last executing test programs: 6m33.687385899s ago: executing program 32 (id=196): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6m9.575637492s ago: executing program 33 (id=518): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtaction={0x98, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x98}}, 0x0) 5m9.220970624s ago: executing program 34 (id=1360): mkdir(0x0, 0x1fe) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="e0b9d5a2a00a3c6ffda2e3861121", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m53.631945816s ago: executing program 35 (id=2232): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m46.742414202s ago: executing program 36 (id=2504): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) setxattr$incfs_metadata(&(0x7f0000000280)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 2m46.049168109s ago: executing program 37 (id=2506): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0xee01) r2 = getpgid(0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xfffffffffffffffa) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x1, r2}) close(r0) 2m33.908525484s ago: executing program 38 (id=2583): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 2m32.544684738s ago: executing program 39 (id=2601): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) 2m26.563030448s ago: executing program 40 (id=2681): ioprio_set$pid(0x3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m20.802085822s ago: executing program 41 (id=2784): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x10) 2m1.839438067s ago: executing program 42 (id=3146): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1m55.007950338s ago: executing program 43 (id=3284): r0 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0x4000000a]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) shmdt(0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m53.604582234s ago: executing program 44 (id=3310): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0x3}, 0x1a3bd, 0x0, 0x11000, 0x7, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m26.98427874s ago: executing program 8 (id=3877): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES16=r0], 0xfdef) 1m26.851078044s ago: executing program 8 (id=3885): munmap(&(0x7f0000243000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2530, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x401, 0x1000, 0x5, 0x8, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0xa) socket(0x2, 0x80805, 0x0) close(0x3) 1m26.445759434s ago: executing program 8 (id=3894): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffc, 0x4e0e7b2abb8edb28, @perf_config_ext={0xc8d, 0x9}, 0x1ccc8, 0x201224, 0x0, 0x6, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r0, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 1m26.238556909s ago: executing program 8 (id=3903): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[], 0x3, 0x2c2, &(0x7f00000006c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x1b7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x107000, 0x0) read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51) 1m26.140840212s ago: executing program 8 (id=3905): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x79, 0x0, 0xe, 0x9, 0x5, 0xf9, 0x7, 0x10, 0x1, 0x4, 0xf9, 0x8, 0x0, 0xd}, 0xe) 1m25.939384487s ago: executing program 8 (id=3911): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) prlimit64(r0, 0xa, 0x0, 0x0) 1m25.917147847s ago: executing program 45 (id=3911): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) prlimit64(r0, 0xa, 0x0, 0x0) 32.935240655s ago: executing program 2 (id=4760): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 32.881845926s ago: executing program 2 (id=4762): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) close(r1) unshare(0x6020400) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 32.845256008s ago: executing program 2 (id=4763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000200000003"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0xc) 32.663771432s ago: executing program 2 (id=4770): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYRES64=0x0], 0x1, 0x2cb, &(0x7f00000001c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1bc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsync(r0) 32.414279588s ago: executing program 2 (id=4776): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 32.301717811s ago: executing program 2 (id=4782): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) 32.253232422s ago: executing program 46 (id=4782): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) 28.35872651s ago: executing program 3 (id=4853): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040007020000020008000100030000000500020003000000050002000800"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 28.257998752s ago: executing program 3 (id=4845): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61"], 0x10c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) 27.795086794s ago: executing program 3 (id=4855): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x1) mlock(&(0x7f0000341000/0x4000)=nil, 0x4000) 27.647395847s ago: executing program 3 (id=4857): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xe5093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 27.491769881s ago: executing program 3 (id=4859): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x810) syz_ublk_setup_io_uring(0x1988, &(0x7f0000000a40)={0x0, 0xacb5, 0x20, 0x0, 0x382, 0x0, r0}, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00), &(0x7f0000000b40)) syz_io_uring_complete(r1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x4}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) 27.315457006s ago: executing program 5 (id=4864): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 27.235881828s ago: executing program 3 (id=4865): r0 = syz_clone(0x4060000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r0) ptrace(0x4208, r0) ptrace(0x4207, r0) 27.232119758s ago: executing program 47 (id=4865): r0 = syz_clone(0x4060000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r0) ptrace(0x4208, r0) ptrace(0x4207, r0) 27.222792788s ago: executing program 5 (id=4867): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x63, &(0x7f0000000140)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) 27.16317873s ago: executing program 5 (id=4869): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x74, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0x5}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x4f, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x17}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x74}}, 0x4008010) 26.971987054s ago: executing program 5 (id=4871): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xe5093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 26.899821186s ago: executing program 5 (id=4873): sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x8001, &(0x7f00000009c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028d060000007d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c0300000000000000724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 25.739711755s ago: executing program 5 (id=4890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x10000, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x1001}}}}}}}, 0x0) 25.655436187s ago: executing program 48 (id=4890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x10000, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x1001}}}}}}}, 0x0) 7.487299483s ago: executing program 0 (id=5139): r0 = syz_io_uring_setup(0x74f9, &(0x7f0000000340)={0x0, 0xff6a, 0x13911, 0x1, 0x200187}, &(0x7f0000003400), &(0x7f0000000240), &(0x7f0000000000)) syz_io_uring_setup(0x7fb5, &(0x7f00000003c0)={0x0, 0x91ed, 0x40, 0x1, 0x2fa}, &(0x7f00000009c0), 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f0000000180), &(0x7f0000000000)) r1 = eventfd2(0x800, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) io_uring_enter(r0, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) 7.338190436s ago: executing program 0 (id=5146): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 7.307161627s ago: executing program 0 (id=5147): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 7.243911139s ago: executing program 0 (id=5148): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.835123569s ago: executing program 0 (id=5154): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='n', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 6.427653629s ago: executing program 9 (id=5157): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 6.317026262s ago: executing program 9 (id=5159): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 5.479950323s ago: executing program 1 (id=5174): socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1d}, 0x0, 0x0, 0x800000, 0x4, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) signalfd4(r0, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 5.410095495s ago: executing program 9 (id=5175): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x4004800}, 0x8000) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 5.346939566s ago: executing program 9 (id=5176): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)='\x00!E', 0x3}], 0x1, 0x8, 0x0) 5.323039637s ago: executing program 0 (id=5177): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000003000000000800004202000090080300", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000050000000300"/24, @ANYRES32, @ANYBLOB="0400a10b1d227e61f7f481f318413199eff3288f1ff01d90b62ad3c215aab3e1e28877fcce3cdaa1633a637a3ca001152419"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.250915999s ago: executing program 49 (id=5177): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000003000000000800004202000090080300", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000050000000300"/24, @ANYRES32, @ANYBLOB="0400a10b1d227e61f7f481f318413199eff3288f1ff01d90b62ad3c215aab3e1e28877fcce3cdaa1633a637a3ca001152419"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.227064899s ago: executing program 1 (id=5180): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000100)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x84290, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x3, 0x0, 0x10002, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3.22584226s ago: executing program 9 (id=5190): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000000040)='./bus\x00', 0x107) mount(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x18800, &(0x7f0000000100)='trans=rdma,\xd6\x17\x0foQW\xbe\xbf\x16S\x84j\xea1Z\x8e\xe9\xc7\x0ep*\xd9\x94Mk\xb9\xc6\x9e\xcf\xd7\x9eoc\xe2(\x03\xc3\xc90$A\x7fL0R\v!{\x8aY\x17\xd0\xa3\xfe\xe3/\xc4\f\b2t\x1c4\x93/^\x91\xe8\xabK\x9e\x14j\xb3\x92\x13\x80sm\xc7\x96\"\xcb\xdc\xcc\xd8\x18\"\x9eT\x97Kh5i\x8f\xfc\xd8=\x8b\xe9\x1b\xce\xf2\xf5$\xf1sa,\x8f\xb6\x89\xcfZ\xa0\xae>Xs=\xadu\x9aQ\xe2z\xaf\x90\x90\x9b\x92\x9b\xeb\aQb#\xec}\xa79\xd7\xe6<6\xadL\xd8$\xd3\xa9\x1d\xd9W\x8a\xb9F\x982%g!\x8a\"@*\xf9\xb8\xc6\xddw\xefY\xefJ\x0e\xc5%S.