last executing test programs: 3m10.596575489s ago: executing program 32 (id=506): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) 2m20.295233967s ago: executing program 33 (id=1875): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_config_ext={0xb3, 0xcc}, 0x9679149b910765de, 0x80000000, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='atkbd', 0x5) 2m8.949899976s ago: executing program 0 (id=2108): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x20000000, 0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x200000000, 0x3e0000}, {0x0, 0x0, 0x4000000000, 0x8000}], 0x0) 2m7.93837747s ago: executing program 34 (id=2120): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2m7.93286808s ago: executing program 0 (id=2123): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000005c0)='./file0\x00', 0x20000c02) setxattr$incfs_metadata(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='user.incfs.metadata\x00') 2m7.877454686s ago: executing program 0 (id=2125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000840)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000880)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3d}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0) 2m7.823028311s ago: executing program 0 (id=2128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1d000, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0/../file0/../file0\x00') 2m7.795977264s ago: executing program 0 (id=2129): prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8) socket(0x10, 0x3, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 2m7.199185715s ago: executing program 0 (id=2137): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000300)={0x43}, 0x4) sendto$inet6(r0, &(0x7f0000000340)='0', 0xfffd, 0x4000854, &(0x7f0000000380)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 2m7.077137768s ago: executing program 35 (id=2137): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000300)={0x43}, 0x4) sendto$inet6(r0, &(0x7f0000000340)='0', 0xfffd, 0x4000854, &(0x7f0000000380)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 1m57.481072768s ago: executing program 7 (id=2265): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)='common_pid > 0', 0xe) write$cgroup_subtree(r0, &(0x7f0000000080), 0x5b) 1m57.415125795s ago: executing program 7 (id=2266): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xa}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) 1m57.330467583s ago: executing program 7 (id=2268): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x728, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x6fc, 0x2, [@TCA_BPF_ACT={0x6f8, 0x1, [@m_mirred={0x624, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x595, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xd0, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0xa1, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x728}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xe8}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m57.253502241s ago: executing program 7 (id=2269): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000480)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m57.105887736s ago: executing program 7 (id=2270): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r1, 0xffff}, &(0x7f00000002c0)=0x8) listen(r0, 0x7) 1m56.994113497s ago: executing program 7 (id=2272): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x13}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000002b400000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x2000000000000000}, 0x0) 1m56.993861937s ago: executing program 36 (id=2272): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x13}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000002b400000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x2000000000000000}, 0x0) 1m53.678949146s ago: executing program 9 (id=2315): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@user_xattr}]}, 0x2, 0x797, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x42, 0x98) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000017c0)='./file1\x00', 0x8200, 0x18c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000001800)={0x0, 0xffffffffffffffff, 0x4, 0x0, 0x85c, 0x5}) pread64(r0, 0x0, 0x0, 0x6) 1m53.54387795s ago: executing program 9 (id=2316): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m53.118827333s ago: executing program 9 (id=2325): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x12, 0x5, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r1}, &(0x7f0000000b80), &(0x7f0000000bc0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c00)={r1, &(0x7f0000000c40)}, 0x20) 1m52.611616835s ago: executing program 9 (id=2335): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x1000410, &(0x7f00000008c0)={[{@init_itable_val={'init_itable', 0x3d, 0xd4d}}, {@grpquota}]}, 0x1, 0x500, &(0x7f0000000900)="$eJzs3c9vVF0ZAOD3Tju0X7+BFmWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMX8+XeubSl7dAB2g50nie53HvOvfQ9Z4Zzzr2HzpwAetaZiFiLiGMRcTcihvP8JN/iemtLr3v54tH0+otH00k0m7f/lWTn07zY8ndSn+Y/czAifvT9iJ8mO+M2Vlbnp6rVymKeHl2qLYw2VlYvzhXynInJ8cmxq5euTHRYk/49rzhd+93z783d/PEffv+VZ39e+/bP02KVfnE8O7e1HvupVfVilLaV9OZBBOuS/vzfzzso7ndZeDtpa/tcRJzN2v9w9HXQjgCAj1uzORzN4a1pAOCoS5//S5EUyvlcQCkKhXK5NYd3KoYK1Xpj6cJwffn+TGRzWCNRLNybq1bG8rnCkSgmaXo8O95MT2xLX4qIkxHxy4FPsnR5ul6d6eaNDwD0sE+3jf//HWiN/wDAETfY7QIAAIfO+A8Avcf4DwC95y3Gf58OBIAjwvM/APQe4z8A9J49x//Hh1MOAOBQ/PDWrXRrrufffz3zYGX5O6UHF2cqjflybXm6PF1fXCjP1uuz1Up5utnc6+dV6/WF8csbycbK6p1affn+0p252tRs5U7FFz4DQPedPP30r0lErF37JNtiy1oOxmo42grdLgDQNX3dLgDQNT7PA72rg2d80wBwxO2yRO9r2v6K0JN3X/wV6K7zXzT/D73K/D/0rneb///uvpcDOHzm/6F3NZuJNf8BoMeY4wfe6///AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEeVsi0plLO1wNfSPwvlcsTxiBiJYnJvrloZi4gTEfGXgeJAmh7vdqEBgPdU+EeSr/91fvhcafvZY8n/BrJ9RPzs17d/9XBqaWlxPM3/90b+0pM8f+JYNyoAAGx1fWdWa5zO91se5F++eDT9ajvMIj6/0VpcNI27nm+tM/3Rn+0HoxgRQ/9J8nRLer/Stw/x1x5HxBc26/9wS4TSYMRIvvLp9vhp7OMHEH/z9U+yuZnN+IXX4heyc+m+mL0Wn9+HskCveXqj1U/mbS9tYnn7K8SZbL97+x/Meqj396r/W9/R/xU2+r++HfGTrM2f2Ui/uSTPL//xBzsym8Otc48jvtS/W/xkI37Spv8912Ed//blr55td675m4jzsXv8llrWzY4u1RZGGyurF+dqU7OV2cr9iYnJ8cmxq5euTIwORLUyNprNVP9ptxj/vHbhRLv4af2H2sQf3KP+3+iw/r/9/92ffO0N8b/19d3f/1NviJ+Oid/sMP7U0PU2y3e3Vv+faVP/vd7/Cx3Gf/b31ZkOLwUADkFjZXV+qlqtLO5xkN5r7nWNg4/zINYiPoBi9OhBeg/+ARRjx0G3eybgoG02+m6XBAAAAAAAAAAAAAAAaKexsjo/EAf7caJu1xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICj67MAAAD//y2oyxU=") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x0, 0x0, 0x8}}}}}}, 0x0) 1m51.468317682s ago: executing program 9 (id=2361): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x5, 0x81, 0xffffffff}) listxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1m50.874278843s ago: executing program 9 (id=2371): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800055e913c4119a433b827000000007118150000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x3, 0x80, 0x9, 0x2, 0x3, 0x5, 0x0, 0x40, 0x25480, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x4}, 0x200, 0x0, 0x4, 0x0, 0x0, 0x8001, 0x2, 0x0, 0x7197, 0x0, 0xb}) 1m50.873989963s ago: executing program 37 (id=2371): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800055e913c4119a433b827000000007118150000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x3, 0x80, 0x9, 0x2, 0x3, 0x5, 0x0, 0x40, 0x25480, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x4}, 0x200, 0x0, 0x4, 0x0, 0x0, 0x8001, 0x2, 0x0, 0x7197, 0x0, 0xb}) 1m27.552853195s ago: executing program 4 (id=2744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000140)) 1m27.443712396s ago: executing program 4 (id=2748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000840)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000008c0)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 1m26.62025664s ago: executing program 4 (id=2753): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 1m25.683040676s ago: executing program 4 (id=2767): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x8, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x400000000000008, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0900000004000000e25f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xa, 0x17, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000097090100000002816500feff0000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000001100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m25.424672112s ago: executing program 4 (id=2779): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffefffb}, 0x8, 0x80000001, 0x0, 0x3, 0x766e0b24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2100060, 0x0) 1m24.939954022s ago: executing program 4 (id=2782): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m9.904608988s ago: executing program 38 (id=2782): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 32.654975403s ago: executing program 5 (id=3713): pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="e82d6994640876b687ae203cb68541c1ea1f1c5addfd58bd03c59083e78609a955062598aa5c4198566acbdab71430d18842340da8c9e1fc12776318d8ba52d10b18a08ed1", 0x45}], 0x1, 0xb, 0xffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 32.649196494s ago: executing program 5 (id=3715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000800)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r0, &(0x7f0000000880)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x4}}}}, 0x36) 32.537669245s ago: executing program 5 (id=3719): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@arp={0x806, @generic={0x10e, 0x886c, 0x6, 0x0, 0x0, @remote, "", @link_local}}}}, 0x0) 32.524410087s ago: executing program 5 (id=3721): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x0) 32.498331939s ago: executing program 5 (id=3723): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}, 0x10}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}], 0x1, 0xc010) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000002000)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x4, 0x1}, 0x90) 32.270300653s ago: executing program 5 (id=3725): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) 32.270146903s ago: executing program 39 (id=3725): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) 2.233898672s ago: executing program 2 (id=4225): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000004c0)={0x1, [0x0]}, &(0x7f0000000500)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0xe0}], 0x1, &(0x7f00000005c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x20001080) 2.121505373s ago: executing program 8 (id=4227): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x4e22, 0x6589e4, @mcast1, 0x7}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000440)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/118, 0x76}], 0x1, 0x5b, 0xcfe5) 2.090295756s ago: executing program 8 (id=4228): r0 = syz_io_uring_setup(0x744e, &(0x7f0000000000)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r0, @ANYRESDEC=r1], 0x15) 1.982531438s ago: executing program 8 (id=4229): perf_event_open(&(0x7f0000000140)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = creat(&(0x7f0000000500)='./file0\x00', 0x6a) close(r0) r1 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x2, 0x1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.607820526s ago: executing program 6 (id=4238): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e00)={'team_slave_0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e40)={r0, r2, 0x25, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000f00)=r3, 0x4) 1.445968512s ago: executing program 6 (id=4239): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x11c0ad, 0x0, 0x5, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000140)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.415694925s ago: executing program 1 (id=4240): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000812000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007b80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="0c1b", 0x2}], 0x1, &(0x7f0000001c40)=[@mark={{0x14, 0x1, 0x24, 0x86c}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000012) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x78b7, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x3, 0x388}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x477, 0xb527, 0xb5, 0x0, 0x0) 1.391991478s ago: executing program 6 (id=4241): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x4040, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 1.358253641s ago: executing program 3 (id=4252): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x11c0ad, 0x0, 0x5, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000140)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.295591848s ago: executing program 6 (id=4243): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x71f2, 0x1000007}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) fcntl$addseals(r0, 0x409, 0xb) 1.295382498s ago: executing program 2 (id=4244): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8840, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffffff, 0x1, 0x8, 0xa, "ff00f70000e5020052c4f21c7f000000002000"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0x6, 0x17, 0x0, 0x3, 0x14, "80249b536148bfe26e3088fd0cd6b978c9b962", 0x3ff, 0x7}) write(r1, &(0x7f0000000240)="d5", 0xfffffedf) 1.295128618s ago: executing program 3 (id=4245): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20000c4, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.234372174s ago: executing program 3 (id=4246): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x40000006}) splice(r0, 0x0, r2, 0x0, 0x1, 0xb) sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000310009"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.195113438s ago: executing program 3 (id=4247): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0xffffffff, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 1.161226011s ago: executing program 3 (id=4248): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="31fdffffffffffffff74098b2e5e", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)="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", 0x222}], 0x1}}], 0x3, 0x2090) 1.116344986s ago: executing program 8 (id=4249): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="89000000120081ae08061cdc030ec080000000060000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1.092178938s ago: executing program 8 (id=4250): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@deltfilter={0x1cb4, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xa, 0xa}, {0x6, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1c7c, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0x1c74, 0x1, [@m_pedit={0x1c70, 0x20, 0x0, 0x0, {{0xa}, {0x1c44, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x6, 0x7, 0x2, 0x3, 0x5}, 0x2, 0x5}, [{0x0, 0x0, 0x7, 0x2, 0x5, 0xff}, {0x7f, 0x400, 0x7fff, 0xffffff00, 0xffff702e, 0x1}, {0x8a, 0x1ff, 0x925, 0x10000, 0x8, 0x2c}, {0x2c, 0x7fff, 0x3, 0x0, 0xfffffff8, 0x7fffffff}, {0x8, 0x40, 0x9, 0xfbf0, 0xfffffff9, 0x7ff}, {0x605c, 0x7, 0x9, 0x5, 0x0, 0xd96b}, {0x2, 0xc, 0x7, 0x7, 0x17a4800, 0x5}, {0x7, 0x3, 0xc, 0xf532, 0xa04a, 0x200}, {0x7fff, 0x8ef, 0x1, 0x300, 0x4, 0xfffffff7}, {0x3, 0x8, 0x2, 0x2, 0x8001, 0x2}, {0x7fc00, 0x3c, 0x9, 0x1000, 0x6, 0x9}, {0x8, 0x9, 0x9, 0xad, 0x100, 0x4}, {0x0, 0x6, 0x0, 0x7ff, 0x3, 0x8}, {0x82, 0x2, 0x2, 0x4, 0x6, 0x4}, {0x0, 0x5, 0x6, 0xfffffffa, 0x3, 0xe1e7}, {0xfccf, 0x3, 0xd, 0x400, 0xffffffff, 0x3}, {0x92fa, 0x1, 0x8, 0x1, 0x5, 0x400}, {0x1, 0x1, 0x5, 0xff, 0x7, 0x8}, {0x4, 0xb, 0xf, 0x6, 0x4, 0xe}, {0xc09, 0x50000, 0x48, 0x7, 0x2, 0x3}, {0x8, 0x1, 0x4, 0x9, 0x1, 0x1}, {0x2, 0x7, 0xb0, 0x3, 0x8}, {0xc6a3, 0x3, 0x7, 0x1a, 0x4, 0x9}, {0x2, 0x1, 0x6, 0xa, 0x0, 0xfffffbcb}, {0x4, 0x8, 0x7, 0xf560, 0x5, 0x400}, {0x7, 0x7, 0x7b42436c, 0x81, 0x223fc478, 0x3}, {0x1, 0x80000001, 0xfffff519, 0x800, 0x834, 0xb}, {0x0, 0xd589, 0x3, 0x2, 0x2d8, 0xada}, {0x48, 0x5, 0x9, 0xffff70d2, 0x3, 0xffffffff}, {0x2, 0x74ee, 0xffff, 0x4, 0xd, 0x2}, {0x1ff, 0x1, 0x20, 0x7fffffff, 0x19c77467, 0x2}, {0x7fff, 0xfd9, 0x7, 0x200, 0x8, 0x517b}, {0x6, 0xc, 0x3, 0x2, 0x1}, {0x1000, 0x7f, 0xffff, 0x8, 0x1, 0xeec}, {0xcc4, 0xaf46, 0xe5, 0x188, 0x1, 0x7f}, {0x7, 0x1, 0x1b6c, 0x0, 0x6, 0x7fffffff}, {0xffff0001, 0x3, 0xfffff8df, 0x279e, 0x10000, 0xa}, {0x2304467b, 0xc, 0xffff799f, 0x7, 0x7, 0x9}, {0x1, 0xffffffec, 0xb92, 0xe0000000, 0xf9}, {0x8, 0x734, 0x2, 0xd99, 0x7fffffff, 0x7}, {0x7f, 0x10000, 0x5, 0x4, 0x3ff, 0x3}, {0x5, 0x65e, 0x1, 0x1, 0x9, 0x9}, {0xb14f, 0x0, 0x1, 0x1, 0x4, 0x81}, {0x2, 0x8, 0x0, 0x1, 0x40, 0x2}, {0x0, 0x2, 0x21e9, 0xffffffff, 0x0, 0x2}, {0x1, 0xf, 0x1, 0x6, 0x400, 0x2}, {0x7, 0x83b3, 0x67, 0x5, 0xfa48, 0x9}, {0x7fffffff, 0x6, 0x8, 0xdaf2, 0x9, 0xfffffff8}, {0x0, 0xa, 0x7fffffff, 0xb, 0xd7, 0x6}, {0x4, 0x0, 0xf, 0xf, 0x8, 0x8000}, {0x90400000, 0x1, 0xc2a8, 0x8, 0xd3, 0x8001}, {0x1, 0x0, 0x7ff, 0x0, 0x1000, 0x58}, {0x7, 0xcd, 0x101, 0x81, 0x10000, 0x8000}, {0x1, 0x8db, 0x8, 0x80000001, 0x1, 0x8000}, {0x1ff, 0x2, 0x2, 0x0, 0xffff, 0x9}, {0x8c62, 0x4, 0x9, 0x401, 0x6, 0x1}, {0x0, 0x7f59, 0x0, 0x811, 0x4ce41782, 0x91}, {0x7ff, 0x4, 0x6, 0x5286, 0x7fffffff, 0x2}, {0x7ff, 0x5, 0x6, 0xd, 0x7ff, 0x19}, {0x0, 0xfffffffc, 0x7, 0x2, 0x2, 0xffff07e8}, {0x7, 0x2, 0x1, 0xc62, 0xf, 0x7}, {0x40, 0x7, 0xae, 0x3e6b, 0xd, 