last executing test programs: 2m1.680622738s ago: executing program 2 (id=1244): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c010000130001010000000000000000fe880000000000000000000000000101640101020000000000000000000000004e20000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000000000000000000006000000000000000300000000000000050000000000000008000020fff5649e0b67f200000000000500000000000000000000000000000000010000000000000800000000000000000000000000000084000500ac1414aa000000000000000000000000000004d22b0000000a000000000000000000000000000000000000000335000000010100050000000200000009000080ff010000000000000000000000000001000004d5320000"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a40)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m1.419209974s ago: executing program 2 (id=1250): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x358, 0xffffffff, 0x108, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502, {0x700}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x800fe, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 2m1.236518443s ago: executing program 2 (id=1253): socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000800)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,nfs=stale_rw,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,time_offset=0x00000000000003cc,errors=continue,nodots,dots,nodots,nodots,usefree,check=relaxed,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,nodots,nodots,dont_hash,seclabel,func=FILE_MMAP,subj_user=-+]^(-%*@@k+,:@{^[^@,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c617564692c0093591481b2dac6c586482df1499a5d110264abd884a04c3c17f1c678294ba89de3d86c0645512aed6d9103b453b32f2367ac88ec9428d5c7acbe688a0077fcfc4862ee05f019c1f7fd56a6ffbf9af11e85ba202f6f3745d3", @ANYRES16], 0x1, 0x1f5, &(0x7f0000000600)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x6, 0x3, 0x21432, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m0.628115495s ago: executing program 2 (id=1256): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f00000002c0)='.\x00', 0x0, 0x9a5840, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x84000, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m0.561506022s ago: executing program 2 (id=1258): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xebf6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x210010, &(0x7f00000017c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRES8], 0x1, 0x392, &(0x7f0000002800)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000002bc0)='./file2\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) io_setup(0x1, &(0x7f0000002d80)) 2m0.437703915s ago: executing program 2 (id=1261): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x120b0, 0xc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0) 2m0.414895307s ago: executing program 32 (id=1261): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x120b0, 0xc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0) 1m5.13548422s ago: executing program 5 (id=1905): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1m4.301206145s ago: executing program 5 (id=1910): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000003c00000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 1m4.192698467s ago: executing program 5 (id=1913): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x141002, 0x15b) write(r1, &(0x7f0000000680)='7', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt(r0, 0x0, 0x482, &(0x7f00000006c0)="060000007f00000100500000000000006d6800"/44, 0x2c) 1m3.911148555s ago: executing program 5 (id=1914): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='.\x00', &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000600)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f0000000a40)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) 1m3.779121898s ago: executing program 5 (id=1916): mkdirat(0xffffffffffffff9c, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203850000a26939d60000000000000f0800010001"], 0x1c}}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0xfff2}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 1m3.603362407s ago: executing program 5 (id=1918): r0 = socket$inet(0x2, 0x1, 0x6) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000440)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000500)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000017c0)={r4}, &(0x7f0000001800)=0x8) 1m3.579744709s ago: executing program 33 (id=1918): r0 = socket$inet(0x2, 0x1, 0x6) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000440)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000500)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000017c0)={r4}, &(0x7f0000001800)=0x8) 5.67707283s ago: executing program 4 (id=2555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x9, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x2248, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 5.222751516s ago: executing program 4 (id=2562): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x123e00, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0x3, 0x2, 0xfff}) ioctl$TCSBRKP(r0, 0x5425, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f00000002c0)=0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0xff0}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000340)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) 4.925659297s ago: executing program 4 (id=2568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001700)=0x14) sendmsg$nl_route(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 4.736835206s ago: executing program 4 (id=2572): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='10', 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) 4.346207236s ago: executing program 4 (id=2576): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4001, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_pgetevents(r1, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='m', 0x1}]) 4.20446294s ago: executing program 4 (id=2577): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) r0 = io_uring_setup(0x7f6, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x1bd}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xfff3}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.086441492s ago: executing program 34 (id=2577): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) r0 = io_uring_setup(0x7f6, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x1bd}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xfff3}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.895421066s ago: executing program 3 (id=2596): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xed3}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) sendto(r1, 0x0, 0x0, 0xd63a66976d7df3e1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000440)="240000002a0001030a000000000000000000000001000000000000000000df0000010000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2017, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000}, 0x94) 1.711334885s ago: executing program 6 (id=2599): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file1\x00', 0x15800, &(0x7f0000000140)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '-{'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/v:{\x85&['}}, {@flag='mand'}]}, 0x1, 0x50f, &(0x7f0000000280)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=") socket$inet6(0xa, 0x5, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01062abd7000ffdbdf2506"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x5, 0x480, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x2, 0xaea}, 0x0, 0x3, 0xfffffbff, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000ac0)='cpu<-0\t\t\t') 1.489658517s ago: executing program 1 (id=2604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x6, 0x686, 0x8}, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x34) 1.447256812s ago: executing program 3 (id=2605): close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xae58, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff07ffd4060000400000006a0200000ee60000bf050000000000003d35f3ff000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9bdb047db75"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1.311862526s ago: executing program 1 (id=2607): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xefffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket(0x15, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) r1 = fsopen(&(0x7f0000000480)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r3, &(0x7f0000000500)=""/1024, 0x400) 1.225798104s ago: executing program 3 (id=2610): mount(0x0, 0x0, &(0x7f00000001c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x20082, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/current\x00') r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x573e, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x10, &(0x7f0000000b00)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.07195644s ago: executing program 6 (id=2611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2901, 0x0) close(r2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[], 0x16) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0x36) 1.017367485s ago: executing program 3 (id=2612): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000500)="163280", 0x3}], 0x1) fchmodat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_EVENT(r1, 0x84, 0x7f, &(0x7f0000000640)={0x0, 0x8002}, 0x8) 980.024629ms ago: executing program 0 (id=2613): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000d800089", 0x8) 968.627451ms ago: executing program 1 (id=2614): rt_sigprocmask(0x0, &(0x7f0000000140)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='devices.list\x00', 0x26e1, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x4, r1, 0x0}]) pselect6(0x40, &(0x7f0000000200)={0xec, 0x8000, 0x28, 0x3, 0x4000000000000000, 0x5, 0x80000000000002, 0xe8}, 0x0, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={[0x4]}, 0x8}) 879.95418ms ago: executing program 6 (id=2615): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x6}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x20040080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x600d4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 869.536761ms ago: executing program 0 (id=2616): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_config_ext={0x101}, 0x2000, 0x5, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x40800}, 0x0) close(r1) 810.838647ms ago: executing program 6 (id=2617): fchown(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) 754.714683ms ago: executing program 1 (id=2618): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) gettimeofday(0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_clone(0xcb0e3400, 0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) clock_gettime(0xffffffe4, 0x0) 679.59313ms ago: executing program 6 (id=2619): sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mq_open(0x0, 0x8c2, 0x30, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r1, &(0x7f0000000ac0)={0x9, {"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", 0x1061}}, 0x1006) 669.492991ms ago: executing program 0 (id=2620): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "0f"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 650.066983ms ago: executing program 7 (id=2580): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x604, 0x2, @perf_config_ext={0x7000, 0x1946}, 0x0, 0x0, 0x387, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000c090) perf_event_open(&(0x7f0000002f00)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x45, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003180)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000033c0), 0x0, 0x142000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000003440)='/proc/schedstat\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000003480)={0x53, 0xfffffffffffffffe, 0x0, 0x2, @scatter={0x0, 0xdd, 0x0}, &(0x7f0000003500), 0x0, 0x9, 0x10030, 0x1000, 0x0}) 588.145ms ago: executing program 0 (id=2621): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x1000000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/current_tracer\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='blk', 0x3) 568.052231ms ago: executing program 1 (id=2622): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file1\x00', 0x15800, &(0x7f0000000140)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '-{'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/v:{\x85&['}}, {@flag='mand'}]}, 0x1, 0x50f, &(0x7f0000000280)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=") socket$inet6(0xa, 0x5, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01062abd7000ffdbdf2506"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x5, 0x480, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x2, 0xaea}, 0x0, 0x3, 0xfffffbff, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000ac0)='cpu<-0\t\t\t') 567.674302ms ago: executing program 7 (id=2623): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x2, 0x800800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000050601018455"], 0x14}}, 0x0) read(r0, &(0x7f0000000580)=""/64, 0xfdef) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") setrlimit(0x2, &(0x7f0000000200)={0x0, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x6) 465.595722ms ago: executing program 0 (id=2624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000800000003000000000000004c2300a400650000040690787f000001000000000707cfac1e01018313fa7f000001ac1414177f000001ac1414bb00004e234e22", @ANYRES32, @ANYRES32, @ANYBLOB="80"], 0xb2) 373.506731ms ago: executing program 3 (id=2625): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 286.44215ms ago: executing program 0 (id=2626): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e10000000000000000"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xe61e218753f4dd34) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 275.118112ms ago: executing program 3 (id=2627): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad447788d30188897", 0x14}], 0x1}, 0x40000) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 38.884825ms ago: executing program 7 (id=2628): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0xfd, 0x2, 0x400000}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@local, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x14}, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xbffffffffffffff8, 0xea9}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfc, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x1, 0x714, 0x4e23, 0x405, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffb, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x2, 0x16, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000002640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002680), 0xfffffffffffffe50}, 0x48) 37.846186ms ago: executing program 1 (id=2638): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 6 (id=2629): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffffff, 0x0, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000790040000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) kernel console output (not intermixed with test programs): vsim netdevsim6 netdevsim3: renamed from eth3 [ 197.667821][ T9614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.763759][ T9614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.769323][ T9614] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.789385][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.789441][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.790178][ T29] audit: type=1400 audit(1793501432.016:1848): avc: denied { write } for pid=9779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.832759][ T9388] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.832839][ T9388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.854676][ T9811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1956'. [ 197.902385][ T29] audit: type=1400 audit(1793501432.136:1849): avc: denied { write } for pid=9816 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.967587][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 198.008365][ T29] audit: type=1400 audit(1793501432.236:1850): avc: denied { read } for pid=9830 comm="syz.4.