\n\xde\x95l\xd9\x1cPp\xb3\xfe+rY') 3.134861302s ago: executing program 1 (id=5182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1f}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.060041474s ago: executing program 9 (id=5185): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="500504"], 0x7) 2.947510676s ago: executing program 1 (id=5187): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x90000915, &(0x7f0000000440)) 2.81590671s ago: executing program 1 (id=5191): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000200000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1.167064331s ago: executing program 7 (id=5209): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0x6, @loopback, 0x0, 0x2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1.110113522s ago: executing program 7 (id=5210): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {0x1, 0x6}, [], {0x4, 0x3}, [], {0x10, 0x7}}, 0x24, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) 1.064424153s ago: executing program 7 (id=5211): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000000)) 1.036546914s ago: executing program 7 (id=5212): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write(0xffffffffffffffff, &(0x7f0000000340)='/]', 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x3, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 998.780735ms ago: executing program 7 (id=5213): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 950.072976ms ago: executing program 7 (id=5216): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 763.665261ms ago: executing program 4 (id=5220): perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x526, &(0x7f0000001100)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 723.387602ms ago: executing program 6 (id=5222): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) socket(0x10, 0x5, 0x163) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 599.521945ms ago: executing program 4 (id=5223): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000000)) 585.998386ms ago: executing program 6 (id=5224): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {0x1, 0x6}, [], {0x4, 0x3}, [], {0x10, 0x7}}, 0x24, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) 554.572696ms ago: executing program 4 (id=5225): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0x6, @loopback, 0x0, 0x2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 536.494247ms ago: executing program 4 (id=5226): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write(0xffffffffffffffff, &(0x7f0000000340)='/]', 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x3, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 512.447287ms ago: executing program 6 (id=5227): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 512.280087ms ago: executing program 4 (id=5228): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000006000000ff00000000000000", @ANYRES32, @ANYBLOB="e1ffffffffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 471.014328ms ago: executing program 6 (id=5229): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000040), 0x1, 0x4e6, &(0x7f0000000240)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/19, &(0x7f0000000240)=0x14) 470.878198ms ago: executing program 4 (id=5230): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000180)={r2}) 441.435489ms ago: executing program 6 (id=5231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 6.67721ms ago: executing program 1 (id=5232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/79, &(0x7f0000000080)=0x4f) 0s ago: executing program 6 (id=5242): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x7, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x208c}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) kernel console output (not intermixed with test programs): 0000000000 r/w without journal. Quota mode: writeback. [ 403.224677][T19056] FAULT_INJECTION: forcing a failure. [ 403.224677][T19056] name fail_futex, interval 1, probability 0, space 0, times 0 [ 403.224710][T19056] CPU: 0 UID: 0 PID: 19056 Comm: syz.6.4495 Not tainted syzkaller #0 PREEMPT(lazy) [ 403.224741][T19056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.224755][T19056] Call Trace: [ 403.224764][T19056] [ 403.224774][T19056] __dump_stack+0x1d/0x30 [ 403.224858][T19056] dump_stack_lvl+0x95/0xd0 [ 403.224883][T19056] dump_stack+0x15/0x1b [ 403.224910][T19056] should_fail_ex+0x262/0x280 [ 403.224934][T19056] should_fail+0xb/0x20 [ 403.224954][T19056] get_futex_key+0x12d/0xb10 [ 403.225030][T19056] futex_wait_setup+0x49/0x3e0 [ 403.225133][T19056] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 403.225168][T19056] ? hrtimer_active+0xe4/0x110 [ 403.225216][T19056] __futex_wait+0xa9/0x260 [ 403.225238][T19056] ? __pfx_futex_wake_mark+0x10/0x10 [ 403.225274][T19056] futex_wait+0x98/0x1c0 [ 403.225313][T19056] do_futex+0x391/0x460 [ 403.225342][T19056] ? should_fail_ex+0xdb/0x280 [ 403.225435][T19056] __se_sys_futex+0x2f6/0x370 [ 403.225466][T19056] __x64_sys_futex+0x78/0x90 [ 403.225496][T19056] x64_sys_call+0x22e2/0x2550 [ 403.225523][T19056] do_syscall_64+0x112/0x360 [ 403.225631][T19056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.225655][T19056] RIP: 0033:0x7f4c445be159 [ 403.225674][T19056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.225694][T19056] RSP: 002b:00007f4c430170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 403.225718][T19056] RAX: ffffffffffffffda RBX: 00007f4c44845fa8 RCX: 00007f4c445be159 [ 403.225736][T19056] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4c44845fa8 [ 403.225751][T19056] RBP: 00007f4c44845fa0 R08: 0000000000000000 R09: 0000000000000000 [ 403.225767][T19056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.225782][T19056] R13: 00007f4c44846038 R14: 00007ffd48c3d520 R15: 00007ffd48c3d608 [ 403.225875][T19056] [ 403.278713][T18397] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.659471][T19069] loop4: detected capacity change from 0 to 1024 [ 403.686970][T19069] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 403.687103][T19069] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 403.696271][T19069] JBD2: no valid journal superblock found [ 403.696288][T19069] EXT4-fs (loop4): Could not load journal inode [ 403.855077][ T9130] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 403.855245][ T9130] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 403.874143][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 403.874288][ T29] audit: type=1400 audit(1788397071.711:3422): avc: denied { map } for pid=19077 comm="syz.6.4505" path="socket:[54540]" dev="sockfs" ino=54540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 403.874321][ T29] audit: type=1400 audit(1788397071.711:3423): avc: denied { read } for pid=19077 comm="syz.6.4505" path="socket:[54540]" dev="sockfs" ino=54540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 403.877439][ T9130] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 403.877461][ T9130] i801_smbus 0000:00:01.3: PCI INT A: no GSI [ 403.877521][ T9130] i801_smbus 0000:00:01.3: SMBus base address uninitialized, upgrade BIOS [ 403.954632][ T9132] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 403.965175][ T9132] i801_smbus 0000:00:05.0: SMBus base address uninitialized, upgrade BIOS [ 404.036659][T19082] loop9: detected capacity change from 0 to 256 [ 404.046861][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 404.107696][T19085] loop4: detected capacity change from 0 to 512 [ 404.117842][T19085] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.4509: bg 0: block 5: invalid block bitmap [ 404.117885][T19085] loop4: lost filesystem error report for type 5 error -117 [ 404.130779][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 404.130805][ C1] EXT4-fs (loop4): initial error at time 1788397071: ext4_validate_block_bitmap:436 [ 404.130835][ C1] EXT4-fs (loop4): last error at time 1788397071: ext4_validate_block_bitmap:436 [ 404.133051][T19085] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 404.133137][T19085] loop4: lost filesystem error report for type 5 error -117 [ 404.133560][T19085] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4509: invalid indirect mapped block 3 (level 2) [ 404.133595][T19085] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 404.133958][T19085] EXT4-fs (loop4): 1 orphan inode deleted [ 404.133978][T19085] EXT4-fs (loop4): 1 truncate cleaned up [ 404.134344][T19085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.166218][T18295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.225472][T19089] FAULT_INJECTION: forcing a failure. [ 404.225472][T19089] name fail_futex, interval 1, probability 0, space 0, times 0 [ 404.225506][T19089] CPU: 0 UID: 0 PID: 19089 Comm: syz.4.4510 Not tainted syzkaller #0 PREEMPT(lazy) [ 404.225545][T19089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.225559][T19089] Call Trace: [ 404.225568][T19089] [ 404.225578][T19089] __dump_stack+0x1d/0x30 [ 404.225678][T19089] dump_stack_lvl+0x95/0xd0 [ 404.225703][T19089] dump_stack+0x15/0x1b [ 404.225748][T19089] should_fail_ex+0x262/0x280 [ 404.225772][T19089] should_fail+0xb/0x20 [ 404.225792][T19089] get_futex_key+0x12d/0xb10 [ 404.225823][T19089] futex_wait_setup+0x49/0x3e0 [ 404.225878][T19089] ? __cgroup_account_cputime+0x83/0xa0 [ 404.225902][T19089] ? update_se+0xc5/0x460 [ 404.225928][T19089] __futex_wait+0xa9/0x260 [ 404.225949][T19089] ? __pfx_futex_wake_mark+0x10/0x10 [ 404.225988][T19089] futex_wait+0x98/0x1c0 [ 404.226011][T19089] do_futex+0x391/0x460 [ 404.226048][T19089] ? should_fail_ex+0xdb/0x280 [ 404.226103][T19089] __se_sys_futex+0x2f6/0x370 [ 404.226135][T19089] __x64_sys_futex+0x78/0x90 [ 404.226179][T19089] x64_sys_call+0x22e2/0x2550 [ 404.226206][T19089] do_syscall_64+0x112/0x360 [ 404.226249][T19089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.226278][T19089] RIP: 0033:0x7f01aaa7e159 [ 404.226339][T19089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.226368][T19089] RSP: 002b:00007f01a94d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 404.226392][T19089] RAX: ffffffffffffffda RBX: 00007f01aad05fa8 RCX: 00007f01aaa7e159 [ 404.226408][T19089] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f01aad05fa8 [ 404.226423][T19089] RBP: 00007f01aad05fa0 R08: 0000000000000000 R09: 0000000000000000 [ 404.226439][T19089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.226453][T19089] R13: 00007f01aad06038 R14: 00007ffcf80e80d0 R15: 00007ffcf80e81b8 [ 404.226474][T19089] [ 404.475188][T19096] netlink: 'syz.4.4514': attribute type 1 has an invalid length. [ 404.640977][T19106] syzkaller0: entered promiscuous mode [ 404.641036][T19106] syzkaller0: entered allmulticast mode [ 404.811918][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4522'. [ 404.811950][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4522'. [ 404.848519][ T51] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.848686][ T6910] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.848727][ T6910] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.848811][ T6910] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.500298][T19126] netlink: 'syz.2.4525': attribute type 1 has an invalid length. [ 405.534561][T19124] loop4: detected capacity change from 0 to 8192 [ 405.544088][T19124] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 405.744647][T19139] veth1_to_bond: entered allmulticast mode [ 405.752355][T19139] veth1_to_bond: entered promiscuous mode [ 405.772083][T19139] bridge_slave_0 (unregistering): left allmulticast mode [ 405.772116][T19139] bridge_slave_0 (unregistering): left promiscuous mode [ 405.772159][T19139] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.843267][T19138] veth1_to_bond: left promiscuous mode [ 405.843361][T19138] veth1_to_bond: left allmulticast mode [ 405.880129][T19143] syzkaller0: entered promiscuous mode [ 405.880228][T19143] syzkaller0: entered allmulticast mode [ 405.966992][T19158] loop3: detected capacity change from 0 to 128 [ 405.974264][T19158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 405.974305][T19158] System zones: 1-3, 19-19, 35-36 [ 405.989572][T19158] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 406.003393][T19158] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 406.045980][ T29] audit: type=1326 audit(1788397073.881:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19157 comm="syz.3.4541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2f5510ef31 code=0x7ffc0000 [ 406.047687][ T29] audit: type=1326 audit(1788397073.881:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19157 comm="syz.3.4541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f54eae159 code=0x7ffc0000 [ 406.047718][ T29] audit: type=1326 audit(1788397073.881:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19157 comm="syz.3.4541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f54eae159 code=0x7ffc0000 [ 406.061156][ T29] audit: type=1326 audit(1788397073.901:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19157 comm="syz.3.4541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f54eae159 code=0x7ffc0000 [ 406.061617][ T29] audit: type=1326 audit(1788397073.901:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19157 comm="syz.3.4541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2f5510ef31 code=0x7ffc0000 [ 406.061653][ T29] audit: type=1326 audit(1788397073.901:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19157 comm="syz.3.4541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f54eae159 code=0x7ffc0000 [ 406.061680][ T29] audit: type=1326 audit(1788397073.901:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19157 comm="syz.3.4541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2f5510ef31 code=0x7ffc0000 [ 406.061747][ T29] audit: type=1326 audit(1788397073.901:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19157 comm="syz.3.4541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f54eae159 code=0x7ffc0000 [ 406.068512][ T3515] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 406.181425][T18397] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.278802][T19170] loop2: detected capacity change from 0 to 128 [ 406.323415][T19162] loop4: detected capacity change from 0 to 32768 [ 406.369942][T19162] loop4: p1 p3 < > [ 406.451995][T19180] veth1_to_bond: entered allmulticast mode [ 406.456533][T19180] veth1_to_bond: entered promiscuous mode [ 406.459063][T19180] __nla_validate_parse: 6 callbacks suppressed [ 406.459079][T19180] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4548'. [ 406.473896][T19180] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.516620][T19180] bridge_slave_0 (unregistering): left allmulticast mode [ 406.516711][T19180] bridge_slave_0 (unregistering): left promiscuous mode [ 406.516754][T19180] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.561796][T10963] udevd[10963]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 406.572698][ T4255] udevd[4255]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 406.597506][T19178] veth1_to_bond: left promiscuous mode [ 406.597690][T19178] veth1_to_bond: left allmulticast mode [ 406.696249][T19195] random: crng reseeded on system resumption [ 406.755568][T19200] loop4: detected capacity change from 0 to 128 [ 407.768287][T19225] loop2: detected capacity change from 0 to 32768 [ 407.820132][T19225] loop2: p1 p3 < > [ 408.156308][T10963] udevd[10963]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 408.159010][ T4255] udevd[4255]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 408.232213][T19269] veth1_to_bond: entered allmulticast mode [ 408.235389][T19269] veth1_to_bond: entered promiscuous mode [ 408.235912][T19269] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4586'. [ 408.308990][T19268] veth1_to_bond: left promiscuous mode [ 408.309095][T19268] veth1_to_bond: left allmulticast mode [ 408.911694][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 408.911723][ T29] audit: type=1400 audit(1788397076.751:3465): avc: denied { unmount } for pid=16953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 408.967793][T19290] loop3: detected capacity change from 0 to 32768 [ 409.009746][T19290] loop3: p1 p3 < > [ 409.037459][ T29] audit: type=1326 audit(1788397076.871:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19323 comm="syz.4.