time" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.973554][ T5959] loop1: detected capacity change from 0 to 512 [ 93.006505][ T29] audit: type=1400 audit(1788570746.520:685): avc: denied { map } for pid=5964 comm="syz.5.740" path="/114/bus/blkio.bfq.empty_time" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.006548][ T29] audit: type=1400 audit(1788570746.520:686): avc: denied { write } for pid=5964 comm="syz.5.740" path="/114/bus/blkio.bfq.empty_time" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.148535][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.228392][ T5978] loop5: detected capacity change from 0 to 512 [ 93.228798][ T5978] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.620915][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 93.890721][ T5959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.890803][ T5959] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.995860][ T29] audit: type=1400 audit(1788570747.500:687): avc: denied { write } for pid=5958 comm="syz.1.739" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.112058][ T29] audit: type=1400 audit(1788570747.630:688): avc: denied { create } for pid=6008 comm="syz.0.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 94.159532][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.228687][ T6015] loop1: detected capacity change from 0 to 512 [ 94.249069][ T6015] FAT-fs (loop1): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 94.390209][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 94.570092][ T29] audit: type=1326 audit(1788570748.080:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6028 comm="syz.0.762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443871e159 code=0x7ffc0000 [ 94.570205][ T29] audit: type=1326 audit(1788570748.080:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6028 comm="syz.0.762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443871e159 code=0x7ffc0000 [ 94.570275][ T29] audit: type=1326 audit(1788570748.090:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6028 comm="syz.0.762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443871e159 code=0x7ffc0000 [ 94.823525][ T6049] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 94.837781][ T6049] bond1: (slave lo): Enslaving as an active interface with an up link [ 94.838003][ T6049] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 94.985753][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 95.007237][ T6053] team_slave_0 (unregistering): left promiscuous mode [ 95.007406][ T6053] team_slave_0 (unregistering): left allmulticast mode [ 95.021659][ T6053] team0: Port device team_slave_0 removed [ 95.479255][ T6072] ./dev/sda1: Can't lookup blockdev [ 95.816640][ T6091] netlink: 'syz.2.785': attribute type 1 has an invalid length. [ 95.834860][ T6091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.881054][ T6091] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 95.911770][ T6091] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 95.933627][ T6091] bond3 (unregistering): Released all slaves [ 96.029748][ T6099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.037214][ T6099] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.048973][ T6099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.459200][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.472431][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.484144][ T6099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.484173][ T6099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.510049][ T6099] veth1_vlan: left promiscuous mode [ 96.517085][ T6099] veth0_vlan: left promiscuous mode [ 96.525528][ T6099] veth0_vlan: entered promiscuous mode [ 96.527076][ T6099] veth1_vlan: entered promiscuous mode [ 96.542458][ T6099] veth0_macvtap: left promiscuous mode [ 96.543131][ T6099] veth0_macvtap: entered promiscuous mode [ 96.558945][ T6099] veth1_macvtap: entered promiscuous mode [ 96.562285][ T6099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.569587][ T6099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.580735][ T6099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.592417][ T6099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.613762][ T6099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.625119][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.625213][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.626789][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.626821][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.683684][ T355] bridge0: port 3(team0) entered blocking state [ 96.683741][ T355] bridge0: port 3(team0) entered forwarding state [ 96.697806][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.697893][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.697928][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.697967][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.838916][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.855385][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 97.019691][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.019813][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.155970][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 97.156005][ T29] audit: type=1400 audit(1788570750.640:751): avc: denied { write } for pid=6151 comm="syz.5.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.599205][ T6171] loop1: detected capacity change from 0 to 256 [ 97.617763][ T6171] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.123007][ T29] audit: type=1400 audit(1788570751.640:752): avc: denied { read } for pid=6197 comm="syz.5.821" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.123046][ T29] audit: type=1400 audit(1788570751.640:753): avc: denied { open } for pid=6197 comm="syz.5.821" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.490490][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.821'. [ 98.773557][ T6210] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 98.911992][ T29] audit: type=1400 audit(1788570752.430:754): avc: denied { mounton } for pid=6213 comm="syz.4.825" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.974471][ T29] audit: type=1326 audit(1788570752.490:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.2.827" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f872cf4e159 code=0x0 [ 99.117432][ C1] bridge0: port 3(syz_tun) entered learning state [ 99.702208][ T6232] netlink: 'syz.4.834': attribute type 15 has an invalid length. [ 99.702372][ T6232] netlink: 11870 bytes leftover after parsing attributes in process `syz.4.834'. [ 99.704878][ T6232] netlink: 'syz.4.834': attribute type 6 has an invalid length. [ 99.704922][ T6232] netlink: 'syz.4.834': attribute type 7 has an invalid length. [ 99.704951][ T6232] netlink: 'syz.4.834': attribute type 11 has an invalid length. [ 99.704994][ T6232] netlink: 'syz.4.834': attribute type 15 has an invalid length. [ 99.705037][ T6232] netlink: 'syz.4.834': attribute type 16 has an invalid length. [ 99.705064][ T6232] netlink: 'syz.4.834': attribute type 21 has an invalid length. [ 99.705092][ T6232] netlink: 'syz.4.834': attribute type 25 has an invalid length. [ 99.705139][ T6232] netlink: 'syz.4.834': attribute type 27 has an invalid length. [ 99.758813][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 99.758887][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 99.773763][ T6234] syz_tun: entered promiscuous mode [ 99.799170][ T6234] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.962546][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.836'. [ 99.963045][ T29] audit: type=1400 audit(1788570753.480:756): avc: denied { write } for pid=6236 comm="syz.5.