0xffffffff}, {0x5, 0x7, 0x5, 0x8, 0x7, 0x7fff}, {0x7fff, 0xfffffffd, 0x4, 0x5, 0x3, 0x2}, {0x8001, 0x7ff, 0x2, 0xffff8001, 0x5, 0x9}, {0x4, 0x3c7, 0x7, 0x719, 0xfffffffd, 0x6}, {0xe, 0x7f, 0x80, 0x2, 0x3, 0x1}, {0x37, 0xf, 0x10000, 0x4, 0x9, 0x9e9}, {0x2, 0x4, 0x6, 0xc, 0x200, 0x60000}, {0xffff, 0xe3e8, 0x2, 0x3, 0x1, 0x6}, {0x6, 0x9, 0x9, 0xe, 0x8, 0xffffffff}, {0x1, 0x400, 0x9, 0x3, 0x7fff, 0x507}, {0x6, 0xffff8362, 0x1, 0x0, 0x80, 0x2}, {0x4, 0x9, 0x3, 0x5, 0x4}, {0xfffffff7, 0x7, 0x4, 0x7fffffff, 0x656, 0x6}, {0x2, 0x80000001, 0x5, 0x8, 0x9, 0x101}, {0xfffffff9, 0x5, 0x3, 0x7, 0xf, 0xd4}, {0x4, 0x401, 0x1, 0x9}, {0x62, 0x10001, 0x3, 0x69, 0x43, 0xb}, {0x4, 0x5, 0x80000001, 0x2584, 0x6, 0x9}, {0x401, 0xfffff800, 0x81, 0xca, 0xf96, 0xffff0001}, {0x2ace, 0x0, 0x7fffffff, 0x800, 0x6, 0x2}, {0x8, 0xffffff6a, 0x6, 0x80000000, 0xe, 0x8}, {0x10001, 0xffffff6c, 0x2, 0x4, 0x3, 0x7}, {0xf, 0x8, 0x7, 0xfffffff9, 0xb, 0x6}, {0x200, 0x9, 0x8, 0x1b9, 0x1947}, {0x9, 0x2, 0x6ddf5bf4, 0x6, 0xab0b, 0x101}, {0x4, 0x8a73, 0x4, 0x7, 0xb, 0x9}, {0x81, 0x101, 0x7ed8, 0x67e1, 0x7f, 0x40}, {0x4, 0x4, 0x15, 0x2, 0x7, 0x7ff}, {0x300000, 0x9, 0x1200000, 0x4, 0x0, 0x100}, {0x8, 0x3, 0x8, 0xffffc000, 0x0, 0x2}, {0x3, 0x2, 0x0, 0x6ad1d25d, 0x5, 0x81}, {0x8, 0x7, 0x3, 0x6, 0x4, 0x7}, {0x8, 0x3, 0x4, 0x0, 0x2, 0xfffffffd}, {0x5, 0xfffffffe, 0x3, 0x2, 0x6, 0xd76f}, {0x2, 0x5, 0x1, 0x10000, 0x2, 0x2}, {0x6, 0x5, 0x7, 0xa9, 0x5, 0xfffffffd}, {0x80000000, 0x4, 0x1ff8, 0x0, 0xffffffff, 0x8}, {0x7fff, 0xfffffeff, 0x1, 0x6, 0x8, 0x8}, {0x3e87, 0xff, 0x0, 0x4, 0x10000, 0x2}, {0xe, 0x1, 0x8, 0x16fe, 0x4, 0x5}, {0x6, 0xfffffc00, 0xb05e, 0xc36, 0x81, 0x8000}, {0x76, 0x0, 0x0, 0x5f, 0xd, 0x8020000}, {0x1, 0x13, 0x3, 0x4, 0x9, 0x23}, {0x2, 0xfffffff7, 0x1, 0x14000, 0x8, 0x9}, {0x7, 0x2, 0x3, 0xffff571c, 0x5, 0x8000}, {0xfffffffb, 0xfffffffe, 0x40000, 0x3, 0x4, 0x2}, {0x6, 0x2, 0x2, 0x4, 0xa, 0x9}, {0x3, 0x3, 0xf, 0xf5e6, 0x2, 0x3}, {0x1650, 0xfffffff7, 0xb, 0x4, 0xb, 0x2}, {0xd0, 0x5, 0xf, 0x1, 0x4a8, 0x5}, {0x9, 0x8, 0xe04, 0x0, 0x4, 0x4}, {0x2, 0x6, 0x3ff, 0x1, 0xa67, 0x1}, {0x2, 0x0, 0x1b, 0x5, 0x0, 0x80000001}, {0x8, 0x5, 0xfff, 0x1, 0xac76, 0x3}, {0x1, 0x1, 0x9, 0xd14, 0x6430, 0xffffffc0}, {0x200, 0x434d5920, 0x3, 0x10001, 0x5, 0x5f2}, {0xd41, 0x100, 0x80000001, 0xbad, 0x4, 0x7}, {0x87e0, 0xdf2b, 0x4, 0x6, 0x3, 0x67f4}, {0x5, 0x7, 0x4, 0x7, 0x4ce5, 0xffffffff}, {0x9, 0x4, 0x8, 0x0, 0xd, 0x6}, {0x2, 0x3, 0x6, 0x2000000, 0x7ff, 0xfffffffc}, {0x2, 0x7, 0xe7, 0x6, 0x5, 0x8}, {0x5, 0x61b91923, 0x5, 0x0, 0x9, 0x3}, {0x3, 0xb01, 0x4, 0x1, 0x7f, 0x5}, {0x7, 0x57, 0xc, 0xcf4, 0xbf5, 0x2}, {0x2, 0x9, 0x1, 0x3ff, 0x5bb, 0x1}], [{0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x4}, {0x1}, {0x4}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x5}, {}, {0x3, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x2}, {0x5}, {0x2}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x7}, {0x2}, {0x1, 0xdbfda2a59af9eec2}, {0x5, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x401, 0x3, 0x3, 0x7, 0x8}, 0x4, 0x5}, [{0x800, 0x6, 0x7, 0x0, 0x7, 0xe}, {0xe4e1, 0xc, 0x9, 0x1ff, 0x80000001, 0x1ff}, {0x10000, 0x9, 0xb6, 0x10001, 0x0, 0xc00}, {0xbf0b, 0x21a2, 0x115, 0x2, 0x5, 0x915}, {0xcfe, 0xb13b, 0x200, 0x0, 0x1, 0x4}, {0x0, 0x6, 0x101, 0x7, 0x10000000, 0x4}, {0x0, 0x3, 0x7f, 0x7, 0x4, 0x6}, {0x7ad7, 0x0, 0x2, 0x9, 0x6, 0x15e}, {0x6, 0x9e49, 0xffff0000, 0x8, 0x1, 0xffffffff}, {0x408, 0x1, 0x1, 0x15, 0x8, 0x7f}, {0x6, 0x3, 0x0, 0x8, 0xa152, 0x6}, {0x5, 0x1, 0xfffffff7, 0x1, 0x5, 0x7fff}, {0x3, 0xabfd, 0x2, 0x9bb, 0x0, 0x1}, {0x1, 0x613e, 0x9, 0x6, 0x8000, 0x3}, {0xfffffffa, 0x7, 0x242cbdb3, 0x0, 0x3ecf}, {0x9, 0x6f4c, 0x7fffff7f, 0x7, 0x423, 0x1}, {0xca, 0xfffffff2, 0x40, 0x9, 0x2}, {0x9, 0x7ff, 0xd1, 0x200, 0x200, 0x78}, {0x2231, 0x6, 0x401, 0xfffffff5, 0x0, 0xb937}, {0x4, 0xfffffff8, 0x9a8, 0x40, 0x6, 0xb558}, {0x5, 0x10001, 0x0, 0x3, 0x127}, {0xfffffd17, 0x0, 0x10, 0xfffffffd, 0x3, 0x4}, {0x2, 0x0, 0xe39, 0x0, 0x120000, 0xc0000}, {0x2, 0x2, 0x65, 0x4f0, 0xffffffd8, 0x101}, {0xb8d0, 0x9, 0x1, 0x2087000, 0xb2cb, 0x8}, {0xad, 0x5, 0x10, 0x8, 0x5, 0x8e6}, {0x8, 0x2, 0x8, 0x40, 0x10, 0x3ff}, {0x0, 0x1, 0x7fff, 0x747b, 0x10001, 0x4e22}, {0x2, 0xfff, 0x7, 0x2, 0x5, 0x8}, {0x4, 0xe, 0x4, 0x2, 0x0, 0xfa}, {0x7, 0x5, 0x8d, 0x3, 0x5, 0x80000000}, {0x3, 0x5, 0x200, 0x0, 0x7fff, 0x1}, {0xb3f5, 0x6, 0x4, 0x41, 0x4594, 0x436}, {0x8, 0xfffffffa, 0x1, 0x1, 0x10000, 0xb}, {0x45, 0x7, 0x40, 0x2, 0x100, 0x5}, {0x905, 0x80000000, 0xfffffffb, 0x40, 0x81, 0x5}, {0x4d, 0x401, 0xbd, 0xe428, 0x929, 0x5ce3}, {0xe, 0x6, 0xe289, 0x89, 0x1, 0x9}, {0xffff0001, 0x0, 0x3, 0xc, 0x5, 0x1}, {0x3fffc0, 0x2, 0x1, 0x2, 0x2, 0xf}, {0x0, 0x4, 0x3, 0xc, 0x7, 0xffffffff}, {0x8, 0x9b, 0x6cca, 0x2, 0x6, 0x400}, {0x7f, 0x8, 0xfffffff8, 0xfff, 0x1, 0x3}, {0x1, 0x213, 0x1, 0x3, 0x1, 0x5}, {0xb8f1, 0xda, 0x100, 0x10001, 0xbf0, 0x5}, {0x7, 0x80, 0x3, 0x9, 0x8}, {0x1ff, 0x3, 0x9, 0xf, 0x7fff, 0x774}, {0x1, 0xff, 0x9, 0x800000, 0x2, 0x8}, {0x0, 0x9, 0x1000, 0x7, 0x0, 0x5ee7}, {0xfff, 0x3, 0xfffff6db, 0x0, 0xd, 0x8}, {0x0, 0x1, 0x3, 0x4, 0x2}, {0x1, 0x9, 0x0, 0x7c, 0x2ef, 0x5}, {0x6, 0x10000, 0x3, 0x5, 0x6, 0xfffffff2}, {0x3, 0x95b, 0x2, 0xfffffc01, 0x7, 0x3}, {0x0, 0x8, 0x1, 0x634, 0x8001, 0xf}, {0x3, 0x7fff, 0x800, 0xfea3, 0x7e, 0x8db}, {0xe4, 0x2, 0x4, 0x4, 0x1ff, 0x9}, {0x6, 0x9, 0x210, 0x3, 0x6, 0xb}, {0x4, 0x6, 0x190, 0xfffffffb, 0x3, 0x8}, {0x2985, 0xffff0001, 0x6, 0x63, 0x7}, {0x0, 0x7, 0xfffffff9, 0x4, 0xd, 0x7}, {0x7, 0x161, 0x9d, 0x3, 0x2a34, 0x1}, {0x1, 0x0, 0x7, 0x9, 0x1, 0x7}, {0x6, 0xb, 0x80, 0x9, 0x6, 0xb5a4}, {0x3, 0x1, 0xb, 0x81, 0x5, 0x10000}, {0x5, 0x75f7, 0x0, 0x3, 0xe6, 0x8}, {0x8, 0xd3a, 0x3, 0x6, 0x5, 0xa}, {0x101, 0x9, 0x4, 0x822, 0x9, 0x3}, {0xd, 0x7, 0x3, 0x2, 0xc8, 0x7}, {0x6, 0x57d3, 0x6, 0x7, 0x800}, {0x4, 0x5, 0x5, 0x0, 0x9, 0x4}, {0x9, 0x3, 0x1000, 0x8, 0x2, 0xffffffff}, {0xe, 0x1, 0x6, 0x1, 0x6, 0x1000}, {0xf849, 0x7, 0x2, 0xffffffff, 0x0, 0x8}, {0x400, 0x7, 0x38000000, 0x2, 0x4, 0x3ff}, {0x9, 0x8, 0x1ff, 0xffff, 0x4, 0xc}, {0x40, 0x1, 0x5, 0x4, 0x4, 0x9}, {0x8001, 0x4, 0x100, 0x40, 0x5, 0x800}, {0x3, 0x8, 0x2, 0xa5, 0x8, 0x5}, {0x7f, 0x80000000, 0x1fffc, 0xb37, 0x4, 0x8}, {0x4, 0x7fffffff, 0x7f, 0x7f, 0x4bc, 0x3}, {0x9, 0xa6, 0x5b, 0x9, 0x0, 0x9}, {0x50, 0x5, 0x3, 0x6, 0x3, 0x7}, {0x3, 0x2, 0x4, 0x0, 0x6a, 0x5}, {0xfffffffd, 0xe9, 0x3, 0x7f, 0x4, 0x6}, {0x0, 0x3, 0x2ae6, 0x9, 0x9, 0x8001}, {0x2, 0x7, 0x101, 0x10001, 0xfff, 0x95}, {0x3c0b, 0xa3a, 0x9, 0x7fff, 0x8001, 0xf04d}, {0x8, 0x9, 0x14, 0x0, 0x8, 0x9}, {0x4, 0x2, 0x0, 0x5, 0x5, 0x1}, {0x7, 0xfffffffd, 0x478d, 0x7, 0xc, 0x5}, {0x6, 0x7, 0xda, 0x3, 0x3, 0x4}, {0x0, 0x5, 0x0, 0x0, 0x3}, {0x8, 0x2, 0x9, 0x0, 0x9, 0xf}, {0x6, 0x9, 0x70000, 0x800, 0x4, 0xb74}, {0x4c, 0x2, 0x9, 0x6, 0x101, 0x8000}, {0x1, 0x7, 0x0, 0xff, 0x4, 0x1}, {0x7, 0x0, 0x0, 0x401, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x6, 0x7, 0x400}, {0x74b6def1, 0xffffff01, 0x1, 0x6075, 0x6a, 0x9}, {0xf21f, 0x3, 0x8, 0x0, 0x2, 0x8000000}, {0x0, 0x1, 0x3, 0x6, 0x800, 0x10000000}, {0x4, 0x385, 0x4, 0x6, 0x8000, 0x3}, {0x5, 0xffff, 0x6, 0x0, 0x3, 0x6}, {0x0, 0xb7, 0x3, 0x10001, 0x50000000, 0xffffff01}, {0x9, 0x0, 0xfff, 0x7, 0x9, 0x9}, {0x1, 0x80, 0x101, 0x800, 0x7fffffff, 0x7fffffff}, {0xe, 0x3, 0x4, 0x4c6, 0x9, 0x400}, {0x743, 0xb, 0x7fff, 0xd84, 0x1, 0x80000000}, {0xffffffff, 0xd, 0x9, 0xbef, 0x101, 0x611d4a10}, {0x5, 0x9ff, 0xfffffff8, 0x5, 0x4, 0xffff}, {0x2, 0x8000009, 0x1000, 0x5, 0x9, 0x3}, {0x0, 0x1, 0x10000, 0xadd2, 0x9e, 0x1ff}, {0x3, 0x4, 0x3, 0x6, 0x80, 0xf973}, {0x5, 0x7, 0x5, 0x5cc, 0x7, 0x80000001}, {0x20000000, 0x2, 0x4, 0x0, 0x8, 0x9}, {0x4, 0x8ba, 0x26d0, 0x5, 0x6}, {0x3, 0xfff, 0x9, 0x2, 0xb4, 0x3}, {0x7fffffff, 0x7, 0x3, 0x9, 0x9, 0x8}, {0x8, 0xfffffc00, 0x2, 0x8, 0x0, 0x4}, {0x4, 0x6, 0xfffffffa, 0xfffffffc, 0x3, 0x8}, {0x8, 0x4, 0x7, 0x2c88, 0x35b624b4, 0x9}, {0x7, 0x5, 0x7fffffff, 0x3, 0xffff, 0x1}, {0x6, 0x7ff, 0x3, 0x1, 0x0, 0x9}, {0x1, 0x5, 0x2, 0x3, 0x200, 0x5}, {0xd8f, 0x10000000, 0x10001, 0x0, 0x1}, {0x6, 0x0, 0x8, 0x9, 0x1000, 0x4}, {0x5, 0x1ff, 0xfff, 0x1, 0x200, 0xffffffff}], [{0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {}, {}, {0x5}, {0x5}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x7}, {0x4, 0x1}, {0x5}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {0x3}, {0x3}, {0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x7}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0xac5b95ad90ae9659}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x9bf47fcd7ce07089, 0x6cad44c906a9ccb6}, {0x4}, {0x4}, {0x3}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1cb4}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x477, 0xb527, 0xb5, 0x0, 0x0) 558.737253ms ago: executing program 1 (id=4251): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e00)={'team_slave_0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e40)={r0, r2, 0x25, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000f00)=r3, 0x4) 558.602753ms ago: executing program 6 (id=4253): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)='X\x00\x00', 0x3}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 527.526006ms ago: executing program 6 (id=4254): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2d, 0x0, &(0x7f0000001940)) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 475.791072ms ago: executing program 1 (id=4255): sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000a80)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000ac0)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000b00)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000b80)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 419.713747ms ago: executing program 2 (id=4256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) 419.583457ms ago: executing program 1 (id=4257): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x11c0ad, 0x0, 0x5, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000140)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 419.464917ms ago: executing program 2 (id=4258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000040)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000100)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'dvmrp0\x00', 0x102}) 358.046533ms ago: executing program 1 (id=4259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2}}}}}}, 0x0) 281.980771ms ago: executing program 3 (id=4260): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) semtimedop(r0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x989680}) 231.287446ms ago: executing program 8 (id=4261): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0x10009}], 0x1, 0x10002, 0x0) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00', 0x3}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000007c0)="068c", 0x2}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 90.418851ms ago: executing program 1 (id=4262): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x71f2, 0x1000007}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) fcntl$addseals(r0, 0x409, 0xb) 46.270405ms ago: executing program 2 (id=4263): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="89000000120081ae08061cdc030ec080000000060000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 0s ago: executing program 2 (id=4264): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000812000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007b80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="0c1b", 0x2}], 0x1, &(0x7f0000001c40)=[@mark={{0x14, 0x1, 0x24, 0x86c}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000012) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x78b7, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x3, 0x388}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x477, 0xb527, 0xb5, 0x0, 0x0) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.188456][T12952] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 197.190281][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.323460][T12962] loop2: detected capacity change from 0 to 128 [ 197.485357][T12962] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.492675][T12962] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.622458][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 197.622473][ T29] audit: type=1326 audit(1793709176.525:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704772fb19 code=0x7ffc0000 [ 197.622869][ T29] audit: type=1326 audit(1793709176.525:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704772fb19 code=0x7ffc0000 [ 197.623007][ T29] audit: type=1326 audit(1793709176.525:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704772fb19 code=0x7ffc0000 [ 197.623186][ T29] audit: type=1326 audit(1793709176.525:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f704772fb19 code=0x7ffc0000 [ 197.645313][ T29] audit: type=1326 audit(1793709176.545:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704772fb19 code=0x7ffc0000 [ 197.645402][ T29] audit: type=1326 audit(1793709176.545:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704772fb19 code=0x7ffc0000 [ 197.645983][ T29] audit: type=1326 audit(1793709176.545:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70476f034e code=0x7ffc0000 [ 197.660271][ T29] audit: type=1326 audit(1793709176.565:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70476f034e code=0x7ffc0000 [ 197.666035][ T29] audit: type=1326 audit(1793709176.565:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70476f034e code=0x7ffc0000 [ 197.671533][ T29] audit: type=1326 audit(1793709176.575:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70476f034e code=0x7ffc0000 [ 198.430890][T12986] loop8: detected capacity change from 0 to 1024 [ 198.431342][T12986] EXT4-fs: Ignoring removed oldalloc option [ 198.454325][T12986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.454398][T12986] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.469227][T10007] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.484608][T12986] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.3293: bg 0: block 112: padding at end of block bitmap is not set [ 198.487339][T12986] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 198.487556][T12986] EXT4-fs (loop8): This should not happen!! Data will be lost [ 198.487556][T12986] [ 198.487612][T12986] EXT4-fs (loop8): Total free blocks count 0 [ 198.487651][T12986] EXT4-fs (loop8): Free/Dirty block details [ 198.487694][T12986] EXT4-fs (loop8): free_blocks=0 [ 198.487776][T12986] EXT4-fs (loop8): dirty_blocks=64 [ 198.487882][T12986] EXT4-fs (loop8): Block reservation details [ 198.487928][T12986] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 198.609514][ T9075] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.632754][T12996] syzkaller1: entered promiscuous mode [ 198.632780][T12996] syzkaller1: entered allmulticast mode [ 198.837356][T13023] SELinux: policydb string does not match my string SE Linux [ 198.837414][T13023] SELinux: failed to load policy [ 198.928476][T13028] loop2: detected capacity change from 0 to 2048 [ 198.948993][T13028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.985372][T10007] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.121433][T13044] ip_tables: iptables: counters copy to user failed while replacing table [ 199.163649][T13046] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3319'. [ 199.373224][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3324'. [ 199.435638][T13065] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.734916][T13093] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3339'. [ 199.750045][T13093] gretap0: entered promiscuous mode [ 199.763153][T13093] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3339'. [ 199.763320][T13093] 0ªî{X¹¦: renamed from gretap0 [ 199.780048][T13093] 0ªî{X¹¦: left promiscuous mode [ 199.780153][T13093] 0ªî{X¹¦: entered allmulticast mode [ 199.781949][T13093] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 199.871381][T13098] loop1: detected capacity change from 0 to 512 [ 199.905439][T13098] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 199.969165][T12073] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 200.204194][T13116] loop2: detected capacity change from 0 to 512 [ 200.223759][T13116] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 200.241684][T13116] EXT4-fs (loop2): 1 orphan inode deleted [ 200.242136][T13116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.242325][T13116] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.299927][T10007] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.363772][T13124] loop2: detected capacity change from 0 to 512 [ 200.379547][T13124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 200.379585][T13124] System zones: 1-12 [ 200.389614][T13124] EXT4-fs error (device loop2): ext4_xattr_inode_iget:473: comm syz.2.3353: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 200.389729][T13124] loop2: lost filesystem error report for type 5 error -117 [ 200.390380][T13124] EXT4-fs (loop2): 1 orphan inode deleted [ 200.391301][T13124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.500949][T10007] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.552217][T13140] loop2: detected capacity change from 0 to 512 [ 200.558627][T13139] loop1: detected capacity change from 0 to 512 [ 200.576381][T13140] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 