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f01ab849f31 code=0x7ffc0000 [ 409.038555][ T29] audit: type=1326 audit(1788397076.881:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19323 comm="syz.4.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aaa7e159 code=0x7ffc0000 [ 409.038723][ T29] audit: type=1326 audit(1788397076.881:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19323 comm="syz.4.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aaa7e159 code=0x7ffc0000 [ 409.038889][ T29] audit: type=1326 audit(1788397076.881:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19323 comm="syz.4.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f01ab849f31 code=0x7ffc0000 [ 409.039131][ T29] audit: type=1326 audit(1788397076.881:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19323 comm="syz.4.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aaa7e159 code=0x7ffc0000 [ 409.039765][ T29] audit: type=1326 audit(1788397076.881:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19323 comm="syz.4.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f01ab849f31 code=0x7ffc0000 [ 409.040182][ T29] audit: type=1326 audit(1788397076.881:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19323 comm="syz.4.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f01aaa7e159 code=0x7ffc0000 [ 409.040310][ T29] audit: type=1326 audit(1788397076.881:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19323 comm="syz.4.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f01ab849f31 code=0x7ffc0000 [ 409.040570][ T29] audit: type=1326 audit(1788397076.881:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19323 comm="syz.4.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aaa7e159 code=0x7ffc0000 [ 409.195336][T19329] loop2: detected capacity change from 0 to 256 [ 409.237592][ T9128] Bluetooth: hci0: Frame reassembly failed (-84) [ 409.377514][T10963] udevd[10963]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 409.378126][ T4255] udevd[4255]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 409.587751][T19359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4620'. [ 409.685402][T19361] bond1: entered allmulticast mode [ 410.163949][T19383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.164054][T19383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.769580][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4659'. [ 410.825839][T19432] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4651'. [ 410.828048][T19432] ip6gre1: entered promiscuous mode [ 410.828069][T19432] ip6gre1: entered allmulticast mode [ 411.268411][ T3515] Bluetooth: hci0: command 0x1003 tx timeout [ 411.274640][T19083] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 411.352500][T19447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.352617][T19447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.412348][T19451] bond1: entered allmulticast mode [ 411.893639][T19458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4663'. [ 412.329758][T19500] netlink: 'syz.6.4682': attribute type 4 has an invalid length. [ 412.343448][T19500] netlink: 'syz.6.4682': attribute type 4 has an invalid length. [ 412.422407][T19510] bond2: entered allmulticast mode [ 412.463067][T19517] lo: Caught tx_queue_len zero misconfig [ 412.639526][T19523] loop3: detected capacity change from 0 to 32768 [ 412.689429][T19523] loop3: p1 p3 < > [ 412.846574][T19537] netlink: 'syz.3.4697': attribute type 4 has an invalid length. [ 412.850984][T18297] udevd[18297]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 412.852079][ T4255] udevd[4255]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 412.866696][T19537] netlink: 'syz.3.4697': attribute type 4 has an invalid length. [ 412.935014][T19543] loop3: detected capacity change from 0 to 1024 [ 412.936302][T19543] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 412.940962][T19543] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.4702: lblock 2 mapped to illegal pblock 2 (length 1) [ 412.940999][T19543] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 412.941188][T19543] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.4702: lblock 0 mapped to illegal pblock 48 (length 1) [ 412.941223][T19543] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 412.941381][T19543] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.4702: Failed to acquire dquot type 0 [ 412.941406][T19543] loop3: lost filesystem error report for type 5 error -117 [ 412.941523][T19543] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 412.941566][T19543] loop3: lost filesystem error report for type 5 error -117 [ 412.941671][T19543] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.4702: mark_inode_dirty error [ 412.941696][T19543] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 412.941989][T19543] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 412.942038][T19543] EXT4-fs (loop3): 1 orphan inode deleted [ 412.942520][T19543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.968100][T19340] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 412.980448][T19340] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:30: Failed to release dquot type 0 [ 413.023384][T18397] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.023745][ T38] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 413.023790][ T38] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 413.023973][ T38] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 413.023998][ T38] loop3: lost filesystem error report for type 5 error -117 [ 413.024561][T18397] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 413.024739][T18397] loop3: lost filesystem error report for type 5 error -117 [ 413.024892][T18397] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 413.024911][T18397] loop3: lost filesystem error report for type 5 error -117 [ 413.025014][T18397] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 413.025038][T18397] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 413.025211][T18397] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 413.025244][T18397] loop3: lost filesystem error report for type 5 error -117 [ 413.094185][T19554] syzkaller1: entered promiscuous mode [ 413.094207][T19554] syzkaller1: entered allmulticast mode [ 413.251419][T19557] FAULT_INJECTION: forcing a failure. [ 413.251419][T19557] name fail_futex, interval 1, probability 0, space 0, times 0 [ 413.251455][T19557] CPU: 0 UID: 0 PID: 19557 Comm: syz.4.4707 Not tainted syzkaller #0 PREEMPT(lazy) [ 413.251485][T19557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.251534][T19557] Call Trace: [ 413.251542][T19557] [ 413.251551][T19557] __dump_stack+0x1d/0x30 [ 413.251580][T19557] dump_stack_lvl+0x95/0xd0 [ 413.251658][T19557] dump_stack+0x15/0x1b [ 413.251723][T19557] should_fail_ex+0x262/0x280 [ 413.251757][T19557] should_fail+0xb/0x20 [ 413.251777][T19557] get_futex_key+0x12d/0xb10 [ 413.251868][T19557] futex_wait_setup+0x49/0x3e0 [ 413.251972][T19557] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 413.252008][T19557] ? hrtimer_active+0xe4/0x110 [ 413.252031][T19557] __futex_wait+0xa9/0x260 [ 413.252052][T19557] ? __pfx_futex_wake_mark+0x10/0x10 [ 413.252202][T19557] futex_wait+0x98/0x1c0 [ 413.252225][T19557] do_futex+0x391/0x460 [ 413.252301][T19557] ? should_fail_ex+0xdb/0x280 [ 413.252353][T19557] __se_sys_futex+0x2f6/0x370 [ 413.252384][T19557] __x64_sys_futex+0x78/0x90 [ 413.252440][T19557] x64_sys_call+0x22e2/0x2550 [ 413.252467][T19557] do_syscall_64+0x112/0x360 [ 413.252506][T19557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.252637][T19557] RIP: 0033:0x7f01aaa7e159 [ 413.252722][T19557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.252742][T19557] RSP: 002b:00007f01a94d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 413.252766][T19557] RAX: ffffffffffffffda RBX: 00007f01aad05fa8 RCX: 00007f01aaa7e159 [ 413.252783][T19557] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f01aad05fa8 [ 413.252806][T19557] RBP: 00007f01aad05fa0 R08: 0000000000000000 R09: 0000000000000000 [ 413.252822][T19557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.252900][T19557] R13: 00007f01aad06038 R14: 00007ffcf80e80d0 R15: 00007ffcf80e81b8 [ 413.252920][T19557] [ 413.491780][T19555] loop9: detected capacity change from 0 to 32768 [ 413.541395][T19567] netlink: 'syz.4.4711': attribute type 4 has an invalid length. [ 413.548539][T19555] loop9: p1 p3 < > [ 413.567809][T19567] netlink: 'syz.4.4711': attribute type 4 has an invalid length. [ 413.662952][ T4255] udevd[4255]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 413.662956][T10963] udevd[10963]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 414.424897][T19583] loop4: detected capacity change from 0 to 1024 [ 414.437838][T19583] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 414.442267][T19583] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.4716: lblock 2 mapped to illegal pblock 2 (length 1) [ 414.442313][T19583] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 414.443764][T19583] __quota_error: 39 callbacks suppressed [ 414.443813][T19583] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 414.443833][T19583] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.4716: lblock 0 mapped to illegal pblock 48 (length 1) [ 414.443912][T19583] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 414.444025][T19583] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 414.444042][T19583] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.4716: Failed to acquire dquot type 0 [ 414.444110][T19583] loop4: lost filesystem error report for type 5 error -117 [ 414.444253][T19583] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 414.444273][T19583] loop4: lost filesystem error report for type 5 error -117 [ 414.444376][T19583] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.4716: mark_inode_dirty error [ 414.444442][T19583] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 414.444551][T19583] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 414.444589][T19583] EXT4-fs (loop4): 1 orphan inode deleted [ 414.445069][T19583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.460253][T19343] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 414.460558][T19343] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 414.460579][T19343] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:33: Failed to release dquot type 0 [ 414.466846][T19588] FAULT_INJECTION: forcing a failure. [ 414.466846][T19588] name fail_futex, interval 1, probability 0, space 0, times 0 [ 414.466878][T19588] CPU: 0 UID: 0 PID: 19588 Comm: syz.6.4719 Not tainted syzkaller #0 PREEMPT(lazy) [ 414.466907][T19588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.466968][T19588] Call Trace: [ 414.466976][T19588] [ 414.466984][T19588] __dump_stack+0x1d/0x30 [ 414.467014][T19588] dump_stack_lvl+0x95/0xd0 [ 414.467037][T19588] dump_stack+0x15/0x1b [ 414.467060][T19588] should_fail_ex+0x262/0x280 [ 414.467128][T19588] should_fail+0xb/0x20 [ 414.467148][T19588] get_futex_key+0x12d/0xb10 [ 414.467204][T19588] futex_wait_setup+0x49/0x3e0 [ 414.467239][T19588] ? __cgroup_account_cputime+0x83/0xa0 [ 414.467265][T19588] ? update_se+0xc5/0x460 [ 414.467292][T19588] __futex_wait+0xa9/0x260 [ 414.467313][T19588] ? __pfx_futex_wake_mark+0x10/0x10 [ 414.467365][T19588] futex_wait+0x98/0x1c0 [ 414.467388][T19588] do_futex+0x391/0x460 [ 414.467542][T19588] ? should_fail_ex+0xdb/0x280 [ 