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.194781][ T9614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.475146][ T9614] veth0_vlan: entered promiscuous mode [ 198.479464][ T9614] veth1_vlan: entered promiscuous mode [ 198.499845][ T9614] veth0_macvtap: entered promiscuous mode [ 198.502242][ T9614] veth1_macvtap: entered promiscuous mode [ 198.514281][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.520284][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.562288][ T298] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.562460][ T298] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.562589][ T298] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.562631][ T298] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.597477][ T29] audit: type=1326 audit(1793501432.826:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.1963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 198.599264][ T29] audit: type=1326 audit(1793501432.826:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.1963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 198.609314][ T29] audit: type=1326 audit(1793501432.836:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.1963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 198.609824][ T29] audit: type=1326 audit(1793501432.836:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.1963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 198.610209][ T29] audit: type=1326 audit(1793501432.836:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.1963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 198.610852][ T29] audit: type=1326 audit(1793501432.836:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.1963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 198.614032][ T29] audit: type=1326 audit(1793501432.846:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.1963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 198.958412][ T9871] SELinux: Context ¼OPcÕÇ™»žÅè?‰s�Þ Uâ²Éì^tú”Q`wê�& ò˜m [ 198.958412][ T9871] ¤ù¡ ×%ÓZÊó®Ç@L0õNïµr‘L²1X‹)Ù’i†jÏÉ’%Ø‘ÙfËíîYjwõÔLÝ�˜»ã8ôÇݱá bV:±vÓiý is not valid (left unmapped). [ 199.331590][ T9886] loop6: detected capacity change from 0 to 512 [ 199.366864][ T9899] loop0: detected capacity change from 0 to 256 [ 199.399592][ T9901] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1975'. [ 199.443847][ T9886] vfat: Unknown parameter 'ÿ01777777777777777777777' [ 199.469973][ T9903] ./dev/sda1: Can't lookup blockdev [ 199.638421][ T9911] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 199.861534][ T9907] loop0: detected capacity change from 0 to 512 [ 199.964177][ T9924] -1: renamed from syzkaller0 [ 199.970237][ T9907] EXT4-fs error (device loop0): ext4_iget_extra_inode:6027: inode #15: comm syz.0.1978: corrupted in-inode xattr: invalid ea_ino [ 199.970760][ T9907] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 199.989885][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 199.989908][ C0] EXT4-fs (loop0): initial error at time 1793501434: ext4_iget_extra_inode:6027: inode 15 [ 199.989953][ C0] EXT4-fs (loop0): last error at time 1793501434: ext4_iget_extra_inode:6027: inode 15 [ 200.012344][ T9907] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1978: couldn't read orphan inode 15 (err -117) [ 200.012441][ T9907] loop0: lost filesystem error report for type 5 error -117 [ 200.015167][ T9907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.176487][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1988'. [ 200.176540][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1988'. [ 200.176580][ T9932] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1988'. [ 200.221652][ T9935] loop3: detected capacity change from 0 to 512 [ 200.263456][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.329551][ T9935] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.1990: bg 0: block 385: padding at end of block bitmap is not set [ 200.329611][ T9935] loop3: lost filesystem error report for type 5 error -117 [ 200.330648][ T9935] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 200.331117][ T9935] loop3: lost filesystem error report for type 5 error -117 [ 200.331658][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 200.331689][ C1] EXT4-fs (loop3): initial error at time 1793501434: ext4_validate_block_bitmap:445 [ 200.331738][ C1] EXT4-fs (loop3): last error at time 1793501434: ext4_mb_clear_bb:6678 [ 200.335763][ T9935] EXT4-fs (loop3): 2 truncates cleaned up [ 200.338504][ T9935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.413942][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.436336][ T9943] FAULT_INJECTION: forcing a failure. [ 200.436336][ T9943] name failslab, interval 1, probability 0, space 0, times 0 [ 200.436384][ T9943] CPU: 0 UID: 0 PID: 9943 Comm: syz.3.1993 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 200.436427][ T9943] Tainted: [W]=WARN [ 200.436436][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.436455][ T9943] Call Trace: [ 200.436465][ T9943] [ 200.436475][ T9943] __dump_stack+0x1d/0x30 [ 200.436569][ T9943] dump_stack_lvl+0x95/0xd0 [ 200.436592][ T9943] dump_stack+0x15/0x1b [ 200.436660][ T9943] should_fail_ex+0x259/0x270 [ 200.436690][ T9943] ? request_key_auth_new+0x91/0x5d0 [ 200.436720][ T9943] should_failslab+0x8c/0xb0 [ 200.436757][ T9943] __kmalloc_cache_noprof+0x5d/0x3e0 [ 200.436865][ T9943] ? request_key_auth_new+0x91/0x5d0 [ 200.436902][ T9943] request_key_auth_new+0x91/0x5d0 [ 200.436978][ T9943] request_key_and_link+0x918/0xe40 [ 200.437091][ T9943] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 200.437134][ T9943] ? __pfx_keyring_search_iterator+0x10/0x10 [ 200.437206][ T9943] __se_sys_request_key+0x1e9/0x2a0 [ 200.437231][ T9943] __x64_sys_request_key+0x55/0x70 [ 200.437296][ T9943] x64_sys_call+0x1741/0x2550 [ 200.437325][ T9943] do_syscall_64+0x112/0x360 [ 200.437441][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.437481][ T9943] RIP: 0033:0x7f542e58f559 [ 200.437517][ T9943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.437538][ T9943] RSP: 002b:00007f542cfe7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 200.437564][ T9943] RAX: ffffffffffffffda RBX: 00007f542e815fa0 RCX: 00007f542e58f559 [ 200.437595][ T9943] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 200.437617][ T9943] RBP: 00007f542e626b50 R08: 0000000000000000 R09: 0000000000000000 [ 200.437662][ T9943] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 200.437676][ T9943] R13: 00007f542e816038 R14: 00007f542e815fa0 R15: 00007ffc7e061548 [ 200.437774][ T9943] [ 200.913343][ T9970] loop6: detected capacity change from 0 to 512 [ 200.915389][ T9970] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 200.917599][ T9970] EXT4-fs (loop6): 1 truncate cleaned up [ 200.918420][ T9970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.067700][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 201.668397][ T9993] ebt_among: wrong size: 2136 against expected 1092, rounded to 1096 [ 201.713897][ T9614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.821825][ T9999] rxe_eth0 speed is unknown, defaulting to 1000 [ 201.849997][ T9999] FAULT_INJECTION: forcing a failure. [ 201.849997][ T9999] name failslab, interval 1, probability 0, space 0, times 0 [ 201.850069][ T9999] CPU: 1 UID: 0 PID: 9999 Comm: syz.3.2013 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 201.850100][ T9999] Tainted: [W]=WARN [ 201.850106][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 201.850119][ T9999] Call Trace: [ 201.850188][ T9999] [ 201.850198][ T9999] __dump_stack+0x1d/0x30 [ 201.850274][ T9999] dump_stack_lvl+0x95/0xd0 [ 201.850301][ T9999] dump_stack+0x15/0x1b [ 201.850328][ T9999] should_fail_ex+0x259/0x270 [ 201.850387][ T9999] ? kstrdup_const+0x3e/0x50 [ 201.850407][ T9999] should_failslab+0x8c/0xb0 [ 201.850486][ T9999] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 201.850534][ T9999] ? kstrdup_const+0x3e/0x50 [ 201.850556][ T9999] kstrdup+0x3e/0xd0 [ 201.850640][ T9999] kstrdup_const+0x3e/0x50 [ 201.850659][ T9999] __kernfs_new_node+0x42/0x440 [ 201.850682][ T9999] ? rb_insert_color+0x25c/0x2a0 [ 201.850721][ T9999] ? __rcu_read_unlock+0x4e/0x70 [ 201.850823][ T9999] ? up_write+0x19/0x60 [ 201.850850][ T9999] ? kernfs_link_sibling+0x2f5/0x320 [ 201.850886][ T9999] ? __rcu_read_unlock+0x4e/0x70 [ 201.850920][ T9999] kernfs_new_node+0x107/0x140 [ 201.850967][ T9999] __kernfs_create_file+0x4b/0x180 [ 201.850996][ T9999] ? __pfx_port_attr_show+0x10/0x10 [ 201.851029][ T9999] ? __pfx_port_attr_store+0x10/0x10 [ 201.851065][ T9999] sysfs_add_file_mode_ns+0x132/0x1b0 [ 201.851100][ T9999] internal_create_group+0x43e/0x9e0 [ 201.851128][ T9999] ? kobject_add+0xdb/0x150 [ 201.851189][ T9999] sysfs_create_groups+0x3f/0xf0 [ 201.851215][ T9999] ib_setup_port_attrs+0xa15/0x14a0 [ 201.851255][ T9999] ? kobject_put+0x108/0x180 [ 201.851291][ T9999] add_one_compat_dev+0x25c/0x360 [ 201.851316][ T9999] rdma_dev_init_net+0x17d/0x210 [ 201.851344][ T9999] ops_init+0x22a/0x2e0 [ 201.851384][ T9999] setup_net+0x9f/0x230 [ 201.851456][ T9999] copy_net_ns+0x339/0x490 [ 201.851483][ T9999] create_new_namespaces+0x1f6/0x420 [ 201.851541][ T9999] unshare_nsproxy_namespaces+0x115/0x150 [ 201.851613][ T9999] ksys_unshare+0x3a3/0x690 [ 201.851656][ T9999] __x64_sys_unshare+0x1f/0x30 [ 201.851780][ T9999] x64_sys_call+0x1e33/0x2550 [ 201.851888][ T9999] do_syscall_64+0x112/0x360 [ 201.851960][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.851989][ T9999] RIP: 0033:0x7f542e58f559 [ 201.852011][ T9999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.852038][ T9999] RSP: 002b:00007f542cfe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 201.852114][ T9999] RAX: ffffffffffffffda RBX: 00007f542e815fa0 RCX: 00007f542e58f559 [ 201.852134][ T9999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 201.852151][ T9999] RBP: 00007f542e626b50 R08: 0000000000000000 R09: 0000000000000000 [ 201.852168][ T9999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.852185][ T9999] R13: 00007f542e816038 R14: 00007f542e815fa0 R15: 00007ffc7e061548 [ 201.852214][ T9999] [ 202.107563][T10006] rxe_eth0 speed is unknown, defaulting to 1000 [ 202.227795][T10006] wg1 speed is unknown, defaulting to 1000 [ 202.313398][T10012] loop6: detected capacity change from 0 to 512 [ 202.339765][T10012] tipc: Started in network mode [ 202.339793][T10012] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 202.339843][T10012] tipc: Enabled bearer , priority 1 [ 203.013458][T10063] loop4: detected capacity change from 0 to 128 [ 204.031853][ T7512] tipc: Node number set to 43690 [ 204.161807][T10102] FAULT_INJECTION: forcing a failure. [ 204.161807][T10102] name failslab, interval 1, probability 0, space 0, times 0 [ 204.161852][T10102] CPU: 0 UID: 0 PID: 10102 Comm: syz.6.2029 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 204.161942][T10102] Tainted: [W]=WARN [ 204.161950][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 204.161964][T10102] Call Trace: [ 204.161971][T10102] [ 204.161982][T10102] __dump_stack+0x1d/0x30 [ 204.162043][T10102] dump_stack_lvl+0x95/0xd0 [ 204.162074][T10102] dump_stack+0x15/0x1b [ 204.162103][T10102] should_fail_ex+0x259/0x270 [ 204.162202][T10102] ? tcf_block_get_ext+0x4d9/0xcf0 [ 204.162234][T10102] should_failslab+0x8c/0xb0 [ 204.162274][T10102] __kmalloc_cache_noprof+0x5d/0x3e0 [ 204.162310][T10102] ? tcf_block_get_ext+0x4d9/0xcf0 [ 204.162410][T10102] tcf_block_get_ext+0x4d9/0xcf0 [ 204.162485][T10102] ? should_failslab+0x8c/0xb0 [ 204.162527][T10102] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 204.162617][T10102] ? __pfx_hfsc_init_qdisc+0x10/0x10 [ 204.162798][T10102] tcf_block_get+0x67/0xa0 [ 204.162831][T10102] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 204.162872][T10102] hfsc_init_qdisc+0xe0/0x230 [ 204.162912][T10102] ? __pfx_hfsc_init_qdisc+0x10/0x10 [ 204.163017][T10102] qdisc_create+0x84e/0xc20 [ 204.163041][T10102] ? memcmp+0x5e/0x90 [ 204.163068][T10102] tc_modify_qdisc+0x102a/0x1550 [ 204.163107][T10102] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 204.163137][T10102] rtnetlink_rcv_msg+0x6a7/0x720 [ 204.163256][T10102] netlink_rcv_skb+0x11e/0x220 [ 204.163281][T10102] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.163345][T10102] rtnetlink_rcv+0x1c/0x30 [ 204.163457][T10102] netlink_unicast+0x665/0x740 [ 204.163582][T10102] netlink_sendmsg+0x5ef/0x740 [ 204.163651][T10102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.163680][T10102] ____sys_sendmsg+0x54a/0x590 [ 204.163789][T10102] ___sys_sendmsg+0x195/0x1e0 [ 204.163835][T10102] __x64_sys_sendmsg+0xd4/0x160 [ 204.163905][T10102] x64_sys_call+0x22ab/0x2550 [ 204.163942][T10102] do_syscall_64+0x112/0x360 [ 204.163984][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.164218][T10102] RIP: 0033:0x7fad824ff559 [ 204.164237][T10102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.164264][T10102] RSP: 002b:00007fad80f4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.164292][T10102] RAX: ffffffffffffffda RBX: 00007fad82785fa0 RCX: 00007fad824ff559 [ 204.164312][T10102] RDX: 0000000020040084 RSI: 00002000000003c0 RDI: 0000000000000004 [ 204.164363][T10102] RBP: 00007fad82596b50 R08: 0000000000000000 R09: 0000000000000000 [ 204.164388][T10102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.164406][T10102] R13: 00007fad82786038 R14: 00007fad82785fa0 R15: 00007ffc079ada58 [ 204.164435][T10102] [ 204.838084][T10100] loop4: detected capacity change from 0 to 512 [ 205.031438][T10118] loop3: detected capacity change from 0 to 164 [ 205.042783][T10100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 205.043123][T10100] System zones: 1-12 [ 205.071000][T10100] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.2027: missing EA_INODE flag [ 205.071222][T10100] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 205.081482][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 205.081572][ C1] EXT4-fs (loop4): initial error at time 1793501439: ext4_xattr_inode_iget:437: inode 12 [ 205.081677][ C1] EXT4-fs (loop4): last error at time 1793501439: ext4_xattr_inode_iget:437: inode 12 [ 205.104301][T10100] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2027: error while reading EA inode 12 err=-117 [ 205.104397][T10100] loop4: lost filesystem error report for type 5 error -117 [ 205.106340][T10100] EXT4-fs (loop4): 1 orphan inode deleted [ 205.117497][T10100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.128153][T10118] rock: directory entry would overflow storage [ 205.128187][T10118] rock: sig=0x66, size=4, remaining=3 [ 205.188308][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 205.188330][ T29] audit: type=1400 audit(1793501439.406:2018): avc: denied { write } for pid=10099 comm="syz.4.2027" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.259399][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.341379][ T29] audit: type=1400 audit(1793501439.566:2019): avc: denied { bind } for pid=10140 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.345310][ T29] audit: type=1400 audit(1793501439.576:2020): avc: denied { name_bind } for pid=10140 comm="syz.4.2039" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 