200.593105][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.593215][T13139] FAT-fs (loop1): Filesystem has been set read-only [ 200.593332][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.593730][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.593921][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.594143][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.594322][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.594563][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.594775][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.594988][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.595105][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.595308][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.595461][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.595662][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.603377][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.603551][T13139] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 200.603836][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.657786][T13139] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 200.746763][T12072] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 200.842003][T13152] netlink: 'syz.1.3366': attribute type 153 has an invalid length. [ 201.613843][T13159] loop1: detected capacity change from 0 to 512 [ 201.614070][T13162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3370'. [ 201.639823][T13159] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 201.639879][T13159] System zones: 1-12 [ 201.644818][T13159] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.3369: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 201.644903][T13159] loop1: lost filesystem error report for type 5 error -117 [ 201.649491][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 201.649570][ C0] EXT4-fs (loop1): initial error at time 1793709180: ext4_xattr_inode_iget:473 [ 201.649652][ C0] EXT4-fs (loop1): last error at time 1793709180: ext4_xattr_inode_iget:473 [ 201.651612][T13159] EXT4-fs (loop1): 1 orphan inode deleted [ 201.652640][T13159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.796535][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.890607][T13176] loop1: detected capacity change from 0 to 1024 [ 201.915893][T13176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.978562][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.621979][T13238] loop2: detected capacity change from 0 to 1024 [ 202.622400][T13238] EXT4-fs: Ignoring removed oldalloc option [ 202.622453][T13238] EXT4-fs: Ignoring removed orlov option [ 202.643094][T13238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.700942][T13243] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3404'. [ 202.701316][T13243] bridge0: port 3(team0) entered disabled state [ 202.701541][T13243] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.701603][T13243] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.721776][T13244] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.3402: unexpected EA_INODE flag [ 202.829227][T10007] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.840848][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3407'. [ 202.845953][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3407'. [ 203.269949][T13273] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3417'. [ 203.270292][T13273] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.270543][T13273] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.374551][T13279] random: crng reseeded on system resumption [ 203.374596][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 203.374611][ T29] audit: type=1400 audit(1793709182.275:2312): avc: denied { write } for pid=13277 comm="syz.8.3427" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 203.374640][ T29] audit: type=1400 audit(1793709182.275:2313): avc: denied { open } for pid=13277 comm="syz.8.3427" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 203.390496][ T29] audit: type=1400 audit(1793709182.285:2314): avc: denied { ioctl } for pid=13277 comm="syz.8.3427" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 203.537000][T13279] Restarting kernel threads ... [ 203.546104][T13279] Done restarting kernel threads. [ 203.621359][T13269] loop1: detected capacity change from 0 to 4096 [ 203.921188][T13269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.019461][ T29] audit: type=1400 audit(1793709182.925:2315): avc: denied { write } for pid=13268 comm="syz.1.3415" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.146893][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.197835][T13315] loop2: detected capacity change from 0 to 256 [ 204.252926][ T29] audit: type=1400 audit(1793709183.155:2316): avc: denied { remount } for pid=13322 comm="syz.2.3438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 204.576844][ T29] audit: type=1326 audit(1793709183.475:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.5.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3a08fb19 code=0x7ffc0000 [ 204.576914][ T29] audit: type=1326 audit(1793709183.475:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.5.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3a08fb19 code=0x7ffc0000 [ 204.576953][ T29] audit: type=1326 audit(1793709183.475:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.5.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3a08fb19 code=0x7ffc0000 [ 204.576990][ T29] audit: type=1326 audit(1793709183.475:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.5.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3a08fb19 code=0x7ffc0000 [ 204.577066][ T29] audit: type=1326 audit(1793709183.475:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.5.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fbe3a08fb19 code=0x7ffc0000 [ 204.739941][T13362] loop8: detected capacity change from 0 to 512 [ 204.766856][T13362] EXT4-fs: inline encryption not supported [ 204.769205][T13362] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 204.769247][T13362] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 204.772331][T13362] EXT4-fs (loop8): 1 truncate cleaned up [ 204.773270][T13362] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.834257][T13362] EXT4-fs error (device loop8): __ext4_expand_extra_isize:7479: inode #12: comm syz.8.3454: bad extra_isize 62 (inode size 256) [ 204.834442][T13362] EXT4-fs (loop8): Remounting filesystem read-only [ 204.893062][ T9075] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.929419][T13367] loop8: detected capacity change from 0 to 1024 [ 204.931721][T13367] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.959952][T13367] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 204.980392][T13367] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.033461][ T9075] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.179779][T13385] loop1: detected capacity change from 0 to 2048 [ 205.188986][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3464'. [ 205.189457][T13387] macvlan0: left promiscuous mode [ 205.191473][T13387] netlink: 'syz.3.3464': attribute type 2 has an invalid length. [ 205.191492][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3464'. [ 205.204157][T13385] loop1: p2 < > p3 < p5 > p4 [ 205.204189][T13385] loop1: partition table partially beyond EOD, truncated [ 205.204503][T13385] loop1: p2 start 4278190080 is beyond EOD, truncated [ 205.213646][T13385] loop1: p4 size 8192 extends beyond EOD, truncated [ 205.229153][T13385] loop1: p5 size 8192 extends beyond EOD, truncated [ 205.739976][T13413] rxe_eth0 speed is unknown, defaulting to 1000 [ 205.796009][T13433] loop1: detected capacity change from 0 to 256 [ 205.894298][T13437] loop1: detected capacity change from 0 to 512 [ 205.895037][T13437] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 205.920503][T13437] EXT4-fs (loop1): 1 orphan inode deleted [ 205.920943][T13437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.921099][T13437] ext4 filesystem being mounted at /705/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.969147][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.092842][T13446] loop1: detected capacity change from 0 to 8192 [ 206.097857][T13446] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.134561][T13450] rxe_eth0 speed is unknown, defaulting to 1000 [ 206.307431][T13446] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 206.307460][T13446] FAT-fs (loop1): Filesystem has been set read-only [ 206.307544][T13446] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 206.335470][T13446] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 206.352304][T13458] netlink: 'syz.3.3492': attribute type 10 has an invalid length. [ 206.362349][T13446] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 206.364260][T13446] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 206.365349][T13446] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 206.398683][T13446] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 206.400232][T13446] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 206.401992][T13446] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 206.435786][T13461] xt_hashlimit: max too large, truncated to 1048576 [ 206.453886][T13461] loop2: detected capacity change from 0 to 512 [ 206.455797][T13461] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.462623][T13461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.462715][T13461] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 206.478098][T13446] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 206.501485][T13461] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4221: comm syz.2.3493: Allocating blocks 41-42 which overlap fs metadata [ 206.501526][T13461] loop2: lost filesystem error report for type 5 error -117 [ 206.501767][T13461] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4221: comm syz.2.3493: Allocating blocks 41-42 which overlap fs metadata [ 206.501853][T13461] loop2: lost filesystem error report for type 5 error -117 [ 206.503581][T13461] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.3493: Failed to acquire dquot type 1 [ 206.503605][T13461] loop2: lost filesystem error report for type 5 error -117 [ 206.503752][T13461] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 206.503803][T13461] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #12: comm syz.2.3493: corrupted inode contents [ 206.503826][T13461] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 206.504076][T13461] EXT4-fs error (device loop2): ext4_dirty_inode:7679: inode #12: comm syz.2.3493: mark_inode_dirty error [ 206.504112][T13461] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 206.504231][T13461] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #12: comm syz.2.3493: corrupted inode contents [ 206.504254][T13461] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 206.504443][T13461] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.3493: mark_inode_dirty error [ 206.504473][T13461] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 206.504714][T13461] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #12: comm syz.2.3493: corrupted inode contents [ 206.504766][T13461] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 206.504921][T13461] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 206.504939][T13461] loop2: lost filesystem error report for type 5 error -117 [ 206.505043][T13461] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #12: comm syz.2.3493: corrupted inode contents [ 206.505093][T13461] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 206.505196][T13461] EXT4-fs error (device loop2): ext4_truncate:5538: inode #12: comm syz.2.3493: mark_inode_dirty error [ 206.505226][T13461] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 206.505427][T13461] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 206.505493][T13461] loop2: lost filesystem error report for type 5 error -117 [ 206.505747][T13461] EXT4-fs (loop2): 1 truncate cleaned up [ 206.506189][T13461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.522782][T13461] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.113722][T13488] loop2: detected capacity change from 0 to 1024 [ 207.130544][T13488] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 207.132423][T13484] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 207.135906][T12071] IPVS: starting estimator thread 0... [ 207.168970][T13488] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 2: comm syz.2.3506: lblock 2 mapped to illegal pblock 2 (length 1) [ 207.169088][T13488] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 207.169167][T13488] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 48: comm syz.2.3506: lblock 0 mapped to illegal pblock 48 (length 1) [ 207.169210][T13488] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 207.169367][T13488] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.3506: Failed to acquire dquot type 0 [ 207.169390][T13488] loop2: lost filesystem error report for type 5 error -117 [ 207.169588][T13488] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 207.169645][T13488] loop2: lost filesystem error report for type 5 error -117 [ 207.169883][T13488] EXT4-fs error (device loop2): ext4_evict_inode:336: inode #11: comm syz.2.3506: mark_inode_dirty error [ 207.169914][T13488] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 207.169980][T13488] EXT4-fs warning (device loop2): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 207.170099][T13488] EXT4-fs (loop2): 1 orphan inode deleted [ 207.170486][T13488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.201855][T12071] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:66: lblock 1 mapped to illegal pblock 1 (length 1) [ 207.202229][T12071] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:66: Failed to release dquot type 0 [ 207.238180][T13491] IPVS: using max 1584 ests per chain, 79200 per kthread [ 207.348533][T10007] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.350334][T12072] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:67: lblock 1 mapped to illegal pblock 1 (length 1) [ 207.350669][T12072] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:67: Failed to release dquot type 0 [ 207.350742][T12072] loop2: lost filesystem error report for type 5 error -117 [ 207.352188][T10007] EXT4-fs error (device loop2): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 207.352270][T10007] loop2: lost filesystem error report for type 5 error -117 [ 207.352538][T10007] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 207.352597][T10007] loop2: lost filesystem error report for type 5 error -117 [ 207.352784][T10007] EXT4-fs error (device loop2): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 207.353106][T10007] EXT4-fs error (device loop2): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 207.506235][T13510] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3515'. [ 207.938545][T13527] netlink: 'syz.8.3523': attribute type 5 has an invalid length. [ 207.938567][T13527] netlink: 'syz.8.3523': attribute type 8 has an invalid length. [ 208.714814][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 208.714899][ T29] audit: type=1400 audit(1793709187.615:2333): avc: denied { write } for pid=13573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.758333][ T29] audit: type=1400 audit(1793709187.665:2334): avc: denied { write } for pid=13589 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.972663][ T29] audit: type=1400 audit(1793709187.875:2335): avc: denied { write } for pid=13591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.046163][ T29] audit: type=1400 audit(1793709187.945:2336): avc: denied { write } for pid=13605 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.940302][ T29] audit: type=1326 audit(1793709190.845:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.1.3559" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a5647fb19 code=0x0 [ 212.134010][T13658] netlink: 'syz.5.3567': attribute type 6 has an invalid length. [ 212.217178][T13653] loop8: detected capacity change from 0 to 512 [ 212.223774][T13653] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 212.224016][T13653] EXT4-fs (loop8): orphan cleanup on readonly fs [ 212.227050][T13653] Quota error (device loop8): find_block_dqentry: Quota for id 0 referenced but not present [ 212.258525][T13653] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 212.258555][T13653] EXT4-fs error (device loop8): ext4_acquire_dquot:7120: comm syz.8.3566: Failed to acquire dquot type 1 [ 212.258577][T13653] fserror_report: 1 callbacks suppressed [ 212.258588][T13653] loop8: lost filesystem error report for type 5 error -5 [ 212.261066][T13653] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.3566: bg 0: block 40: padding at end of block bitmap is not set [ 212.261097][T13653] loop8: lost filesystem error report for type 5 error -117 [ 212.262404][T13653] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 212.262429][T13653] loop8: lost filesystem error report for type 5 error -117 [ 212.265281][T13653] EXT4-fs warning (device loop8): ext4_evict_inode:261: inode #16: comm syz.8.3566: data will be lost [ 