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.030533][ T6234] veth1_vlan: left promiscuous mode [ 100.036823][ T6234] veth0_vlan: left promiscuous mode [ 100.043865][ T6234] veth0_vlan: entered promiscuous mode [ 100.050754][ T6234] veth1_vlan: entered promiscuous mode [ 100.063714][ T6234] veth1_macvtap: left promiscuous mode [ 100.071194][ T6234] veth0_macvtap: left promiscuous mode [ 100.071826][ T6234] veth0_macvtap: entered promiscuous mode [ 100.083789][ T6234] veth1_macvtap: entered promiscuous mode [ 100.086755][ T6234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.091075][ T6234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.098016][ T6234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.105036][ T6234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.113111][ T6234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.122271][ T6234] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.128551][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.128584][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.129991][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.130020][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.168154][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.847'. [ 100.175780][ T6240] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 100.201609][ T355] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.201746][ T355] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.201861][ T355] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.201902][ T355] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.825966][ T6272] validate_nla: 3 callbacks suppressed [ 100.826012][ T6272] netlink: 'syz.0.846': attribute type 15 has an invalid length. [ 100.826156][ T6272] netlink: 11870 bytes leftover after parsing attributes in process `syz.0.846'. [ 100.830345][ T6272] netlink: 'syz.0.846': attribute type 6 has an invalid length. [ 100.830376][ T6272] netlink: 'syz.0.846': attribute type 7 has an invalid length. [ 100.830486][ T6272] netlink: 'syz.0.846': attribute type 11 has an invalid length. [ 100.830513][ T6272] netlink: 'syz.0.846': attribute type 15 has an invalid length. [ 100.830541][ T6272] netlink: 'syz.0.846': attribute type 16 has an invalid length. [ 100.830583][ T6272] netlink: 'syz.0.846': attribute type 21 has an invalid length. [ 100.830654][ T6272] netlink: 'syz.0.846': attribute type 25 has an invalid length. [ 100.830681][ T6272] netlink: 'syz.0.846': attribute type 27 has an invalid length. [ 100.830707][ T6272] netlink: 'syz.0.846': attribute type 28 has an invalid length. [ 100.997863][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.2.849 [ 101.930356][ T29] audit: type=1400 audit(1788570755.450:757): avc: denied { write } for pid=6311 comm="syz.0.870" name="config" dev="proc" ino=4026532668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 101.971108][ T6318] netlink: 11870 bytes leftover after parsing attributes in process `syz.5.859'. [ 102.212237][ T6328] ip6gre1: entered promiscuous mode [ 102.212267][ T6328] ip6gre1: entered allmulticast mode [ 102.217562][ T6328] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.249672][ T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.249818][ T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.277569][ T3390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.582546][ T29] audit: type=1400 audit(1788570756.090:758): avc: denied { create } for pid=6334 comm="syz.2.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.689759][ T29] audit: type=1400 audit(1788570756.210:759): avc: denied { bind } for pid=6347 comm="syz.2.875" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.689796][ T29] audit: type=1400 audit(1788570756.210:760): avc: denied { node_bind } for pid=6347 comm="syz.2.875" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 102.707770][ T3390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 103.084513][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 103.198684][ T3390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 103.234490][ T6368] bridge0: port 3(syz_tun) entered disabled state [ 103.234571][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.234683][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.243805][ T6368] bridge0: port 3(syz_tun) entered blocking state [ 103.243838][ T6368] bridge0: port 3(syz_tun) entered listening state [ 103.243918][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.244047][ T6368] bridge0: port 2(bridge_slave_1) entered listening state [ 103.244231][ T6368] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.244301][ T6368] bridge0: port 1(bridge_slave_0) entered listening state [ 103.260885][ T6368] bridge0: entered promiscuous mode [ 103.263862][ T6368] bridge0: entered allmulticast mode [ 103.264424][ T6368] team0: Port device bridge0 added [ 103.311410][ T6368] bridge0: port 3(syz_tun) entered disabled state [ 103.383159][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.393209][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.446996][ T6368] team0: left promiscuous mode [ 103.447025][ T6368] bridge0: left promiscuous mode [ 104.261792][ T6395] ip6gre1: entered promiscuous mode [ 104.261831][ T6395] ip6gre1: entered allmulticast mode [ 104.281516][ T6395] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.488163][ T355] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.488300][ T355] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.517610][ T3375] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.735105][ T6422] syzkaller0: left promiscuous mode [ 104.735142][ T6422] syzkaller0: left allmulticast mode [ 105.306602][ T29] audit: type=1400 audit(1788570758.820:761): avc: denied { getattr } for pid=6447 comm="syz.5.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 105.385117][ T29] audit: type=1400 audit(1788570758.900:762): avc: denied { connect } for pid=6447 comm="syz.5.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.387305][ T29] audit: type=1400 audit(1788570758.900:763): avc: denied { write } for pid=6447 comm="syz.5.911" name="instances" dev="tracefs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.387410][ T29] audit: type=1400 audit(1788570758.900:764): avc: denied { add_name } for pid=6447 comm="syz.5.911" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.387433][ T29] audit: type=1400 audit(1788570758.900:765): avc: denied { create } for pid=6447 comm="syz.5.911" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 105.435963][ T29] audit: type=1400 audit(1788570758.950:766): avc: denied { write } for pid=6447 comm="syz.5.911" name="instances" dev="tracefs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.436043][ T29] audit: type=1400 audit(1788570758.950:767): avc: denied { remove_name } for pid=6447 comm="syz.5.911" name="foo" dev="tracefs" ino=21113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 107.290790][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 108.119310][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 108.119337][ T29] audit: type=1400 audit(1788570761.630:770): avc: denied { bind } for pid=6563 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.119367][ T29] audit: type=1400 audit(1788570761.640:771): avc: denied { read } for pid=6563 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.170177][ T29] audit: type=1400 audit(1788570761.690:772): avc: denied { write } for pid=6563 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.281892][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.954'. [ 108.539139][ T6565] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 108.617903][ T29] audit: type=1400 audit(1788570762.140:773): avc: denied { setopt } for pid=6593 comm="syz.0.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.717919][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 108.717951][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.931559][ T29] audit: type=1400 audit(1788570762.450:774): avc: denied { create } for pid=6597 comm="syz.0.973" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 108.937047][ T29] audit: type=1400 audit(1788570762.450:775): avc: denied { rename } for pid=6597 comm="syz.0.973" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.193204][ T29] audit: type=1400 audit(1788570762.710:776): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.288744][ T6615] bridge0: port 4(syz_tun) entered blocking state [ 109.288790][ T6615] bridge0: port 4(syz_tun) entered disabled state [ 109.288901][ T6615] syz_tun: entered allmulticast mode [ 109.289599][ T6615] syz_tun: entered promiscuous mode [ 109.289835][ T6615] bridge0: port 4(syz_tun) entered blocking state [ 109.289864][ T6615] bridge0: port 4(syz_tun) entered listening state [ 109.878424][ T6633] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 110.013532][ T6654] bridge0: port 1(syz_tun) entered blocking state [ 110.013649][ T6654] bridge0: port 1(syz_tun) entered disabled state [ 110.013731][ T6654] syz_tun: entered allmulticast