414.467565][T19588] __se_sys_futex+0x2f6/0x370 [ 414.467628][T19588] __x64_sys_futex+0x78/0x90 [ 414.467658][T19588] x64_sys_call+0x22e2/0x2550 [ 414.467685][T19588] do_syscall_64+0x112/0x360 [ 414.467730][T19588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.467807][T19588] RIP: 0033:0x7f4c445be159 [ 414.467900][T19588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.467921][T19588] RSP: 002b:00007f4c430170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 414.467944][T19588] RAX: ffffffffffffffda RBX: 00007f4c44845fa8 RCX: 00007f4c445be159 [ 414.467961][T19588] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4c44845fa8 [ 414.467977][T19588] RBP: 00007f4c44845fa0 R08: 0000000000000000 R09: 0000000000000000 [ 414.468067][T19588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.468082][T19588] R13: 00007f4c44846038 R14: 00007ffd48c3d520 R15: 00007ffd48c3d608 [ 414.468102][T19588] [ 414.508155][ T29] audit: type=1400 audit(1788397082.341:3510): avc: denied { write } for pid=19580 comm="syz.4.4716" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.510610][ T29] audit: type=1400 audit(1788397082.351:3511): avc: denied { write } for pid=19580 comm="syz.4.4716" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.552003][T18295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.552718][T19343] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 414.552823][T19343] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 414.552947][T19343] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 414.552968][T19343] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:33: Failed to release dquot type 0 [ 414.553067][T19343] loop4: lost filesystem error report for type 5 error -117 [ 414.557565][T18295] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 414.557651][T18295] loop4: lost filesystem error report for type 5 error -117 [ 414.557821][T18295] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 414.557949][T18295] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 414.557973][T18295] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 414.558124][T18295] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 414.827025][ T29] audit: type=1400 audit(1788397082.661:3512): avc: denied { ioctl } for pid=19612 comm="syz.4.4730" path="socket:[55496]" dev="sockfs" ino=55496 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 415.074365][T19475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.101037][T19616] FAULT_INJECTION: forcing a failure. [ 415.101037][T19616] name fail_futex, interval 1, probability 0, space 0, times 0 [ 415.101176][T19616] CPU: 0 UID: 0 PID: 19616 Comm: syz.2.4731 Not tainted syzkaller #0 PREEMPT(lazy) [ 415.101209][T19616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.101223][T19616] Call Trace: [ 415.101231][T19616] [ 415.101253][T19616] __dump_stack+0x1d/0x30 [ 415.101282][T19616] dump_stack_lvl+0x95/0xd0 [ 415.101326][T19616] dump_stack+0x15/0x1b [ 415.101349][T19616] should_fail_ex+0x262/0x280 [ 415.101383][T19616] should_fail+0xb/0x20 [ 415.101486][T19616] get_futex_key+0x12d/0xb10 [ 415.101518][T19616] futex_wait_setup+0x49/0x3e0 [ 415.101628][T19616] ? __cgroup_account_cputime+0x83/0xa0 [ 415.101652][T19616] ? update_se+0xc5/0x460 [ 415.101675][T19616] __futex_wait+0xa9/0x260 [ 415.101774][T19616] ? __pfx_futex_wake_mark+0x10/0x10 [ 415.101887][T19616] futex_wait+0x98/0x1c0 [ 415.101911][T19616] do_futex+0x391/0x460 [ 415.101937][T19616] ? should_fail_ex+0xdb/0x280 [ 415.101959][T19616] __se_sys_futex+0x2f6/0x370 [ 415.102020][T19616] __x64_sys_futex+0x78/0x90 [ 415.102051][T19616] x64_sys_call+0x22e2/0x2550 [ 415.102080][T19616] do_syscall_64+0x112/0x360 [ 415.102151][T19616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.102178][T19616] RIP: 0033:0x7fac9f75e159 [ 415.102265][T19616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.102288][T19616] RSP: 002b:00007fac9e1b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 415.102363][T19616] RAX: ffffffffffffffda RBX: 00007fac9f9e5fa8 RCX: 00007fac9f75e159 [ 415.102382][T19616] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fac9f9e5fa8 [ 415.102411][T19616] RBP: 00007fac9f9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 415.102426][T19616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.102440][T19616] R13: 00007fac9f9e6038 R14: 00007ffcb5add9c0 R15: 00007ffcb5addaa8 [ 415.102460][T19616] [ 415.356918][ T29] audit: type=1326 audit(1788397083.191:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19627 comm="syz.4.4737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f01ab849f31 code=0x7ffc0000 [ 415.356959][ T29] audit: type=1326 audit(1788397083.191:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19627 comm="syz.4.4737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aaa7e159 code=0x7ffc0000 [ 415.356997][ T29] audit: type=1326 audit(1788397083.191:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19627 comm="syz.4.4737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aaa7e159 code=0x7ffc0000 [ 415.562492][T19646] FAULT_INJECTION: forcing a failure. [ 415.562492][T19646] name fail_futex, interval 1, probability 0, space 0, times 0 [ 415.562547][T19646] CPU: 1 UID: 0 PID: 19646 Comm: syz.3.4744 Not tainted syzkaller #0 PREEMPT(lazy) [ 415.562655][T19646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.562670][T19646] Call Trace: [ 415.562733][T19646] [ 415.562742][T19646] __dump_stack+0x1d/0x30 [ 415.562773][T19646] dump_stack_lvl+0x95/0xd0 [ 415.562798][T19646] dump_stack+0x15/0x1b [ 415.562883][T19646] should_fail_ex+0x262/0x280 [ 415.562916][T19646] should_fail+0xb/0x20 [ 415.562936][T19646] get_futex_key+0x12d/0xb10 [ 415.562966][T19646] futex_wait_setup+0x49/0x3e0 [ 415.563067][T19646] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 415.563118][T19646] ? hrtimer_active+0xe4/0x110 [ 415.563141][T19646] __futex_wait+0xa9/0x260 [ 415.563162][T19646] ? __pfx_futex_wake_mark+0x10/0x10 [ 415.563227][T19646] futex_wait+0x98/0x1c0 [ 415.563250][T19646] do_futex+0x391/0x460 [ 415.563279][T19646] ? should_fail_ex+0xdb/0x280 [ 415.563312][T19646] __se_sys_futex+0x2f6/0x370 [ 415.563345][T19646] __x64_sys_futex+0x78/0x90 [ 415.563375][T19646] x64_sys_call+0x22e2/0x2550 [ 415.563403][T19646] do_syscall_64+0x112/0x360 [ 415.563497][T19646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.563521][T19646] RIP: 0033:0x7f2f54eae159 [ 415.563540][T19646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.563561][T19646] RSP: 002b:00007f2f539070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 415.563638][T19646] RAX: ffffffffffffffda RBX: 00007f2f55135fa8 RCX: 00007f2f54eae159 [ 415.563657][T19646] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2f55135fa8 [ 415.563753][T19646] RBP: 00007f2f55135fa0 R08: 0000000000000000 R09: 0000000000000000 [ 415.563782][T19646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.563797][T19646] R13: 00007f2f55136038 R14: 00007fff0eff8170 R15: 00007fff0eff8258 [ 415.563818][T19646] [ 415.877450][T19675] loop2: detected capacity change from 0 to 256 [ 415.885074][T19675] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 415.964673][T19675] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 415.964716][T19675] FAT-fs (loop2): Filesystem has been set read-only [ 415.964752][T19675] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 418.517444][T19641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.552527][T19680] FAULT_INJECTION: forcing a failure. [ 418.552527][T19680] name fail_futex, interval 1, probability 0, space 0, times 0 [ 418.552568][T19680] CPU: 0 UID: 0 PID: 19680 Comm: syz.9.4758 Not tainted syzkaller #0 PREEMPT(lazy) [ 418.552604][T19680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.552621][T19680] Call Trace: [ 418.552629][T19680] [ 418.552641][T19680] __dump_stack+0x1d/0x30 [ 418.552726][T19680] dump_stack_lvl+0x95/0xd0 [ 418.552752][T19680] dump_stack+0x15/0x1b [ 418.552932][T19680] should_fail_ex+0x262/0x280 [ 418.552958][T19680] should_fail+0xb/0x20 [ 418.552982][T19680] get_futex_key+0x12d/0xb10 [ 418.553012][T19680] futex_wait_setup+0x49/0x3e0 [ 418.553108][T19680] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 418.553148][T19680] ? hrtimer_active+0xe4/0x110 [ 418.553173][T19680] __futex_wait+0xa9/0x260 [ 418.553195][T19680] ? __pfx_futex_wake_mark+0x10/0x10 [ 418.553311][T19680] futex_wait+0x98/0x1c0 [ 418.553339][T19680] do_futex+0x391/0x460 [ 418.553371][T19680] ? should_fail_ex+0xdb/0x280 [ 418.553397][T19680] __se_sys_futex+0x2f6/0x370 [ 418.553471][T19680] __x64_sys_futex+0x78/0x90 [ 418.553504][T19680] x64_sys_call+0x22e2/0x2550 [ 418.553532][T19680] do_syscall_64+0x112/0x360 [ 418.553601][T19680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.553628][T19680] RIP: 0033:0x7f3185d0e159 [ 418.553717][T19680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.553739][T19680] RSP: 002b:00007f31847670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 418.553765][T19680] RAX: ffffffffffffffda RBX: 00007f3185f95fa8 RCX: 00007f3185d0e159 [ 418.553783][T19680] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3185f95fa8 [ 418.553863][T19680] RBP: 00007f3185f95fa0 R08: 0000000000000000 R09: 0000000000000000 [ 418.553877][T19680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.553892][T19680] R13: 00007f3185f96038 R14: 00007ffef9c43980 R15: 00007ffef9c43a68 [ 418.553959][T19680] [ 418.771039][T19695] loop4: detected capacity change from 0 to 1024 [ 418.788070][T19700] loop2: detected capacity change from 0 to 256 [ 418.802825][T19700] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 418.822658][T19695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 418.822742][T19695] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.881035][T19709] loop9: detected capacity change from 0 to 512 [ 418.915379][T19340] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm kworker/u8:30: lblock 0 mapped to illegal pblock 0 (length 6) [ 418.915780][T19340] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 418.915808][T19340] EXT4-fs (loop4): This should not happen!! Data will be lost [ 418.915808][T19340] [ 418.916845][T19340] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:30: lblock 8 mapped to illegal pblock 8 (length 8) [ 418.919749][T19340] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 418.919838][T19340] EXT4-fs (loop4): This should not happen!! Data will be lost [ 418.919838][T19340] [ 418.928073][T18295] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 418.928674][T18295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 419.011728][T19700] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 419.011814][T19700] FAT-fs (loop2): Filesystem has been set read-only [ 419.011843][T19700] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 419.055229][T16953] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 419.055329][T16953] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 419.125365][T19335] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.198369][T19729] loop9: detected capacity change from 0 to 512 [ 419.225164][T19729] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.225245][T19729] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.253611][T19335] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.290642][T14777] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.300322][T19335] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.355467][T19335] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.394138][T19745] Invalid argument reading file caps for ./file0 [ 419.544384][T19758] netlink: 'syz.9.4793': attribute type 3 has an invalid length. [ 419.553259][T19335] bridge_slave_1: left allmulticast mode [ 419.553290][T19335] bridge_slave_1: left promiscuous mode [ 419.553421][T19335] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.625223][T19335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.646632][T19335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.662277][T19335] bond0 (unregistering): Released all slaves [ 419.672382][T19335] bond1 (unregistering): Released all slaves [ 419.709816][T19735] vcan0 speed is unknown, defaulting to 1000 [ 419.885845][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 419.885877][ T29] audit: type=1400 audit(1788397087.721:3564): avc: denied { write } for pid=19774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.954460][ T29] audit: type=1400 audit(1788397087.791:3565): avc: denied { write } for pid=19786 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.983867][T19335] hsr_slave_0: left promiscuous mode [ 419.990546][T19335] hsr_slave_1: left promiscuous mode [ 419.991117][T19335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.996507][T19335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.124542][T19335] team0 (unregistering): Port device team_slave_1 removed [ 420.132019][T19335] team0 (unregistering): Port device team_slave_0 removed [ 