212.265512][T13653] EXT4-fs (loop8): 1 truncate cleaned up [ 212.275093][ C0] EXT4-fs (loop8): error count since last fsck: 3 [ 212.275128][ C0] EXT4-fs (loop8): initial error at time 1793709191: ext4_acquire_dquot:7120 [ 212.275162][ C0] EXT4-fs (loop8): last error at time 1793709191: ext4_mb_clear_bb:6678 [ 212.276813][T13653] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.442537][ T9075] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.594755][T13681] bond0: (slave bond_slave_0): Releasing backup interface [ 212.638070][T13690] FAULT_INJECTION: forcing a failure. [ 212.638070][T13690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.638114][T13690] CPU: 0 UID: 0 PID: 13690 Comm: syz.8.3580 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 212.638157][T13690] Tainted: [W]=WARN [ 212.638236][T13690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 212.638261][T13690] Call Trace: [ 212.638270][T13690] [ 212.638279][T13690] __dump_stack+0x1d/0x30 [ 212.638373][T13690] dump_stack_lvl+0x95/0xd0 [ 212.638404][T13690] dump_stack+0x15/0x1b [ 212.638478][T13690] should_fail_ex+0x259/0x270 [ 212.638516][T13690] should_fail+0xb/0x20 [ 212.638551][T13690] should_fail_usercopy+0x1a/0x20 [ 212.638677][T13690] _copy_from_user+0x1c/0xb0 [ 212.638748][T13690] wants_mount_setattr+0x126/0x690 [ 212.638796][T13690] __se_sys_mount_setattr+0xf6/0x260 [ 212.638898][T13690] __x64_sys_mount_setattr+0x67/0x80 [ 212.638933][T13690] x64_sys_call+0x21fb/0x2550 [ 212.638970][T13690] do_syscall_64+0x112/0x360 [ 212.639008][T13690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.639057][T13690] RIP: 0033:0x7f1a613afb19 [ 212.639078][T13690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.639105][T13690] RSP: 002b:00007f1a5fe07028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 212.639131][T13690] RAX: ffffffffffffffda RBX: 00007f1a61635fa0 RCX: 00007f1a613afb19 [ 212.639159][T13690] RDX: 0000000000008000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 212.639220][T13690] RBP: 00007f1a61447b70 R08: 0000000000000020 R09: 0000000000000000 [ 212.639240][T13690] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 212.639258][T13690] R13: 00007f1a61636038 R14: 00007f1a61635fa0 R15: 00007ffd88190598 [ 212.639277][T13690] [ 213.036071][T13715] rxe_eth0 speed is unknown, defaulting to 1000 [ 213.036774][T13720] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.300364][T13739] FAULT_INJECTION: forcing a failure. [ 213.300364][T13739] name failslab, interval 1, probability 0, space 0, times 0 [ 213.300481][T13739] CPU: 1 UID: 0 PID: 13739 Comm: syz.2.3603 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 213.300531][T13739] Tainted: [W]=WARN [ 213.300589][T13739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 213.300606][T13739] Call Trace: [ 213.300614][T13739] [ 213.300625][T13739] __dump_stack+0x1d/0x30 [ 213.300659][T13739] dump_stack_lvl+0x95/0xd0 [ 213.300693][T13739] dump_stack+0x15/0x1b [ 213.300803][T13739] should_fail_ex+0x259/0x270 [ 213.300902][T13739] ? proc_thread_self_get_link+0xaf/0x130 [ 213.300937][T13739] should_failslab+0x8c/0xb0 [ 213.300980][T13739] __kmalloc_cache_noprof+0x5d/0x3e0 [ 213.301049][T13739] ? proc_thread_self_get_link+0xaf/0x130 [ 213.301161][T13739] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 213.301192][T13739] proc_thread_self_get_link+0xaf/0x130 [ 213.301280][T13739] pick_link+0x514/0x8e0 [ 213.301315][T13739] step_into_slowpath+0x36a/0x4c0 [ 213.301352][T13739] ? inode_permission+0x1e3/0x3c0 [ 213.301462][T13739] link_path_walk+0x953/0xde0 [ 213.301499][T13739] path_openat+0x142/0x11c0 [ 213.301540][T13739] do_file_open+0x16c/0x290 [ 213.301616][T13739] do_sys_openat2+0xa1/0x140 [ 213.301652][T13739] __x64_sys_openat+0xf2/0x120 [ 213.301688][T13739] x64_sys_call+0x1f72/0x2550 [ 213.301783][T13739] do_syscall_64+0x112/0x360 [ 213.301889][T13739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.301946][T13739] RIP: 0033:0x7f5683b2fb19 [ 213.301962][T13739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.301988][T13739] RSP: 002b:00007f568257f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.302016][T13739] RAX: ffffffffffffffda RBX: 00007f5683db5fa0 RCX: 00007f5683b2fb19 [ 213.302037][T13739] RDX: 0000000000000202 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 213.302056][T13739] RBP: 00007f5683bc7b70 R08: 0000000000000000 R09: 0000000000000000 [ 213.302074][T13739] R10: 0000000000000150 R11: 0000000000000246 R12: 0000000000000000 [ 213.302092][T13739] R13: 00007f5683db6038 R14: 00007f5683db5fa0 R15: 00007ffdd4fa1c98 [ 213.302174][T13739] [ 213.370648][T13744] syzkaller1: entered promiscuous mode [ 213.370711][T13744] syzkaller1: entered allmulticast mode [ 213.400009][T13737] 9p: Could not find request transport: rd.a [ 213.672187][T13754] 9pnet: p9_errstr2errno: server reported unknown error [ 214.009148][ T29] audit: type=1400 audit(1793709192.915:2338): avc: denied { write } for pid=13789 comm="syz.1.3625" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 214.741648][ T29] audit: type=1400 audit(1793709193.645:2339): avc: denied { ioctl } for pid=13810 comm="syz.2.3633" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x40044591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 214.885228][T13827] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3641'. [ 215.012821][T13826] infiniband syz0: set active [ 215.012843][T13826] infiniband syz0: added bond0 [ 215.033177][T13826] RDS/IB: syz0: added [ 215.033203][T13826] smc: adding ib device syz0 with port count 1 [ 215.033245][T13826] smc: ib device syz0 port 1 has no pnetid [ 215.185289][ T29] audit: type=1400 audit(1793709194.085:2340): avc: denied { bind } for pid=13842 comm="syz.8.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 215.338346][ T29] audit: type=1400 audit(1793709194.245:2341): avc: denied { mount } for pid=13854 comm="syz.8.3653" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 215.587478][T13863] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 215.937977][T13894] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 216.059773][T13901] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3676'. [ 216.066146][T13899] syzkaller1: entered promiscuous mode [ 216.066186][T13899] syzkaller1: entered allmulticast mode [ 216.310451][T13929] sg_read: process 597 (syz.2.3689) changed security contexts after opening file descriptor, this is not allowed. [ 216.450428][T13938] FAULT_INJECTION: forcing a failure. [ 216.450428][T13938] name failslab, interval 1, probability 0, space 0, times 0 [ 216.450476][T13938] CPU: 1 UID: 0 PID: 13938 Comm: syz.3.3693 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 216.450571][T13938] Tainted: [W]=WARN [ 216.450580][T13938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 216.450593][T13938] Call Trace: [ 216.450601][T13938] [ 216.450612][T13938] __dump_stack+0x1d/0x30 [ 216.450653][T13938] dump_stack_lvl+0x95/0xd0 [ 216.450685][T13938] dump_stack+0x15/0x1b [ 216.450729][T13938] should_fail_ex+0x259/0x270 [ 216.450758][T13938] ? copy_fs_struct+0x31/0x110 [ 216.450792][T13938] should_failslab+0x8c/0xb0 [ 216.450894][T13938] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 216.450924][T13938] ? copy_fs_struct+0x31/0x110 [ 216.450963][T13938] copy_fs_struct+0x31/0x110 [ 216.451070][T13938] ksys_unshare+0x2fe/0x690 [ 216.451303][T13938] __x64_sys_unshare+0x1f/0x30 [ 216.451343][T13938] x64_sys_call+0x1e33/0x2550 [ 216.451407][T13938] do_syscall_64+0x112/0x360 [ 216.451448][T13938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.451471][T13938] RIP: 0033:0x7f704772fb19 [ 216.451489][T13938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.451591][T13938] RSP: 002b:00007f7046187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 216.451628][T13938] RAX: ffffffffffffffda RBX: 00007f70479b5fa0 RCX: 00007f704772fb19 [ 216.451648][T13938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068000600 [ 216.451670][T13938] RBP: 00007f70477c7b70 R08: 0000000000000000 R09: 0000000000000000 [ 216.451688][T13938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.451704][T13938] R13: 00007f70479b6038 R14: 00007f70479b5fa0 R15: 00007ffc8c2ef078 [ 216.451783][T13938] [ 216.648525][T13940] loop1: detected capacity change from 0 to 1024 [ 216.649004][T13940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.657666][T13940] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 216.669370][T13940] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 2: comm syz.1.3694: lblock 2 mapped to illegal pblock 2 (length 1) [ 216.669493][T13940] fserror_report: 2 callbacks suppressed [ 216.669524][T13940] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 216.671591][T13940] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 216.671654][T13940] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 48: comm syz.1.3694: lblock 0 mapped to illegal pblock 48 (length 1) [ 216.671691][T13940] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 216.671865][T13940] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 216.671939][T13940] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.3694: Failed to acquire dquot type 0 [ 216.672020][T13940] loop1: lost filesystem error report for type 5 error -117 [ 216.672236][T13940] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 216.672357][T13940] loop1: lost filesystem error report for type 5 error -117 [ 216.672546][T13940] EXT4-fs error (device loop1): ext4_evict_inode:336: inode #11: comm syz.1.3694: mark_inode_dirty error [ 216.672630][T13940] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 216.672911][T13940] EXT4-fs warning (device loop1): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 216.673025][T13940] EXT4-fs (loop1): 1 orphan inode deleted [ 216.673983][T13940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.689730][T12027] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.691490][T12027] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 216.691551][T12027] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:22: Failed to release dquot type 0 [ 216.731111][T13940] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz.1.3694: Invalid inode table block 1 in block_group 0 [ 216.731483][T13940] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 216.744125][ T29] audit: type=1400 audit(1793709195.645:2342): avc: denied { write } for pid=13939 comm="syz.1.3694" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.834364][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.834808][T12072] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:67: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.834988][T12072] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 216.835721][T12072] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 216.835776][T12072] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:67: Failed to release dquot type 0 [ 216.835841][T12072] loop1: lost filesystem error report for type 5 error -117 [ 216.836700][ T3295] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 216.836776][ T3295] loop1: lost filesystem error report for type 5 error -117 [ 216.837011][ T3295] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 216.837060][ T3295] loop1: lost filesystem error report for type 5 error -117 [ 216.837397][ T3295] EXT4-fs error (device loop1): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 216.837492][ T3295] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 216.837717][ T3295] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 216.837841][ T3295] loop1: lost filesystem error report for type 5 error -117 [ 216.977498][T13947] FAULT_INJECTION: forcing a failure. [ 216.977498][T13947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.977658][T13947] CPU: 0 UID: 0 PID: 13947 Comm: syz.2.3698 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 216.977768][T13947] Tainted: [W]=WARN [ 216.977801][T13947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 216.977848][T13947] Call Trace: [ 216.977872][T13947] [ 216.977905][T13947] __dump_stack+0x1d/0x30 [ 216.978072][T13947] dump_stack_lvl+0x95/0xd0 [ 216.978208][T13947] dump_stack+0x15/0x1b [ 216.978299][T13947] should_fail_ex+0x259/0x270 [ 216.978413][T13947] should_fail+0xb/0x20 [ 216.978509][T13947] should_fail_usercopy+0x1a/0x20 [ 216.978617][T13947] _copy_from_user+0x1c/0xb0 [ 216.978744][T13947] oom_score_adj_write+0x75/0x170 [ 216.978838][T13947] ? __pfx_oom_score_adj_write+0x10/0x10 [ 216.978930][T13947] vfs_write+0x24f/0x990 [ 216.979055][T13947] ? __fget_files+0x184/0x1c0 [ 216.979157][T13947] ? mutex_lock+0x52/0x90 [ 216.979252][T13947] ksys_write+0xdc/0x1a0 [ 216.979382][T13947] __x64_sys_write+0x40/0x50 [ 216.979550][T13947] x64_sys_call+0x154e/0x2550 [ 216.979671][T13947] do_syscall_64+0x112/0x360 [ 216.979799][T13947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.979923][T13947] RIP: 0033:0x7f5683b2fb19 [ 216.980069][T13947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.980141][T13947] RSP: 002b:00007f568257f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.980224][T13947] RAX: ffffffffffffffda RBX: 00007f5683db5fa0 RCX: 00007f5683b2fb19 [ 216.980283][T13947] RDX: 000000000000002b RSI: 0000000000000000 RDI: 0000000000000003 [ 216.980316][T13947] RBP: 00007f5683bc7b70 R08: 0000000000000000 R09: 0000000000000000 [ 216.980365][T13947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.980413][T13947] R13: 00007f5683db6038 R14: 00007f5683db5fa0 R15: 00007ffdd4fa1c98 [ 216.980541][T13947] [ 217.024925][T13948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.025217][T13948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.489389][T13994] veth0: entered promiscuous mode [ 217.490162][T13993] veth0: left promiscuous mode [ 217.801773][T12031] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.851396][T12031] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.893225][T12031] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.940937][T12031] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.955915][T14013] rxe_eth0 speed is unknown, defaulting to 1000 [ 218.005201][T12031] bridge_slave_1: left allmulticast mode [ 218.005223][T12031] bridge_slave_1: left promiscuous mode [ 218.005363][T12031] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.006471][T12031] bridge_slave_0: left allmulticast mode [ 218.006493][T12031] bridge_slave_0: left promiscuous mode [ 218.006607][T12031] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.084372][T12031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.085707][T12031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.086561][T12031] bond0 (unregistering): Released all slaves [ 218.235388][T12031] hsr_slave_0: left promiscuous mode [ 218.235662][T12031] hsr_slave_1: left promiscuous mode [ 218.236197][T12031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.236217][T12031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.236590][T12031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.236606][T12031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.250066][T12031] veth1_macvtap: left promiscuous mode [ 218.250149][T12031] veth0_macvtap: left promiscuous mode [ 218.250315][T12031] veth1_vlan: left promiscuous mode [ 218.250502][T12031] veth0_vlan: left promiscuous mode [ 218.305231][ T29] audit: type=1400 audit(1793709197.205:2343): avc: denied { write } for pid=14023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.439816][T12031] team0 (unregistering): Port device team_slave_1 removed [ 218.443271][T12031] team0 (unregistering): Port device team_slave_0 removed [ 218.590037][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 218.725259][T14013] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.725291][T14013] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.725453][T14013] bridge_slave_0: entered allmulticast mode [ 218.747914][T14013] bridge_slave_0: entered promiscuous mode [ 218.754777][T14013] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.754808][T14013] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.754936][T14013] bridge_slave_1: entered allmulticast mode [ 218.756643][T14013] bridge_slave_1: entered promiscuous mode [ 218.808734][T14013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.826652][T14013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.867686][T14013] team0: Port device team_slave_0 added [ 218.873392][T14013] team0: Port device team_slave_1 added [ 218.873915][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 218.919808][T14013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.919825][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.926677][T14013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.932479][T14013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.932524][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.932637][T14013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.016925][T14080] FAULT_INJECTION: forcing a failure. [ 219.016925][T14080] name failslab, interval 1, probability 0, space 0, times 0 [ 219.016956][T14080] CPU: 1 UID: 0 PID: 14080 Comm: syz.3.3737 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 219.016997][T14080] Tainted: [W]=WARN [ 219.017007][T14080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 