205.400069][T10134] loop0: detected capacity change from 0 to 512 [ 205.425144][T10134] vfat: Unknown parameter 'ÿ01777777777777777777777' [ 205.559366][T10151] loop6: detected capacity change from 0 to 512 [ 205.595172][T10151] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.2043: bg 0: block 385: padding at end of block bitmap is not set [ 205.595260][T10151] loop6: lost filesystem error report for type 5 error -117 [ 205.595490][T10151] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 205.595514][T10151] loop6: lost filesystem error report for type 5 error -117 [ 205.595910][T10151] EXT4-fs (loop6): 2 truncates cleaned up [ 205.596423][T10151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.678622][ T29] audit: type=1326 audit(1793501439.906:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10158 comm="syz.4.2047" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc12911f559 code=0x0 [ 205.719167][ T9614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.769297][T10170] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 205.769346][T10170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.769427][T10170] vhci_hcd vhci_hcd.0: Device attached [ 205.774184][T10170] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 205.774269][T10170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.774352][T10170] vhci_hcd vhci_hcd.0: Device attached [ 205.814545][T10170] loop6: detected capacity change from 0 to 512 [ 205.815904][T10170] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 205.815921][T10170] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 205.848715][T10170] EXT4-fs (loop6): 1 truncate cleaned up [ 205.849158][T10170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.901543][T10172] vhci_hcd: connection closed [ 205.901907][ T9386] vhci_hcd vhci_hcd.6: stop threads [ 205.901931][ T9386] vhci_hcd vhci_hcd.6: release socket [ 205.901963][ T9386] vhci_hcd vhci_hcd.6: disconnect device [ 205.902193][T10174] vhci_hcd: connection closed [ 205.902428][ T9386] vhci_hcd vhci_hcd.6: stop threads [ 205.902444][ T9386] vhci_hcd vhci_hcd.6: release socket [ 205.902467][ T9386] vhci_hcd vhci_hcd.6: disconnect device [ 205.942946][ T7506] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 206.138580][ T29] audit: type=1400 audit(1793501440.356:2022): avc: denied { getopt } for pid=10192 comm="syz.1.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.180818][T10195] TCP: TCP_TX_DELAY enabled [ 206.249524][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'. [ 206.419531][ T9614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.604424][T10214] xt_hashlimit: size too large, truncated to 1048576 [ 206.604519][T10214] xt_hashlimit: max too large, truncated to 1048576 [ 206.604536][T10214] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 206.631306][T10214] md: md4 stopped. [ 206.752272][T10217] loop0: detected capacity change from 0 to 1024 [ 206.763648][T10217] EXT4-fs: Ignoring removed bh option [ 206.787011][T10217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 206.787146][T10217] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.814217][ T29] audit: type=1400 audit(1793501441.036:2023): avc: denied { write } for pid=10216 comm="syz.0.2066" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.839788][T10217] EXT4-fs error (device loop0): ext4_map_blocks:951: inode #15: block 3: comm syz.0.2066: lblock 3 mapped to illegal pblock 3 (length 3) [ 206.840108][T10217] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 206.840144][T10217] EXT4-fs (loop0): This should not happen!! Data will be lost [ 206.840144][T10217] [ 206.921973][ T53] EXT4-fs error (device loop0): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 206.922317][ T53] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 206.922352][ T53] EXT4-fs (loop0): This should not happen!! Data will be lost [ 206.922352][ T53] [ 206.923797][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 207.299076][T10232] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2072'. [ 207.965643][ T29] audit: type=1400 audit(1793501442.196:2024): avc: denied { write } for pid=10244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.027578][ T29] audit: type=1400 audit(1793501442.256:2025): avc: denied { write } for pid=10260 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.206711][T10263] loop6: detected capacity change from 0 to 128 [ 208.223145][ T3332] udevd[3332]: incorrect ext4 checksum on /dev/loop6 [ 208.373673][ T29] audit: type=1400 audit(1793501442.606:2026): avc: denied { write } for pid=10266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.438533][ T29] audit: type=1400 audit(1793501442.666:2027): avc: denied { write } for pid=10285 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.471557][T10275] loop6: detected capacity change from 0 to 512 [ 208.531564][T10269] pim6reg: entered allmulticast mode [ 208.597161][T10275] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 208.597542][T10275] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 208.954388][T10310] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2084'. [ 209.049198][T10329] netlink: 'syz.1.2089': attribute type 12 has an invalid length. [ 209.715386][T10341] xt_hashlimit: size too large, truncated to 1048576 [ 210.031071][T10370] loop4: detected capacity change from 0 to 512 [ 210.060328][T10370] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.2100: corrupted in-inode xattr: invalid ea_ino [ 210.060417][T10370] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 210.061010][T10370] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2100: couldn't read orphan inode 15 (err -117) [ 210.061068][T10370] loop4: lost filesystem error report for type 5 error -117 [ 210.062090][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 210.062147][ C0] EXT4-fs (loop4): initial error at time 1793501444: ext4_iget_extra_inode:6027: inode 15 [ 210.062253][ C0] EXT4-fs (loop4): last error at time 1793501444: ext4_orphan_get:1409 [ 210.063902][T10370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.161963][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.447457][T10389] syz.0.2106 (10389): /proc/10389/oom_adj is deprecated, please use /proc/10389/oom_score_adj instead. [ 210.513041][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 210.513145][ T29] audit: type=1400 audit(1793501444.746:2077): avc: denied { mount } for pid=10395 comm="syz.3.2109" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 210.533088][ T29] audit: type=1400 audit(1793501444.756:2078): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 210.816613][ T29] audit: type=1400 audit(1793501445.046:2079): avc: denied { nlmsg_tty_audit } for pid=10419 comm="syz.6.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 211.069048][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2119'. [ 211.085594][T10429] FAULT_INJECTION: forcing a failure. [ 211.085594][T10429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.085637][T10429] CPU: 0 UID: 0 PID: 10429 Comm: syz.3.2120 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 211.085751][T10429] Tainted: [W]=WARN [ 211.085761][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 211.085999][T10429] Call Trace: [ 211.086008][T10429] [ 211.086059][T10429] __dump_stack+0x1d/0x30 [ 211.086095][T10429] dump_stack_lvl+0x95/0xd0 [ 211.086126][T10429] dump_stack+0x15/0x1b [ 211.086152][T10429] should_fail_ex+0x259/0x270 [ 211.086237][T10429] should_fail+0xb/0x20 [ 211.086298][T10429] should_fail_usercopy+0x1a/0x20 [ 211.086329][T10429] _copy_from_user+0x1c/0xb0 [ 211.086378][T10429] copy_from_sockptr+0x5e/0x90 [ 211.086422][T10429] do_ipv6_setsockopt+0x144b/0x1d30 [ 211.086564][T10429] ? __pfx_futex_wake_mark+0x10/0x10 [ 211.086606][T10429] ? __rcu_read_unlock+0x4e/0x70 [ 211.086664][T10429] ? avc_has_perm_noaudit+0xac/0x160 [ 211.086718][T10429] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 211.086765][T10429] ipv6_setsockopt+0x59/0x130 [ 211.086798][T10429] tcp_setsockopt+0x98/0xb0 [ 211.086980][T10429] sock_common_setsockopt+0x69/0x80 [ 211.087076][T10429] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 211.087120][T10429] __sys_setsockopt+0x184/0x200 [ 211.087165][T10429] __x64_sys_setsockopt+0x64/0x80 [ 211.087292][T10429] x64_sys_call+0x248f/0x2550 [ 211.087338][T10429] do_syscall_64+0x112/0x360 [ 211.087400][T10429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.087489][T10429] RIP: 0033:0x7f542e58f559 [ 211.087509][T10429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.087531][T10429] RSP: 002b:00007f542cfe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 211.087672][T10429] RAX: ffffffffffffffda RBX: 00007f542e815fa0 RCX: 00007f542e58f559 [ 211.087696][T10429] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 211.087755][T10429] RBP: 00007f542e626b50 R08: 0000000000000014 R09: 0000000000000000 [ 211.087776][T10429] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 211.087797][T10429] R13: 00007f542e816038 R14: 00007f542e815fa0 R15: 00007ffc7e061548 [ 211.087839][T10429] [ 211.369520][T10431] loop3: detected capacity change from 0 to 512 [ 211.609422][T10431] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.2121: bad orphan inode 15 [ 211.609466][T10431] loop3: lost filesystem error report for type 5 error -117 [ 211.609592][T10431] ext4_test_bit(bit=14, block=5) = 0 [ 211.617048][T10431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.636734][T10431] EXT4-fs error (device loop3): __ext4_new_inode:1083: comm syz.3.2121: reserved inode found cleared - inode=1 [ 211.637395][ T29] audit: type=1400 audit(1793501445.866:2080): avc: denied { write } for pid=10430 comm="syz.3.2121" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.733720][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.809105][T10442] loop0: detected capacity change from 0 to 1024 [ 211.817137][T10442] EXT4-fs: Ignoring removed nobh option [ 211.817239][T10442] EXT4-fs: Ignoring removed bh option [ 211.834339][T10442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.906594][ T29] audit: type=1400 audit(1793501446.136:2081): avc: denied { mounton } for pid=10447 comm="syz.3.2126" path="/file0" dev="autofs" ino=27350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 211.906903][ T29] audit: type=1400 audit(1793501446.136:2082): avc: denied { remount } for pid=10447 comm="syz.3.2126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 212.044122][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.287540][T10466] loop0: detected capacity change from 0 to 512 [ 212.290863][T10466] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 212.290883][T10466] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.323838][T10466] EXT4-fs (loop0): 1 truncate cleaned up [ 212.324403][T10466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.339506][T10457] loop6: detected capacity change from 0 to 512 [ 212.346222][T10457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 212.346475][T10457] System zones: 1-12 [ 212.347647][T10457] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.2131: missing EA_INODE flag [ 212.347729][T10457] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 212.348197][T10457] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.2131: error while reading EA inode 12 err=-117 [ 212.348282][T10457] loop6: lost filesystem error report for type 5 error -117 [ 212.348909][T10457] EXT4-fs (loop6): 1 orphan inode deleted [ 212.350129][T10457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.359279][ T29] audit: type=1400 audit(1793501446.586:2083): avc: denied { write } for pid=10456 comm="syz.6.2131" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.384401][ T9614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.536312][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.245565][T10493] netlink: 'syz.1.2143': attribute type 83 has an invalid length. [ 213.632668][T10515] FAULT_INJECTION: forcing a failure. [ 213.632668][T10515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.632707][T10515] CPU: 1 UID: 0 PID: 10515 Comm: syz.6.2152 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 213.632769][T10515] Tainted: [W]=WARN [ 213.632779][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 213.632866][T10515] Call Trace: [ 213.632872][T10515] [ 213.632880][T10515] __dump_stack+0x1d/0x30 [ 213.632961][T10515] dump_stack_lvl+0x95/0xd0 [ 213.632992][T10515] dump_stack+0x15/0x1b [ 213.633021][T10515] should_fail_ex+0x259/0x270 [ 213.633062][T10515] should_fail_alloc_page+0xf2/0x100 [ 213.633143][T10515] __alloc_frozen_pages_noprof+0x13b/0x3d0 [ 213.633196][T10515] alloc_pages_node_noprof+0x56/0xb0 [ 213.633247][T10515] pcpu_populate_chunk+0x19e/0xa30 [ 213.633354][T10515] pcpu_alloc_noprof+0x817/0xf70 [ 213.633398][T10515] xt_percpu_counter_alloc+0x78/0x110 [ 213.633510][T10515] translate_table+0x949/0x1120 [ 213.633632][T10515] ? should_fail_ex+0xdb/0x270 [ 213.633708][T10515] ? _copy_from_user+0x89/0xb0 [ 213.633749][T10515] do_ipt_set_ctl+0x735/0x970 [ 213.633785][T10515] ? _raw_spin_lock_bh+0x57/0xb0 [ 213.633817][T10515] nf_setsockopt+0x199/0x1b0 [ 213.633939][T10515] ip_setsockopt+0x102/0x110 [ 213.633973][T10515] tcp_setsockopt+0x98/0xb0 [ 213.634074][T10515] sock_common_setsockopt+0x69/0x80 [ 213.634112][T10515] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 213.634151][T10515] __sys_setsockopt+0x184/0x200 [ 213.634199][T10515] __x64_sys_setsockopt+0x64/0x80 [ 213.634248][T10515] x64_sys_call+0x248f/0x2550 [ 213.634341][T10515] do_syscall_64+0x112/0x360 [ 213.634466][T10515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.634494][T10515] RIP: 0033:0x7fad824ff559 [ 213.634576][T10515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.634602][T10515] RSP: 002b:00007fad80f4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 213.634631][T10515] RAX: ffffffffffffffda RBX: 00007fad82785fa0 RCX: 00007fad824ff559 [ 213.634651][T10515] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 213.634668][T10515] RBP: 00007fad82596b50 R08: 00000000000002c0 R09: 0000000000000000 [ 213.634693][T10515] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000000 [ 213.634711][T10515] R13: 00007fad82786038 R14: 00007fad82785fa0 R15: 00007ffc079ada58 [ 213.634737][T10515] [ 213.638944][T10515] percpu: allocation failed, size=4096 align=4096 atomic=0, failed to populate [ 213.638982][T10515] CPU: 1 UID: 0 PID: 10515 Comm: syz.6.2152 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 213.639023][T10515] Tainted: [W]=WARN [ 213.639033][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 213.639051][T10515] Call Trace: [ 213.639074][T10515] [ 213.639085][T10515] __dump_stack+0x1d/0x30 [ 213.639121][T10515] dump_stack_lvl+0x95/0xd0 [ 213.639153][T10515] dump_stack+0x15/0x1b [ 213.639208][T10515] pcpu_alloc_noprof+0xc04/0xf70 [ 213.639264][T10515] xt_percpu_counter_alloc+0x78/0x110 [ 213.639376][T10515] translate_table+0x949/0x1120 [ 213.639409][T10515] ? should_fail_ex+0xdb/0x270 [ 213.639462][T10515] ? _copy_from_user+0x89/0xb0 [ 213.639506][T10515] do_ipt_set_ctl+0x735/0x970 [ 213.639551][T10515] ? _raw_spin_lock_bh+0x57/0xb0 [ 213.639607][T10515] nf_setsockopt+0x199/0x1b0 [ 213.639675][T10515] ip_setsockopt+0x102/0x110 [ 213.639715][T10515] tcp_setsockopt+0x98/0xb0 [ 213.639763][T10515] sock_common_setsockopt+0x69/0x80 [ 213.639861][T10515] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 213.639902][T10515] __sys_setsockopt+0x184/0x200 [ 213.639975][T10515] __x64_sys_setsockopt+0x64/0x80 [ 213.640045][T10515] x64_sys_call+0x248f/0x2550 [ 213.640083][T10515] do_syscall_64+0x112/0x360 [ 213.640131][T10515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.640162][T10515] RIP: 