mode [ 110.014253][ T6654] syz_tun: entered promiscuous mode [ 110.014426][ T6654] bridge0: port 1(syz_tun) entered blocking state [ 110.014454][ T6654] bridge0: port 1(syz_tun) entered listening state [ 110.142207][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.984'. [ 110.144595][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 110.725085][ T29] audit: type=1400 audit(1788570764.240:777): avc: denied { read } for pid=6686 comm="syz.4.1002" path="socket:[22103]" dev="sockfs" ino=22103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.979505][ T6682] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 111.226329][ T6715] netlink: 15143 bytes leftover after parsing attributes in process `syz.2.998'. [ 111.577121][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 111.731024][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1017'. [ 111.799683][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 112.035476][ T6768] FAULT_INJECTION: forcing a failure. [ 112.035476][ T6768] name failslab, interval 1, probability 0, space 0, times 0 [ 112.035545][ T6768] CPU: 0 UID: 0 PID: 6768 Comm: syz.5.1025 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.035575][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.035588][ T6768] Call Trace: [ 112.035606][ T6768] [ 112.035614][ T6768] __dump_stack+0x1d/0x30 [ 112.035641][ T6768] dump_stack_lvl+0x95/0xd0 [ 112.035704][ T6768] dump_stack+0x15/0x1b [ 112.035727][ T6768] should_fail_ex+0x262/0x280 [ 112.035772][ T6768] ? security_key_alloc+0x50/0x130 [ 112.035804][ T6768] should_failslab+0x8c/0xb0 [ 112.035877][ T6768] __kmalloc_noprof+0xd0/0x4d0 [ 112.035906][ T6768] ? __kmalloc_node_track_caller_noprof+0x2e4/0x500 [ 112.035938][ T6768] ? security_key_alloc+0x50/0x130 [ 112.035970][ T6768] security_key_alloc+0x50/0x130 [ 112.036001][ T6768] key_alloc+0x44a/0x940 [ 112.036050][ T6768] ? sprintf+0x88/0xb0 [ 112.036070][ T6768] ? request_key_auth_new+0xbd/0x580 [ 112.036101][ T6768] request_key_auth_new+0x3fd/0x580 [ 112.036194][ T6768] request_key_and_link+0x8fe/0xe20 [ 112.036221][ T6768] ? __pfx_key_default_cmp+0x10/0x10 [ 112.036252][ T6768] ? __pfx_keyring_search_iterator+0x10/0x10 [ 112.036353][ T6768] __se_sys_request_key+0x1e9/0x2a0 [ 112.036389][ T6768] __x64_sys_request_key+0x55/0x70 [ 112.036422][ T6768] x64_sys_call+0x1741/0x2550 [ 112.036492][ T6768] do_syscall_64+0x112/0x360 [ 112.036522][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.036593][ T6768] RIP: 0033:0x7f87a3e8e159 [ 112.036612][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.036632][ T6768] RSP: 002b:00007f87a28e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 112.036731][ T6768] RAX: ffffffffffffffda RBX: 00007f87a4115fa0 RCX: 00007f87a3e8e159 [ 112.036747][ T6768] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 112.036762][ T6768] RBP: 00007f87a3f25024 R08: 0000000000000000 R09: 0000000000000000 [ 112.036777][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.036795][ T6768] R13: 00007f87a4116038 R14: 00007f87a4115fa0 R15: 00007fff98412e88 [ 112.036815][ T6768] [ 112.122857][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1026'. [ 112.182578][ T6776] pim6reg1: entered promiscuous mode [ 112.182617][ T6776] pim6reg1: entered allmulticast mode [ 112.711057][ T6795] erspan0: entered promiscuous mode [ 112.712136][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 112.873825][ T6793] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.1045'. [ 112.873953][ T6793] validate_nla: 14 callbacks suppressed [ 112.874165][ T6793] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 112.874336][ T6793] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1045'. [ 112.952491][ T6808] lo: left promiscuous mode [ 112.963094][ T6808] erspan0: left promiscuous mode [ 113.095401][ T6808] macsec0: left promiscuous mode [ 113.120248][ T6808] bond2: left promiscuous mode [ 113.120283][ T6808] bridge2: left promiscuous mode [ 113.124276][ T6808] ip6gre1: left promiscuous mode [ 113.128611][ T6808] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.837723][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.890135][ T6816] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 115.920536][ T6816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.931561][ T6816] bond2: (slave bond3): making interface the new active one [ 115.931922][ T6816] bond2: (slave bond3): Enslaving as an active interface with an up link [ 115.989570][ T6829] loop5: detected capacity change from 0 to 256 [ 116.003818][ T6816] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 116.012999][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'. [ 116.013445][ T6816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.127821][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 116.296149][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.348233][ T6846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.369005][ T6851] erspan0: entered promiscuous mode [ 116.369981][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 116.486318][ T29] audit: type=1400 audit(1788570770.000:778): avc: denied { execheap } for pid=6847 comm="syz.5.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 116.554275][ T29] audit: type=1400 audit(1788570770.070:779): avc: denied { unmount } for pid=6858 comm="syz.1.1056" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 116.629396][ T6867] macsec0: entered promiscuous mode [ 116.631752][ T6867] macsec0: entered allmulticast mode [ 116.631771][ T6867] veth1_macvtap: entered allmulticast mode [ 117.001342][ T29] audit: type=1400 audit(1788570770.520:780): avc: denied { ioctl } for pid=6879 comm="syz.2.1063" path="socket:[22839]" dev="sockfs" ino=22839 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 117.037369][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.046732][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 117.107444][ T29] audit: type=1400 audit(1788570770.620:781): avc: denied { write } for pid=6887 comm="syz.5.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.171599][ T29] audit: type=1400 audit(1788570771.682:782): avc: denied { setopt } for pid=6896 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.606177][ T6901] veth1_macvtap: left promiscuous mode [ 117.606207][ T6901] macsec0: entered promiscuous mode [ 117.620380][ T6901] veth1_macvtap: entered promiscuous mode [ 117.620517][ T6901] macsec0: entered allmulticast mode [ 117.620535][ T6901] veth1_macvtap: entered allmulticast mode [ 118.025099][ T29] audit: type=1400 audit(1788570772.532:783): avc: denied { accept } for pid=6913 comm="syz.2.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.216116][ T29] audit: type=1326 audit(1788570772.722:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.1.1079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43f3a1e159 code=0x0 [ 118.238221][ T6925] tipc: Failed to remove unknown binding: 66,0,0/0:516738082/516738083 [ 118.238425][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 118.240372][ T6925] tipc: Failed to remove unknown binding: 66,0,0/0:516738082/516738083 [ 118.456110][ T6928] Process accounting resumed [ 118.513341][ T29] audit: type=1326 audit(1788570773.022:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.1084" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 118.513448][ T29] audit: type=1326 audit(1788570773.022:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.1084" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 118.513495][ T29] audit: type=1326 audit(1788570773.022:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.1084" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 119.023507][ T6956] raw_sendmsg: syz.2.1095 forgot to set AF_INET. Fix it! [ 119.891135][ T6991] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 119.932736][ T6996] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1111'. [ 119.977914][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 120.719669][ T7029] 9p: Bad value for 'rfdno' [ 120.829824][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 121.185223][ T7066] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.437822][ T7073] xt_CONNSECMARK: invalid mode: 66 [ 121.593560][ T7083] capability: warning: `syz.0.1149' uses 32-bit capabilities (legacy support in use) [ 121.630875][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 121.630900][ T29] audit: type=1400 audit(1788570776.142:796): avc: denied { execute } for pid=7078 comm="syz.4.1148" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 121.737070][ T29] audit: type=1326 audit(1788570776.242:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.0.1152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f443871e159 code=0x0 [ 122.634125][ T7105] netlink: 'syz.4.1158': attribute type 4 has an invalid length. [ 122.686667][ T7107] netlink: 'syz.4.1158': attribute type 4 has an invalid length. [ 122.737361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.851428][ T7124] loop5: detected capacity change from 0 to 512 [ 123.009844][ T7124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.009934][ T7124] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.038888][ T29] audit: type=1400 audit(1788570777.552:798): avc: denied { write } for pid=7123 comm="syz.5.1166" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.038922][ T29] audit: type=1400 audit(1788570777.552:799): avc: denied { setattr } for pid=7123 comm="syz.5.1166" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 123.097687][ T29] audit: type=1400 audit(1788570777.612:800): avc: denied { write } for pid=7123 comm="syz.5.1166" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.132678][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.158762][ T7133] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 123.178976][ T7133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.191576][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 123.207132][ T7138] bond1: entered promiscuous mode [ 123.222090][ T7138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.239536][ T7138] bond1: (slave ip6gre1): refused to change device type [ 123.294496][ T7133] bond3: (slave veth3): Enslaving as an active interface with a down link [ 123.351748][ T7133] bond3: (slave dummy0): making interface the new active one [ 123.352488][ T7133] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 123.359679][ T7133] netlink: 'syz.4.1169': attribute type 10 has an invalid length. [ 123.359697][ T7133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1169'. [ 123.402709][ T7133] dummy0: entered promiscuous mode [ 123.403751][ T7133] bond3: (slave dummy0): Releasing active interface [ 123.503320][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1175'. [ 123.620966][ T29] audit: type=1400 audit(1788570778.132:801): avc: denied { write } for pid=7148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.661671][ T7167] tmpfs: Unsupported parameter 'huge' [ 123.712402][ T29] audit: type=1400 audit(1788570778.212:802): avc: denied { write } for pid=7168 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.028790][ T29] audit: type=1400 audit(1788570778.542:803): avc: denied { write } for pid=7175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.097937][ T29] audit: type=1400 audit(1788570778.602:804): avc: denied { setattr } for pid=7191 comm="syz.2.1182" path="socket:[24981]" dev="sockfs" ino=24981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.240244][ T29] audit: type=1400 audit(1788570778.752:805): avc: denied { write } for pid=7196 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.717310][ C0] bridge0: port 4(syz_tun) entered learning state [ 124.843105][ T7227] netlink: 'syz.4.1191': attribute type 1 has an invalid length. [ 124.858017][ T7227] 8021q: adding VLAN 0 to HW filter on device bond4 [ 124.963008][ T7227] bond4: (slave veth5): Enslaving as an active interface with a down link [ 124.995760][ T7229] erspan0: left promiscuous mode [ 125.357372][ C0] bridge0: port 1(syz_tun) entered learning state [ 125.534886][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.535003][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.549341][ T7229] dummy0: left promiscuous mode [ 125.666750][ T7229] veth1_macvtap: left allmulticast mode [ 125.666889][ T7229] macsec0: left promiscuous mode [ 125.666971][ T7229] macsec0: left allmulticast mode [ 125.760506][ T7229] ip6gre1: left promiscuous mode [ 125.760540][ T7229] ip6gre1: left allmulticast mode [ 125.781499][ T7248] netlink: 'syz.2.1197': attribute type 21 has an invalid length. [ 125.830227][ T7227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.835884][ T7227] bond4: (slave batadv0): making interface the new active one [ 125.836886][ T7227] batadv0: entered promiscuous mode [ 125.837072][ T7227] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 125.867468][ T51] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.868430][ T51] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.868468][ T51] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.868658][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.951552][ T7243] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1195'. [ 126.447042][ T7301] netlink: 'syz.2.1208': attribute type 10 has an invalid length. [ 126.466709][ T7301] bridge0: left allmulticast mode [ 126.472859][ T7301] team0: Port device bridge0 removed [ 126.486130][ T7301] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 126.508441][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 126.508492][ T7301] syz_tun: left allmulticast mode [ 126.508568][ T7301] syz_tun: left promiscuous mode [ 126.508656][ T7301] bridge0: port 3(syz_tun) entered disabled state [ 126.535994][ T7301] bridge_slave_1: left allmulticast mode [ 126.536026][ T7301] bridge_slave_1: left promiscuous mode [ 126.536201][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.556619][ T7301] bridge_slave_0: left allmulticast mode [ 126.556650][ T7301] bridge_slave_0: left promiscuous mode [ 126.556742][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.625183][ T7301] bond0: (slave bridge0): Releasing backup interface [ 126.838395][ T7327] loop5: detected capacity change from 0 to 512 [ 126.838900][ T7327] EXT4-fs: Ignoring removed nobh option [ 126.840247][ T7327] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 126.840405][ T7327] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 126.845807][ T7327] EXT4-fs (loop5): orphan cleanup on readonly fs [ 126.850719][ T7327] EXT4-fs (loop5): 1 truncate cleaned up [ 126.851211][ T7327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.858470][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 126.858509][ T29] audit: type=1400 audit(1788570781.372:811): avc: denied { compute_member } for pid=7322 comm="syz.5.1212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 126.926091][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.955428][ T29] audit: type=1400 audit(1788570781.462:812): avc: denied { write } for pid=7310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.022790][ T29] audit: type=1400 audit(1788570781.532:813): avc: denied { write } for pid=7336 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.231121][ T29] audit: type=1400 audit(1788570781.742:814): avc: denied { write } for pid=7342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.294924][ T29] audit: type=1400 audit(1788570781.802:815): avc: denied { write } for pid=7360 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.387281][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1219'. [ 127.398079][ T7341] netlink: 'syz.0.1215': attribute type 2 has an invalid length. [ 127.436940][ T29] audit: type=1400 audit(1788570781.942:816): avc: denied { read } for pid=7378 comm="syz.5.1222" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.436976][ T29] audit: type=1400 audit(1788570781.942:817): avc: denied { open } for pid=7378 comm="syz.5.1222" path="/196/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.488048][ T29] audit: type=1400 audit(1788570782.002:818): avc: denied { ioctl } for pid=7378 comm="syz.5.1222" path="/196/dev/mapper/control" dev="devtmpfs" ino=247 ioctlcmd=0xfd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.530933][ T29] audit: type=1400 audit(1788570782.042:819): avc: denied { write } for pid=7365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.608807][ T29] audit: type=1400 audit(1788570782.122:820): avc: denied { write } for pid=7391 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.850497][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.590532][ T7456] nr0: port 1(veth1_virt_wifi) entered blocking state [ 130.590577][ T7456] nr0: port 1(veth1_virt_wifi) entered disabled state [ 130.590755][ T7456] veth1_virt_wifi: entered allmulticast mode [ 130.591470][ T7456] veth1_virt_wifi: entered promiscuous mode [ 131.880207][ T7527] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.890098][ T7527] team0: Failed to send port change of device bond4 via netlink (err -105) [ 131.890240][ T7527] team0: Failed to send options change via netlink (err -105) [ 131.890266][ T7527] team0: Port device bond4 added [ 131.907812][ T7530] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.907963][ T7530] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.908074][ T7530] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.908113][ T7530] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.908189][ T7530] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.908241][ T7530] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.908298][ T7530] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.908336][ T7530] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.908439][ T7530] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.908521][ T7530] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.080345][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'. [ 132.226959][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 132.226994][ T29] audit: type=1400 audit(1788570786.732:826): avc: denied { mount } for pid=7549 comm="syz.0.1285" name="/" dev="hugetlbfs" ino=25640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 132.228927][ T29] audit: type=1400 audit(1788570786.742:827): avc: denied { watch } for pid=7549 comm="syz.0.1285" path="/" dev="hugetlbfs" ino=25640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 132.315084][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1287'. [ 133.322342][ T7599] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 133.322373][ T7599] audit: out of memory in audit_log_start [ 133.556801][ T7609] 8021q: adding VLAN 0 to HW filter on device bond5 [ 133.558147][ T7609] team0: Failed to send port change of device bond5 via netlink (err -105) [ 133.558222][ T7609] team0: Failed to send options change via netlink (err -105) [ 133.558239][ T7609] team0: Port device bond5 added [ 135.166231][ T29] audit: type=1400 audit(1788570789.672:828): avc: denied { create } for pid=7654 comm="syz.0.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.192465][ T29] audit: type=1400 audit(1788570789.702:829): avc: denied { connect } for pid=7654 comm="syz.0.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.863537][ T29] audit: type=1400 audit(1788570790.372:830): avc: denied { write } for pid=7674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.895892][ T29] audit: type=1400 audit(1788570790.402:831): avc: denied { write } for pid=7689 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.962622][ T7694] netlink: 'syz.5.1330': attribute type 1 has an invalid length. [ 135.980205][ T7694] 8021q: adding VLAN 0 to HW filter on device bond5 [ 136.000177][ T7694] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.001853][ T7694] bond5: (slave team0): Enslaving as a backup interface with a down link [ 137.721722][ T29] audit: type=1400 audit(1788570792.232:832): avc: denied { map } for pid=7710 comm="syz.4.1336" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 137.721824][ T29] audit: type=1400 audit(1788570792.232:833): avc: denied { read write } for pid=7710 comm="syz.4.1336" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 137.830473][ T7717] netlink: 'syz.5.1338': attribute type 49 has an invalid length. [ 140.077307][ C0] bridge0: port 4(syz_tun) entered forwarding state [ 140.077340][ C0] bridge0: topology change detected, propagating [ 140.717300][ C0] bridge0: port 1(syz_tun) entered forwarding state [ 140.717350][ C0] bridge0: topology change detected, propagating [ 140.784945][ T7786] team0: Port device bridge0 added [ 140.803915][ T29] audit: type=1400 audit(1788570795.312:834): avc: denied { write } for pid=7783 comm="syz.0.1362" name="instances" dev="tracefs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 140.851809][ T29] audit: type=1400 audit(1788570795.362:835): avc: denied { write } for pid=7783 comm="syz.0.1362" name="instances" dev="tracefs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 140.915455][ T7790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1364'. [ 140.920565][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 141.090915][ T29] audit: type=1400 audit(1788570795.602:836): avc: denied { setopt } for pid=7795 comm="syz.4.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.271152][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1370'. [ 141.748318][ T7803] loop5: detected capacity change from 0 to 512 [ 142.116866][ T7817] netlink: 15143 bytes leftover after parsing attributes in process `syz.1.1376'. [ 142.233133][ T7824] macsec0: left promiscuous mode [ 142.255973][ T7830] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 142.266996][ T7830] sch_tbf: burst 6281 is lower than device lo mtu (32783) ! [ 142.381509][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'. [ 142.549258][ T7803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.583306][ T7803] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.794608][ T7852] Quota error (device loop5): do_check_range: Getting block 4128768 out of range 0-5 [ 143.034428][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.222482][ T7873] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 143.223087][ T7873] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 144.448077][ T7914] netlink: 15143 bytes leftover after parsing attributes in process `syz.0.1408'. [ 144.593750][ T7903] netlink: 'syz.5.1404': attribute type 2 has an invalid length. [ 144.813866][ T7930] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 144.814289][ T7930] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 144.994362][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1414'. [ 145.545841][ T29] audit: type=1326 audit(1788570801.060:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.5.1420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 145.547087][ T7945] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1420'. [ 145.581152][ T29] audit: type=1326 audit(1788570801.060:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.5.1420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 145.581233][ T29] audit: type=1326 audit(1788570801.060:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.5.1420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 145.581291][ T29] audit: type=1326 audit(1788570801.060:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.5.1420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 145.581319][ T29] audit: type=1326 audit(1788570801.060:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.5.1420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 145.581347][ T29] audit: type=1326 audit(1788570801.060:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.5.1420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 145.581541][ T29] audit: type=1326 audit(1788570801.060:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.5.1420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 145.581574][ T29] audit: type=1326 audit(1788570801.060:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.5.1420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 145.581606][ T29] audit: type=1326 audit(1788570801.060:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.5.1420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a3e8e159 code=0x7ffc0000 [ 145.608240][ T7945] bond0 (unregistering): Released all slaves [ 145.942465][ T7969] ./dev/sda1: Can't lookup blockdev [ 146.042501][ T7984] tipc: Failed to remove unknown binding: 66,0,0/0:4251735856/4251735857 [ 146.053117][ T7984] tipc: Failed to remove unknown binding: 66,0,0/0:4251735856/4251735857 [ 146.136777][ T7993] syzkaller0: entered promiscuous mode [ 146.136816][ T7993] syzkaller0: entered allmulticast mode [ 146.147559][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1431'. [ 146.299346][ T8010] loop5: detected capacity change from 0 to 512 [ 146.325148][ T8010] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1435: corrupted in-inode xattr: invalid ea_ino [ 146.325191][ T8010] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.338629][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 