219.017073][T14080] Call Trace: [ 219.017082][T14080] [ 219.017095][T14080] __dump_stack+0x1d/0x30 [ 219.017130][T14080] dump_stack_lvl+0x95/0xd0 [ 219.017161][T14080] dump_stack+0x15/0x1b [ 219.017222][T14080] should_fail_ex+0x259/0x270 [ 219.017250][T14080] ? fsnotify_alloc_group+0x5a/0x160 [ 219.017354][T14080] should_failslab+0x8c/0xb0 [ 219.017388][T14080] __kmalloc_cache_noprof+0x5d/0x3e0 [ 219.017459][T14080] ? fsnotify_alloc_group+0x5a/0x160 [ 219.017498][T14080] fsnotify_alloc_group+0x5a/0x160 [ 219.017554][T14080] do_inotify_init+0x58/0x280 [ 219.017590][T14080] __x64_sys_inotify_init1+0x1e/0x30 [ 219.017672][T14080] x64_sys_call+0x188d/0x2550 [ 219.017709][T14080] do_syscall_64+0x112/0x360 [ 219.017747][T14080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.017778][T14080] RIP: 0033:0x7f704772fb19 [ 219.017825][T14080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.017845][T14080] RSP: 002b:00007f7046187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 219.017865][T14080] RAX: ffffffffffffffda RBX: 00007f70479b5fa0 RCX: 00007f704772fb19 [ 219.017879][T14080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.017897][T14080] RBP: 00007f70477c7b70 R08: 0000000000000000 R09: 0000000000000000 [ 219.017992][T14080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.018005][T14080] R13: 00007f70479b6038 R14: 00007f70479b5fa0 R15: 00007ffc8c2ef078 [ 219.018031][T14080] [ 219.056074][T14013] hsr_slave_0: entered promiscuous mode [ 219.064879][T14013] hsr_slave_1: entered promiscuous mode [ 219.065499][T14013] debugfs: 'hsr0' already exists in 'hsr' [ 219.065543][T14013] Cannot create hsr debugfs directory [ 219.241435][T12031] IPVS: stop unused estimator thread 0... [ 219.348346][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 219.348363][ T29] audit: type=1400 audit(1793709198.255:2348): avc: denied { write } for pid=14081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.399438][ T29] audit: type=1400 audit(1793709198.305:2349): avc: denied { write } for pid=14101 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.742732][T14106] loop2: detected capacity change from 0 to 128 [ 219.751025][T14106] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 220.126970][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 220.245117][T14123] loop8: detected capacity change from 0 to 512 [ 220.274778][T14123] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.274859][T14123] ext4 filesystem being mounted at /335/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.305080][T14123] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.3749: iget: bad i_size value: 2533274857506816 [ 220.334325][ T9075] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.363811][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3751'. [ 220.363834][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3751'. [ 220.363864][T14134] netlink: 'syz.8.3751': attribute type 6 has an invalid length. [ 220.397317][T12072] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.397489][T12072] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.397688][T12072] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.397725][T12072] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.444451][ T29] audit: type=1400 audit(1793709199.345:2350): avc: denied { write } for pid=14116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.513169][T12073] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.548821][ T29] audit: type=1400 audit(1793709199.455:2351): avc: denied { write } for pid=14142 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.594382][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 220.630059][T14152] FAULT_INJECTION: forcing a failure. [ 220.630059][T14152] name failslab, interval 1, probability 0, space 0, times 0 [ 220.630146][T14152] CPU: 0 UID: 0 PID: 14152 Comm: syz.2.3757 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 220.630190][T14152] Tainted: [W]=WARN [ 220.630200][T14152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 220.630219][T14152] Call Trace: [ 220.630227][T14152] [ 220.630237][T14152] __dump_stack+0x1d/0x30 [ 220.630294][T14152] dump_stack_lvl+0x95/0xd0 [ 220.630377][T14152] dump_stack+0x15/0x1b [ 220.630406][T14152] should_fail_ex+0x259/0x270 [ 220.630443][T14152] ? copy_fs_struct+0x31/0x110 [ 220.630564][T14152] should_failslab+0x8c/0xb0 [ 220.630606][T14152] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 220.630680][T14152] ? copy_fs_struct+0x31/0x110 [ 220.630723][T14152] copy_fs_struct+0x31/0x110 [ 220.630765][T14152] ksys_unshare+0x2fe/0x690 [ 220.630830][T14152] __x64_sys_unshare+0x1f/0x30 [ 220.630938][T14152] x64_sys_call+0x1e33/0x2550 [ 220.630974][T14152] do_syscall_64+0x112/0x360 [ 220.631018][T14152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.631121][T14152] RIP: 0033:0x7f5683b2fb19 [ 220.631142][T14152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.631169][T14152] RSP: 002b:00007f568257f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 220.631196][T14152] RAX: ffffffffffffffda RBX: 00007f5683db5fa0 RCX: 00007f5683b2fb19 [ 220.631296][T14152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068000600 [ 220.631316][T14152] RBP: 00007f5683bc7b70 R08: 0000000000000000 R09: 0000000000000000 [ 220.631334][T14152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.631354][T14152] R13: 00007f5683db6038 R14: 00007f5683db5fa0 R15: 00007ffdd4fa1c98 [ 220.631375][T14152] [ 220.835435][T14013] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 220.848239][ T29] audit: type=1400 audit(1793709199.755:2352): avc: denied { create } for pid=14159 comm="syz.3.3761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 220.849704][ T29] audit: type=1400 audit(1793709199.755:2353): avc: denied { ioctl } for pid=14159 comm="syz.3.3761" path="socket:[40055]" dev="sockfs" ino=40055 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 220.854867][T14013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.861192][T14013] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 220.884545][T14013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.890401][T14013] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 220.918011][T14013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.926475][T14013] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 220.937885][T14013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.955205][T14171] FAULT_INJECTION: forcing a failure. [ 220.955205][T14171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.955282][T14171] CPU: 0 UID: 0 PID: 14171 Comm: syz.2.3762 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 220.955324][T14171] Tainted: [W]=WARN [ 220.955333][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 220.955360][T14171] Call Trace: [ 220.955369][T14171] [ 220.955377][T14171] __dump_stack+0x1d/0x30 [ 220.955404][T14171] dump_stack_lvl+0x95/0xd0 [ 220.955438][T14171] dump_stack+0x15/0x1b [ 220.955465][T14171] should_fail_ex+0x259/0x270 [ 220.955568][T14171] should_fail+0xb/0x20 [ 220.955598][T14171] should_fail_usercopy+0x1a/0x20 [ 220.955679][T14171] _copy_to_user+0x20/0xa0 [ 220.955718][T14171] bpf_verifier_vlog+0x3c5/0x5a0 [ 220.955753][T14171] btf_verifier_log+0xb2/0xf0 [ 220.955785][T14171] ? __btf_verifier_log+0x7f/0xb0 [ 220.955815][T14171] btf_func_proto_log+0x2ef/0x4a0 [ 220.955862][T14171] __btf_verifier_log_type+0x275/0x330 [ 220.955965][T14171] ? sort+0x6a/0xa0 [ 220.956003][T14171] btf_func_proto_check_meta+0xcd/0x100 [ 220.956040][T14171] btf_parse_type_sec+0x284/0x15b0 [ 220.956081][T14171] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 220.956193][T14171] ? btf_parse_hdr+0x43a/0x440 [ 220.956251][T14171] ? btf_parse_str_sec+0x1ae/0x1b0 [ 220.956308][T14171] btf_new_fd+0x2ec/0x6a0 [ 220.956344][T14171] bpf_btf_load+0x116/0x130 [ 220.956377][T14171] __sys_bpf+0xbee/0xc50 [ 220.956459][T14171] ? do_futex+0x340/0x460 [ 220.956520][T14171] __x64_sys_bpf+0x69/0x80 [ 220.956545][T14171] x64_sys_call+0xf26/0x2550 [ 220.956571][T14171] do_syscall_64+0x112/0x360 [ 220.956604][T14171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.956672][T14171] RIP: 0033:0x7f5683b2fb19 [ 220.956689][T14171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.956716][T14171] RSP: 002b:00007f568257f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.956743][T14171] RAX: ffffffffffffffda RBX: 00007f5683db5fa0 RCX: 00007f5683b2fb19 [ 220.956762][T14171] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 220.956811][T14171] RBP: 00007f5683bc7b70 R08: 0000000000000000 R09: 0000000000000000 [ 220.956829][T14171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.956845][T14171] R13: 00007f5683db6038 R14: 00007f5683db5fa0 R15: 00007ffdd4fa1c98 [ 220.956945][T14171] [ 220.982332][ T29] audit: type=1400 audit(1793709199.875:2354): avc: denied { write } for pid=14159 comm="syz.3.3761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 221.233269][T14013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.248435][T14013] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.250957][T12073] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.250999][T12073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.255024][T12031] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.255059][T12031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.311843][T14177] FAULT_INJECTION: forcing a failure. [ 221.311843][T14177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.311874][T14177] CPU: 1 UID: 0 PID: 14177 Comm: syz.3.3764 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 221.311913][T14177] Tainted: [W]=WARN [ 221.311923][T14177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 221.311952][T14177] Call Trace: [ 221.311958][T14177] [ 221.312015][T14177] __dump_stack+0x1d/0x30 [ 221.312046][T14177] dump_stack_lvl+0x95/0xd0 [ 221.312077][T14177] dump_stack+0x15/0x1b [ 221.312105][T14177] should_fail_ex+0x259/0x270 [ 221.312175][T14177] should_fail+0xb/0x20 [ 221.312204][T14177] should_fail_usercopy+0x1a/0x20 [ 221.312264][T14177] _copy_from_iter+0xcc/0xe80 [ 221.312308][T14177] ? rxrpc_alloc_data_txbuf+0x234/0x360 [ 221.312337][T14177] rxrpc_send_data+0xa68/0x1bf0 [ 221.312400][T14177] ? __pfx_default_wake_function+0x10/0x10 [ 221.312443][T14177] rxrpc_do_sendmsg+0xd7d/0xe10 [ 221.312549][T14177] ? rxrpc_do_sendmsg+0x5b1/0xe10 [ 221.312582][T14177] rxrpc_sendmsg+0x46c/0x580 [ 221.312620][T14177] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 221.312656][T14177] ____sys_sendmsg+0x54a/0x590 [ 221.312748][T14177] ___sys_sendmsg+0x195/0x1e0 [ 221.312850][T14177] __x64_sys_sendmsg+0xd4/0x160 [ 221.312921][T14177] x64_sys_call+0x22ab/0x2550 [ 221.312962][T14177] do_syscall_64+0x112/0x360 [ 221.313043][T14177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.313190][T14177] RIP: 0033:0x7f704772fb19 [ 221.313207][T14177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.313230][T14177] RSP: 002b:00007f7046187028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.313258][T14177] RAX: ffffffffffffffda RBX: 00007f70479b5fa0 RCX: 00007f704772fb19 [ 221.313273][T14177] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000004 [ 221.313287][T14177] RBP: 00007f70477c7b70 R08: 0000000000000000 R09: 0000000000000000 [ 221.313317][T14177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.313332][T14177] R13: 00007f70479b6038 R14: 00007f70479b5fa0 R15: 00007ffc8c2ef078 [ 221.313424][T14177] [ 221.314045][ T29] audit: type=1400 audit(1793709200.215:2355): avc: denied { write } for pid=14154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.503343][T14187] FAULT_INJECTION: forcing a failure. [ 221.503343][T14187] name failslab, interval 1, probability 0, space 0, times 0 [ 221.503632][T14187] CPU: 0 UID: 0 PID: 14187 Comm: syz.2.3763 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 221.503708][T14187] Tainted: [W]=WARN [ 221.503803][T14187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 221.503850][T14187] Call Trace: [ 221.503874][T14187] [ 221.503908][T14187] __dump_stack+0x1d/0x30 [ 221.504003][T14187] dump_stack_lvl+0x95/0xd0 [ 221.504197][T14187] dump_stack+0x15/0x1b [ 221.504281][T14187] should_fail_ex+0x259/0x270 [ 221.504388][T14187] should_failslab+0x8c/0xb0 [ 221.504541][T14187] __kvmalloc_node_noprof+0x14f/0x5b0 [ 221.504757][T14187] ? bpf_test_run_xdp_live+0x17b/0x1330 [ 221.504840][T14187] ? bpf_test_run_xdp_live+0x17b/0x1330 [ 221.505003][T14187] bpf_test_run_xdp_live+0x17b/0x1330 [ 221.505052][T14187] ? trace_event_raw_event_msr_trace_class+0xf5/0x170 [ 221.505078][T14187] ? rb_insert_color+0x6e/0x2a0 [ 221.505272][T14187] ? timerqueue_linked_add+0x1a9/0x1f0 [ 221.505402][T14187] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 221.505518][T14187] ? _copy_from_user+0x89/0xb0 [ 221.505662][T14187] ? bpf_test_init+0xf4/0x130 [ 221.505793][T14187] bpf_prog_test_run_xdp+0x559/0x9e0 [ 221.505886][T14187] ? __rcu_read_unlock+0x4e/0x70 [ 221.505988][T14187] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 221.506073][T14187] bpf_prog_test_run+0x208/0x340 [ 221.506175][T14187] __sys_bpf+0x914/0xc50 [ 221.506286][T14187] ? do_futex+0x340/0x460 [ 221.506471][T14187] __x64_sys_bpf+0x69/0x80 [ 221.506581][T14187] x64_sys_call+0xf26/0x2550 [ 221.506659][T14187] do_syscall_64+0x112/0x360 [ 221.506841][T14187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.507003][T14187] RIP: 0033:0x7f5683b2fb19 [ 221.507066][T14187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.507151][T14187] RSP: 002b:00007f568257f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.507281][T14187] RAX: ffffffffffffffda RBX: 00007f5683db5fa0 RCX: 00007f5683b2fb19 [ 221.507340][T14187] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 221.507469][T14187] RBP: 00007f5683bc7b70 R08: 0000000000000000 R09: 0000000000000000 [ 221.507519][T14187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.507567][T14187] R13: 00007f5683db6038 R14: 00007f5683db5fa0 R15: 00007ffdd4fa1c98 [ 221.507633][T14187] [ 221.820167][T14193] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 221.825291][ T29] audit: type=1400 audit(1793709200.725:2356): avc: denied { write } for pid=14189 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.989011][T14013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.042125][ T29] audit: type=1400 audit(1793709200.945:2357): avc: denied { mounton } for pid=14220 comm="syz.1.3770" path="/proc/1686/task" dev="proc" ino=39433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 222.304811][T14013] veth0_vlan: entered promiscuous mode [ 222.316548][T14013] veth1_vlan: entered promiscuous mode [ 222.335396][T14013] veth0_macvtap: entered promiscuous mode [ 222.343610][T14013] veth1_macvtap: entered promiscuous mode [ 222.361310][T14013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.374676][T14013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.417539][T12071] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.417762][T12071] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.417854][T12071] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.464672][T14265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.469484][T14265] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.482566][T14265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.518176][T14265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.520081][T14265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.521244][T14277] netlink: 'syz.6.3726': attribute type 15 has an invalid length. [ 222.523189][T14265] veth1_to_hsr: left promiscuous mode [ 222.525022][T14265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.525119][T14265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.525629][T14265] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 222.527921][ T3666] Bluetooth: hci0: command 0x1003 tx timeout [ 222.531784][T14265] veth1_vlan: left promiscuous mode [ 222.533930][T14265] veth0_vlan: left promiscuous mode [ 222.534619][T10844] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 222.548836][T14265] veth0_vlan: entered promiscuous mode [ 222.554975][T14265] veth1_vlan: entered promiscuous mode [ 222.570729][T14265] veth1_macvtap: left promiscuous mode [ 222.573837][T14265] veth0_macvtap: left promiscuous mode [ 222.579931][T14265] veth0_macvtap: entered promiscuous mode [ 222.581332][T14265] veth1_macvtap: entered promiscuous mode [ 222.619056][T14265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.625304][T14265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.634067][T14265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.639184][T14265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.652048][T14265] veth1_to_hsr: entered promiscuous mode [ 222.652161][T14265] veth1_to_hsr: entered allmulticast mode [ 222.695740][T14271] tap0: tun_chr_ioctl cmd 1074025677 [ 222.695759][T14271] tap0: Linktype set failed because interface is up [ 222.701018][T12071] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.701142][T12071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.718000][ T23] tap0: tun_net_xmit 90 [ 222.776811][T14277] netlink: 'syz.6.3726': attribute type 15 has an invalid length. [ 