0033:0x7fad824ff559 [ 213.640240][T10515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.640268][T10515] RSP: 002b:00007fad80f4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 213.640375][T10515] RAX: ffffffffffffffda RBX: 00007fad82785fa0 RCX: 00007fad824ff559 [ 213.640396][T10515] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 213.640414][T10515] RBP: 00007fad82596b50 R08: 00000000000002c0 R09: 0000000000000000 [ 213.640432][T10515] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000000 [ 213.640451][T10515] R13: 00007fad82786038 R14: 00007fad82785fa0 R15: 00007ffc079ada58 [ 213.640479][T10515] [ 214.188710][T10533] netlink: 'syz.1.2159': attribute type 1 has an invalid length. [ 214.214299][T10533] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.231088][ T29] audit: type=1326 audit(1793501448.456:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.6.2157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad824ff559 code=0x7ffc0000 [ 214.233665][ T29] audit: type=1326 audit(1793501448.456:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.6.2157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad824ff559 code=0x7ffc0000 [ 214.233801][ T29] audit: type=1326 audit(1793501448.466:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.6.2157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad824ff559 code=0x7ffc0000 [ 214.276012][T10533] bond5: entered promiscuous mode [ 214.322069][T10533] bond5 (unregistering): left promiscuous mode [ 214.322353][T10533] bond5 (unregistering): Released all slaves [ 214.330294][T10544] loop3: detected capacity change from 0 to 512 [ 214.357631][T10544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.357775][T10544] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.396974][T10540] batman_adv: batadv0: Adding interface: veth0 [ 214.396994][T10540] batman_adv: batadv0: The MTU of interface veth0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 214.397029][T10540] batman_adv: batadv0: Interface activated: veth0 [ 214.446181][T10540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.448146][T10540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.452325][T10540] batman_adv: batadv0: Interface deactivated: veth0 [ 214.452346][T10540] batman_adv: batadv0: Removing interface: veth0 [ 214.500989][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2161'. [ 214.621177][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.129916][T10575] loop3: detected capacity change from 0 to 512 [ 215.159087][T10575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.159194][T10575] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.215582][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.378816][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.378971][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.379608][ T7506] kernel read not supported for file inotify (pid: 7506 comm: kworker/1:16) [ 215.426829][T10587] loop4: detected capacity change from 0 to 1024 [ 215.463055][T10587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.503753][T10587] EXT4-fs warning (device loop4): ext4_rmdir:3194: inode #11: comm syz.4.2177: empty directory 'file0' has too many links (111) [ 215.764808][T10607] ip_tables: iptables: counters copy to user failed while replacing table [ 215.835975][T10601] pim6reg: entered allmulticast mode [ 215.942969][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 215.942989][ T29] audit: type=1400 audit(1793501450.176:2196): avc: denied { name_bind } for pid=10616 comm="syz.6.2189" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 216.045782][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.052666][T10623] FAULT_INJECTION: forcing a failure. [ 216.052666][T10623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.052824][T10623] CPU: 0 UID: 0 PID: 10623 Comm: syz.3.2190 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 216.052920][T10623] Tainted: [W]=WARN [ 216.052947][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 216.052992][T10623] Call Trace: [ 216.053021][T10623] [ 216.053045][T10623] __dump_stack+0x1d/0x30 [ 216.053107][T10623] dump_stack_lvl+0x95/0xd0 [ 216.053173][T10623] dump_stack+0x15/0x1b [ 216.053255][T10623] should_fail_ex+0x259/0x270 [ 216.053417][T10623] should_fail+0xb/0x20 [ 216.053494][T10623] should_fail_usercopy+0x1a/0x20 [ 216.053709][T10623] copy_fpstate_to_sigframe+0x61c/0x7b0 [ 216.053804][T10623] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 216.053982][T10623] ? x86_task_fpu+0x36/0x60 [ 216.054056][T10623] get_sigframe+0x34f/0x470 [ 216.054150][T10623] ? _raw_spin_unlock_irq+0x9/0x30 [ 216.054276][T10623] x64_setup_rt_frame+0xa7/0x4e0 [ 216.054366][T10623] arch_do_signal_or_restart+0x27c/0x480 [ 216.054517][T10623] exit_to_user_mode_loop+0x15d/0x8c0 [ 216.054638][T10623] do_syscall_64+0x212/0x360 [ 216.054760][T10623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.054895][T10623] RIP: 0033:0x7f542e58f557 [ 216.054949][T10623] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 216.055013][T10623] RSP: 002b:00007f542cfe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 216.055077][T10623] RAX: 0000000000000113 RBX: 00007f542e815fa0 RCX: 00007f542e58f559 [ 216.055128][T10623] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 216.055170][T10623] RBP: 00007f542e626b50 R08: 0000000000000006 R09: 0000000000000000 [ 216.055207][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.055296][T10623] R13: 00007f542e816038 R14: 00007f542e815fa0 R15: 00007ffc7e061548 [ 216.055364][T10623] [ 216.250429][T10628] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 216.250481][T10628] block device autoloading is deprecated and will be removed. [ 216.391082][T10632] loop4: detected capacity change from 0 to 1024 [ 216.391441][T10632] EXT4-fs: Ignoring removed nobh option [ 216.401749][T10632] EXT4-fs: Ignoring removed bh option [ 216.416167][T10632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.517785][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.557378][T10645] TC_ACT_REPEAT abuse ? [ 216.867907][T10659] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 216.989801][T10666] loop6: detected capacity change from 0 to 512 [ 217.018637][T10666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.018708][T10666] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.107857][ T9614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.190354][T10671] syzkaller0: entered promiscuous mode [ 217.190382][T10671] syzkaller0: entered allmulticast mode [ 217.369903][ T29] audit: type=1400 audit(1793501451.596:2197): avc: denied { create } for pid=10674 comm="syz.0.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 217.686995][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2216'. [ 217.687076][T10686] netlink: 'syz.3.2216': attribute type 7 has an invalid length. [ 217.687093][T10686] netlink: 'syz.3.2216': attribute type 8 has an invalid length. [ 217.687143][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2216'. [ 217.687823][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2216'. [ 217.687890][T10686] netlink: 'syz.3.2216': attribute type 7 has an invalid length. [ 217.687907][T10686] netlink: 'syz.3.2216': attribute type 8 has an invalid length. [ 217.687936][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2216'. [ 218.271876][T10682] loop0: detected capacity change from 0 to 2048 [ 218.549841][T10682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.371809][T10547] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 220.873334][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.921292][ T326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.968127][ T326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.033799][ T326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.076255][T10704] loop0: detected capacity change from 0 to 512 [ 221.080815][ T326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.121502][T10704] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 221.121524][T10704] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 221.671395][T10731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.735452][ T326] bridge_slave_1: left allmulticast mode [ 221.735477][ T326] bridge_slave_1: left promiscuous mode [ 221.735619][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.739829][ T326] bridge_slave_0: left allmulticast mode [ 221.739856][ T326] bridge_slave_0: left promiscuous mode [ 221.739971][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.892832][ T326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.895649][ T326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.896431][ T326] bond0 (unregistering): Released all slaves [ 221.900196][ T326] bond1 (unregistering): (slave veth3): Releasing active interface [ 221.901210][ T326] bond1 (unregistering): Released all slaves [ 221.992021][ T326] tipc: Left network mode [ 222.086094][T10765] 0: reclassify loop, rule prio 0, protocol 03 [ 222.167965][ T29] audit: type=1400 audit(1793501456.396:2198): avc: denied { write } for pid=10755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.215782][T10748] loop4: detected capacity change from 0 to 512 [ 222.241778][ T29] audit: type=1400 audit(1793501456.476:2199): avc: denied { write } for pid=10773 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.321427][ T326] hsr_slave_0: left promiscuous mode [ 222.323608][ T326] hsr_slave_1: left promiscuous mode [ 222.324086][ T326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.324102][ T326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.334206][ T326] veth1_macvtap: left promiscuous mode [ 222.334309][ T326] veth0_macvtap: left promiscuous mode [ 222.334530][ T326] veth1_vlan: left promiscuous mode [ 222.334668][ T326] veth0_vlan: left promiscuous mode [ 222.345488][ T29] audit: type=1400 audit(1793501712.576:2200): avc: denied { read } for pid=10775 comm="syz.3.2244" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 222.345566][ T29] audit: type=1400 audit(1793501712.576:2201): avc: denied { open } for pid=10775 comm="syz.3.2244" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 222.381354][T10748] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 222.381425][T10748] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 222.381533][T10748] System zones: 0-1, 15-15, 18-18, 34-34 [ 222.394199][T10748] EXT4-fs (loop4): orphan cleanup on readonly fs [ 222.394319][T10748] EXT4-fs error (device loop4): ext4_quota_enable:7307: comm syz.4.2240: Bad quota inum: 768, type: 0 [ 222.394381][T10748] loop4: lost filesystem error report for type 5 error -117 [ 222.401072][T10748] EXT4-fs warning (device loop4): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix. [ 222.401180][T10748] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 222.410602][T10748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.432967][T10780] FAULT_INJECTION: forcing a failure. [ 222.432967][T10780] name failslab, interval 1, probability 0, space 0, times 0 [ 222.433092][T10780] CPU: 0 UID: 0 PID: 10780 Comm: syz.0.2245 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 222.433188][T10780] Tainted: [W]=WARN [ 222.433210][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 222.433283][T10780] Call Trace: [ 222.433297][T10780] [ 222.433327][T10780] __dump_stack+0x1d/0x30 [ 222.433490][T10780] dump_stack_lvl+0x95/0xd0 [ 222.433581][T10780] dump_stack+0x15/0x1b [ 222.433641][T10780] should_fail_ex+0x259/0x270 [ 222.433752][T10780] should_failslab+0x8c/0xb0 [ 222.433900][T10780] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 222.434004][T10780] ? mqueue_alloc_inode+0x34/0x50 [ 222.434087][T10780] ? mqueue_alloc_inode+0x34/0x50 [ 222.434206][T10780] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 222.434301][T10780] mqueue_alloc_inode+0x34/0x50 [ 222.434377][T10780] alloc_inode+0x40/0x170 [ 222.434451][T10780] new_inode+0x1d/0xe0 [ 222.434643][T10780] mqueue_get_inode+0x26/0x6a0 [ 222.434727][T10780] mqueue_create_attr+0x1b3/0x290 [ 222.434801][T10780] ? __pfx_mqueue_create_attr+0x10/0x10 [ 222.434969][T10780] vfs_mkobj+0xac/0x1d0 [ 222.435068][T10780] do_mq_open+0x357/0x4d0 [ 222.435150][T10780] __x64_sys_mq_open+0xcb/0x100 [ 222.435229][T10780] x64_sys_call+0x70f/0x2550 [ 222.435364][T10780] do_syscall_64+0x112/0x360 [ 222.435487][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.435583][T10780] RIP: 0033:0x7f811b3cf559 [ 222.435636][T10780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.435709][T10780] RSP: 002b:00007f8119e1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 222.435794][T10780] RAX: ffffffffffffffda RBX: 00007f811b655fa0 RCX: 00007f811b3cf559 [ 222.435911][T10780] RDX: 0000000000000030 RSI: 00000000000008c2 RDI: 0000200000000000 [ 222.435924][T10780] RBP: 00007f811b466b50 R08: 0000000000000000 R09: 0000000000000000 [ 222.435972][T10780] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 222.436021][T10780] R13: 00007f811b656038 R14: 00007f811b655fa0 R15: 00007fff2d379828 [ 222.436093][T10780] [ 222.468661][ T29] audit: type=1400 audit(1793501712.686:2202): avc: denied { read } for pid=10747 comm="syz.4.2240" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 222.659782][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.807944][ T29] audit: type=1400 audit(1793501713.036:2203): avc: denied { write } for pid=10785 comm="syz.4.2247" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 222.842809][ T326] team0 (unregistering): Port device team_slave_1 removed [ 222.857521][ T326] team0 (unregistering): Port device team_slave_0 removed [ 222.935432][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 223.192063][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2249'. [ 223.289973][ T29] audit: type=1400 audit(1793501713.516:2204): avc: denied { write } for pid=10797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.338966][ T29] audit: type=1400 audit(1793501713.566:2205): avc: denied { write } for pid=10809 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.380533][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 223.489352][ T29] audit: type=1400 audit(1793501713.716:2206): avc: denied { write } for pid=10812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.538264][ T29] audit: type=1400 audit(1793501713.766:2207): avc: denied { write } for pid=10823 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.581999][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 223.734610][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 224.305487][T10847] syzkaller0: entered promiscuous mode [ 224.305516][T10847] syzkaller0: entered allmulticast mode [ 224.506566][T10844] loop6: detected capacity change from 0 to 512 [ 224.521178][T10852] bond5: entered promiscuous mode [ 224.667991][T10844] ext4: Unknown parameter 'fowner>00000000000000000000' [ 225.027253][T10897] loop3: detected capacity change from 0 to 128 [ 225.256940][T10920] FAULT_INJECTION: forcing a failure. [ 225.256940][T10920] name failslab, interval 1, probability 0, space 0, times 0 [ 225.256986][T10920] CPU: 0 UID: 0 PID: 10920 Comm: syz.6.2273 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 225.257075][T10920] Tainted: [W]=WARN [ 225.257083][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 225.257102][T10920] Call Trace: [ 225.257110][T10920] [ 225.257120][T10920] __dump_stack+0x1d/0x30 [ 225.257227][T10920] dump_stack_lvl+0x95/0xd0 [ 225.257250][T10920] dump_stack+0x15/0x1b [ 225.257275][T10920] should_fail_ex+0x259/0x270 [ 225.257314][T10920] ? ipv6_flowlabel_opt+0x13dd/0x1b30 [ 225.257412][T10920] should_failslab+0x8c/0xb0 [ 225.257455][T10920] __kmalloc_cache_noprof+0x5d/0x3e0 [ 225.257503][T10920] ? ipv6_flowlabel_opt+0x13dd/0x1b30 [ 