146.338665][ C0] EXT4-fs (loop5): initial error at time 1788570801: ext4_iget_extra_inode:5210: inode 15 [ 146.338702][ C0] EXT4-fs (loop5): last error at time 1788570801: ext4_iget_extra_inode:5210: inode 15 [ 146.377572][ T8010] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1435: couldn't read orphan inode 15 (err -117) [ 146.377613][ T8010] loop5: lost filesystem error report for type 5 error -117 [ 146.391090][ T8010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.323017][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.467659][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'. [ 147.494188][ T8121] bond3: entered promiscuous mode [ 147.494329][ T8121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.562669][ T8121] veth5: entered promiscuous mode [ 147.574205][ T8121] bond3: (slave veth5): Enslaving as an active interface with an up link [ 148.609426][ T38] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.609574][ T38] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.609672][ T38] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.609785][ T38] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.934954][ T8177] syzkaller0: entered promiscuous mode [ 148.935016][ T8177] syzkaller0: entered allmulticast mode [ 149.402044][ T8206] loop5: detected capacity change from 0 to 1764 [ 150.079233][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 150.079259][ T29] audit: type=1400 audit(1788570805.590:970): avc: denied { create } for pid=8239 comm="syz.4.1504" name="myloop" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.079289][ T29] audit: type=1400 audit(1788570805.590:971): avc: denied { read write } for pid=8239 comm="syz.4.1504" name="myloop" dev="tmpfs" ino=1638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.079359][ T29] audit: type=1400 audit(1788570805.590:972): avc: denied { open } for pid=8239 comm="syz.4.1504" path="/309/myloop" dev="tmpfs" ino=1638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.210427][ T29] audit: type=1400 audit(1788570805.690:973): avc: denied { setopt } for pid=8243 comm="syz.2.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.210468][ T29] audit: type=1400 audit(1788570805.700:974): avc: denied { unlink } for pid=3296 comm="syz-executor" name="myloop" dev="tmpfs" ino=1638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.278790][ T8246] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20002 [ 150.541392][ T8251] IPVS: Error connecting to the multicast addr [ 151.125211][ T8246] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.2.1505: No space for directory leaf checksum. Please run e2fsck -D. [ 151.125254][ T8246] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.2.1505: checksumming directory block 0 [ 151.125351][ T8246] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 151.125492][ T8246] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.2.1505: No space for directory leaf checksum. Please run e2fsck -D. [ 151.125519][ T8246] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.2.1505: checksumming directory block 0 [ 151.125601][ T8246] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 151.125642][ T8246] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.2.1505: No space for directory leaf checksum. Please run e2fsck -D. [ 151.125667][ T8246] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.2.1505: checksumming directory block 0 [ 151.125777][ T8246] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 151.125820][ T8246] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.2.1505: No space for directory leaf checksum. Please run e2fsck -D. [ 151.125858][ T8246] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.2.1505: checksumming directory block 0 [ 151.125968][ T8246] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 151.125989][ T8246] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 151.856973][ T29] audit: type=1400 audit(1788570807.370:975): avc: denied { ioctl } for pid=8285 comm="syz.5.1520" path="socket:[29241]" dev="sockfs" ino=29241 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.881652][ T29] audit: type=1400 audit(1788570807.370:976): avc: denied { write } for pid=8285 comm="syz.5.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 152.132968][ T29] audit: type=1326 audit(1788570807.610:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8293 comm="syz.2.1523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872cf4e159 code=0x7fc00000 [ 152.161272][ T29] audit: type=1326 audit(1788570807.680:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8293 comm="syz.2.1523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f872cf4e159 code=0x7fc00000 [ 152.557338][ T29] audit: type=1326 audit(1788570808.030:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8293 comm="syz.2.1523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f872cf47ed7 code=0x7fc00000 [ 152.838029][ T8301] loop5: detected capacity change from 0 to 512 [ 152.838666][ T8301] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.928590][ T8301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.928754][ T8301] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.010478][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.238595][ T8322] loop5: detected capacity change from 0 to 1024 [ 153.275437][ T8322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.275586][ T8322] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.318038][ T8320] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.1540: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.331953][ T8320] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.1540: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.347196][ T8320] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.1540: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.362911][ T8320] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.1540: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.376748][ T8320] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.1540: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.424135][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 153.581237][ T8335] netlink: 'syz.1.1530': attribute type 2 has an invalid length. [ 155.014290][ T8351] netlink: 186276 bytes leftover after parsing attributes in process `syz.2.1538'. [ 155.014322][ T8351] net_ratelimit: 100 callbacks suppressed [ 155.014343][ T8351] openvswitch: netlink: Flow actions attr not present in new flow. [ 155.202007][ T8347] loop5: detected capacity change from 0 to 512 [ 155.633514][ T8347] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.1536: iget: bad i_size value: 38620345925642 [ 155.633559][ T8347] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 155.667921][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 155.668199][ C0] EXT4-fs (loop5): initial error at time 1788570811: ext4_orphan_get:1403: inode 15 [ 155.669478][ C0] EXT4-fs (loop5): last error at time 1788570811: ext4_orphan_get:1403: inode 15 [ 155.721408][ T8347] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1536: couldn't read orphan inode 15 (err -117) [ 155.721708][ T8347] loop5: lost filesystem error report for type 5 error -117 [ 157.147182][ T8347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.677693][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.685085][ T8372] netlink: 'syz.2.1558': attribute type 1 has an invalid length. [ 157.696592][ T8372] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.778799][ T8372] bond3: (slave veth3): Enslaving as an active interface with a down link [ 157.956694][ T8372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.963732][ T8372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.026226][ T8372] team0: left allmulticast mode [ 158.246364][ T8383] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 158.263992][ T8389] tmpfs: Unsupported parameter 'huge' [ 158.272414][ T8383] bond3: (slave batadv1): making interface the new active one [ 158.273169][ T8383] batadv1: entered promiscuous mode [ 158.273387][ T8383] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 158.287409][ T3424] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.287446][ T3424] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 158.287626][ T3424] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.287657][ T3424] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 158.287699][ T3424] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.287730][ T3424] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 158.287767][ T3424] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.287813][ T3424] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 159.123037][ T8410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1559'. [ 159.898016][ T8433] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 161.318004][ T8459] netlink: 'syz.5.1580': attribute type 1 has an invalid length. [ 161.334171][ T8459] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.621450][ T8459] bond6: (slave veth3): Enslaving as an active interface with a down link [ 162.001195][ T8472] IPVS: Error connecting to the multicast addr [ 162.155831][ T8490] netlink: 'syz.5.1587': attribute type 1 has an invalid length. [ 162.170724][ T8490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 162.233284][ T8490] bond7: (slave veth5): Enslaving as an active interface with a down link [ 162.516300][ T8490] bridge0: port 1(syz_tun) entered disabled state [ 162.589927][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'. [ 162.619944][ T8490] veth1_macvtap: left allmulticast mode [ 162.620060][ T8490] macsec0: left allmulticast mode [ 162.695873][ T8490] ip6gre1: left allmulticast mode [ 162.696667][ T8490] bond3: left allmulticast mode [ 162.699973][ T8490] syzkaller0: left promiscuous mode [ 162.699997][ T8490] syzkaller0: left allmulticast mode [ 162.729946][ T8494] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 162.740012][ T8494] bond7: (slave batadv1): making interface the new active one [ 162.740726][ T8494] batadv1: entered promiscuous mode [ 162.740841][ T8494] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 162.757566][ T3424] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.757603][ T3424] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.757638][ T3424] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.757707][ T3424] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.757742][ T3424] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.757877][ T3424] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.757911][ T3424] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.757941][ T3424] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.899862][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 162.899897][ T29] audit: type=1400 audit(1788570818.420:993): avc: denied { write } for pid=8503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.949382][ T29] audit: type=1400 audit(1788570818.470:994): avc: denied { write } for pid=8516 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.117375][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.706881][ T29] audit: type=1400 audit(1788570819.220:995): avc: denied { write } for pid=8518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.813421][ T29] audit: type=1400 audit(1788570819.290:996): avc: denied { write } for pid=8546 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.031416][ T29] audit: type=1400 audit(1788570819.550:997): avc: denied { write } for pid=8555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.113899][ T29] audit: type=1400 audit(1788570819.630:998): avc: denied { write } for pid=8571 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.220787][ T8590] loop5: detected capacity change from 0 to 1024 [ 165.227621][ T8590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.267437][ T8590] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2042c018, mo2=0102] [ 165.267478][ T8590] System zones: 0-1, 3-12 [ 165.282794][ T8590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.299412][ T29] audit: type=1400 audit(1788570820.820:999): avc: denied { write } for pid=8589 comm="syz.5.1608" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.347977][ T8590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.433546][ T29] audit: type=1326 audit(1788570822.950:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.1.1625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f3a1e159 code=0x7ffc0000 [ 166.433910][ T29] audit: type=1326 audit(1788570822.950:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.1.1625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f3a1e159 code=0x7ffc0000 [ 166.434287][ T29] audit: type=1326 audit(1788570822.950:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.1.1625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f3a1e159 code=0x7ffc0000 [ 168.692986][ T8627] loop5: detected capacity change from 0 to 1024 [ 168.772727][ T8627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 168.773008][ T8627] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.824847][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 168.824873][ T29] audit: type=1400 audit(1788570825.340:1022): avc: denied { map } for pid=8626 comm="syz.5.1621" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 168.866793][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 168.878529][ T355] rpcbind: server 127.0.0.1 not responding, timed out [ 168.894434][ T29] audit: type=1400 audit(1788570825.410:1023): avc: denied { open } for pid=8677 comm="syz.2.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 168.894519][ T29] audit: type=1400 audit(1788570825.410:1024): avc: denied { kernel } for pid=8677 comm="syz.2.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 169.498180][ T8705] Process accounting resumed [ 169.815883][ T29] audit: type=1400 audit(1788570826.330:1025): avc: denied { write } for pid=8711 comm="syz.4.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 170.088480][ T8726] batman_adv: batadv0: Adding interface: dummy0 [ 170.088523][ T8726] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.088564][ T8726] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 170.797504][ T29] audit: type=1400 audit(1788570827.310:1026): avc: denied { ioctl } for pid=8737 comm="syz.5.1657" path="socket:[29624]" dev="sockfs" ino=29624 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.825041][ T29] audit: type=1400 audit(1788570827.340:1027): avc: denied { tracepoint } for pid=8735 comm="syz.0.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 170.978152][ T8744] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 171.007967][ T8744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.063865][ T8744] bond4: (slave veth7): Enslaving as an active interface with a down link [ 171.082768][ T8746] Process accounting resumed [ 172.029314][ T8766] loop5: detected capacity change from 0 to 1024 [ 172.037701][ T8766] EXT4-fs: Ignoring removed bh option [ 172.054490][ T8744] veth1_macvtap: left allmulticast mode [ 172.054520][ T8744] macsec0: left allmulticast mode [ 172.071146][ T8766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.085072][ T8744] bond3: left promiscuous mode [ 172.085096][ T8744] veth5: left promiscuous mode [ 172.115827][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.191123][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1676'. [ 173.913524][ T8803] netlink: 'syz.1.1678': attribute type 10 has an invalid length. [ 173.915123][ T8803] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 173.917128][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 173.917161][ T8803] bridge_slave_1: left allmulticast mode [ 173.917181][ T8803] bridge_slave_1: left promiscuous mode [ 173.917416][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.971062][ T8803] bridge_slave_0: left allmulticast mode [ 173.971170][ T8803] bridge_slave_0: left promiscuous mode [ 173.971281][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.185838][ T8803] bond0: (slave bridge0): Releasing backup interface [ 174.260930][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'. [ 174.276344][ T8813] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.314547][ T8813] bond5: (slave ip6erspan0): making interface the new active one [ 174.326995][ T8813] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 174.399583][ T8819] netlink: 'syz.5.1685': attribute type 4 has an invalid length. [ 174.409052][ T8819] netlink: 'syz.5.1685': attribute type 4 has an invalid length. [ 175.236375][ T8836] FAULT_INJECTION: forcing a failure. [ 175.236375][ T8836] name failslab, interval 1, probability 0, space 0, times 