222.783190][T12071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.783412][T12071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.783579][T12071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.783687][T12071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.787988][T12071] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 222.790298][T12031] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 222.790480][T12031] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 222.790597][T12031] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 222.790776][T12031] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.925786][T14292] LUN: removable file: (no medium) [ 222.936252][T14292] mass_storage.0/lun.0: unable to open backing file: f [ 223.238940][T14339] loop1: detected capacity change from 0 to 512 [ 223.239453][T14339] EXT4-fs: Ignoring removed i_version option [ 223.239760][T14339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.271862][T14339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.271938][T14339] ext4 filesystem being mounted at /762/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.439935][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.550026][T14370] rxe_eth0 speed is unknown, defaulting to 1000 [ 224.223472][T12031] IPVS: starting estimator thread 0... [ 224.307394][T14430] IPVS: using max 2304 ests per chain, 115200 per kthread [ 224.597260][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 224.597302][ T29] audit: type=1400 audit(1793709203.505:2379): avc: denied { write } for pid=14438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.646932][T14452] 9pnet: p9_errstr2errno: server reported unknown error 000 [ 224.686847][ T29] audit: type=1400 audit(1793709203.585:2380): avc: denied { write } for pid=14460 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.735963][T14402] geneve2: entered promiscuous mode [ 224.735989][T14402] geneve2: entered allmulticast mode [ 225.031477][ T29] audit: type=1400 audit(1793709203.935:2381): avc: denied { write } for pid=14470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.158760][ T29] audit: type=1400 audit(1793709204.065:2382): avc: denied { write } for pid=14487 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.221295][T14497] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14497 comm=syz.2.3827 [ 225.363771][T14507] sctp: [Deprecated]: syz.2.3830 (pid 14507) Use of int in max_burst socket option. [ 225.363771][T14507] Use struct sctp_assoc_value instead [ 225.472428][ T29] audit: type=1400 audit(1793709204.375:2383): avc: denied { write } for pid=14502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.535511][ T29] audit: type=1400 audit(1793709204.435:2384): avc: denied { write } for pid=14519 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.581758][ T29] audit: type=1326 audit(1793709204.485:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14520 comm="syz.2.3834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5683b2fb19 code=0x7ffc0000 [ 225.581802][ T29] audit: type=1326 audit(1793709204.485:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14520 comm="syz.2.3834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5683b2fb19 code=0x7ffc0000 [ 225.581840][ T29] audit: type=1326 audit(1793709204.485:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14520 comm="syz.2.3834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5683b2fb19 code=0x7ffc0000 [ 225.581949][ T29] audit: type=1326 audit(1793709204.485:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14520 comm="syz.2.3834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f5683b2fb19 code=0x7ffc0000 [ 225.583109][T14522] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3833'. [ 225.777319][T14526] support for the xor transformation has been removed. [ 226.322713][T14570] ip_tables: iptables: counters copy to user failed while replacing table [ 226.649292][T14577] loop2: detected capacity change from 0 to 32768 [ 226.721854][T14577] loop2: p1 p3 < > [ 226.733333][ T2983] loop2: p1 p3 < > [ 226.825293][T14586] ip_tables: iptables: counters copy to user failed while replacing table [ 226.982685][T13836] udevd[13836]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 226.993137][T13670] udevd[13670]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 227.074662][T14600] sd 0:0:1:0: device reset [ 227.078433][T13670] udevd[13670]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 227.082962][T13836] udevd[13836]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 227.211903][T14610] FAULT_INJECTION: forcing a failure. [ 227.211903][T14610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.211945][T14610] CPU: 0 UID: 0 PID: 14610 Comm: syz.2.3863 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 227.212105][T14610] Tainted: [W]=WARN [ 227.212116][T14610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 227.212135][T14610] Call Trace: [ 227.212142][T14610] [ 227.212150][T14610] __dump_stack+0x1d/0x30 [ 227.212182][T14610] dump_stack_lvl+0x95/0xd0 [ 227.212293][T14610] dump_stack+0x15/0x1b [ 227.212324][T14610] should_fail_ex+0x259/0x270 [ 227.212363][T14610] should_fail+0xb/0x20 [ 227.212398][T14610] should_fail_usercopy+0x1a/0x20 [ 227.212492][T14610] _copy_to_user+0x20/0xa0 [ 227.212532][T14610] bpf_verifier_vlog+0x455/0x5a0 [ 227.212568][T14610] __btf_verifier_log+0x7f/0xb0 [ 227.212689][T14610] __btf_verifier_log_type+0x302/0x330 [ 227.212725][T14610] btf_datasec_check_meta+0x2a6/0x640 [ 227.212858][T14610] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 227.212910][T14610] ? sort+0x6a/0xa0 [ 227.212938][T14610] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 227.212982][T14610] btf_parse_type_sec+0x284/0x15b0 [ 227.213083][T14610] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 227.213125][T14610] ? btf_parse_hdr+0x43a/0x440 [ 227.213223][T14610] ? btf_parse_str_sec+0x1ae/0x1b0 [ 227.213257][T14610] btf_new_fd+0x2ec/0x6a0 [ 227.213308][T14610] bpf_btf_load+0x116/0x130 [ 227.213342][T14610] __sys_bpf+0xbee/0xc50 [ 227.213382][T14610] ? do_futex+0x340/0x460 [ 227.213418][T14610] __x64_sys_bpf+0x69/0x80 [ 227.213442][T14610] x64_sys_call+0xf26/0x2550 [ 227.213478][T14610] do_syscall_64+0x112/0x360 [ 227.213563][T14610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.213594][T14610] RIP: 0033:0x7f5683b2fb19 [ 227.213678][T14610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.213698][T14610] RSP: 002b:00007f568257f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.213720][T14610] RAX: ffffffffffffffda RBX: 00007f5683db5fa0 RCX: 00007f5683b2fb19 [ 227.213740][T14610] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 227.213839][T14610] RBP: 00007f5683bc7b70 R08: 0000000000000000 R09: 0000000000000000 [ 227.213858][T14610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.213876][T14610] R13: 00007f5683db6038 R14: 00007f5683db5fa0 R15: 00007ffdd4fa1c98 [ 227.213952][T14610] [ 227.478440][T14617] netlink: 'syz.3.3867': attribute type 2 has an invalid length. [ 227.486021][T14617] .*!: entered promiscuous mode [ 227.547537][T14629] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.632167][T14633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.632215][T14633] block device autoloading is deprecated and will be removed. [ 228.425720][T14654] /dev/nullb0: Can't lookup blockdev [ 228.437296][T14654] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 228.439624][T14633] md: could not open device unknown-block(0,0). [ 228.439656][T14633] md: md_import_device returned -6 [ 228.922249][T14682] loop2: detected capacity change from 0 to 128 [ 228.940279][T14682] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 228.943469][T14682] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 228.946928][T14682] EXT4-fs error (device loop2): __ext4_find_entry:1628: inode #2: comm syz.2.3888: checksumming directory block 0 [ 229.025052][T10007] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.191179][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'. [ 229.595937][T14736] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 229.611496][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 229.611516][ T29] audit: type=1400 audit(1793709464.513:2683): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 229.689655][ T29] audit: type=1400 audit(1793709464.593:2684): avc: denied { listen } for pid=14743 comm="syz.2.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.689693][ T29] audit: type=1400 audit(1793709464.593:2685): avc: denied { accept } for pid=14743 comm="syz.2.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.800229][T14757] loop8: detected capacity change from 0 to 128 [ 229.967290][T14767] netlink: 'syz.8.3927': attribute type 10 has an invalid length. [ 229.967353][T14767] netlink: 55 bytes leftover after parsing attributes in process `syz.8.3927'. [ 230.077975][ T29] audit: type=1400 audit(1793709464.983:2686): avc: denied { read } for pid=14777 comm="syz.2.3931" lport=47411 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 231.389936][T14838] FAULT_INJECTION: forcing a failure. [ 231.389936][T14838] name failslab, interval 1, probability 0, space 0, times 0 [ 231.390000][T14838] CPU: 1 UID: 0 PID: 14838 Comm: syz.8.3955 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 231.390174][T14838] Tainted: [W]=WARN [ 231.390184][T14838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 231.390198][T14838] Call Trace: [ 231.390204][T14838] [ 231.390212][T14838] __dump_stack+0x1d/0x30 [ 231.390239][T14838] dump_stack_lvl+0x95/0xd0 [ 231.390271][T14838] dump_stack+0x15/0x1b [ 231.390338][T14838] should_fail_ex+0x259/0x270 [ 231.390439][T14838] ? copy_array+0x63/0xf0 [ 231.390482][T14838] should_failslab+0x8c/0xb0 [ 231.390525][T14838] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 231.390689][T14838] ? copy_array+0x63/0xf0 [ 231.390734][T14838] krealloc_node_align_noprof+0x11d/0x310 [ 231.390834][T14838] ? __kmalloc_cache_noprof+0x1e2/0x3e0 [ 231.390871][T14838] copy_array+0x63/0xf0 [ 231.390912][T14838] bpf_copy_verifier_state+0x5ee/0x7c0 [ 231.391038][T14838] push_stack+0x110/0x1f0 [ 231.391064][T14838] do_check_insn+0x2c62/0x6790 [ 231.391171][T14838] ? bpf_push_jmp_history+0x395/0x560 [ 231.391212][T14838] do_check_common+0x3668/0x3fc0 [ 231.391273][T14838] do_check_main+0x49/0xb0 [ 231.391364][T14838] bpf_check+0x1f9a/0x20e0 [ 231.391404][T14838] bpf_prog_load+0xf52/0x10b0 [ 231.391442][T14838] __sys_bpf+0xbce/0xc50 [ 231.391466][T14838] ? do_futex+0x340/0x460 [ 231.391531][T14838] __x64_sys_bpf+0x69/0x80 [ 231.391549][T14838] x64_sys_call+0xf26/0x2550 [ 231.391582][T14838] do_syscall_64+0x112/0x360 [ 231.391709][T14838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.391733][T14838] RIP: 0033:0x7f1a613afb19 [ 231.391757][T14838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.391810][T14838] RSP: 002b:00007f1a5fe07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.391857][T14838] RAX: ffffffffffffffda RBX: 00007f1a61635fa0 RCX: 00007f1a613afb19 [ 231.391998][T14838] RDX: 0000000000000048 RSI: 00002000000016c0 RDI: 0000000000000005 [ 231.392016][T14838] RBP: 00007f1a61447b70 R08: 0000000000000000 R09: 0000000000000000 [ 231.392035][T14838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.392128][T14838] R13: 00007f1a61636038 R14: 00007f1a61635fa0 R15: 00007ffd88190598 [ 231.392152][T14838] [ 231.395084][T14842] loop2: detected capacity change from 0 to 128 [ 231.788568][T14851] netlink: 'syz.2.3958': attribute type 2 has an invalid length. [ 231.927562][ T29] audit: type=1400 audit(1793709466.823:2687): avc: denied { write } for pid=14847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.986290][ T29] audit: type=1400 audit(1793709466.883:2688): avc: denied { write } for pid=14862 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.104479][ T29] audit: type=1326 audit(1793709467.003:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.8.3959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a613afb19 code=0x0 [ 232.235672][ T29] audit: type=1400 audit(1793709467.133:2690): avc: denied { write } for pid=14876 comm="syz.3.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 232.290430][T14883] loop8: detected capacity change from 0 to 256 [ 232.305384][T14883] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.335375][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3966'. [ 232.384145][T14887] dummy0: entered promiscuous mode [ 232.385359][T14887] gretap0: entered promiscuous mode [ 232.407549][T14887] hsr1: entered allmulticast mode [ 232.407569][T14887] dummy0: entered allmulticast mode [ 232.407607][T14887] gretap0: entered allmulticast mode [ 232.647603][T14906] netlink: 'syz.1.3978': attribute type 1 has an invalid length. [ 232.654515][T14906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.696223][T14910] sctp: [Deprecated]: syz.6.3977 (pid 14910) Use of int in max_burst socket option. [ 232.696223][T14910] Use struct sctp_assoc_value instead [ 232.715859][T14906] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 232.728699][T12069] Bluetooth: hci0: Frame reassembly failed (-84) [ 232.757865][T12069] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 232.868483][T12072] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 232.993384][T14922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3985'. [ 233.047208][T14877] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 233.319858][T14947] FAULT_INJECTION: forcing a failure. [ 233.319858][T14947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.319889][T14947] CPU: 0 UID: 0 PID: 14947 Comm: syz.3.3997 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 233.319980][T14947] Tainted: [W]=WARN [ 233.319987][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 233.320001][T14947] Call Trace: [ 233.320007][T14947] [ 233.320014][T14947] __dump_stack+0x1d/0x30 [ 233.320048][T14947] dump_stack_lvl+0x95/0xd0 [ 233.320092][T14947] dump_stack+0x15/0x1b [ 233.320167][T14947] should_fail_ex+0x259/0x270 [ 233.320203][T14947] should_fail+0xb/0x20 [ 233.320296][T14947] should_fail_usercopy+0x1a/0x20 [ 233.320329][T14947] _copy_to_user+0x20/0xa0 [ 233.320357][T14947] do_ip6t_get_ctl+0xa11/0xcb0 [ 233.320435][T14947] ? __rcu_read_unlock+0x4e/0x70 [ 233.320463][T14947] nf_getsockopt+0x190/0x1b0 [ 233.320502][T14947] ipv6_getsockopt+0x170/0x1e0 [ 233.320581][T14947] udpv6_getsockopt+0xa5/0x230 [ 233.320678][T14947] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 233.320729][T14947] sock_common_getsockopt+0x60/0x70 [ 233.320798][T14947] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 233.320837][T14947] do_sock_getsockopt+0x2ce/0x350 [ 233.320908][T14947] __x64_sys_getsockopt+0x11d/0x1a0 [ 233.320953][T14947] x64_sys_call+0x1032/0x2550 [ 233.320988][T14947] do_syscall_64+0x112/0x360 [ 233.321124][T14947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.321155][T14947] RIP: 0033:0x7f704772fb19 [ 233.321176][T14947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.321255][T14947] RSP: 002b:00007f7046187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 233.321284][T14947] RAX: ffffffffffffffda RBX: 00007f70479b5fa0 RCX: 00007f704772fb19 [ 233.321305][T14947] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000004 [ 233.321322][T14947] RBP: 00007f70477c7b70 R08: 0000200000002e00 R09: 0000000000000000 [ 233.321341][T14947] R10: 00002000000028c0 R11: 0000000000000246 R12: 0000000000000000 [ 233.321437][T14947] R13: 00007f70479b6038 R14: 00007f70479b5fa0 R15: 00007ffc8c2ef078 [ 233.321507][T14947] [ 234.321255][T14987] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4013'. [ 234.321354][T14987] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4013'. [ 234.345559][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4014'. [ 234.767193][ T3666] Bluetooth: hci0: command 0x1003 tx timeout [ 234.767779][T10844] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 234.800828][ T11] logitech-hidpp-device 0003:046D:C082.0009: unknown main item tag 0x6 [ 234.802875][ T11] logitech-hidpp-device 0003:046D:C082.0009: hidraw0: USB HID v0.08 Device [syz0] on syz0 [ 235.120152][T15038] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4033'. [ 235.513871][ T29] audit: type=1400 audit(1793709470.413:2691): avc: denied { ioctl } for pid=15060 comm="syz.2.4041" path="socket:[41840]" dev="sockfs" ino=41840 ioctlcmd=0x40046721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.580913][ T29] audit: type=1400 audit(1793709470.483:2692): avc: denied { write } for pid=15047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.631076][T15046] loop8: detected capacity change from 0 to 512 [ 235.653511][ T29] audit: type=1400 audit(1793709470.553:2693): avc: denied { write } for pid=15068 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.786040][ T29] audit: type=1400 audit(1793709470.683:2694): avc: denied { setopt } for pid=15071 comm="syz.3.4042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 235.860977][T15077] 9p: Unknown uid 00000000004294967295 [ 235.976508][T15046] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.008411][T15081] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 236.015794][T15046] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.204710][ T9075] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.252229][T15083] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4046'. [ 236.459255][ T29] audit: type=1400 audit(1793709471.363:2695): avc: denied { write } for pid=15086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.534786][ T29] audit: type=1400 audit(1793709471.433:2696): avc: denied { write } for pid=15108 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.655767][T15116] FAULT_INJECTION: forcing a failure. [ 236.655767][T15116] name failslab, interval 1, probability 0, space 0, times 0 [ 236.655809][T15116] CPU: 0 UID: 0 PID: 15116 Comm: syz.6.4053 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 236.655840][T15116] Tainted: [W]=WARN [ 236.655847][T15116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 236.655860][T15116] Call Trace: [ 236.655866][T15116] [ 236.655874][T15116] __dump_stack+0x1d/0x30 [ 236.655910][T15116] dump_stack_lvl+0x95/0xd0 [ 236.655941][T15116] dump_stack+0x15/0x1b [ 236.655970][T15116] should_fail_ex+0x259/0x270 [ 236.656002][T15116] ? vm_area_dup+0x33/0x300 [ 236.656037][T15116] should_failslab+0x8c/0xb0 [ 236.656076][T15116] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 236.656105][T15116] ? vm_area_dup+0x33/0x300 [ 236.656139][T15116] vm_area_dup+0x33/0x300 [ 236.656179][T15116] dup_mmap+0x4dc/0x1120 [ 236.656207][T15116] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 236.656228][T15116] ? __list_add_valid_or_report+0x38/0xe0 [ 236.656257][T15116] copy_mm+0xf5/0x340 [ 236.656290][T15116] copy_process+0x10e9/0x2400 [ 236.656326][T15116] kernel_clone+0x1c0/0x5f0 [ 236.656367][T15116] __se_sys_clone3+0x1f5/0x230 [ 236.656419][T15116] ? switch_fpu_return+0xe7/0x1b0 [ 236.656444][T15116] __x64_sys_clone3+0x31/0x40 [ 236.656472][T15116] x64_sys_call+0x437/0x2550 [ 236.656506][T15116] do_syscall_64+0x112/0x360 [ 236.656550][T15116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.656577][T15116] RIP: 0033:0x7fe84f29fb19 [ 236.656592][T15116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.656611][T15116] RSP: 002b:00007fe84dcf6ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 236.656631][T15116] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe84f29fb19 [ 236.656649][T15116] RDX: 00007fe84dcf6f10 RSI: 0000000000000058 RDI: 00007fe84dcf6f10 [ 236.656668][T15116] RBP: 00007fe84f337b70 R08: 0000000000000000 R09: 0000000000000058 [ 236.656686][T15116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.656703][T15116] R13: 00007fe84f526038 R14: 00007fe84f525fa0 R15: 00007fff6a538018 [ 236.656730][T15116] [ 236.849137][ T29] audit: type=1326 audit(1793709471.743:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.1.