225.257557][T10920] ipv6_flowlabel_opt+0x13dd/0x1b30 [ 225.257590][T10920] ? _raw_spin_unlock+0x9/0x30 [ 225.257617][T10920] ? finish_task_switch+0x121/0x340 [ 225.257704][T10920] ? __schedule+0x7a9/0xd40 [ 225.257735][T10920] ? lock_sock_nested+0x7f/0x110 [ 225.257776][T10920] do_ipv6_setsockopt+0x75d/0x1d30 [ 225.257832][T10920] ? __pfx_futex_wake_mark+0x10/0x10 [ 225.257868][T10920] ? __rcu_read_unlock+0x4e/0x70 [ 225.257946][T10920] ? avc_has_perm_noaudit+0xac/0x160 [ 225.258029][T10920] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 225.258075][T10920] ipv6_setsockopt+0x59/0x130 [ 225.258103][T10920] rawv6_setsockopt+0x1cc/0x3f0 [ 225.258220][T10920] sock_common_setsockopt+0x69/0x80 [ 225.258254][T10920] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 225.258342][T10920] __sys_setsockopt+0x184/0x200 [ 225.258392][T10920] __x64_sys_setsockopt+0x64/0x80 [ 225.258428][T10920] x64_sys_call+0x248f/0x2550 [ 225.258544][T10920] do_syscall_64+0x112/0x360 [ 225.258591][T10920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.258646][T10920] RIP: 0033:0x7fad824ff559 [ 225.258662][T10920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.258686][T10920] RSP: 002b:00007fad80f4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 225.258714][T10920] RAX: ffffffffffffffda RBX: 00007fad82785fa0 RCX: 00007fad824ff559 [ 225.258735][T10920] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 225.258827][T10920] RBP: 00007fad82596b50 R08: 0000000000000020 R09: 0000000000000000 [ 225.258842][T10920] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 225.258855][T10920] R13: 00007fad82786038 R14: 00007fad82785fa0 R15: 00007ffc079ada58 [ 225.258883][T10920] [ 225.334709][T10897] bio_check_eod: 184 callbacks suppressed [ 225.334764][T10897] syz.3.2269: attempt to access beyond end of device [ 225.334764][T10897] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 225.385962][T10897] syz.3.2269: attempt to access beyond end of device [ 225.385962][T10897] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 225.386034][T10897] buffer_io_error: 2 callbacks suppressed [ 225.386048][T10897] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 225.386166][T10897] syz.3.2269: attempt to access beyond end of device [ 225.386166][T10897] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 225.386249][T10897] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 225.386620][T10897] syz.3.2269: attempt to access beyond end of device [ 225.386620][T10897] loop3: rw=2049, sector=162, nr_sectors = 16 limit=128 [ 225.405257][T10897] syz.3.2269: attempt to access beyond end of device [ 225.405257][T10897] loop3: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 225.423590][T10897] syz.3.2269: attempt to access beyond end of device [ 225.423590][T10897] loop3: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 225.423695][T10897] Buffer I/O error on dev loop3, logical block 91, lost async page write [ 225.423758][T10897] syz.3.2269: attempt to access beyond end of device [ 225.423758][T10897] loop3: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 225.424228][T10897] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 225.471179][T10897] syz.3.2269: attempt to access beyond end of device [ 225.471179][T10897] loop3: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 225.491092][T10897] syz.3.2269: attempt to access beyond end of device [ 225.491092][T10897] loop3: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 225.491196][T10897] Buffer I/O error on dev loop3, logical block 103, lost async page write [ 225.510857][T10897] syz.3.2269: attempt to access beyond end of device [ 225.510857][T10897] loop3: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 225.510949][T10897] Buffer I/O error on dev loop3, logical block 104, lost async page write [ 225.525924][T10897] Buffer I/O error on dev loop3, logical block 107, lost async page write [ 225.526005][T10897] Buffer I/O error on dev loop3, logical block 108, lost async page write [ 225.548022][T10897] Buffer I/O error on dev loop3, logical block 119, lost async page write [ 225.548108][T10897] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 226.228672][T10986] FAULT_INJECTION: forcing a failure. [ 226.228672][T10986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.228714][T10986] CPU: 0 UID: 0 PID: 10986 Comm: syz.0.2286 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 226.228843][T10986] Tainted: [W]=WARN [ 226.228853][T10986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 226.228871][T10986] Call Trace: [ 226.228878][T10986] [ 226.228888][T10986] __dump_stack+0x1d/0x30 [ 226.228943][T10986] dump_stack_lvl+0x95/0xd0 [ 226.228967][T10986] dump_stack+0x15/0x1b [ 226.228989][T10986] should_fail_ex+0x259/0x270 [ 226.229017][T10986] should_fail+0xb/0x20 [ 226.229132][T10986] should_fail_usercopy+0x1a/0x20 [ 226.229171][T10986] fpu__restore_sig+0x133/0xcf0 [ 226.229204][T10986] ? should_fail_ex+0xdb/0x270 [ 226.229363][T10986] ? should_fail_ex+0xdb/0x270 [ 226.229448][T10986] __ia32_sys_rt_sigreturn+0x231/0x2f0 [ 226.229515][T10986] x64_sys_call+0x1532/0x2550 [ 226.229543][T10986] do_syscall_64+0x112/0x360 [ 226.229604][T10986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.229629][T10986] RIP: 0033:0x7f811b3cf557 [ 226.229704][T10986] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 226.229723][T10986] RSP: 002b:00007f8119e1f028 EFLAGS: 00000246 [ 226.229741][T10986] RAX: 0000000000000113 RBX: 00007f811b655fa0 RCX: 00007f811b3cf559 [ 226.229757][T10986] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 226.229774][T10986] RBP: 00007f811b466b50 R08: 0000000000000006 R09: 0000000000000000 [ 226.229790][T10986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.229803][T10986] R13: 00007f811b656038 R14: 00007f811b655fa0 R15: 00007fff2d379828 [ 226.229932][T10986] [ 226.564669][T11007] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.616425][T11007] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.121677][T11042] tipc: Started in network mode [ 227.121715][T11042] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 227.121790][T11042] tipc: Enabled bearer , priority 0 [ 227.127643][T11042] tipc: Disabling bearer [ 228.028222][T11007] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.062851][T11007] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.121524][ T9374] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.121648][ T9374] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.139793][ T9374] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.139845][ T9374] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.368251][T11054] loop3: detected capacity change from 0 to 512 [ 228.393682][T11054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.393789][T11054] ext4 filesystem being mounted at /478/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.467540][T11086] loop0: detected capacity change from 0 to 512 [ 229.477896][T11086] ext4: Unknown parameter 'fowner>00000000000000000000' [ 229.515073][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.575289][ T326] Bluetooth: hci0: Frame reassembly failed (-84) [ 229.646912][ T3295] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 229.646996][ T3295] CPU: 1 UID: 0 PID: 3295 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 229.647034][ T3295] Tainted: [W]=WARN [ 229.647041][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 229.647053][ T3295] Call Trace: [ 229.647060][ T3295] [ 229.647070][ T3295] __dump_stack+0x1d/0x30 [ 229.647157][ T3295] dump_stack_lvl+0x95/0xd0 [ 229.647221][ T3295] dump_stack+0x15/0x1b [ 229.647241][ T3295] dump_header+0x80/0x240 [ 229.647282][ T3295] oom_kill_process+0x294/0x420 [ 229.647315][ T3295] out_of_memory+0x94d/0xb60 [ 229.647406][ T3295] try_charge_memcg+0x6d0/0xb30 [ 229.647526][ T3295] charge_memcg+0x169/0x220 [ 229.647560][ T3295] mem_cgroup_swapin_charge_folio+0x93/0x190 [ 229.647595][ T3295] __swap_cache_alloc_folio+0x47b/0x600 [ 229.647688][ T3295] swap_cluster_readahead+0x2b7/0x470 [ 229.647718][ T3295] swapin_readahead+0xd8/0x8c0 [ 229.647740][ T3295] ? _raw_spin_lock+0x53/0xa0 [ 229.647759][ T3295] ? _raw_spin_unlock+0x9/0x30 [ 229.647833][ T3295] ? swap_put_entries_cluster+0x4b1/0x4d0 [ 229.647862][ T3295] ? __rcu_read_unlock+0x4e/0x70 [ 229.647886][ T3295] ? swap_cache_get_folio+0x2ca/0x2e0 [ 229.647909][ T3295] do_swap_page+0x3fb/0x1ef0 [ 229.648049][ T3295] ? __css_rstat_updated+0xbb/0x280 [ 229.648121][ T3295] ? __rcu_read_lock+0x36/0x50 [ 229.648150][ T3295] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 229.648196][ T3295] handle_mm_fault+0xb2e/0x3af0 [ 229.648308][ T3295] do_user_addr_fault+0x3ce/0xde0 [ 229.648363][ T3295] ? arch_exit_work+0x30/0x40 [ 229.648415][ T3295] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 229.648448][ T3295] ? trace_page_fault_user+0x1f/0xa0 [ 229.648566][ T3295] exc_page_fault+0x62/0xa0 [ 229.648593][ T3295] asm_exc_page_fault+0x26/0x30 [ 229.648614][ T3295] RIP: 0033:0x7fba589c0076 [ 229.648635][ T3295] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 229.648739][ T3295] RSP: 002b:00007ffc12dd13f0 EFLAGS: 00010246 [ 229.648759][ T3295] RAX: 0000000000000bb8 RBX: 00000000000004dc RCX: 00000000000380b3 [ 229.648777][ T3295] RDX: 0000000000000bb8 RSI: 0000000000000000 RDI: 0000000000002710 [ 229.648794][ T3295] RBP: 00007ffc12dd145c R08: 000000002117662c R09: 0000000000000000 [ 229.648823][ T3295] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 229.648837][ T3295] R13: 00000000000927c0 R14: 0000000000037eb6 R15: 00007ffc12dd14b0 [ 229.648857][ T3295] [ 229.648912][ T3295] memory: usage 307200kB, limit 307200kB, failcnt 2762 [ 229.648930][ T3295] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 229.649006][ T3295] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 229.649018][ T3295] Memory cgroup stats for /syz1: [ 229.649214][ T3295] cache 0 [ 229.649269][ T3295] rss 0 [ 229.649278][ T3295] shmem 0 [ 229.649286][ T3295] mapped_file 0 [ 229.649295][ T3295] dirty 0 [ 229.649304][ T3295] writeback 0 [ 229.649313][ T3295] workingset_refault_anon 51 [ 229.649323][ T3295] workingset_refault_file 45 [ 229.649373][ T3295] swap 376832 [ 229.649380][ T3295] swapcached 24576 [ 229.649387][ T3295] pgpgin 130722 [ 229.649393][ T3295] pgpgout 130716 [ 229.649400][ T3295] pgfault 173349 [ 229.649406][ T3295] pgmajfault 7244 [ 229.649413][ T3295] inactive_anon 12288 [ 229.649420][ T3295] active_anon 4096 [ 229.649430][ T3295] inactive_file 0 [ 229.649439][ T3295] active_file 0 [ 229.649448][ T3295] unevictable 0 [ 229.649459][ T3295] hierarchical_memory_limit 314572800 [ 229.649470][ T3295] hierarchical_memsw_limit 9223372036854771712 [ 229.649488][ T3295] total_cache 0 [ 229.649575][ T3295] total_rss 0 [ 229.649582][ T3295] total_shmem 0 [ 229.649589][ T3295] total_mapped_file 0 [ 229.649596][ T3295] total_dirty 0 [ 229.649603][ T3295] total_writeback 0 [ 229.649610][ T3295] total_workingset_refault_anon 51 [ 229.649677][ T3295] total_workingset_refault_file 45 [ 229.649687][ T3295] total_swap 376832 [ 229.649694][ T3295] total_swapcached 24576 [ 229.649702][ T3295] total_pgpgin 130722 [ 229.649712][ T3295] total_pgpgout 130716 [ 229.649722][ T3295] total_pgfault 173349 [ 229.649732][ T3295] total_pgmajfault 7244 [ 229.649742][ T3295] total_inactive_anon 12288 [ 229.649752][ T3295] total_active_anon 4096 [ 229.649781][ T3295] total_inactive_file 0 [ 229.649791][ T3295] total_active_file 0 [ 229.649816][ T3295] total_unevictable 0 [ 229.649840][ T3295] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2313,pid=11080,uid=0 [ 229.649909][ T3295] Memory cgroup out of memory: Killed process 11080 (syz.1.2313) total-vm:96132kB, anon-rss:1260kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 229.659882][T11095] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2317'. [ 229.686797][T11095] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2317'. [ 229.687919][T11095] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2317'. [ 230.199591][T11103] TC_ACT_REPEAT abuse ? [ 230.316163][T11106] FAULT_INJECTION: forcing a failure. [ 230.316163][T11106] name failslab, interval 1, probability 0, space 0, times 0 [ 230.316236][T11106] CPU: 1 UID: 0 PID: 11106 Comm: syz.4.2322 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 230.316302][T11106] Tainted: [W]=WARN [ 230.316309][T11106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 230.316323][T11106] Call Trace: [ 230.316332][T11106] [ 230.316343][T11106] __dump_stack+0x1d/0x30 [ 230.316432][T11106] dump_stack_lvl+0x95/0xd0 [ 230.316460][T11106] dump_stack+0x15/0x1b [ 230.316488][T11106] should_fail_ex+0x259/0x270 [ 230.316581][T11106] ? __kernfs_new_node+0x70/0x440 [ 230.316678][T11106] should_failslab+0x8c/0xb0 [ 230.316863][T11106] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 230.316893][T11106] ? __kernfs_new_node+0x70/0x440 [ 230.316924][T11106] __kernfs_new_node+0x70/0x440 [ 230.317023][T11106] ? __rcu_read_unlock+0x4e/0x70 [ 230.317050][T11106] ? up_write+0x19/0x60 [ 230.317075][T11106] ? kernfs_link_sibling+0x2f5/0x320 [ 230.317175][T11106] ? __rcu_read_unlock+0x4e/0x70 [ 230.317280][T11106] kernfs_new_node+0x107/0x140 [ 230.317306][T11106] __kernfs_create_file+0x4b/0x180 [ 230.317336][T11106] ? __pfx_dev_attr_show+0x10/0x10 [ 230.317374][T11106] ? __pfx_dev_attr_store+0x10/0x10 [ 230.317458][T11106] sysfs_add_file_mode_ns+0x132/0x1b0 [ 230.317499][T11106] internal_create_group+0x43e/0x9e0 [ 230.317586][T11106] sysfs_create_groups+0x3f/0xf0 [ 230.317613][T11106] device_add_attrs+0xf2/0x3f0 [ 230.317643][T11106] device_add+0x37a/0x790 [ 230.317669][T11106] netdev_register_kobject+0x127/0x240 [ 230.317731][T11106] register_netdevice+0xc68/0x13f0 [ 230.317776][T11106] register_vlan_dev+0x21d/0x470 [ 230.317802][T11106] vlan_newlink+0x32a/0x370 [ 230.317847][T11106] ? __pfx_vlan_newlink+0x10/0x10 [ 230.317882][T11106] rtnl_newlink_create+0x1e4/0x4a0 [ 230.317921][T11106] rtnl_newlink+0x1255/0x1510 [ 230.317975][T11106] ? irqentry_exit+0x58f/0x610 [ 230.318045][T11106] ? ktime_get+0x212/0x240 [ 230.318070][T11106] ? lapic_next_event+0x11/0x20 [ 230.318094][T11106] ? clockevents_program_event+0x2fd/0x340 [ 230.318183][T11106] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 230.318213][T11106] ? tick_program_event+0x79/0xc0 [ 230.318258][T11106] ? _raw_spin_unlock+0x9/0x30 [ 230.318277][T11106] ? __hrtimer_rearm_deferred+0x571/0x650 [ 230.318345][T11106] ? avc_has_perm_noaudit+0xac/0x160 [ 230.318373][T11106] ? irqentry_exit+0x58f/0x610 [ 230.318435][T11106] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 230.318542][T11106] ? rtnetlink_rcv_msg+0x1b5/0x720 [ 230.318595][T11106] ? __pfx_rtnl_newlink+0x10/0x10 [ 230.318626][T11106] rtnetlink_rcv_msg+0x64b/0x720 [ 230.318690][T11106] ? irqentry_exit+0x58f/0x610 [ 230.318719][T11106] netlink_rcv_skb+0x11e/0x220 [ 230.318744][T11106] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.318841][T11106] rtnetlink_rcv+0x1c/0x30 [ 230.318912][T11106] netlink_unicast+0x665/0x740 [ 230.318946][T11106] netlink_sendmsg+0x5ef/0x740 [ 230.318972][T11106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.319000][T11106] ____sys_sendmsg+0x54a/0x590 [ 230.319080][T11106] ___sys_sendmsg+0x195/0x1e0 [ 230.319164][T11106] __x64_sys_sendmsg+0xd4/0x160 [ 230.319187][T11106] x64_sys_call+0x22ab/0x2550 [ 230.319214][T11106] do_syscall_64+0x112/0x360 [ 230.319258][T11106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.319325][T11106] RIP: 0033:0x7fc12911f559 [ 230.319348][T11106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.319373][T11106] RSP: 002b:00007fc127b77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.319399][T11106] RAX: ffffffffffffffda RBX: 00007fc1293a5fa0 RCX: 00007fc12911f559 [ 230.319494][T11106] RDX: 0000000008000002 RSI: 0000200000000340 RDI: 0000000000000005 [ 230.319509][T11106] RBP: 00007fc1291b6b50 R08: 0000000000000000 R09: 0000000000000000 [ 230.319523][T11106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.319538][T11106] R13: 00007fc1293a6038 R14: 00007fc1293a5fa0 R15: 00007ffd491d0e78 [ 230.319592][T11106] [ 230.692498][T11117] netlink: 'syz.6.2325': attribute type 1 has an invalid length. [ 230.742330][T11117] bond1: entered promiscuous mode [ 230.742455][T11117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.778511][T11117] bond1: (slave bridge1): making interface the new active one [ 230.778552][T11117] bridge1: entered promiscuous mode [ 230.779556][T11117] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 231.197211][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 231.197232][ T29] audit: type=1400 audit(1793501721.426:2222): avc: denied { mounton } for pid=11131 comm="syz.3.2332" path="/file0" dev="ramfs" ino=29044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 231.230818][ T29] audit: type=1400 audit(1793501721.436:2223): avc: denied { getopt } for pid=11132 comm="syz.4.