420.167117][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 420.238894][ T29] audit: type=1400 audit(1788397088.081:3566): avc: denied { mounton } for pid=19797 comm="syz.9.4803" path="/" dev="tmpfs" ino=1619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 420.337017][ T29] audit: type=1400 audit(1788397088.171:3567): avc: denied { write } for pid=19798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.437284][ T29] audit: type=1400 audit(1788397088.271:3568): avc: denied { write } for pid=19820 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.471899][T19735] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.471942][T19735] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.472011][T19735] bridge_slave_0: entered allmulticast mode [ 420.472488][T19735] bridge_slave_0: entered promiscuous mode [ 420.481723][T19735] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.481758][T19735] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.481823][T19735] bridge_slave_1: entered allmulticast mode [ 420.482310][T19735] bridge_slave_1: entered promiscuous mode [ 420.555039][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 420.564962][T19735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.574544][T19735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.663466][T19735] team0: Port device team_slave_0 added [ 420.673106][T19735] team0: Port device team_slave_1 added [ 420.742721][T19735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.742761][T19735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.742794][T19735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.751345][T19735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.751362][T19735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.751424][T19735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.839457][T19735] hsr_slave_0: entered promiscuous mode [ 420.845744][T19735] hsr_slave_1: entered promiscuous mode [ 420.846026][T19735] debugfs: 'hsr0' already exists in 'hsr' [ 420.846052][T19735] Cannot create hsr debugfs directory [ 420.903293][T19842] vcan0: left promiscuous mode [ 420.939492][T19851] loop4: detected capacity change from 0 to 256 [ 420.955889][T19851] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 421.096469][ T29] audit: type=1400 audit(1788397088.931:3569): avc: denied { write } for pid=19838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.154780][ T29] audit: type=1400 audit(1788397088.991:3570): avc: denied { write } for pid=19868 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.196965][T19851] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 421.197004][T19851] FAT-fs (loop4): Filesystem has been set read-only [ 421.197031][T19851] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 421.229615][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 421.476821][ T29] audit: type=1400 audit(1788397089.311:3571): avc: denied { write } for pid=19875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.522371][ T29] audit: type=1400 audit(1788397089.361:3572): avc: denied { write } for pid=19886 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.562965][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 421.593288][T19735] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 421.605050][T19735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.614972][T19735] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 421.624630][T19735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.631440][T19735] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 421.636188][T19735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.638060][T19735] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 421.641955][T19735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.727821][T19735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.748589][T19735] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.760405][T19335] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.760449][T19335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.772609][ T29] audit: type=1400 audit(1788397089.601:3573): avc: denied { write } for pid=19889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.780755][T19335] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.780809][T19335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.972013][T19939] loop9: detected capacity change from 0 to 128 [ 421.980803][T19939] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 421.994032][T19939] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 422.020339][T19942] syz_tun: entered allmulticast mode [ 422.023536][T19941] syz_tun: left allmulticast mode [ 422.092550][T19953] loop3: detected capacity change from 0 to 512 [ 422.097273][T19735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.130624][T19953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.130752][T19953] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.167057][T19960] netlink: 204 bytes leftover after parsing attributes in process `syz.9.4828'. [ 422.169413][T19953] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 422.169513][T19953] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 24576 with max blocks 1 with error 28 [ 422.169538][T19953] EXT4-fs (loop3): This should not happen!! Data will be lost [ 422.169538][T19953] [ 422.169552][T19953] EXT4-fs (loop3): Total free blocks count 0 [ 422.169566][T19953] EXT4-fs (loop3): Free/Dirty block details [ 422.169642][T19953] EXT4-fs (loop3): free_blocks=65280 [ 422.169710][T19953] EXT4-fs (loop3): dirty_blocks=2 [ 422.169723][T19953] EXT4-fs (loop3): Block reservation details [ 422.169735][T19953] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 422.192572][T19343] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 422.271950][T19965] loop3: detected capacity change from 0 to 256 [ 422.285538][T19965] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 422.405716][T19975] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 422.405777][T19975] FAT-fs (loop3): Filesystem has been set read-only [ 422.405806][T19975] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 422.589973][T19735] veth0_vlan: entered promiscuous mode [ 422.608450][T19735] veth1_vlan: entered promiscuous mode [ 422.665302][T19735] veth0_macvtap: entered promiscuous mode [ 422.672475][T19735] veth1_macvtap: entered promiscuous mode [ 422.702762][T19735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.710478][T19735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.789964][ T342] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.790137][ T342] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.790175][ T342] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.790271][ T342] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.933065][T20024] batadv_slave_1: entered allmulticast mode [ 422.941075][T20022] batadv_slave_1: left allmulticast mode [ 423.061565][T20038] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4841'. [ 423.136716][T20043] loop5: detected capacity change from 0 to 512 [ 423.165187][T20050] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4853'. [ 423.179329][T20043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.179469][T20043] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.243948][T20043] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 423.244041][T20043] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 24576 with max blocks 1 with error 28 [ 423.244083][T20043] EXT4-fs (loop5): This should not happen!! Data will be lost [ 423.244083][T20043] [ 423.244100][T20043] EXT4-fs (loop5): Total free blocks count 0 [ 423.244118][T20043] EXT4-fs (loop5): Free/Dirty block details [ 423.244134][T20043] EXT4-fs (loop5): free_blocks=65280 [ 423.244152][T20043] EXT4-fs (loop5): dirty_blocks=2 [ 423.244169][T20043] EXT4-fs (loop5): Block reservation details [ 423.244184][T20043] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 423.319278][T20061] loop3: detected capacity change from 0 to 512 [ 423.327347][ T38] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 423.377371][T20061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.377511][T20061] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 423.415985][T20058] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4845'. [ 423.416044][T20058] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4845'. [ 423.451088][T20058] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4845'. [ 423.451248][T20058] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4845'. [ 423.557261][T20058] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4845'. [ 423.557302][T20058] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4845'. [ 423.604383][T20085] syz_tun: entered allmulticast mode [ 423.608808][T20084] syz_tun: left allmulticast mode [ 423.676601][T18397] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.747465][T20095] FAULT_INJECTION: forcing a failure. [ 423.747465][T20095] name fail_futex, interval 1, probability 0, space 0, times 0 [ 423.747509][T20095] CPU: 1 UID: 0 PID: 20095 Comm: syz.3.4855 Not tainted syzkaller #0 PREEMPT(lazy) [ 423.747621][T20095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.747637][T20095] Call Trace: [ 423.747646][T20095] [ 423.747656][T20095] __dump_stack+0x1d/0x30 [ 423.747685][T20095] dump_stack_lvl+0x95/0xd0 [ 423.747710][T20095] dump_stack+0x15/0x1b [ 423.747734][T20095] should_fail_ex+0x262/0x280 [ 423.747828][T20095] should_fail+0xb/0x20 [ 423.747848][T20095] get_futex_key+0x12d/0xb10 [ 423.747878][T20095] futex_wait_setup+0x49/0x3e0 [ 423.747941][T20095] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 423.747977][T20095] ? hrtimer_active+0xe4/0x110 [ 423.748038][T20095] __futex_wait+0xa9/0x260 [ 423.748099][T20095] ? __pfx_futex_wake_mark+0x10/0x10 [ 423.748136][T20095] futex_wait+0x98/0x1c0 [ 423.748221][T20095] do_futex+0x391/0x460 [ 423.748254][T20095] ? should_fail_ex+0xdb/0x280 [ 423.748397][T20095] __se_sys_futex+0x2f6/0x370 [ 423.748430][T20095] __x64_sys_futex+0x78/0x90 [ 423.748461][T20095] x64_sys_call+0x22e2/0x2550 [ 423.748566][T20095] do_syscall_64+0x112/0x360 [ 423.748604][T20095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.748629][T20095] RIP: 0033:0x7f2f54eae159 [ 423.748648][T20095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.748712][T20095] RSP: 002b:00007f2f539070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 423.748736][T20095] RAX: ffffffffffffffda RBX: 00007f2f55135fa8 RCX: 00007f2f54eae159 [ 423.748753][T20095] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2f55135fa8 [ 423.748768][T20095] RBP: 00007f2f55135fa0 R08: 0000000000000000 R09: 0000000000000000 [ 423.748783][T20095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.748798][T20095] R13: 00007f2f55136038 R14: 00007fff0eff8170 R15: 00007fff0eff8258 [ 423.748837][T20095] [ 424.356271][T20133] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4869'. [ 424.399649][T19337] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.399711][T19337] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.494208][T19337] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.494256][T19337] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.568497][T19337] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.568546][T19337] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.596314][T20148] netlink: 'syz.6.4881': attribute type 4 has an invalid length. [ 424.615114][T20148] netlink: 'syz.6.4881': attribute type 4 has an invalid length. [ 424.655531][T19337] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.655623][T19337] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.808067][T20167] loop9: detected capacity change from 0 to 1024 [ 424.846320][T20135] vcan0 speed is unknown, defaulting to 1000 [ 424.856543][T19337] bridge_slave_1: left allmulticast mode [ 424.856576][T19337] bridge_slave_1: left promiscuous mode [ 424.856780][T19337] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.881475][T20167] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 424.881644][T20167] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.900583][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 424.900602][ T29] audit: type=1400 audit(1788397092.741:3595): avc: denied { write } for pid=20165 comm="syz.9.4874" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 424.964086][ T342] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 6) [ 424.966627][ T342] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 424.966657][ T342] EXT4-fs (loop9): This should not happen!! Data will be lost [ 424.966657][ T342] [ 424.967078][ T342] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 424.967400][ T342] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 424.967494][ T342] EXT4-fs (loop9): This should not happen!! Data will be lost [ 424.967494][ T342] [ 424.969015][T14777] EXT4-fs warning (device loop9): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 424.969529][T14777] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 