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5647fb19 code=0x7ffc0000 [ 236.849210][ T29] audit: type=1326 audit(1793709471.743:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.1.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5647fb19 code=0x7ffc0000 [ 236.857771][ T29] audit: type=1326 audit(1793709471.753:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.1.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5647fb19 code=0x7ffc0000 [ 236.857884][ T29] audit: type=1326 audit(1793709471.753:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.1.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5647fb19 code=0x7ffc0000 [ 237.004255][T15127] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4057'. [ 237.042961][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4059'. [ 237.042983][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4059'. [ 237.043007][T15135] netlink: 'syz.6.4059': attribute type 6 has an invalid length. [ 237.105371][T12027] netdevsim netdevsim6 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 237.105411][T12027] netdevsim netdevsim6 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 237.105451][T12027] netdevsim netdevsim6 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 237.105575][T12027] netdevsim netdevsim6 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 238.042998][T15166] FAULT_INJECTION: forcing a failure. [ 238.042998][T15166] name failslab, interval 1, probability 0, space 0, times 0 [ 238.043039][T15166] CPU: 1 UID: 0 PID: 15166 Comm: syz.2.4070 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 238.043071][T15166] Tainted: [W]=WARN [ 238.043077][T15166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 238.043090][T15166] Call Trace: [ 238.043096][T15166] [ 238.043103][T15166] __dump_stack+0x1d/0x30 [ 238.043132][T15166] dump_stack_lvl+0x95/0xd0 [ 238.043155][T15166] dump_stack+0x15/0x1b [ 238.043175][T15166] should_fail_ex+0x259/0x270 [ 238.043212][T15166] ? vm_area_dup+0x33/0x300 [ 238.043246][T15166] should_failslab+0x8c/0xb0 [ 238.043287][T15166] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 238.043339][T15166] ? vm_area_dup+0x33/0x300 [ 238.043366][T15166] vm_area_dup+0x33/0x300 [ 238.043394][T15166] dup_mmap+0x4dc/0x1120 [ 238.043420][T15166] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 238.043444][T15166] ? __list_add_valid_or_report+0x38/0xe0 [ 238.043470][T15166] copy_mm+0xf5/0x340 [ 238.043496][T15166] copy_process+0x10e9/0x2400 [ 238.043530][T15166] kernel_clone+0x1c0/0x5f0 [ 238.043569][T15166] __se_sys_clone3+0x1f5/0x230 [ 238.043610][T15166] ? switch_fpu_return+0xe7/0x1b0 [ 238.043636][T15166] __x64_sys_clone3+0x31/0x40 [ 238.043671][T15166] x64_sys_call+0x437/0x2550 [ 238.043698][T15166] do_syscall_64+0x112/0x360 [ 238.043738][T15166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.043762][T15166] RIP: 0033:0x7f5683b2fb19 [ 238.043778][T15166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.043798][T15166] RSP: 002b:00007f568257eef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 238.043817][T15166] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5683b2fb19 [ 238.043833][T15166] RDX: 00007f568257ef10 RSI: 0000000000000058 RDI: 00007f568257ef10 [ 238.043852][T15166] RBP: 00007f5683bc7b70 R08: 0000000000000000 R09: 0000000000000058 [ 238.043870][T15166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.043888][T15166] R13: 00007f5683db6038 R14: 00007f5683db5fa0 R15: 00007ffdd4fa1c98 [ 238.043914][T15166] [ 238.169334][T15170] FAULT_INJECTION: forcing a failure. [ 238.169334][T15170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.169556][T15170] CPU: 0 UID: 0 PID: 15170 Comm: syz.6.4071 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 238.169672][T15170] Tainted: [W]=WARN [ 238.169695][T15170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 238.169741][T15170] Call Trace: [ 238.169762][T15170] [ 238.169792][T15170] __dump_stack+0x1d/0x30 [ 238.169877][T15170] dump_stack_lvl+0x95/0xd0 [ 238.169952][T15170] dump_stack+0x15/0x1b [ 238.170072][T15170] should_fail_ex+0x259/0x270 [ 238.170153][T15170] should_fail+0xb/0x20 [ 238.170259][T15170] should_fail_usercopy+0x1a/0x20 [ 238.170364][T15170] _copy_to_user+0x20/0xa0 [ 238.170503][T15170] bpf_verifier_vlog+0x3c5/0x5a0 [ 238.170651][T15170] btf_verifier_log+0xb2/0xf0 [ 238.170738][T15170] ? __btf_verifier_log+0x7f/0xb0 [ 238.170894][T15170] btf_func_proto_log+0x2ef/0x4a0 [ 238.171106][T15170] __btf_verifier_log_type+0x275/0x330 [ 238.171190][T15170] ? sort+0x6a/0xa0 [ 238.171331][T15170] btf_func_proto_check_meta+0xcd/0x100 [ 238.171426][T15170] btf_parse_type_sec+0x284/0x15b0 [ 238.171565][T15170] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 238.171691][T15170] ? btf_parse_hdr+0x43a/0x440 [ 238.171792][T15170] ? btf_parse_str_sec+0x1ae/0x1b0 [ 238.171888][T15170] btf_new_fd+0x2ec/0x6a0 [ 238.172003][T15170] bpf_btf_load+0x116/0x130 [ 238.172081][T15170] __sys_bpf+0xbee/0xc50 [ 238.172177][T15170] ? do_futex+0x340/0x460 [ 238.172334][T15170] __x64_sys_bpf+0x69/0x80 [ 238.172407][T15170] x64_sys_call+0xf26/0x2550 [ 238.172505][T15170] do_syscall_64+0x112/0x360 [ 238.172612][T15170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.172687][T15170] RIP: 0033:0x7fe84f29fb19 [ 238.172728][T15170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.172805][T15170] RSP: 002b:00007fe84dcf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.172880][T15170] RAX: ffffffffffffffda RBX: 00007fe84f525fa0 RCX: 00007fe84f29fb19 [ 238.172926][T15170] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 238.172963][T15170] RBP: 00007fe84f337b70 R08: 0000000000000000 R09: 0000000000000000 [ 238.172997][T15170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.173086][T15170] R13: 00007fe84f526038 R14: 00007fe84f525fa0 R15: 00007fff6a538018 [ 238.173167][T15170] [ 238.523256][T15174] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4073'. [ 238.622160][T15182] FAULT_INJECTION: forcing a failure. [ 238.622160][T15182] name failslab, interval 1, probability 0, space 0, times 0 [ 238.622289][T15182] CPU: 0 UID: 0 PID: 15182 Comm: syz.2.4077 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 238.622323][T15182] Tainted: [W]=WARN [ 238.622333][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 238.622350][T15182] Call Trace: [ 238.622359][T15182] [ 238.622369][T15182] __dump_stack+0x1d/0x30 [ 238.622448][T15182] dump_stack_lvl+0x95/0xd0 [ 238.622479][T15182] dump_stack+0x15/0x1b [ 238.622507][T15182] should_fail_ex+0x259/0x270 [ 238.622598][T15182] ? rxrpc_alloc_data_txbuf+0x70/0x360 [ 238.622704][T15182] should_failslab+0x8c/0xb0 [ 238.622747][T15182] __kmalloc_cache_noprof+0x5d/0x3e0 [ 238.622869][T15182] ? rxrpc_alloc_data_txbuf+0x70/0x360 [ 238.622906][T15182] rxrpc_alloc_data_txbuf+0x70/0x360 [ 238.622943][T15182] none_alloc_txbuf+0x35/0x40 [ 238.623059][T15182] ? __pfx_none_alloc_txbuf+0x10/0x10 [ 238.623091][T15182] rxrpc_send_data+0x9bc/0x1bf0 [ 238.623128][T15182] ? __pfx_default_wake_function+0x10/0x10 [ 238.623217][T15182] rxrpc_do_sendmsg+0xd7d/0xe10 [ 238.623266][T15182] ? rxrpc_do_sendmsg+0x5b1/0xe10 [ 238.623299][T15182] rxrpc_sendmsg+0x46c/0x580 [ 238.623326][T15182] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 238.623400][T15182] ____sys_sendmsg+0x54a/0x590 [ 238.623427][T15182] ___sys_sendmsg+0x195/0x1e0 [ 238.623470][T15182] __x64_sys_sendmsg+0xd4/0x160 [ 238.623518][T15182] x64_sys_call+0x22ab/0x2550 [ 238.623571][T15182] do_syscall_64+0x112/0x360 [ 238.623673][T15182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.623752][T15182] RIP: 0033:0x7f5683b2fb19 [ 238.623771][T15182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.623789][T15182] RSP: 002b:00007f568257f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.623882][T15182] RAX: ffffffffffffffda RBX: 00007f5683db5fa0 RCX: 00007f5683b2fb19 [ 238.623902][T15182] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000004 [ 238.623920][T15182] RBP: 00007f5683bc7b70 R08: 0000000000000000 R09: 0000000000000000 [ 238.623937][T15182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.623950][T15182] R13: 00007f5683db6038 R14: 00007f5683db5fa0 R15: 00007ffdd4fa1c98 [ 238.623969][T15182] [ 238.929814][T15193] loop1: detected capacity change from 0 to 128 [ 239.110155][T15196] FAULT_INJECTION: forcing a failure. [ 239.110155][T15196] name failslab, interval 1, probability 0, space 0, times 0 [ 239.110201][T15196] CPU: 1 UID: 0 PID: 15196 Comm: syz.1.4082 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 239.110269][T15196] Tainted: [W]=WARN [ 239.110278][T15196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 239.110389][T15196] Call Trace: [ 239.110398][T15196] [ 239.110407][T15196] __dump_stack+0x1d/0x30 [ 239.110447][T15196] dump_stack_lvl+0x95/0xd0 [ 239.110482][T15196] dump_stack+0x15/0x1b [ 239.110513][T15196] should_fail_ex+0x259/0x270 [ 239.110604][T15196] should_failslab+0x8c/0xb0 [ 239.110655][T15196] __kvmalloc_node_noprof+0x14f/0x5b0 [ 239.110827][T15196] ? bpf_test_run_xdp_live+0x17b/0x1330 [ 239.110909][T15196] ? bpf_test_run_xdp_live+0x17b/0x1330 [ 239.110936][T15196] bpf_test_run_xdp_live+0x17b/0x1330 [ 239.110967][T15196] ? kmem_cache_alloc_noprof+0x179/0x3d0 [ 239.111118][T15196] ? security_inode_alloc+0x37/0x100 [ 239.111164][T15196] ? ns_to_timespec64+0x21/0xb0 [ 239.111280][T15196] ? set_normalized_timespec64+0xe0/0x110 [ 239.111325][T15196] ? inode_doinit_with_dentry+0x98/0x7b0 [ 239.111377][T15196] ? inode_set_ctime_current+0x65b/0x8f0 [ 239.111444][T15196] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 239.111494][T15196] ? _copy_from_user+0x89/0xb0 [ 239.111528][T15196] ? bpf_test_init+0xf4/0x130 [ 239.111586][T15196] bpf_prog_test_run_xdp+0x559/0x9e0 [ 239.111645][T15196] ? __rcu_read_unlock+0x4e/0x70 [ 239.111678][T15196] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 239.111704][T15196] bpf_prog_test_run+0x208/0x340 [ 239.111781][T15196] __sys_bpf+0x914/0xc50 [ 239.111878][T15196] ? do_futex+0x340/0x460 [ 239.111984][T15196] __x64_sys_bpf+0x69/0x80 [ 239.112010][T15196] x64_sys_call+0xf26/0x2550 [ 239.112091][T15196] do_syscall_64+0x112/0x360 [ 239.112147][T15196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.112181][T15196] RIP: 0033:0x7f7a5647fb19 [ 239.112202][T15196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.112278][T15196] RSP: 002b:00007f7a54ed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.112301][T15196] RAX: ffffffffffffffda RBX: 00007f7a56705fa0 RCX: 00007f7a5647fb19 [ 239.112326][T15196] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 239.112347][T15196] RBP: 00007f7a56517b70 R08: 0000000000000000 R09: 0000000000000000 [ 239.112369][T15196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.112385][T15196] R13: 00007f7a56706038 R14: 00007f7a56705fa0 R15: 00007ffed2170388 [ 239.112422][T15196] [ 239.797596][T15214] FAULT_INJECTION: forcing a failure. [ 239.797596][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 239.797636][T15214] CPU: 0 UID: 0 PID: 15214 Comm: syz.6.4089 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 239.797744][T15214] Tainted: [W]=WARN [ 239.797753][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 239.797771][T15214] Call Trace: [ 239.797779][T15214] [ 239.797789][T15214] __dump_stack+0x1d/0x30 [ 239.797834][T15214] dump_stack_lvl+0x95/0xd0 [ 239.797929][T15214] dump_stack+0x15/0x1b [ 239.797958][T15214] should_fail_ex+0x259/0x270 [ 239.797995][T15214] ? rxrpc_alloc_data_txbuf+0x70/0x360 [ 239.798056][T15214] should_failslab+0x8c/0xb0 [ 239.798097][T15214] __kmalloc_cache_noprof+0x5d/0x3e0 [ 239.798166][T15214] ? rxrpc_alloc_data_txbuf+0x70/0x360 [ 239.798202][T15214] rxrpc_alloc_data_txbuf+0x70/0x360 [ 239.798243][T15214] none_alloc_txbuf+0x35/0x40 [ 239.798273][T15214] ? __pfx_none_alloc_txbuf+0x10/0x10 [ 239.798296][T15214] rxrpc_send_data+0x9bc/0x1bf0 [ 239.798379][T15214] ? __pfx_default_wake_function+0x10/0x10 [ 239.798446][T15214] rxrpc_do_sendmsg+0xd7d/0xe10 [ 239.798476][T15214] ? rxrpc_do_sendmsg+0x5b1/0xe10 [ 239.798577][T15214] rxrpc_sendmsg+0x46c/0x580 [ 239.798623][T15214] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 239.798705][T15214] ____sys_sendmsg+0x54a/0x590 [ 239.798736][T15214] ___sys_sendmsg+0x195/0x1e0 [ 239.798778][T15214] __x64_sys_sendmsg+0xd4/0x160 [ 239.798865][T15214] x64_sys_call+0x22ab/0x2550 [ 239.798891][T15214] do_syscall_64+0x112/0x360 [ 239.798929][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.798960][T15214] RIP: 0033:0x7fe84f29fb19 [ 239.799033][T15214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.799053][T15214] RSP: 002b:00007fe84dcf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.799076][T15214] RAX: ffffffffffffffda RBX: 00007fe84f525fa0 RCX: 00007fe84f29fb19 [ 239.799096][T15214] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000004 [ 239.799114][T15214] RBP: 00007fe84f337b70 R08: 0000000000000000 R09: 0000000000000000 [ 239.799131][T15214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.799148][T15214] R13: 00007fe84f526038 R14: 00007fe84f525fa0 R15: 00007fff6a538018 [ 239.799179][T15214] [ 240.447641][T15229] FAULT_INJECTION: forcing a failure. [ 240.447641][T15229] name failslab, interval 1, probability 0, space 0, times 0 [ 240.447684][T15229] CPU: 0 UID: 0 PID: 15229 Comm: syz.8.4094 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 240.447794][T15229] Tainted: [W]=WARN [ 240.447803][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 240.447820][T15229] Call Trace: [ 240.447826][T15229] [ 240.447833][T15229] __dump_stack+0x1d/0x30 [ 240.447859][T15229] dump_stack_lvl+0x95/0xd0 [ 240.447882][T15229] dump_stack+0x15/0x1b [ 240.447919][T15229] should_fail_ex+0x259/0x270 [ 240.447947][T15229] should_failslab+0x8c/0xb0 [ 240.447978][T15229] __kvmalloc_node_noprof+0x14f/0x5b0 [ 240.448078][T15229] ? bpf_test_run_xdp_live+0x17b/0x1330 [ 240.448103][T15229] ? bpf_test_run_xdp_live+0x17b/0x1330 [ 240.448126][T15229] bpf_test_run_xdp_live+0x17b/0x1330 [ 240.448209][T15229] ? kmem_cache_alloc_noprof+0x179/0x3d0 [ 240.448239][T15229] ? security_inode_alloc+0x37/0x100 [ 240.448297][T15229] ? selinux_inode_alloc_security+0x103/0x130 [ 240.448323][T15229] ? set_normalized_timespec64+0xe0/0x110 [ 240.448429][T15229] ? rb_insert_color+0x26f/0x2a0 [ 240.448473][T15229] ? __css_rstat_updated+0xbb/0x280 [ 240.448522][T15229] ? timerqueue_linked_add+0x1a9/0x1f0 [ 240.448568][T15229] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 240.448603][T15229] ? _copy_from_user+0x89/0xb0 [ 240.448640][T15229] ? bpf_test_init+0xf4/0x130 [ 240.448749][T15229] bpf_prog_test_run_xdp+0x559/0x9e0 [ 240.448779][T15229] ? __rcu_read_unlock+0x4e/0x70 [ 240.448817][T15229] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 240.448925][T15229] bpf_prog_test_run+0x208/0x340 [ 240.448964][T15229] __sys_bpf+0x914/0xc50 [ 240.449057][T15229] ? do_futex+0x340/0x460 [ 240.449158][T15229] __x64_sys_bpf+0x69/0x80 [ 240.449184][T15229] x64_sys_call+0xf26/0x2550 [ 240.449256][T15229] do_syscall_64+0x112/0x360 [ 240.449301][T15229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.449332][T15229] RIP: 0033:0x7f1a613afb19 [ 240.449354][T15229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.449457][T15229] RSP: 002b:00007f1a5fe07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.449487][T15229] RAX: ffffffffffffffda RBX: 00007f1a61635fa0 RCX: 00007f1a613afb19 [ 240.449507][T15229] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 240.449572][T15229] RBP: 00007f1a61447b70 R08: 0000000000000000 R09: 0000000000000000 [ 240.449590][T15229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.449608][T15229] R13: 00007f1a61636038 R14: 00007f1a61635fa0 R15: 00007ffd88190598 [ 240.449635][T15229] [ 240.657238][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 240.657283][ T29] audit: type=1326 audit(1793709475.553:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15230 comm="syz.6.4095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84f29fb19 code=0x7ffc0000 [ 240.659153][ T29] audit: type=1326 audit(1793709475.563:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15230 comm="syz.6.4095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84f29fb19 code=0x7ffc0000 [ 240.789122][ T29] audit: type=1326 audit(1793709475.693:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.3.