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.626854][ T29] audit: type=1326 audit(1793501721.846:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11152 comm="syz.1.2338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba589bf559 code=0x0 [ 231.661538][ T9083] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 231.661590][ T9083] Bluetooth: hci0: command 0x1003 tx timeout [ 231.661623][ T3573] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 231.914658][T11172] tipc: Started in network mode [ 231.914693][T11172] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 231.914735][T11172] tipc: Enabled bearer , priority 0 [ 231.947681][T11172] tipc: Disabling bearer [ 231.967188][ T29] audit: type=1400 audit(1793501722.196:2225): avc: denied { read } for pid=11183 comm="syz.6.2352" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 231.967305][ T29] audit: type=1400 audit(1793501722.196:2226): avc: denied { read open } for pid=11183 comm="syz.6.2352" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 231.967963][ T29] audit: type=1400 audit(1793501722.196:2227): avc: denied { read } for pid=11183 comm="syz.6.2352" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 232.223270][T11197] loop3: detected capacity change from 0 to 512 [ 232.238386][T11197] ext4: Unknown parameter 'fowner>00000000000000000000' [ 232.460384][T11208] lo: Caught tx_queue_len zero misconfig [ 232.568567][T11204] loop6: detected capacity change from 0 to 512 [ 232.772185][T11217] ip_tables: iptables: counters copy to user failed while replacing table [ 232.831959][T11204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.833470][T11204] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.163057][ T9614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.250160][T11234] lo: entered promiscuous mode [ 233.293850][T11234] tunl0: entered promiscuous mode [ 233.295278][T11234] gre0: entered promiscuous mode [ 233.301857][T11234] gretap0: entered promiscuous mode [ 233.322983][T11234] erspan0: entered promiscuous mode [ 233.337059][T11234] ip_vti0: entered promiscuous mode [ 233.338603][T11234] ip6_vti0: entered promiscuous mode [ 233.340427][T11234] sit0: entered promiscuous mode [ 233.359001][T11234] ip6tnl0: entered promiscuous mode [ 233.360670][T11234] ip6gre0: entered promiscuous mode [ 233.372742][T11234] tipc: Resetting bearer [ 233.372938][T11234] syz_tun: entered promiscuous mode [ 233.377576][T11234] ip6gretap0: entered promiscuous mode [ 233.379243][T11234] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.379433][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.379628][T11234] bridge0: entered promiscuous mode [ 233.381207][T11234] vcan0: entered promiscuous mode [ 233.429039][T11234] bond0: entered promiscuous mode [ 233.429059][T11234] bond_slave_0: entered promiscuous mode [ 233.429143][T11234] bond_slave_1: entered promiscuous mode [ 233.449578][T11234] team0: entered promiscuous mode [ 233.449598][T11234] team_slave_0: entered promiscuous mode [ 233.449661][T11234] team_slave_1: entered promiscuous mode [ 233.490149][T11234] dummy0: entered promiscuous mode [ 233.509110][T11234] nlmon0: entered promiscuous mode [ 233.510263][T11234] batadv0: entered promiscuous mode [ 233.530684][T11234] vxcan0: entered promiscuous mode [ 233.543828][T11234] vxcan1: entered promiscuous mode [ 233.544870][T11234] veth0: entered promiscuous mode [ 233.566435][T11234] veth1: entered promiscuous mode [ 233.579389][T11234] wg0: entered promiscuous mode [ 233.585678][T11234] wg1: entered promiscuous mode [ 233.594877][T11234] wg2: entered promiscuous mode [ 233.595874][T11234] veth0_to_bridge: entered promiscuous mode [ 233.612798][T11234] veth1_to_bridge: entered promiscuous mode [ 233.622307][T11234] veth0_to_bond: entered promiscuous mode [ 233.625964][T11234] veth1_to_bond: entered promiscuous mode [ 233.636818][T11234] veth0_to_team: entered promiscuous mode [ 233.641430][T11234] veth1_to_team: entered promiscuous mode [ 233.655062][T11234] veth0_to_batadv: entered promiscuous mode [ 233.656149][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.656188][T11234] batadv_slave_0: entered promiscuous mode [ 233.657305][T11234] veth1_to_batadv: entered promiscuous mode [ 233.658774][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.658804][T11234] batadv_slave_1: entered promiscuous mode [ 233.660161][T11234] xfrm0: entered promiscuous mode [ 233.705118][T11234] veth0_to_hsr: entered promiscuous mode [ 233.709035][T11234] veth1_to_hsr: entered promiscuous mode [ 233.723500][T11234] hsr0: entered promiscuous mode [ 233.724488][T11234] veth1_virt_wifi: entered promiscuous mode [ 233.726045][T11234] veth0_virt_wifi: entered promiscuous mode [ 233.729183][T11234] vlan0: entered promiscuous mode [ 233.730217][T11234] vlan1: entered promiscuous mode [ 233.732361][T11234] macvlan0: entered promiscuous mode [ 233.766408][T11234] macvlan1: entered promiscuous mode [ 233.767296][T11234] ipvlan0: entered promiscuous mode [ 233.767450][T11234] ipvlan1: entered promiscuous mode [ 233.791289][T11234] macvtap0: entered promiscuous mode [ 233.798800][T11234] macsec0: entered promiscuous mode [ 233.806603][T11234] geneve0: entered promiscuous mode [ 233.808804][T11234] geneve1: entered promiscuous mode [ 233.818286][T11234] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 233.820463][T11234] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 233.821173][T11234] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 233.840532][T11234] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 233.842946][T11234] pim6reg: entered promiscuous mode [ 233.861690][ T9380] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.861740][ T9380] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.861823][ T9380] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.861856][ T9380] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.864454][T11240] loop4: detected capacity change from 0 to 32768 [ 233.919655][T11240] loop4: p1 p3 < > [ 234.057865][T11242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2383'. [ 234.068029][T11244] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2374'. [ 234.068796][T11244] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2374'. [ 234.068892][T11244] bridge0: left promiscuous mode [ 234.069309][T11244] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2374'. [ 234.214304][ T29] audit: type=1400 audit(1793501724.436:2228): avc: denied { ioctl } for pid=11249 comm="syz.1.2377" path="socket:[30510]" dev="sockfs" ino=30510 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.333271][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2378'. [ 234.625476][T11263] vlan0: entered promiscuous mode [ 234.625498][T11263] bond0: entered promiscuous mode [ 234.625622][T11263] vlan0: entered allmulticast mode [ 234.625639][T11263] bond0: entered allmulticast mode [ 234.984627][ T29] audit: type=1400 audit(1793501725.216:2229): avc: denied { write } for pid=11270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.046159][ T29] audit: type=1400 audit(1793501725.276:2230): avc: denied { write } for pid=11281 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.407519][ T29] audit: type=1400 audit(1793501725.636:2231): avc: denied { write } for pid=11292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.542568][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2389'. [ 235.849992][T11338] rxe_eth0 speed is unknown, defaulting to 1000 [ 235.939869][T11338] wg1 speed is unknown, defaulting to 1000 [ 236.184989][T11354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.187383][T11354] bond2: entered promiscuous mode [ 236.187926][T11354] team0: Failed to send port change of device bond2 via netlink (err -105) [ 236.187990][T11354] team0: Failed to send options change via netlink (err -105) [ 236.188009][T11354] team0: Port device bond2 added [ 236.237195][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 236.237212][ T29] audit: type=1326 audit(1793501726.466:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.1.2395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fba589bf559 code=0x7ffc0000 [ 236.280836][ T29] audit: type=1400 audit(1793501726.506:2327): avc: denied { write } for pid=11345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.347344][ T29] audit: type=1400 audit(1793501726.576:2328): avc: denied { write } for pid=11361 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.349495][ T29] audit: type=1326 audit(1793501726.576:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.1.2395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fba589bf559 code=0x7ffc0000 [ 236.376537][T11349] loop4: detected capacity change from 0 to 512 [ 236.517741][T11349] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 236.517861][T11349] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.605462][T11349] EXT4-fs (loop4): 1 truncate cleaned up [ 236.662690][T11349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.776412][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2404'. [ 236.796000][T11375] usb usb7: usbfs: process 11375 (syz.0.2403) did not claim interface 0 before use [ 236.829218][T11379] FAULT_INJECTION: forcing a failure. [ 236.829218][T11379] name failslab, interval 1, probability 0, space 0, times 0 [ 236.829262][T11379] CPU: 1 UID: 0 PID: 11379 Comm: syz.0.2405 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 236.829316][T11379] Tainted: [W]=WARN [ 236.829327][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 236.829345][T11379] Call Trace: [ 236.829354][T11379] [ 236.829363][T11379] __dump_stack+0x1d/0x30 [ 236.829429][T11379] dump_stack_lvl+0x95/0xd0 [ 236.829459][T11379] dump_stack+0x15/0x1b [ 236.829488][T11379] should_fail_ex+0x259/0x270 [ 236.829604][T11379] ? sctp_auth_shkey_create+0x65/0x110 [ 236.829649][T11379] should_failslab+0x8c/0xb0 [ 236.829761][T11379] __kmalloc_cache_noprof+0x5d/0x3e0 [ 236.829811][T11379] ? sctp_auth_shkey_create+0x65/0x110 [ 236.829940][T11379] sctp_auth_shkey_create+0x65/0x110 [ 236.829988][T11379] sctp_endpoint_new+0x2cc/0x560 [ 236.830026][T11379] sctp_clone_sock+0x32c/0xc30 [ 236.830060][T11379] ? sock_create_lite+0x250/0x290 [ 236.830101][T11379] sctp_getsockopt_peeloff_common+0x263/0x450 [ 236.830136][T11379] sctp_getsockopt_peeloff_flags+0xaf/0x180 [ 236.830237][T11379] sctp_getsockopt+0x353/0xaa0 [ 236.830307][T11379] sock_common_getsockopt+0x60/0x70 [ 236.830349][T11379] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 236.830389][T11379] do_sock_getsockopt+0x2ce/0x350 [ 236.830440][T11379] __x64_sys_getsockopt+0x11d/0x1a0 [ 236.830601][T11379] x64_sys_call+0x1032/0x2550 [ 236.830638][T11379] do_syscall_64+0x112/0x360 [ 236.830683][T11379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.830713][T11379] RIP: 0033:0x7f811b3cf559 [ 236.830812][T11379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.830837][T11379] RSP: 002b:00007f8119e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 236.830864][T11379] RAX: ffffffffffffffda RBX: 00007f811b655fa0 RCX: 00007f811b3cf559 [ 236.830882][T11379] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 236.830897][T11379] RBP: 00007f811b466b50 R08: 0000200000000440 R09: 0000000000000000 [ 236.830916][T11379] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 236.830934][T11379] R13: 00007f811b656038 R14: 00007f811b655fa0 R15: 00007fff2d379828 [ 236.831015][T11379] [ 236.885034][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.086117][T11388] loop0: detected capacity change from 0 to 512 [ 237.114996][T11388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.115084][T11388] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.210460][T11397] loop6: detected capacity change from 0 to 256 [ 237.275801][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.427464][ T29] audit: type=1326 audit(1793501727.656:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11412 comm="syz.0.2417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b3cf559 code=0x7ffc0000 [ 237.427511][ T29] audit: type=1326 audit(1793501727.656:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11412 comm="syz.0.2417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b3cf559 code=0x7ffc0000 [ 237.427802][ T29] audit: type=1326 audit(1793501727.656:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11412 comm="syz.0.2417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b3cf559 code=0x7ffc0000 [ 237.428015][ T29] audit: type=1326 audit(1793501727.656:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11412 comm="syz.0.2417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b3cf559 code=0x7ffc0000 [ 237.428111][ T29] audit: type=1326 audit(1793501727.656:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11412 comm="syz.0.2417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f811b3cf559 code=0x7ffc0000 [ 237.428151][ T29] audit: type=1326 audit(1793501727.656:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11412 comm="syz.0.2417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b3cf559 code=0x7ffc0000 [ 237.559318][T11418] loop6: detected capacity change from 0 to 1024 [ 237.565608][T11418] EXT4-fs: Ignoring removed nobh option [ 237.565676][T11418] EXT4-fs: Ignoring removed bh option [ 237.617763][T11418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.649478][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2421'. [ 237.663191][ T9614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.672706][T11424] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2421'. [ 237.675087][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2421'. [ 237.723870][T11426] rxe_eth0 speed is unknown, defaulting to 1000 [ 237.764768][T11426] wg1 speed is unknown, defaulting to 1000 [ 238.298182][T11438] loop0: detected capacity change from 0 to 128 [ 239.470178][T11476] FAULT_INJECTION: forcing a failure. [ 239.470178][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 239.470223][T11476] CPU: 0 UID: 0 PID: 11476 Comm: syz.0.2440 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 239.470259][T11476] Tainted: [W]=WARN [ 239.470266][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 239.470279][T11476] Call Trace: [ 239.470286][T11476] [ 239.470295][T11476] __dump_stack+0x1d/0x30 [ 239.470366][T11476] dump_stack_lvl+0x95/0xd0 [ 239.470400][T11476] dump_stack+0x15/0x1b [ 239.470429][T11476] should_fail_ex+0x259/0x270 [ 239.470470][T11476] should_failslab+0x8c/0xb0 [ 239.470580][T11476] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 239.470624][T11476] ? mqueue_alloc_inode+0x34/0x50 [ 239.470657][T11476] ? mqueue_alloc_inode+0x34/0x50 [ 239.470706][T11476] ? __pfx_mqueue_fill_super+0x10/0x10 [ 239.470740][T11476] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 239.470774][T11476] mqueue_alloc_inode+0x34/0x50 [ 239.470806][T11476] alloc_inode+0x40/0x170 [ 239.470890][T11476] new_inode+0x1d/0xe0 [ 239.470922][T11476] ? __pfx_mqueue_fill_super+0x10/0x10 [ 239.470965][T11476] mqueue_fill_super+0x98/0x1e0 [ 239.470998][T11476] ? __pfx_mqueue_fill_super+0x10/0x10 [ 239.471036][T11476] get_tree_nodev+0x89/0x100 [ 239.471111][T11476] mqueue_get_tree+0x5d/0x80 [ 239.471142][T11476] vfs_get_tree+0x57/0x1d0 [ 239.471187][T11476] fc_mount_longterm+0x18/0xb0 [ 239.471274][T11476] mq_init_ns+0x2db/0x370 [ 239.471304][T11476] copy_ipcs+0x26d/0x460 [ 239.471336][T11476] create_new_namespaces+0x121/0x420 [ 239.471444][T11476] unshare_nsproxy_namespaces+0x115/0x150 [ 239.471479][T11476] ksys_unshare+0x3a3/0x690 [ 239.471580][T11476] __x64_sys_unshare+0x1f/0x30 [ 239.471672][T11476] x64_sys_call+0x1e33/0x2550 [ 239.471700][T11476] do_syscall_64+0x112/0x360 [ 239.471807][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.471891][T11476] RIP: 0033:0x7f811b3cf559 [ 239.471912][T11476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.471938][T11476] RSP: 002b:00007f8119e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 239.471974][T11476] RAX: ffffffffffffffda RBX: 00007f811b655fa0 RCX: 00007f811b3cf559 [ 239.471993][T11476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 239.472012][T11476] RBP: 00007f811b466b50 R08: 0000000000000000 R09: 0000000000000000 [ 239.472037][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.472087][T11476] R13: 00007f811b656038 R14: 00007f811b655fa0 R15: 00007fff2d379828 [ 239.472117][T11476] [ 239.882830][T11484] loop0: detected capacity change from 0 to 512 [ 240.069040][T11492] loop0: detected capacity change from 0 to 512 [ 240.098286][T11492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.098433][T11492] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.206453][T11492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.935738][T11534] FAULT_INJECTION: forcing a failure. [ 240.935738][T11534] name failslab, interval 1, probability 0, space 0, times 0 [ 240.935782][T11534] CPU: 0 UID: 0 PID: 11534 Comm: syz.3.2461 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 240.935948][T11534] Tainted: [W]=WARN [ 240.935958][T11534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 240.935976][T11534] Call Trace: [ 240.935985][T11534] [ 240.935995][T11534] __dump_stack+0x1d/0x30 [ 240.936031][T11534] dump_stack_lvl+0x95/0xd0 [ 240.936134][T11534] dump_stack+0x15/0x1b [ 240.936156][T11534] should_fail_ex+0x259/0x270 [ 240.936185][T11534] should_failslab+0x8c/0xb0 [ 240.936228][T11534] __kvmalloc_node_noprof+0x14f/0x5b0 [ 240.936308][T11534] ? nf_hook_entries_grow+0x1cb/0x460 [ 240.936369][T11534] ? nf_hook_entries_grow+0x1cb/0x460 [ 240.936476][T11534] nf_hook_entries_grow+0x1cb/0x460 [ 240.936512][T11534] ? __pfx___nf_hook_entries_free+0x10/0x10 [ 240.936570][T11534] __nf_register_net_hook+0x16e/0x4d0 [ 240.936598][T11534] nf_register_net_hook+0x88/0x130 [ 240.936633][T11534] nf_register_net_hooks+0x44/0x150 [ 240.936667][T11534] xt_register_table+0x3aa/0x530 [ 240.936720][T11534] ip6t_register_table+0xd9/0x180 [ 240.936757][T11534] ip6table_mangle_table_init+0x4d/0x70 [ 240.936785][T11534] xt_find_table_lock+0x1a5/0x2c0 [ 240.936883][T11534] do_ip6t_get_ctl+0x540/0xcb0 [ 240.936912][T11534] ? should_fail_ex+0xdb/0x270 [ 240.936946][T11534] ? __rcu_read_unlock+0x4e/0x70 [ 240.936973][T11534] nf_getsockopt+0x190/0x1b0 [ 240.937081][T11534] ipv6_getsockopt+0x170/0x1e0 [ 240.937107][T11534] udpv6_getsockopt+0xa5/0x230 [ 240.937205][T11534] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 240.937249][T11534] sock_common_getsockopt+0x60/0x70 [ 240.937358][T11534] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 240.937386][T11534] do_sock_getsockopt+0x2ce/0x350 [ 240.937439][T11534] __x64_sys_getsockopt+0x11d/0x1a0 [ 240.937673][T11534] x64_sys_call+0x1032/0x2550 [ 240.937774][T11534] do_syscall_64+0x112/0x360 [ 240.937816][T11534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.937841][T11534] RIP: 0033:0x7f542e58f559 [ 240.937861][T11534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.937913][T11534] RSP: 002b:00007f542cfe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 240.937942][T11534] RAX: ffffffffffffffda RBX: 00007f542e815fa0 RCX: 00007f542e58f559 [ 240.937961][T11534] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000006 [ 240.937974][T11534] RBP: 00007f542e626b50 R08: 0000200000000f80 R09: 0000000000000000 [ 240.937988][T11534] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 240.938054][T11534] R13: 00007f542e816038 R14: 00007f542e815fa0 R15: 00007ffc7e061548 [ 240.938075][T11534] [ 241.262902][T11526] loop6: detected capacity change from 0 to 32768 [ 241.313321][T11526] loop6: p1 p3 < > [ 241.349649][T11547] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 241.349800][T11547] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 241.349843][T11547] vhci_hcd vhci_hcd.0: Device attached [ 241.409184][T11549] vhci_hcd: connection closed [ 241.409530][ T9380] vhci_hcd vhci_hcd.6: stop threads [ 241.409612][ T9380] vhci_hcd vhci_hcd.6: release socket [ 241.409634][ T9380] vhci_hcd vhci_hcd.6: disconnect device [ 241.577232][ T3340] udevd[3340]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 241.580211][ T3332] udevd[3332]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 241.765569][T11565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2472'. [ 242.054580][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2478'. [ 242.085626][T11554] rxe_eth0 speed is unknown, defaulting to 1000 [ 242.199867][T11587] FAULT_INJECTION: forcing a failure. [ 242.199867][T11587] name failslab, interval 1, probability 0, space 0, times 0 [ 242.199904][T11587] CPU: 1 UID: 0 PID: 11587 Comm: syz.4.2480 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 242.199944][T11587] Tainted: [W]=WARN [ 242.199993][T11587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 242.200020][T11587] Call Trace: [ 242.200029][T11587] [ 242.200043][T11587] __dump_stack+0x1d/0x30 [ 242.200090][T11587] dump_stack_lvl+0x95/0xd0 [ 242.200132][T11587] dump_stack+0x15/0x1b [ 242.200238][T11587] should_fail_ex+0x259/0x270 [ 242.200286][T11587] ? start_sync_thread+0x4e2/0x1790 [ 242.200394][T11587] should_failslab+0x8c/0xb0 [ 242.200437][T11587] __kmalloc_noprof+0xb6/0x4b0 [ 242.200609][T11587] ? full_name_hash+0x92/0xe0 [ 242.200669][T11587] ? start_sync_thread+0x4e2/0x1790 [ 242.200816][T11587] start_sync_thread+0x4e2/0x1790 [ 242.200844][T11587] ? cred_has_capability+0x224/0x2a0 [ 242.200876][T11587] ? selinux_capable+0x31/0x40 [ 242.200915][T11587] ? should_fail_ex+0xdb/0x270 [ 242.200964][T11587] ? sized_strscpy+0x121/0x1a0 [ 242.201013][T11587] do_ip_vs_set_ctl+0x313/0xab0 [ 242.201060][T11587] nf_setsockopt+0x199/0x1b0 [ 242.201174][T11587] ip_setsockopt+0x102/0x110 [ 242.201211][T11587] tcp_setsockopt+0x98/0xb0 [ 242.201252][T11587] sock_common_setsockopt+0x69/0x80 [ 242.201298][T11587] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 242.201350][T11587] __sys_setsockopt+0x184/0x200 [ 242.201438][T11587] __x64_sys_setsockopt+0x64/0x80 [ 242.201486][T11587] x64_sys_call+0x248f/0x2550 [ 242.201563][T11587] do_syscall_64+0x112/0x360 [ 242.201607][T11587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.201715][T11587] RIP: 0033:0x7fc12911f559 [ 242.201737][T11587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.201763][T11587] RSP: 002b:00007fc127b77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 242.201792][T11587] RAX: ffffffffffffffda RBX: 00007fc1293a5fa0 RCX: 00007fc12911f559 [ 242.201833][T11587] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000004 [ 242.201846][T11587] RBP: 00007fc1291b6b50 R08: 0000000000000018 R09: 0000000000000000 [ 242.201859][T11587] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 242.201872][T11587] R13: 00007fc1293a6038 R14: 00007fc1293a5fa0 R15: 00007ffd491d0e78 [ 242.201907][T11587] [ 242.456009][T11589] FAULT_INJECTION: forcing a failure. [ 242.456009][T11589] name failslab, interval 1, probability 0, space 0, times 0 [ 242.456048][T11589] CPU: 1 UID: 0 PID: 11589 Comm: syz.4.2481 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 242.456105][T11589] Tainted: [W]=WARN [ 242.456115][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 242.456134][T11589] Call Trace: [ 242.456143][T11589] [ 242.456153][T11589] __dump_stack+0x1d/0x30 [ 242.456262][T11589] dump_stack_lvl+0x95/0xd0 [ 242.456318][T11589] dump_stack+0x15/0x1b [ 242.456346][T11589] should_fail_ex+0x259/0x270 [ 242.456385][T11589] ? call_usermodehelper_setup+0x72/0x190 [ 242.456456][T11589] should_failslab+0x8c/0xb0 [ 242.456500][T11589] __kmalloc_cache_noprof+0x5d/0x3e0 [ 242.456563][T11589] ? call_usermodehelper_setup+0x72/0x190 [ 242.456594][T11589] ? __pfx_free_modprobe_argv+0x10/0x10 [ 242.456649][T11589] call_usermodehelper_setup+0x72/0x190 [ 242.456672][T11589] __request_module+0x264/0x3c0 [ 242.456794][T11589] ? capable+0x81/0xb0 [ 242.456832][T11589] dev_load+0x61/0xc0 [ 242.456866][T11589] devinet_ioctl+0x8c/0xfa0 [ 242.456944][T11589] inet_ioctl+0x2f8/0x3a0 [ 242.456990][T11589] sock_do_ioctl+0x73/0x230 [ 242.457030][T11589] sock_ioctl+0x439/0x610 [ 242.457092][T11589] ? __pfx_sock_ioctl+0x10/0x10 [ 242.457125][T11589] __se_sys_ioctl+0xce/0x140 [ 242.457165][T11589] __x64_sys_ioctl+0x43/0x50 [ 242.457237][T11589] x64_sys_call+0x239d/0x2550 [ 242.457275][T11589] do_syscall_64+0x112/0x360 [ 242.457326][T11589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.457365][T11589] RIP: 0033:0x7fc12911f559 [ 242.457387][T11589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.457414][T11589] RSP: 002b:00007fc127b77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.457442][T11589] RAX: ffffffffffffffda RBX: 00007fc1293a5fa0 RCX: 00007fc12911f559 [ 242.457472][T11589] RDX: 00002000000002c0 RSI: 000000000000891c RDI: 0000000000000005 [ 242.457491][T11589] RBP: 00007fc1291b6b50 R08: 0000000000000000 R09: 0000000000000000 [ 242.457537][T11589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.457555][T11589] R13: 00007fc1293a6038 R14: 00007fc1293a5fa0 R15: 00007ffd491d0e78 [ 242.457641][T11589] [ 242.762082][T11554] wg1 speed is unknown, defaulting to 1000 [ 242.804613][T11592] rxe_eth0 speed is unknown, defaulting to 1000 [ 242.994442][T11592] wg1 speed is unknown, defaulting to 1000 [ 243.116952][T11608] usb usb7: usbfs: process 11608 (syz.3.2487) did not claim interface 0 before use [ 243.144018][T11610] 0: reclassify loop, rule prio 0, protocol 03 [ 243.230310][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2493'. [ 243.274327][T11622] syz_tun: entered promiscuous mode [ 243.274421][T11622] macvlan2: entered promiscuous mode [ 243.275017][T11622] syz_tun: left promiscuous mode [ 243.308825][T11616] syzkaller0: entered promiscuous mode [ 243.308847][T11616] syzkaller0: entered allmulticast mode [ 243.328450][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 243.328466][ T29] audit: type=1326 audit(1793501989.551:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.3.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 243.339091][ T29] audit: type=1326 audit(1793501989.561:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.3.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 243.351750][ T29] audit: type=1326 audit(1793501989.571:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.3.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 243.352012][ T29] audit: type=1326 audit(1793501989.571:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.3.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 243.361631][ T29] audit: type=1326 audit(1793501989.581:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.3.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 243.361744][ T29] audit: type=1326 audit(1793501989.581:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.3.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 243.361926][ T29] audit: type=1326 audit(1793501989.581:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.3.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 243.368649][ T29] audit: type=1326 audit(1793501989.591:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.3.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 243.369037][ T29] audit: type=1326 audit(1793501989.591:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.3.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 243.378296][ T29] audit: type=1326 audit(1793501989.601:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.3.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f542e58f559 code=0x7ffc0000 [ 243.524209][T11627] loop6: detected capacity change from 0 to 128 [ 243.542015][T11627] FAT-fs (loop6): bogus sectors per cluster 0 [ 243.542089][T11627] FAT-fs (loop6): Can't find a valid FAT filesystem [ 243.666212][T11636] sctp: [Deprecated]: syz.6.2495 (pid 11636) Use of int in max_burst socket option. [ 243.666212][T11636] Use struct sctp_assoc_value instead [ 243.921406][T11650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2502'. [ 243.949608][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'. [ 244.003686][T11655] loop4: detected capacity change from 0 to 512 [ 244.019515][T11655] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.2504: bad orphan inode 13 [ 244.019551][T11655] loop4: lost filesystem error report for type 5 error -117 [ 244.019782][T11655] ext4_test_bit(bit=12, block=4) = 1 [ 244.019801][T11655] is_bad_inode(inode)=0 [ 244.019814][T11655] NEXT_ORPHAN(inode)=0 [ 244.019824][T11655] max_ino=32 [ 244.019833][T11655] i_nlink=1 [ 244.020324][T11655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.028030][T11655] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.2504: Hash code is SIPHASH, but hash not in dirent [ 244.028123][T11655] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2504: Corrupt directory, running e2fsck is recommended [ 244.028877][T11655] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.2504: Hash code is SIPHASH, but hash not in dirent [ 244.029000][T11655] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2504: Corrupt directory, running e2fsck is recommended [ 244.147813][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.206289][T11661] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.2506'. [ 244.997338][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2519'. [ 245.253871][T11704] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.253925][T11704] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.254059][T11704] bridge_slave_0: entered allmulticast mode [ 245.254660][T11704] bridge_slave_0: entered promiscuous mode [ 245.261390][T11704] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2523'. [ 245.274411][T11704] bridge_slave_0: left allmulticast mode [ 245.274484][T11704] bridge_slave_0: left promiscuous mode [ 245.274977][T11704] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.654449][T11722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.654594][T11722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.655949][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 245.661182][T11722] vlan4: entered promiscuous mode [ 245.661205][T11722] bond0: entered promiscuous mode [ 245.661223][T11722] veth9: entered promiscuous mode [ 246.305645][T11737] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.2538'. [ 246.463958][T11746] loop6: detected capacity change from 0 to 512 [ 246.475688][T11746] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.2541: iget: bad i_size value: 38620345925642 [ 246.475730][T11746] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 246.475921][T11746] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2541: couldn't read orphan inode 15 (err -117) [ 246.476029][T11746] loop6: lost filesystem error report for type 5 error -117 [ 246.476818][T11746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.001512][T11763] loop3: detected capacity change from 0 to 512 [ 247.246374][T11771] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.2550'. [ 247.312666][ T9614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.580513][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.580557][T11781] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.580695][T11781] bridge_slave_0: entered allmulticast mode [ 247.581372][T11781] bridge_slave_0: entered promiscuous mode [ 247.584959][T11781] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2554'. [ 247.589035][T11781] bridge_slave_0: left allmulticast mode [ 247.589105][T11781] bridge_slave_0: left promiscuous mode [ 247.589399][T11781] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.600284][T11773] loop0: detected capacity change from 0 to 512 [ 247.759309][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2561'. [ 248.014567][T11779] loop6: detected capacity change from 0 to 512 [ 248.061436][T11779] ext4: Unknown parameter 'fowner>00000000000000000000' [ 248.353194][T11804] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.2565'. [ 248.489605][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2568'. [ 248.547462][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2568'. [ 248.581366][T11813] geneve3: entered promiscuous mode [ 248.677597][T11817] loop0: detected capacity change from 0 to 128 [ 248.719763][T11819] loop4: detected capacity change from 0 to 512 [ 248.722140][T11819] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.722512][T11819] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 248.758031][T11819] EXT4-fs (loop4): 1 truncate cleaned up [ 248.764644][T11819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.784185][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 248.784203][ T29] audit: type=1400 audit(1793501995.011:2431): avc: denied { read } for pid=11824 comm="syz.3.2574" name="kcore" dev="proc" ino=4026532042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 248.784239][ T29] audit: type=1400 audit(1793501995.011:2432): avc: denied { open } for pid=11824 comm="syz.3.2574" path="/528/proc_mnt/kcore" dev="proc" ino=4026532042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 248.794428][ T29] audit: type=1400 audit(1793501995.011:2433): avc: denied { write } for pid=11818 comm="syz.4.2572" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.801649][ T29] audit: type=1400 audit(1793501995.031:2434): avc: denied { write } for pid=11818 comm="syz.4.2572" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.801801][ T29] audit: type=1400 audit(1793501995.031:2435): avc: denied { mounton } for pid=11816 comm="syz.0.2571" path="/487/file0/sys" dev="loop0" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 248.805172][ T29] audit: type=1400 audit(1793501995.031:2436): avc: denied { mounton } for pid=11818 comm="syz.4.2572" path="/495/file0/proc" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 248.816875][T11819] FAULT_INJECTION: forcing a failure. [ 248.816875][T11819] name failslab, interval 1, probability 0, space 0, times 0 [ 248.816979][T11819] CPU: 0 UID: 0 PID: 11819 Comm: syz.4.2572 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 248.817166][T11819] Tainted: [W]=WARN [ 248.817189][T11819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 248.817232][T11819] Call Trace: [ 248.817263][T11819] [ 248.817288][T11819] __dump_stack+0x1d/0x30 [ 248.817378][T11819] dump_stack_lvl+0x95/0xd0 [ 248.817511][T11819] dump_stack+0x15/0x1b [ 248.817585][T11819] should_fail_ex+0x259/0x270 [ 248.817752][T11819] ? ext4_mb_new_blocks+0x2e0/0x1fa0 [ 248.817859][T11819] should_failslab+0x8c/0xb0 [ 248.817979][T11819] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 248.818055][T11819] ? ext4_mb_new_blocks+0x2e0/0x1fa0 [ 248.818172][T11819] ext4_mb_new_blocks+0x2e0/0x1fa0 [ 248.818221][T11819] ? ext4_determine_insert_hole+0x1d0/0x210 [ 248.818254][T11819] ? ext4_get_branch+0x306/0x380 [ 248.818319][T11819] ext4_ind_map_blocks+0xc2e/0x15e0 [ 248.818506][T11819] ext4_map_create_blocks+0x8a/0x390 [ 248.818596][T11819] ext4_map_blocks+0x8a9/0xff0 [ 248.818774][T11819] ext4_convert_inline_data_nolock+0x195/0x5d0 [ 248.818880][T11819] ext4_convert_inline_data+0x2bd/0x360 [ 248.818978][T11819] ext4_fallocate+0x163/0x320 [ 248.819047][T11819] vfs_fallocate+0x3ac/0x400 [ 248.819178][T11819] __x64_sys_fallocate+0x7a/0xd0 [ 248.819290][T11819] x64_sys_call+0x1e1d/0x2550 [ 248.819385][T11819] do_syscall_64+0x112/0x360 [ 248.819502][T11819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.819638][T11819] RIP: 0033:0x7fc12911f559 [ 248.819693][T11819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.819757][T11819] RSP: 002b:00007fc127b77028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 248.819777][T11819] RAX: ffffffffffffffda RBX: 00007fc1293a5fa0 RCX: 00007fc12911f559 [ 248.819798][T11819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 248.819927][T11819] RBP: 00007fc1291b6b50 R08: 0000000000000000 R09: 0000000000000000 [ 248.819979][T11819] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 248.820022][T11819] R13: 00007fc1293a6038 R14: 00007fc1293a5fa0 R15: 00007ffd491d0e78 [ 248.820103][T11819] [ 249.011103][ T29] audit: type=1400 audit(1793501995.231:2437): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.013420][ T3298] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 249.014498][ T3298] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 249.157599][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.175843][ T38] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.240709][ T38] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.305516][ T38] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.354573][ T38] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.470850][ T38] pim6reg: left allmulticast mode [ 249.525872][ T38] bond3 (unregistering): (slave geneve3): Releasing active interface [ 249.545767][ T38] bond2 (unregistering): (slave geneve2): Releasing active interface [ 249.589598][ T38] bond1 (unregistering): (slave veth7): Releasing active interface [ 249.596848][ T38] bond1 (unregistering): Released all slaves [ 249.640197][ T38] bond2 (unregistering): Released all slaves [ 249.658716][ T38] bond0 (unregistering): (slave veth9): Releasing backup interface [ 249.662851][ T38] veth9: left promiscuous mode [ 249.663516][ T38] bond0 (unregistering): Released all slaves [ 249.694719][ T29] audit: type=1400 audit(1793501995.921:2438): avc: denied { write } for pid=11841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.696230][ T38] bond3 (unregistering): Released all slaves [ 249.739406][T11858] loop3: detected capacity change from 0 to 512 [ 249.739787][T11858] vfat: Unknown parameter 'ÿÿÿ01777777777777777777777' [ 249.770527][ T29] audit: type=1400 audit(1793501995.991:2439): avc: denied { write } for pid=11860 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.779027][ T38] tipc: Left network mode [ 249.815099][ T3017] 8021q: adding VLAN 0 to HW filter on device eth9 [ 249.966631][ T38] hsr_slave_0: left promiscuous mode [ 249.977331][ T38] hsr_slave_1: left promiscuous mode [ 250.080048][ T9386] smc: removing ib device syz2 [ 250.153644][ T29] audit: type=1400 audit(1793501996.381:2440): avc: denied { write } for pid=11866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.163459][T11875] tipc: Enabled bearer , priority 0 [ 250.185533][T11875] tipc: Disabling bearer [ 250.288020][T11836] rxe_eth0 speed is unknown, defaulting to 1000 [ 250.307206][ T3017] 8021q: adding VLAN 0 to HW filter on device eth10 [ 250.590918][ T3017] 8021q: adding VLAN 0 to HW filter on device eth11 [ 250.623838][ T38] IPVS: stop unused estimator thread 0... [ 250.777478][T11836] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.777518][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.777658][T11836] bridge_slave_0: entered allmulticast mode [ 250.778205][T11836] bridge_slave_0: entered promiscuous mode [ 250.780818][T11836] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.780922][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.781174][T11836] bridge_slave_1: entered allmulticast mode [ 250.782970][T11836] bridge_slave_1: entered promiscuous mode [ 250.808510][T11836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.811399][T11836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.864496][T11836] team0: Port device team_slave_0 added [ 250.867567][T11836] team0: Port device team_slave_1 added [ 250.894029][T11836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.894051][T11836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.894166][T11836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.898669][T11836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.898686][T11836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.898715][T11836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.994012][T11836] hsr_slave_0: entered promiscuous mode [ 250.994524][T11836] hsr_slave_1: entered promiscuous mode [ 251.046474][ T3017] 8021q: adding VLAN 0 to HW filter on device eth12 [ 251.210081][T11836] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 251.221958][T11836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.226617][T11836] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 251.250339][T11836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.257615][T11836] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 251.271334][T11836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.278954][T11836] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 251.292729][T11836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.387462][T11836] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.387522][T11836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.387610][T11836] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.387648][T11836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.415529][T11941] loop0: detected capacity change from 0 to 164 [ 251.487283][T11941] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 251.528191][T11836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.600355][T11836] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.605025][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.610294][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.615263][T11961] loop6: detected capacity change from 0 to 164 [ 251.616136][T11961] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 251.680538][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.680588][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.692304][ T9386] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.692411][ T9386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.886675][T11978] netlink: 'syz.1.2603': attribute type 4 has an invalid length. [ 251.987957][T11968] loop6: detected capacity change from 0 to 512 [ 252.021495][T11836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.218858][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2599'. [ 252.338760][T12014] loop0: detected capacity change from 0 to 512 [ 252.373114][T12014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.373192][T12014] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.406809][T12005] mmap: syz.0.2608 (12005): VmData 29265920 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 252.432374][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.491362][T11836] veth0_vlan: entered promiscuous mode [ 252.500303][T11836] veth1_vlan: entered promiscuous mode [ 252.541989][T11836] veth0_macvtap: entered promiscuous mode [ 252.547300][T11836] veth1_macvtap: entered promiscuous mode [ 252.566697][T12035] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2615'. [ 252.566730][T12035] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2615'. [ 252.591947][T11836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.598603][T11836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.666610][ T9374] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.666734][ T9374] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.666777][ T9374] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.666898][ T9374] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.858181][T12051] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 253.003689][T12060] TC_ACT_REPEAT abuse ? [ 253.089905][T12053] loop7: detected capacity change from 0 to 512 [ 253.300235][T12053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.306331][T12053] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.636481][T12073] ================================================================== [ 253.636537][T12073] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 253.636603][T12073] [ 253.636610][T12073] write to 0xffff88810aa32d60 of 8 bytes by task 12076 on cpu 1: [ 253.636627][T12073] shmem_file_splice_read+0x3eb/0x570 [ 253.636661][T12073] splice_direct_to_actor+0x25d/0x680 [ 253.636691][T12073] do_splice_direct+0x119/0x1a0 [ 253.636711][T12073] do_sendfile+0x37d/0x640 [ 253.636731][T12073] __x64_sys_sendfile64+0x105/0x150 [ 253.636752][T12073] x64_sys_call+0x1015/0x2550 [ 253.636781][T12073] do_syscall_64+0x112/0x360 [ 253.636822][T12073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.636852][T12073] [ 253.636860][T12073] write to 0xffff88810aa32d60 of 8 bytes by task 12073 on cpu 0: [ 253.636877][T12073] shmem_file_splice_read+0x3eb/0x570 [ 253.636909][T12073] splice_direct_to_actor+0x25d/0x680 [ 253.636936][T12073] do_splice_direct+0x119/0x1a0 [ 253.636958][T12073] do_sendfile+0x37d/0x640 [ 253.636986][T12073] __x64_sys_sendfile64+0x105/0x150 [ 253.637006][T12073] x64_sys_call+0x1015/0x2550 [ 253.637039][T12073] do_syscall_64+0x112/0x360 [ 253.637080][T12073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.637109][T12073] [ 253.637114][T12073] value changed: 0x0000000000003830 -> 0x0000000000003832 [ 253.637134][T12073] [ 253.637139][T12073] Reported by Kernel Concurrency Sanitizer on: [ 253.637159][T12073] CPU: 0 UID: 0 PID: 12073 Comm: syz.1.2638 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 253.637199][T12073] Tainted: [W]=WARN [ 253.637209][T12073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 253.637228][T12073] ================================================================== [ 254.017063][T11836] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.538961][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 261.538980][ T29] audit: type=1400 audit(1793502007.761:2496): avc: denied { write } for pid=12084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.588110][ T29] audit: type=1400 audit(1793502007.811:2497): avc: denied { write } for pid=12095 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.462575][ T29] audit: type=1400 audit(1793502008.691:2498): avc: denied { write } for pid=12098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.505183][ T29] audit: type=1400 audit(1793502008.731:2499): avc: denied { write } for pid=12109 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.935495][ T29] audit: type=1400 audit(1793502009.161:2500): avc: denied { write } for pid=12112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.974888][ T29] audit: type=1400 audit(1793502009.201:2501): avc: denied { write } for pid=12123 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1