0 [ 175.236413][ T8836] CPU: 0 UID: 0 PID: 8836 Comm: syz.0.1686 Not tainted syzkaller #0 PREEMPT(lazy) [ 175.236443][ T8836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.236472][ T8836] Call Trace: [ 175.236481][ T8836] [ 175.236491][ T8836] __dump_stack+0x1d/0x30 [ 175.236522][ T8836] dump_stack_lvl+0x95/0xd0 [ 175.236577][ T8836] dump_stack+0x15/0x1b [ 175.236602][ T8836] should_fail_ex+0x262/0x280 [ 175.236670][ T8836] ? __send_signal_locked+0x14d/0x750 [ 175.236743][ T8836] should_failslab+0x8c/0xb0 [ 175.236782][ T8836] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 175.236851][ T8836] ? __send_signal_locked+0x14d/0x750 [ 175.236954][ T8836] __send_signal_locked+0x14d/0x750 [ 175.237020][ T8836] ? __rcu_read_unlock+0x33/0x70 [ 175.237054][ T8836] do_notify_parent+0x55f/0x600 [ 175.237172][ T8836] release_task+0xa92/0xb40 [ 175.237208][ T8836] do_exit+0xd79/0x1510 [ 175.237324][ T8836] do_group_exit+0xfe/0x140 [ 175.237430][ T8836] ? get_signal+0xe00/0xf10 [ 175.237576][ T8836] get_signal+0xe07/0xf10 [ 175.237618][ T8836] arch_do_signal_or_restart+0x96/0x480 [ 175.237660][ T8836] exit_to_user_mode_loop+0x15d/0x8c0 [ 175.237696][ T8836] do_syscall_64+0x212/0x360 [ 175.237730][ T8836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.237855][ T8836] RIP: 0033:0x7f443871e159 [ 175.237873][ T8836] Code: Unable to access opcode bytes at 0x7f443871e12f. [ 175.237885][ T8836] RSP: 002b:00007f44371350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 175.237912][ T8836] RAX: fffffffffffffe00 RBX: 00007f44389a6188 RCX: 00007f443871e159 [ 175.237960][ T8836] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f44389a6188 [ 175.237976][ T8836] RBP: 00007f44389a6180 R08: 0000000000000000 R09: 0000000000000000 [ 175.237993][ T8836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.238009][ T8836] R13: 00007f44389a6218 R14: 00007fffa2f73bc0 R15: 00007fffa2f73ca8 [ 175.238032][ T8836] [ 176.342559][ T8849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1695'. [ 176.342660][ T8849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1695'. [ 176.342684][ T8849] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1695'. [ 176.429680][ T8853] loop5: detected capacity change from 0 to 1024 [ 176.644443][ T8853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.660438][ T29] audit: type=1400 audit(1788570833.180:1028): avc: denied { write } for pid=8852 comm="syz.5.1696" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.683645][ T29] audit: type=1400 audit(1788570833.200:1029): avc: denied { execute } for pid=8852 comm="syz.5.1696" path="/301/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.686195][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 176.731152][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 176.737291][ T3424] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.737333][ T3424] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.737451][ T3424] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.737485][ T3424] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.030777][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.105199][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 177.120481][ T8882] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.640108][ T8882] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.640684][ T8882] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 177.641506][ T8882] bond6: (slave gre1): Error -95 calling set_mac_address [ 177.680173][ T29] audit: type=1400 audit(1788570834.200:1030): avc: denied { write } for pid=8906 comm="syz.1.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 177.775526][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1715'. [ 177.788621][ T29] audit: type=1400 audit(1788570834.310:1031): avc: denied { mount } for pid=8919 comm="syz.1.1716" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 177.813566][ T8920] netlink: 'syz.1.1716': attribute type 10 has an invalid length. [ 179.141435][ T29] audit: type=1326 audit(1788570835.660:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.0.1728" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443871e159 code=0x7ffc0000 [ 179.141557][ T29] audit: type=1326 audit(1788570835.660:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.0.1728" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443871e159 code=0x7ffc0000 [ 179.195562][ T29] audit: type=1326 audit(1788570835.710:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.0.1728" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443871e159 code=0x7ffc0000 [ 179.195663][ T29] audit: type=1326 audit(1788570835.710:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.0.1728" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443871e159 code=0x7ffc0000 [ 179.230985][ T29] audit: type=1326 audit(1788570835.740:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.0.1728" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f443871e159 code=0x7ffc0000 [ 179.248665][ T29] audit: type=1326 audit(1788570835.770:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.0.1728" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443871e159 code=0x7ffc0000 [ 179.422225][ T8959] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 179.790934][ T8964] netlink: 2724 bytes leftover after parsing attributes in process `syz.0.1732'. [ 179.790992][ T8964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1732'. [ 179.791020][ T8964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1732'. [ 180.303921][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1741'. [ 180.313854][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1741'. [ 180.329548][ T8997] netlink: 'syz.2.1743': attribute type 2 has an invalid length. [ 180.332040][ T8997] 0: entered promiscuous mode [ 180.852063][ T9021] netlink: 'syz.0.1752': attribute type 10 has an invalid length. [ 180.862962][ T9021] bridge0: port 3(team0) entered disabled state [ 180.873268][ T9021] team0 (unregistering): left promiscuous mode [ 180.873309][ T9021] team_slave_1: left promiscuous mode [ 180.873665][ T9021] bridge0: port 3(team0) entered disabled state [ 180.895437][ T9021] team_slave_1: left allmulticast mode [ 180.906042][ T9021] team0 (unregistering): Port device team_slave_1 removed [ 181.333211][ T9044] loop5: detected capacity change from 0 to 128 [ 181.359110][ T9044] EXT4-fs: Mount option(s) incompatible with ext3 [ 181.592805][ T9016] syz.2.1750 (9016) used greatest stack depth: 8376 bytes left [ 181.868930][ T9056] ================================================================== [ 181.868976][ T9056] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 181.869032][ T9056] [ 181.869041][ T9056] read-write to 0xffff88811c1a2f64 of 4 bytes by task 9058 on cpu 1: [ 181.869062][ T9056] fifo_open+0x179/0x5b0 [ 181.869094][ T9056] do_dentry_open+0x49f/0xa60 [ 181.869116][ T9056] vfs_open+0x37/0x1e0 [ 181.869134][ T9056] path_openat+0xc01/0x10d0 [ 181.869158][ T9056] do_file_open+0x16c/0x290 [ 181.869183][ T9056] file_open_name+0xfa/0x120 [ 181.869205][ T9056] __se_sys_acct+0x8c/0x500 [ 181.869236][ T9056] __x64_sys_acct+0x1f/0x30 [ 181.869263][ T9056] x64_sys_call+0x1461/0x2550 [ 181.869287][ T9056] do_syscall_64+0x112/0x360 [ 181.869317][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.869344][ T9056] [ 181.869352][ T9056] read to 0xffff88811c1a2f64 of 4 bytes by task 9056 on cpu 0: [ 181.869371][ T9056] wait_for_partner+0x109/0x1d0 [ 181.869405][ T9056] fifo_open+0x491/0x5b0 [ 181.869437][ T9056] do_dentry_open+0x49f/0xa60 [ 181.869459][ T9056] vfs_open+0x37/0x1e0 [ 181.869479][ T9056] path_openat+0xc01/0x10d0 [ 181.869506][ T9056] do_file_open+0x16c/0x290 [ 181.869532][ T9056] do_sys_openat2+0xa0/0x130 [ 181.869553][ T9056] __x64_sys_creat+0x65/0x90 [ 181.869577][ T9056] x64_sys_call+0xea6/0x2550 [ 181.869604][ T9056] do_syscall_64+0x112/0x360 [ 181.869633][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.869657][ T9056] [ 181.869662][ T9056] value changed: 0x00000002 -> 0x00000001 [ 181.869676][ T9056] [ 181.869681][ T9056] Reported by Kernel Concurrency Sanitizer on: [ 181.869694][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.2.1764 Not tainted syzkaller #0 PREEMPT(lazy) [ 181.869720][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.869740][ T9056] ==================================================================