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704772fb19 code=0x7ffc0000 [ 240.789194][ T29] audit: type=1326 audit(1793709475.693:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.3.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704772fb19 code=0x7ffc0000 [ 240.792210][ T29] audit: type=1326 audit(1793709475.693:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.3.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f704772fb19 code=0x7ffc0000 [ 240.884886][T15238] loop8: detected capacity change from 0 to 8192 [ 240.885170][T15238] msdos: Unknown parameter '' [ 240.911371][ T29] audit: type=1326 audit(1793709475.813:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.3.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704772fb19 code=0x7ffc0000 [ 240.911411][ T29] audit: type=1326 audit(1793709475.813:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.3.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704772fb19 code=0x7ffc0000 [ 241.199002][T15257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4105'. [ 241.243481][T15260] bridge0: port 3(team0) entered blocking state [ 241.243513][T15260] bridge0: port 3(team0) entered forwarding state [ 241.243614][T15260] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.243646][T15260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.243822][T15260] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.243853][T15260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.300748][T15262] tap0: tun_chr_ioctl cmd 1074025677 [ 241.300773][T15262] tap0: Linktype set failed because interface is up [ 241.327538][T10098] tap0: tun_net_xmit 90 [ 242.330004][T15283] loop6: detected capacity change from 0 to 8192 [ 242.333881][T15283] msdos: Unknown parameter '' [ 242.879932][T15320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=15320 comm=syz.1.4131 [ 243.695156][T15366] netlink: 'syz.2.4163': attribute type 15 has an invalid length. [ 243.708800][T15366] netlink: 'syz.2.4163': attribute type 15 has an invalid length. [ 243.717480][T12072] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 243.718198][T12072] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 243.718405][T12072] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 243.718500][T12072] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 243.856070][T15385] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 244.257448][T15405] loop2: detected capacity change from 0 to 512 [ 244.262397][T15405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 244.262447][T15405] System zones: 1-12 [ 244.263164][T15405] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.4167: missing EA_INODE flag [ 244.263194][T15405] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 244.263344][T15405] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.4167: error while reading EA inode 12 err=-117 [ 244.263400][T15405] loop2: lost filesystem error report for type 5 error -117 [ 244.263540][T15405] EXT4-fs (loop2): 1 orphan inode deleted [ 244.264068][T15405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.354597][ T29] audit: type=1400 audit(1793709479.253:2724): avc: denied { write } for pid=15404 comm="syz.2.4167" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.362373][T15405] EXT4-fs (loop2): Online defrag not supported for non-extent files [ 244.379180][ T29] audit: type=1400 audit(1793709479.263:2725): avc: denied { write } for pid=15404 comm="syz.2.4167" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.421480][T10007] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.718483][T15427] netlink: 'syz.1.4174': attribute type 15 has an invalid length. [ 244.725764][T15427] netlink: 'syz.1.4174': attribute type 15 has an invalid length. [ 244.747745][T12027] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 244.747793][T12027] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 244.747882][T12027] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 244.747929][T12027] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 244.941313][T15438] ip_tables: iptables: counters copy to user failed while replacing table [ 244.941584][T15438] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 245.298055][T15461] loop6: detected capacity change from 0 to 512 [ 245.313321][T15461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.313467][T15461] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.316741][T12027] Bluetooth: hci0: Frame reassembly failed (-84) [ 245.674028][ T29] audit: type=1400 audit(1793709480.573:2726): avc: denied { ioctl } for pid=15466 comm="syz.2.4189" path="socket:[42642]" dev="sockfs" ino=42642 ioctlcmd=0x80047437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 245.886725][T15473] FAULT_INJECTION: forcing a failure. [ 245.886725][T15473] name failslab, interval 1, probability 0, space 0, times 0 [ 245.886766][T15473] CPU: 1 UID: 0 PID: 15473 Comm: syz.2.4193 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 245.886827][T15473] Tainted: [W]=WARN [ 245.886834][T15473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 245.886873][T15473] Call Trace: [ 245.886882][T15473] [ 245.886892][T15473] __dump_stack+0x1d/0x30 [ 245.886922][T15473] dump_stack_lvl+0x95/0xd0 [ 245.886986][T15473] dump_stack+0x15/0x1b [ 245.887015][T15473] should_fail_ex+0x259/0x270 [ 245.887109][T15473] ? __alloc_skb+0x2e0/0x6f0 [ 245.887149][T15473] should_failslab+0x8c/0xb0 [ 245.887192][T15473] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 245.887234][T15473] ? __alloc_skb+0x2e0/0x6f0 [ 245.887340][T15473] __alloc_skb+0x2e0/0x6f0 [ 245.887431][T15473] ? __alloc_skb+0x209/0x6f0 [ 245.887470][T15473] tc_ctl_action+0x657/0x8c0 [ 245.887561][T15473] ? __pfx_tc_ctl_action+0x10/0x10 [ 245.887599][T15473] rtnetlink_rcv_msg+0x6a7/0x720 [ 245.887644][T15473] ? __copy_skb_header+0x22f/0x2b0 [ 245.887666][T15473] netlink_rcv_skb+0x11e/0x220 [ 245.887685][T15473] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.887796][T15473] rtnetlink_rcv+0x1c/0x30 [ 245.887821][T15473] netlink_unicast+0x665/0x740 [ 245.887856][T15473] netlink_sendmsg+0x5ef/0x740 [ 245.887909][T15473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.887988][T15473] ____sys_sendmsg+0x54a/0x590 [ 245.888016][T15473] ___sys_sendmsg+0x195/0x1e0 [ 245.888054][T15473] __x64_sys_sendmsg+0xd4/0x160 [ 245.888083][T15473] x64_sys_call+0x22ab/0x2550 [ 245.888192][T15473] do_syscall_64+0x112/0x360 [ 245.888236][T15473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.888266][T15473] RIP: 0033:0x7f5683b2fb19 [ 245.888347][T15473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.888373][T15473] RSP: 002b:00007f568257f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.888427][T15473] RAX: ffffffffffffffda RBX: 00007f5683db5fa0 RCX: 00007f5683b2fb19 [ 245.888446][T15473] RDX: 0000000000000080 RSI: 0000200000000740 RDI: 0000000000000004 [ 245.888463][T15473] RBP: 00007f5683bc7b70 R08: 0000000000000000 R09: 0000000000000000 [ 245.888479][T15473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.888534][T15473] R13: 00007f5683db6038 R14: 00007f5683db5fa0 R15: 00007ffdd4fa1c98 [ 245.888642][T15473] [ 246.144713][T15479] FAULT_INJECTION: forcing a failure. [ 246.144713][T15479] name failslab, interval 1, probability 0, space 0, times 0 [ 246.144747][T15479] CPU: 0 UID: 0 PID: 15479 Comm: syz.1.4195 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 246.144777][T15479] Tainted: [W]=WARN [ 246.144784][T15479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 246.144798][T15479] Call Trace: [ 246.144846][T15479] [ 246.144859][T15479] __dump_stack+0x1d/0x30 [ 246.144894][T15479] dump_stack_lvl+0x95/0xd0 [ 246.145000][T15479] dump_stack+0x15/0x1b [ 246.145029][T15479] should_fail_ex+0x259/0x270 [ 246.145066][T15479] ? snd_timer_instance_new+0x31/0x180 [ 246.145099][T15479] should_failslab+0x8c/0xb0 [ 246.145207][T15479] __kmalloc_cache_noprof+0x5d/0x3e0 [ 246.145291][T15479] ? should_fail_ex+0xdb/0x270 [ 246.145315][T15479] ? snd_timer_instance_new+0x31/0x180 [ 246.145350][T15479] snd_timer_instance_new+0x31/0x180 [ 246.145541][T15479] snd_seq_timer_open+0x12b/0x340 [ 246.145569][T15479] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 246.145603][T15479] snd_seq_queue_alloc+0x23f/0x3f0 [ 246.145645][T15479] snd_seq_ioctl_create_queue+0x4d/0x1b0 [ 246.145710][T15479] snd_seq_ioctl+0x17d/0x2d0 [ 246.145749][T15479] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 246.145851][T15479] __se_sys_ioctl+0xce/0x140 [ 246.145970][T15479] __x64_sys_ioctl+0x43/0x50 [ 246.146100][T15479] x64_sys_call+0x239d/0x2550 [ 246.146139][T15479] do_syscall_64+0x112/0x360 [ 246.146175][T15479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.146205][T15479] RIP: 0033:0x7f7a5647fb19 [ 246.146227][T15479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.146254][T15479] RSP: 002b:00007f7a54ed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.146280][T15479] RAX: ffffffffffffffda RBX: 00007f7a56705fa0 RCX: 00007f7a5647fb19 [ 246.146300][T15479] RDX: 00002000000001c0 RSI: 00000000c08c5332 RDI: 0000000000000003 [ 246.146318][T15479] RBP: 00007f7a56517b70 R08: 0000000000000000 R09: 0000000000000000 [ 246.146364][T15479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.146390][T15479] R13: 00007f7a56706038 R14: 00007f7a56705fa0 R15: 00007ffed2170388 [ 246.146416][T15479] [ 246.622698][T15496] FAULT_INJECTION: forcing a failure. [ 246.622698][T15496] name failslab, interval 1, probability 0, space 0, times 0 [ 246.622739][T15496] CPU: 0 UID: 0 PID: 15496 Comm: syz.8.4213 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 246.622770][T15496] Tainted: [W]=WARN [ 246.622777][T15496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 246.622793][T15496] Call Trace: [ 246.622802][T15496] [ 246.622812][T15496] __dump_stack+0x1d/0x30 [ 246.622842][T15496] dump_stack_lvl+0x95/0xd0 [ 246.622965][T15496] dump_stack+0x15/0x1b [ 246.622998][T15496] should_fail_ex+0x259/0x270 [ 246.623050][T15496] ? usb_control_msg+0x58/0x240 [ 246.623078][T15496] should_failslab+0x8c/0xb0 [ 246.623198][T15496] __kmalloc_cache_noprof+0x5d/0x3e0 [ 246.623379][T15496] ? usb_start_wait_urb+0x1e7/0x220 [ 246.623400][T15496] ? usb_control_msg+0x58/0x240 [ 246.623430][T15496] usb_control_msg+0x58/0x240 [ 246.623455][T15496] hub_ext_port_status+0xb4/0x410 [ 246.623557][T15496] hub_activate+0x4d4/0x11b0 [ 246.623587][T15496] hub_resume+0x47/0x1e0 [ 246.623670][T15496] usb_resume_both+0x3ea/0x5b0 [ 246.623712][T15496] ? __pfx_usb_runtime_resume+0x10/0x10 [ 246.623751][T15496] usb_runtime_resume+0x21/0x30 [ 246.623875][T15496] __rpm_callback+0x26e/0x660 [ 246.623916][T15496] ? __pfx_usb_runtime_resume+0x10/0x10 [ 246.623980][T15496] rpm_resume+0x94e/0xce0 [ 246.624057][T15496] __pm_runtime_resume+0x58/0x80 [ 246.624090][T15496] usb_autoresume_device+0x23/0xc0 [ 246.624190][T15496] usbdev_open+0x102/0x450 [ 246.624235][T15496] chrdev_open+0x2eb/0x3a0 [ 246.624263][T15496] do_dentry_open+0x496/0xa40 [ 246.624329][T15496] ? __pfx_chrdev_open+0x10/0x10 [ 246.624349][T15496] vfs_open_consume+0x46/0x1f0 [ 246.624449][T15496] path_openat+0xc16/0x11c0 [ 246.624491][T15496] do_file_open+0x16c/0x290 [ 246.624538][T15496] do_sys_openat2+0xa1/0x140 [ 246.624659][T15496] __x64_sys_openat+0xf2/0x120 [ 246.624692][T15496] x64_sys_call+0x1f72/0x2550 [ 246.624742][T15496] do_syscall_64+0x112/0x360 [ 246.624839][T15496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.624933][T15496] RIP: 0033:0x7f1a6137034e [ 246.624949][T15496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 246.624973][T15496] RSP: 002b:00007f1a5fe06b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.625009][T15496] RAX: ffffffffffffffda RBX: 00007f1a5fe076c0 RCX: 00007f1a6137034e [ 246.625103][T15496] RDX: 0000000000101301 RSI: 00007f1a5fe06c00 RDI: ffffffffffffff9c [ 246.625121][T15496] RBP: 00007f1a5fe06c00 R08: 0000000000000000 R09: 0000000000000000 [ 246.625139][T15496] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 246.625158][T15496] R13: 00007f1a61636038 R14: 00007f1a61635fa0 R15: 00007ffd88190598 [ 246.625184][T15496] [ 246.892510][ T29] audit: type=1400 audit(1793709481.783:2727): avc: denied { mounton } for pid=15500 comm="syz.8.4205" path="/415/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 247.327205][ T3666] Bluetooth: hci0: command 0x1003 tx timeout [ 247.327242][T10844] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 247.353970][T14013] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.629203][T15537] rxe_eth0 speed is unknown, defaulting to 1000 [ 247.915699][T12027] IPVS: starting estimator thread 0... [ 247.997288][T15551] IPVS: using max 1728 ests per chain, 86400 per kthread [ 248.105917][T15559] 9pnet: p9_errstr2errno: server reported unknown error 000 [ 248.624946][T15578] geneve3: entered promiscuous mode [ 248.625006][T15578] geneve3: entered allmulticast mode [ 248.684672][T12071] IPVS: starting estimator thread 0... [ 248.782831][T15588] xt_CT: No such helper "pptp" [ 248.794091][T15584] IPVS: using max 2352 ests per chain, 117600 per kthread [ 248.897244][T15608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4246'. [ 248.979638][T15612] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.563097][T15618] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15618 comm=syz.6.4253 [ 249.873821][T15624] geneve2: entered promiscuous mode [ 249.873846][T15624] geneve2: entered allmulticast mode [ 250.115409][T15647] ================================================================== [ 250.115448][T15647] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 250.115498][T15647] [ 250.115506][T15647] read-write to 0xffffc9000275fcc0 of 8 bytes by task 15648 on cpu 0: [ 250.115529][T15647] shmem_writeout+0x2db/0x8f0 [ 250.115554][T15647] shrink_folio_list+0x1a81/0x2720 [ 250.115582][T15647] evict_folios+0x1dac/0x2980 [ 250.115607][T15647] try_to_shrink_lruvec+0x833/0x9a0 [ 250.115636][T15647] shrink_node+0x943/0x3a90 [ 250.115661][T15647] do_try_to_free_pages+0x310/0xb70 [ 250.115700][T15647] try_to_free_mem_cgroup_pages+0x201/0x420 [ 250.115743][T15647] mem_cgroup_resize_max+0x13d/0x2d0 [ 250.115770][T15647] mem_cgroup_write+0x132/0x1c0 [ 250.115800][T15647] cgroup_file_write+0x197/0x350 [ 250.115822][T15647] kernfs_fop_write_iter+0x1d2/0x2e0 [ 250.115852][T15647] vfs_write+0x57a/0x990 [ 250.115882][T15647] ksys_write+0xdc/0x1a0 [ 250.115921][T15647] __x64_sys_write+0x40/0x50 [ 250.115960][T15647] x64_sys_call+0x154e/0x2550 [ 250.115996][T15647] do_syscall_64+0x112/0x360 [ 250.116036][T15647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.116064][T15647] [ 250.116070][T15647] read to 0xffffc9000275fcc0 of 8 bytes by task 15647 on cpu 1: [ 250.116086][T15647] shmem_fallocate+0x5e2/0x8f0 [ 250.116128][T15647] vfs_fallocate+0x3ac/0x400 [ 250.116170][T15647] file_ioctl+0x4e1/0x5b0 [ 250.116212][T15647] do_vfs_ioctl+0x7c4/0xe50 [ 250.116241][T15647] __se_sys_ioctl+0x82/0x140 [ 250.116274][T15647] __x64_sys_ioctl+0x43/0x50 [ 250.116314][T15647] x64_sys_call+0x239d/0x2550 [ 250.116339][T15647] do_syscall_64+0x112/0x360 [ 250.116376][T15647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.116405][T15647] [ 250.116410][T15647] value changed: 0x000000000000090e -> 0x0000000000000913 [ 250.116425][T15647] [ 250.116430][T15647] Reported by Kernel Concurrency Sanitizer on: [ 250.116449][T15647] CPU: 1 UID: 0 PID: 15647 Comm: syz.1.4262 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 250.116486][T15647] Tainted: [W]=WARN [ 250.116493][T15647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 250.116510][T15647] ==================================================================