425.138666][T19337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.150119][T19337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.163081][T19337] bond0 (unregistering): Released all slaves [ 425.173105][T19337] bond1 (unregistering): Released all slaves [ 425.262831][T20198] netlink: 'syz.9.4886': attribute type 4 has an invalid length. [ 425.298482][T20198] netlink: 'syz.9.4886': attribute type 4 has an invalid length. [ 425.342437][T20201] loop4: detected capacity change from 0 to 512 [ 425.366039][T20201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.366216][T20201] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.395007][T19337] hsr_slave_0: left promiscuous mode [ 425.408464][T19337] hsr_slave_1: left promiscuous mode [ 425.408998][T19337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.409036][T19337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.439484][T19337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.439515][T19337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.454025][ T29] audit: type=1400 audit(1788397093.281:3596): avc: denied { mounton } for pid=20208 comm="syz.9.4888" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 425.488259][T19337] veth1_macvtap: left promiscuous mode [ 425.488298][T19337] veth0_macvtap: left promiscuous mode [ 425.488422][T19337] veth1_vlan: left promiscuous mode [ 425.488545][T19337] veth0_vlan: left promiscuous mode [ 425.660162][T18295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.678654][ T29] audit: type=1400 audit(1788397093.511:3597): avc: denied { write } for pid=20199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.760285][ T29] audit: type=1400 audit(1788397093.601:3598): avc: denied { write } for pid=20223 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.012036][T19337] team0 (unregistering): Port device team_slave_1 removed [ 426.028708][T19337] team0 (unregistering): Port device team_slave_0 removed [ 426.125338][ T29] audit: type=1400 audit(1788397093.961:3599): avc: denied { write } for pid=20230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.229297][ T29] audit: type=1400 audit(1788397094.071:3600): avc: denied { write } for pid=20246 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.377842][T20231] vcan0 speed is unknown, defaulting to 1000 [ 426.534309][ T29] audit: type=1400 audit(1788397094.371:3601): avc: denied { write } for pid=20252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.616699][T20135] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.616745][T20135] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.616874][T20135] bridge_slave_0: entered allmulticast mode [ 426.617579][T20135] bridge_slave_0: entered promiscuous mode [ 426.647833][T20135] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.647878][T20135] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.655556][ T29] audit: type=1400 audit(1788397094.491:3602): avc: denied { write } for pid=20270 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.686372][T20135] bridge_slave_1: entered allmulticast mode [ 426.686902][T20135] bridge_slave_1: entered promiscuous mode [ 426.727115][T20135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.743234][T20135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.808282][T20135] team0: Port device team_slave_0 added [ 426.813090][T20135] team0: Port device team_slave_1 added [ 426.905261][T20135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.905285][T20135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.905318][T20135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.907670][T20135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.907684][T20135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.907756][T20135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.918838][T20284] netlink: 'syz.4.4898': attribute type 4 has an invalid length. [ 426.955223][T20284] netlink: 'syz.4.4898': attribute type 4 has an invalid length. [ 427.021132][T20135] hsr_slave_0: entered promiscuous mode [ 427.021603][T20135] hsr_slave_1: entered promiscuous mode [ 427.115886][T20231] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.115933][T20231] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.116042][T20231] bridge_slave_0: entered allmulticast mode [ 427.116487][T20231] bridge_slave_0: entered promiscuous mode [ 427.152859][T20231] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.152905][T20231] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.153019][T20231] bridge_slave_1: entered allmulticast mode [ 427.153640][T20231] bridge_slave_1: entered promiscuous mode [ 427.210244][T20231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.223490][T20231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.258650][ T29] audit: type=1400 audit(1788397095.091:3603): avc: denied { write } for pid=20290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.275828][T20231] team0: Port device team_slave_0 added [ 427.280436][T20231] team0: Port device team_slave_1 added [ 427.323752][T20231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.323789][T20231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.323895][T20231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.328995][T20231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.329010][T20231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.329050][T20231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.342124][ T29] audit: type=1400 audit(1788397095.181:3604): avc: denied { write } for pid=20302 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.447090][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 427.467138][T20231] hsr_slave_0: entered promiscuous mode [ 427.470906][T20231] hsr_slave_1: entered promiscuous mode [ 427.471175][T20231] debugfs: 'hsr0' already exists in 'hsr' [ 427.471192][T20231] Cannot create hsr debugfs directory [ 427.601416][T20313] __nla_validate_parse: 7 callbacks suppressed [ 427.601446][T20313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4900'. [ 427.631461][T20314] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4899'. [ 427.631502][T20314] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4899'. [ 427.681889][T20314] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4899'. [ 427.681954][T20314] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4899'. [ 427.700737][T20135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.710562][T20135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.726293][T20135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.737376][T20135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.740142][T20135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.746764][T20135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.749734][T20135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.755969][T20135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.770251][T20314] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4899'. [ 427.770282][T20314] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4899'. [ 427.798597][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 427.844897][T20135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.854695][T20135] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.857275][T19343] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.857337][T19343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.862949][T19343] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.862986][T19343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.949712][T20231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 427.963849][T20231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.964494][T20231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 427.980893][T20231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.989066][T20231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 427.997919][T20231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.006103][T20231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.015123][T20231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.032679][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 428.082477][T20231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.104111][T20231] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.115409][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.115452][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.135639][T19343] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.135688][T19343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.173453][T20135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.276983][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 428.298511][T20135] veth0_vlan: entered promiscuous mode [ 428.301103][T20135] veth1_vlan: entered promiscuous mode [ 428.314168][T20135] veth0_macvtap: entered promiscuous mode [ 428.316559][T20135] veth1_macvtap: entered promiscuous mode [ 428.323414][T20135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.331773][T20135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.368712][T19335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.369245][T19335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.369361][T19335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.369398][T19335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.456034][T20411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4912'. [ 428.456068][T20411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4912'. [ 428.483694][T20231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.683080][T20444] FAULT_INJECTION: forcing a failure. [ 428.683080][T20444] name fail_futex, interval 1, probability 0, space 0, times 0 [ 428.683124][T20444] CPU: 1 UID: 0 PID: 20444 Comm: syz.9.4906 Not tainted syzkaller #0 PREEMPT(lazy) [ 428.683159][T20444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.683221][T20444] Call Trace: [ 428.683229][T20444] [ 428.683238][T20444] __dump_stack+0x1d/0x30 [ 428.683342][T20444] dump_stack_lvl+0x95/0xd0 [ 428.683370][T20444] dump_stack+0x15/0x1b [ 428.683436][T20444] should_fail_ex+0x262/0x280 [ 428.683572][T20444] should_fail+0xb/0x20 [ 428.683590][T20444] get_futex_key+0x12d/0xb10 [ 428.683617][T20444] futex_wait_setup+0x49/0x3e0 [ 428.683724][T20444] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 428.683756][T20444] ? hrtimer_active+0xe4/0x110 [ 428.683846][T20444] __futex_wait+0xa9/0x260 [ 428.683872][T20444] ? __pfx_futex_wake_mark+0x10/0x10 [ 428.683914][T20444] futex_wait+0x98/0x1c0 [ 428.683940][T20444] do_futex+0x391/0x460 [ 428.684020][T20444] ? should_fail_ex+0xdb/0x280 [ 428.684047][T20444] __se_sys_futex+0x2f6/0x370 [ 428.684157][T20444] __x64_sys_futex+0x78/0x90 [ 428.684217][T20444] x64_sys_call+0x22e2/0x2550 [ 428.684243][T20444] do_syscall_64+0x112/0x360 [ 428.684318][T20444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.684344][T20444] RIP: 0033:0x7f3185d0e159 [ 428.684366][T20444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.684392][T20444] RSP: 002b:00007f31847670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 428.684475][T20444] RAX: ffffffffffffffda RBX: 00007f3185f95fa8 RCX: 00007f3185d0e159 [ 428.684491][T20444] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3185f95fa8 [ 428.684511][T20444] RBP: 00007f3185f95fa0 R08: 0000000000000000 R09: 0000000000000000 [ 428.684525][T20444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.684542][T20444] R13: 00007f3185f96038 R14: 00007ffef9c43980 R15: 00007ffef9c43a68 [ 428.684566][T20444] [ 428.716053][T20231] veth0_vlan: entered promiscuous mode [ 428.725410][T20231] veth1_vlan: entered promiscuous mode [ 428.750015][T20231] veth0_macvtap: entered promiscuous mode [ 428.753938][T20231] veth1_macvtap: entered promiscuous mode [ 428.769863][T20231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.776689][T20231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.898840][T19340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.899351][T19340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.899562][T19340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.899766][T19340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.943601][T20456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4909'. [ 429.212330][T20489] netlink: 'syz.0.4919': attribute type 13 has an invalid length. [ 429.230570][T20489] gretap0: refused to change device tx_queue_len [ 429.230973][T20489] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 430.022710][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 430.022734][ T29] audit: type=1400 audit(1788397097.861:3619): avc: denied { write } for pid=20541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.145077][ T29] audit: type=1400 audit(1788397097.981:3620): avc: denied { write } for pid=20559 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.403300][ T29] audit: type=1400 audit(1788397098.241:3621): avc: denied { write } for pid=20561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.487617][ T29] audit: type=1400 audit(1788397098.321:3622): avc: denied { write } for pid=20572 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.835420][ T29] audit: type=1400 audit(1788397098.671:3623): avc: denied { write } for pid=20578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.955392][ T29] audit: type=1400 audit(1788397098.791:3624): avc: denied { write } for pid=20599 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.213369][ T29] audit: type=1400 audit(1788397099.051:3625): avc: denied { write } for pid=20603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.291577][ T29] audit: type=1400 audit(1788397099.131:3626): avc: denied { write } for pid=20617 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.552131][ T29] audit: type=1400 audit(1788397099.391:3627): avc: denied { write } for pid=20619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.603942][ T29] audit: type=1400 audit(1788397099.441:3628): avc: denied { write } for pid=20631 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.087074][T20475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.544900][T20733] loop4: detected capacity change from 0 to 512 [ 432.563742][T20733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.563913][T20733] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 432.591373][ T38] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.620455][T18295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.650358][ T38] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.689763][ T38] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.747159][ T38] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.759503][T20752] FAULT_INJECTION: forcing a failure. [ 432.759503][T20752] name failslab, interval 1, probability 0, space 0, times 0 [ 432.759539][T20752] CPU: 0 UID: 0 PID: 20752 Comm: syz.9.4966 Not tainted syzkaller #0 PREEMPT(lazy) [ 432.759595][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.759642][T20752] Call Trace: [ 432.759651][T20752] [ 432.759662][T20752] __dump_stack+0x1d/0x30 [ 432.759693][T20752] dump_stack_lvl+0x95/0xd0 [ 432.759719][T20752] dump_stack+0x15/0x1b [ 432.759744][T20752] should_fail_ex+0x262/0x280 [ 432.759822][T20752] should_failslab+0x8c/0xb0 [ 432.759856][T20752] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 432.759890][T20752] ? __d_alloc+0x34/0x320 [ 432.759916][T20752] ? __d_alloc+0x34/0x320 [ 432.760018][T20752] __d_alloc+0x34/0x320 [ 432.760060][T20752] d_alloc+0x2e/0x100 [ 432.760095][T20752] lookup_one_qstr_excl+0x95/0x240 [ 432.760126][T20752] start_dirop+0x3e/0x70 [ 432.760160][T20752] simple_start_creating+0xa2/0xd0 [ 432.760188][T20752] debugfs_start_creating+0xcd/0x160 [ 432.760232][T20752] __debugfs_create_file+0x70/0x2b0 [ 432.760317][T20752] debugfs_create_file_full+0x3f/0x60 [ 432.760342][T20752] ? __pfx_br_dev_setup+0x10/0x10 [ 432.760378][T20752] ref_tracker_dir_debugfs+0x10e/0x220 [ 432.760416][T20752] alloc_netdev_mqs+0x1a9/0xa90 [ 432.760470][T20752] br_add_bridge+0x35/0xc0 [ 432.760499][T20752] br_ioctl_stub+0x3e3/0x8f0 [ 432.760537][T20752] ? ioctl_has_perm+0x273/0x2c0 [ 432.760575][T20752] ? __pfx_br_ioctl_stub+0x10/0x10 [ 432.760605][T20752] sock_ioctl+0x39a/0x610 [ 432.760706][T20752] ? __pfx_sock_ioctl+0x10/0x10 [ 432.760728][T20752] __se_sys_ioctl+0xce/0x140 [ 432.760758][T20752] __x64_sys_ioctl+0x43/0x50 [ 432.760786][T20752] x64_sys_call+0x239d/0x2550 [ 432.760861][T20752] do_syscall_64+0x112/0x360 [ 432.760893][T20752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.760918][T20752] RIP: 0033:0x7f3185d0e159 [ 432.760938][T20752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.761000][T20752] RSP: 002b:00007f3184767028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.761026][T20752] RAX: ffffffffffffffda RBX: 00007f3185f95fa0 RCX: 00007f3185d0e159 [ 432.761080][T20752] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004 [ 432.761103][T20752] RBP: 00007f3185da5024 R08: 0000000000000000 R09: 0000000000000000 [ 432.761118][T20752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.761134][T20752] R13: 00007f3185f96038 R14: 00007f3185f95fa0 R15: 00007ffef9c43a68 [ 432.761155][T20752] [ 432.943457][T20757] __nla_validate_parse: 2 callbacks suppressed [ 432.943477][T20757] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4967'. [ 433.021377][T20759] loop4: detected capacity change from 0 to 512 [ 433.067825][ T38] bridge_slave_1: left allmulticast mode [ 433.068085][ T38] bridge_slave_1: left promiscuous mode [ 433.068230][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.102192][T20762] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4968'. [ 433.110166][ T38] bridge_slave_0: left allmulticast mode [ 433.110295][ T38] bridge_slave_0: left promiscuous mode [ 433.110448][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.254936][T20770] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4971'. [ 434.284428][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.297629][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.309453][ T38] bond0 (unregistering): Released all slaves [ 434.330271][T20777] FAULT_INJECTION: forcing a failure. [ 434.330271][T20777] name failslab, interval 1, probability 0, space 0, times 0 [ 434.330309][T20777] CPU: 0 UID: 0 PID: 20777 Comm: syz.4.4984 Not tainted syzkaller #0 PREEMPT(lazy) [ 434.330336][T20777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.330351][T20777] Call Trace: [ 434.330423][T20777] [ 434.330432][T20777] __dump_stack+0x1d/0x30 [ 434.330461][T20777] dump_stack_lvl+0x95/0xd0 [ 434.330487][T20777] dump_stack+0x15/0x1b [ 434.330539][T20777] should_fail_ex+0x262/0x280 [ 434.330575][T20777] should_failslab+0x8c/0xb0 [ 434.330603][T20777] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 434.330710][T20777] ? lookup_one_qstr_excl+0x160/0x240 [ 434.330737][T20777] ? debugfs_alloc_inode+0x34/0x40 [ 434.330788][T20777] ? debugfs_alloc_inode+0x34/0x40 [ 434.330814][T20777] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 434.330839][T20777] debugfs_alloc_inode+0x34/0x40 [ 434.330863][T20777] alloc_inode+0x40/0x170 [ 434.330953][T20777] new_inode+0x1d/0xe0 [ 434.330974][T20777] __debugfs_create_file+0x97/0x2b0 [ 434.331036][T20777] debugfs_create_file_full+0x3f/0x60 [ 434.331060][T20777] ? __pfx_br_dev_setup+0x10/0x10 [ 434.331093][T20777] ref_tracker_dir_debugfs+0x10e/0x220 [ 434.331145][T20777] alloc_netdev_mqs+0x1a9/0xa90 [ 434.331178][T20777] br_add_bridge+0x35/0xc0 [ 434.331225][T20777] br_ioctl_stub+0x3e3/0x8f0 [ 434.331319][T20777] ? ioctl_has_perm+0x273/0x2c0 [ 434.331356][T20777] ? __pfx_br_ioctl_stub+0x10/0x10 [ 434.331401][T20777] sock_ioctl+0x39a/0x610 [ 434.331484][T20777] ? __pfx_sock_ioctl+0x10/0x10 [ 434.331506][T20777] __se_sys_ioctl+0xce/0x140 [ 434.331535][T20777] __x64_sys_ioctl+0x43/0x50 [ 434.331630][T20777] x64_sys_call+0x239d/0x2550 [ 434.331666][T20777] do_syscall_64+0x112/0x360 [ 434.331697][T20777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.331777][T20777] RIP: 0033:0x7f01aaa7e159 [ 434.331796][T20777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.331816][T20777] RSP: 002b:00007f01a94d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.331928][T20777] RAX: ffffffffffffffda RBX: 00007f01aad05fa0 RCX: 00007f01aaa7e159 [ 434.331961][T20777] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004 [ 434.331976][T20777] RBP: 00007f01aab15024 R08: 0000000000000000 R09: 0000000000000000 [ 434.331992][T20777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.332006][T20777] R13: 00007f01aad06038 R14: 00007f01aad05fa0 R15: 00007ffcf80e81b8 [ 434.332058][T20777] [ 434.332391][T20777] debugfs: out of free dentries, can not create file 'netdev@ffff88811574a5e0' [ 434.335073][T20781] netlink: 'syz.9.4974': attribute type 20 has an invalid length. [ 434.335159][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4974'. [ 434.335264][T20781] netlink: 'syz.9.4974': attribute type 20 has an invalid length. [ 434.335279][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4974'. [ 434.505202][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4981'. [ 434.707073][ T38] hsr_slave_0: left promiscuous mode [ 434.714768][ T38] hsr_slave_1: left promiscuous mode [ 434.715214][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.715231][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.738281][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.738308][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.753319][ T38] veth1_macvtap: left promiscuous mode [ 434.753359][ T38] veth0_macvtap: left promiscuous mode [ 434.756807][ T38] veth1_vlan: left promiscuous mode [ 434.756885][ T38] veth0_vlan: left promiscuous mode [ 435.083728][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 435.083792][ T29] audit: type=1400 audit(1788397102.921:3643): avc: denied { write } for pid=20822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.147510][ T38] team0 (unregistering): Port device team_slave_1 removed [ 435.172342][T20819] FAULT_INJECTION: forcing a failure. [ 435.172342][T20819] name failslab, interval 1, probability 0, space 0, times 0 [ 435.172400][T20819] CPU: 0 UID: 0 PID: 20819 Comm: syz.9.4989 Not tainted syzkaller #0 PREEMPT(lazy) [ 435.172427][T20819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.172439][T20819] Call Trace: [ 435.172446][T20819] [ 435.172455][T20819] __dump_stack+0x1d/0x30 [ 435.172486][T20819] dump_stack_lvl+0x95/0xd0 [ 435.172514][T20819] dump_stack+0x15/0x1b [ 435.172578][T20819] should_fail_ex+0x262/0x280 [ 435.172605][T20819] ? vm_area_dup+0x33/0x300 [ 435.172634][T20819] should_failslab+0x8c/0xb0 [ 435.172666][T20819] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 435.172699][T20819] ? vm_area_dup+0x33/0x300 [ 435.172737][T20819] vm_area_dup+0x33/0x300 [ 435.172769][T20819] __split_vma+0xe4/0x720 [ 435.172803][T20819] vms_gather_munmap_vmas+0x265/0x7f0 [ 435.172827][T20819] do_vmi_align_munmap+0x1e1/0x400 [ 435.172854][T20819] do_vmi_munmap+0x1da/0x220 [ 435.172878][T20819] do_munmap+0x8d/0xc0 [ 435.172916][T20819] mremap_to+0x196/0x450 [ 435.172947][T20819] ? check_prep_vma+0x463/0x640 [ 435.172980][T20819] __se_sys_mremap+0x89e/0xc40 [ 435.173016][T20819] __x64_sys_mremap+0x67/0x80 [ 435.173040][T20819] x64_sys_call+0x1072/0x2550 [ 435.173071][T20819] do_syscall_64+0x112/0x360 [ 435.173104][T20819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.173132][T20819] RIP: 0033:0x7f3185d0e159 [ 435.173154][T20819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.173177][T20819] RSP: 002b:00007f3184767028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 435.173205][T20819] RAX: ffffffffffffffda RBX: 00007f3185f95fa0 RCX: 00007f3185d0e159 [ 435.173220][T20819] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000200000001000 [ 435.173233][T20819] RBP: 00007f3185da5024 R08: 0000200000005000 R09: 0000000000000000 [ 435.173247][T20819] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 435.173261][T20819] R13: 00007f3185f96038 R14: 00007f3185f95fa0 R15: 00007ffef9c43a68 [ 435.173281][T20819] [ 435.188323][ T38] team0 (unregistering): Port device team_slave_0 removed [ 435.348222][ T29] audit: type=1400 audit(1788397103.181:3644): avc: denied { write } for pid=20842 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.450494][T20845] FAULT_INJECTION: forcing a failure. [ 435.450494][T20845] name failslab, interval 1, probability 0, space 0, times 0 [ 435.450565][T20845] CPU: 0 UID: 0 PID: 20845 Comm: syz.6.4993 Not tainted syzkaller #0 PREEMPT(lazy) [ 435.450615][T20845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.450632][T20845] Call Trace: [ 435.450642][T20845] [ 435.450653][T20845] __dump_stack+0x1d/0x30 [ 435.450683][T20845] dump_stack_lvl+0x95/0xd0 [ 435.450706][T20845] dump_stack+0x15/0x1b [ 435.450796][T20845] should_fail_ex+0x262/0x280 [ 435.450824][T20845] should_failslab+0x8c/0xb0 [ 435.450861][T20845] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 435.450954][T20845] ? __d_alloc+0x34/0x320 [ 435.450978][T20845] ? __d_alloc+0x34/0x320 [ 435.451001][T20845] __d_alloc+0x34/0x320 [ 435.451023][T20845] d_alloc+0x2e/0x100 [ 435.451129][T20845] lookup_one_qstr_excl+0x95/0x240 [ 435.451162][T20845] start_dirop+0x3e/0x70 [ 435.451188][T20845] simple_start_creating+0xa2/0xd0 [ 435.451213][T20845] debugfs_start_creating+0xcd/0x160 [ 435.451262][T20845] __debugfs_create_file+0x70/0x2b0 [ 435.451287][T20845] debugfs_create_file_full+0x3f/0x60 [ 435.451316][T20845] ? __pfx_br_dev_setup+0x10/0x10 [ 435.451356][T20845] ref_tracker_dir_debugfs+0x10e/0x220 [ 435.451408][T20845] alloc_netdev_mqs+0x1a9/0xa90 [ 435.451470][T20845] br_add_bridge+0x35/0xc0 [ 435.451503][T20845] br_ioctl_stub+0x3e3/0x8f0 [ 435.451530][T20845] ? ioctl_has_perm+0x273/0x2c0 [ 435.451653][T20845] ? __pfx_br_ioctl_stub+0x10/0x10 [ 435.451686][T20845] sock_ioctl+0x39a/0x610 [ 435.451711][T20845] ? __pfx_sock_ioctl+0x10/0x10 [ 435.451730][T20845] __se_sys_ioctl+0xce/0x140 [ 435.451813][T20845] __x64_sys_ioctl+0x43/0x50 [ 435.451921][T20845] x64_sys_call+0x239d/0x2550 [ 435.451948][T20845] do_syscall_64+0x112/0x360 [ 435.451976][T20845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.452065][T20845] RIP: 0033:0x7f4c445be159 [ 435.452114][T20845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.452135][T20845] RSP: 002b:00007f4c43017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.452187][T20845] RAX: ffffffffffffffda RBX: 00007f4c44845fa0 RCX: 00007f4c445be159 [ 435.452204][T20845] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004 [ 435.452220][T20845] RBP: 00007f4c44655024 R08: 0000000000000000 R09: 0000000000000000 [ 435.452236][T20845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.452251][T20845] R13: 00007f4c44846038 R14: 00007f4c44845fa0 R15: 00007ffd48c3d608 [ 435.452272][T20845] [ 435.614283][T20848] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.777397][T20865] hugetlbfs: syz.1.4999 (20865): Using mlock ulimits for SHM_HUGETLB is obsolete [ 435.898273][ T29] audit: type=1400 audit(1788397103.731:3645): avc: denied { write } for pid=20846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.959187][T20856] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 435.996827][T20883] netlink: 'syz.4.5005': attribute type 20 has an invalid length. [ 435.996871][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5005'. [ 436.038682][ T29] audit: type=1400 audit(1788397103.881:3646): avc: denied { write } for pid=20884 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.088110][T20883] netlink: 'syz.4.5005': attribute type 20 has an invalid length. [ 436.088215][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5005'. [ 436.247662][T20898] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.483584][ T29] audit: type=1400 audit(1788397104.321:3647): avc: denied { write } for pid=20892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.620735][ T29] audit: type=1400 audit(1788397104.461:3648): avc: denied { write } for pid=20919 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.880291][T20941] loop4: detected capacity change from 0 to 512 [ 436.889864][T20941] EXT4-fs: Ignoring removed oldalloc option [ 436.896035][T20942] FAULT_INJECTION: forcing a failure. [ 436.896035][T20942] name failslab, interval 1, probability 0, space 0, times 0 [ 436.896080][T20942] CPU: 0 UID: 0 PID: 20942 Comm: syz.1.5019 Not tainted syzkaller #0 PREEMPT(lazy) [ 436.896112][T20942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.896127][T20942] Call Trace: [ 436.896136][T20942] [ 436.896146][T20942] __dump_stack+0x1d/0x30 [ 436.896185][T20942] dump_stack_lvl+0x95/0xd0 [ 436.896226][T20942] dump_stack+0x15/0x1b [ 436.896248][T20942] should_fail_ex+0x262/0x280 [ 436.896294][T20942] should_failslab+0x8c/0xb0 [ 436.896324][T20942] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 436.896414][T20942] ? __d_alloc+0x34/0x320 [ 436.896437][T20942] ? __d_alloc+0x34/0x320 [ 436.896462][T20942] __d_alloc+0x34/0x320 [ 436.896488][T20942] d_alloc+0x2e/0x100 [ 436.896590][T20942] lookup_one_qstr_excl+0x95/0x240 [ 436.896680][T20942] start_dirop+0x3e/0x70 [ 436.896703][T20942] simple_start_creating+0xa2/0xd0 [ 436.896729][T20942] debugfs_start_creating+0xcd/0x160 [ 436.896754][T20942] __debugfs_create_file+0x70/0x2b0 [ 436.896778][T20942] debugfs_create_file_full+0x3f/0x60 [ 436.896869][T20942] ? __pfx_br_dev_setup+0x10/0x10 [ 436.896904][T20942] ref_tracker_dir_debugfs+0x10e/0x220 [ 436.896961][T20942] alloc_netdev_mqs+0x1a9/0xa90 [ 436.896994][T20942] br_add_bridge+0x35/0xc0 [ 436.897022][T20942] br_ioctl_stub+0x3e3/0x8f0 [ 436.897136][T20942] ? ioctl_has_perm+0x273/0x2c0 [ 436.897170][T20942] ? __pfx_br_ioctl_stub+0x10/0x10 [ 436.897259][T20942] sock_ioctl+0x39a/0x610 [ 436.897282][T20942] ? __pfx_sock_ioctl+0x10/0x10 [ 436.897304][T20942] __se_sys_ioctl+0xce/0x140 [ 436.897371][T20942] __x64_sys_ioctl+0x43/0x50 [ 436.897400][T20942] x64_sys_call+0x239d/0x2550 [ 436.897499][T20942] do_syscall_64+0x112/0x360 [ 436.897530][T20942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.897600][T20942] RIP: 0033:0x7efe9799e159 [ 436.897618][T20942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.897643][T20942] RSP: 002b:00007efe963f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.897667][T20942] RAX: ffffffffffffffda RBX: 00007efe97c25fa0 RCX: 00007efe9799e159 [ 436.897683][T20942] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004 [ 436.897773][T20942] RBP: 00007efe97a35024 R08: 0000000000000000 R09: 0000000000000000 [ 436.897788][T20942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.897803][T20942] R13: 00007efe97c26038 R14: 00007efe97c25fa0 R15: 00007ffed685ad68 [ 436.897887][T20942] [ 437.002368][T20891] FAULT_INJECTION: forcing a failure. [ 437.002368][T20891] name failslab, interval 1, probability 0, space 0, times 0 [ 437.002401][T20891] CPU: 0 UID: 0 PID: 20891 Comm: syz.6.5007 Not tainted syzkaller #0 PREEMPT(lazy) [ 437.002429][T20891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.002443][T20891] Call Trace: [ 437.002451][T20891] [ 437.002460][T20891] __dump_stack+0x1d/0x30 [ 437.002488][T20891] dump_stack_lvl+0x95/0xd0 [ 437.002511][T20891] dump_stack+0x15/0x1b [ 437.002533][T20891] should_fail_ex+0x262/0x280 [ 437.002557][T20891] ? vm_area_dup+0x33/0x300 [ 437.002592][T20891] should_failslab+0x8c/0xb0 [ 437.002621][T20891] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 437.002649][T20891] ? vm_area_dup+0x33/0x300 [ 437.002677][T20891] vm_area_dup+0x33/0x300 [ 437.002704][T20891] __split_vma+0xe4/0x720 [ 437.002733][T20891] vms_gather_munmap_vmas+0x265/0x7f0 [ 437.002758][T20891] do_vmi_align_munmap+0x1e1/0x400 [ 437.002788][T20891] do_vmi_munmap+0x1da/0x220 [ 437.002811][T20891] do_munmap+0x8d/0xc0 [ 437.002846][T20891] mremap_to+0x196/0x450 [ 437.002871][T20891] ? check_prep_vma+0x463/0x640 [ 437.002900][T20891] __se_sys_mremap+0x89e/0xc40 [ 437.002934][T20891] __x64_sys_mremap+0x67/0x80 [ 437.002960][T20891] x64_sys_call+0x1072/0x2550 [ 437.002988][T20891] do_syscall_64+0x112/0x360 [ 437.003019][T20891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.003042][T20891] RIP: 0033:0x7f4c445be159 [ 437.003061][T20891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.003081][T20891] RSP: 002b:00007f4c43017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 437.003104][T20891] RAX: ffffffffffffffda RBX: 00007f4c44845fa0 RCX: 00007f4c445be159 [ 437.003120][T20891] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000200000001000 [ 437.003134][T20891] RBP: 00007f4c44655024 R08: 0000200000005000 R09: 0000000000000000 [ 437.003149][T20891] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 437.003163][T20891] R13: 00007f4c44846038 R14: 00007f4c44845fa0 R15: 00007ffd48c3d608 [ 437.003184][T20891] [ 437.078616][T20941] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.5020: bg 0: block 5: invalid block bitmap [ 437.078647][T20941] fserror_report: 2 callbacks suppressed [ 437.078654][T20941] loop4: lost filesystem error report for type 5 error -117 [ 437.082210][T20941] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 437.082239][T20941] loop4: lost filesystem error report for type 5 error -117 [ 437.087304][T20941] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5020: invalid indirect mapped block 3 (level 2) [ 437.087408][T20941] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 437.087861][ C0] EXT4-fs (loop4): error count since last fsck: 3 [ 437.087881][ C0] EXT4-fs (loop4): initial error at time 1788397104: ext4_validate_block_bitmap:436 [ 437.087906][ C0] EXT4-fs (loop4): last error at time 1788397104: ext4_free_branches:1023: inode 11 [ 437.092347][T20941] EXT4-fs (loop4): 1 orphan inode deleted [ 437.092368][T20941] EXT4-fs (loop4): 1 truncate cleaned up [ 437.092952][T20941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.132081][ T29] audit: type=1400 audit(1788397104.961:3649): avc: denied { write } for pid=20929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.144369][ T29] audit: type=1400 audit(1788397104.981:3650): avc: denied { write } for pid=20939 comm="syz.4.5020" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.154738][T20941] EXT4-fs (loop4): shut down requested (0) [ 437.278695][T18295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.349287][T20936] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 437.451204][ T29] audit: type=1400 audit(1788397105.281:3651): avc: denied { write } for pid=20957 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.861171][T20991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5031'. [ 437.888876][ T29] audit: type=1400 audit(1788397105.721:3652): avc: denied { write } for pid=20968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.007365][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5032'. [ 438.410928][T21037] FAULT_INJECTION: forcing a failure. [ 438.410928][T21037] name fail_futex, interval 1, probability 0, space 0, times 0 [ 438.410973][T21037] CPU: 1 UID: 0 PID: 21037 Comm: syz.9.5039 Not tainted syzkaller #0 PREEMPT(lazy) [ 438.411015][T21037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.411163][T21037] Call Trace: [ 438.411172][T21037] [ 438.411181][T21037] __dump_stack+0x1d/0x30 [ 438.411207][T21037] dump_stack_lvl+0x95/0xd0 [ 438.411230][T21037] dump_stack+0x15/0x1b [ 438.411257][T21037] should_fail_ex+0x262/0x280 [ 438.411285][T21037] should_fail+0xb/0x20 [ 438.411313][T21037] get_futex_key+0x12d/0xb10 [ 438.411344][T21037] futex_wake+0x89/0x400 [ 438.411445][T21037] do_futex+0x3f8/0x460 [ 438.411477][T21037] ? should_fail_ex+0xdb/0x280 [ 438.411501][T21037] __se_sys_futex+0x2f6/0x370 [ 438.411531][T21037] __x64_sys_futex+0x78/0x90 [ 438.411610][T21037] x64_sys_call+0x22e2/0x2550 [ 438.411642][T21037] do_syscall_64+0x112/0x360 [ 438.411678][T21037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.411704][T21037] RIP: 0033:0x7f3185d0e159 [ 438.411745][T21037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.411767][T21037] RSP: 002b:00007f31847670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 438.411794][T21037] RAX: ffffffffffffffda RBX: 00007f3185f95fa8 RCX: 00007f3185d0e159 [ 438.411812][T21037] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3185f95fac [ 438.411829][T21037] RBP: 00007f3185f95fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 438.411873][T21037] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 438.411890][T21037] R13: 00007f3185f96038 R14: 00007ffef9c43980 R15: 00007ffef9c43a68 [ 438.411913][T21037] [ 438.605419][T21052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5045'. [ 438.616816][T21051] FAULT_INJECTION: forcing a failure. [ 438.616816][T21051] name fail_futex, interval 1, probability 0, space 0, times 0 [ 438.616879][T21051] CPU: 0 UID: 0 PID: 21051 Comm: syz.9.5044 Not tainted syzkaller #0 PREEMPT(lazy) [ 438.616924][T21051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.616941][T21051] Call Trace: [ 438.616952][T21051] [ 438.616963][T21051] __dump_stack+0x1d/0x30 [ 438.616996][T21051] dump_stack_lvl+0x95/0xd0 [ 438.617019][T21051] dump_stack+0x15/0x1b [ 438.617070][T21051] should_fail_ex+0x262/0x280 [ 438.617098][T21051] should_fail+0xb/0x20 [ 438.617122][T21051] get_futex_key+0x12d/0xb10 [ 438.617155][T21051] futex_wait_setup+0x49/0x3e0 [ 438.617245][T21051] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 438.617354][T21051] ? hrtimer_active+0xe4/0x110 [ 438.617475][T21051] __futex_wait+0xa9/0x260 [ 438.617503][T21051] ? __pfx_futex_wake_mark+0x10/0x10 [ 438.617573][T21051] futex_wait+0x98/0x1c0 [ 438.617594][T21051] do_futex+0x391/0x460 [ 438.617627][T21051] ? should_fail_ex+0xdb/0x280 [ 438.617651][T21051] __se_sys_futex+0x2f6/0x370 [ 438.617685][T21051] __x64_sys_futex+0x78/0x90 [ 438.617791][T21051] x64_sys_call+0x22e2/0x2550 [ 438.617820][T21051] do_syscall_64+0x112/0x360 [ 438.617877][T21051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.617903][T21051] RIP: 0033:0x7f3185d0e159 [ 438.617923][T21051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.617946][T21051] RSP: 002b:00007f31847670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 438.617971][T21051] RAX: ffffffffffffffda RBX: 00007f3185f95fa8 RCX: 00007f3185d0e159 [ 438.618011][T21051] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3185f95fa8 [ 438.618027][T21051] RBP: 00007f3185f95fa0 R08: 0000000000000000 R09: 0000000000000000 [ 438.618042][T21051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.618112][T21051] R13: 00007f3185f96038 R14: 00007ffef9c43980 R15: 00007ffef9c43a68 [ 438.618197][T21051] [ 438.733337][T21059] netlink: 'syz.4.5047': attribute type 15 has an invalid length. [ 438.733358][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5047'. [ 438.759739][T21059] netlink: 'syz.4.5047': attribute type 15 has an invalid length. [ 438.759761][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5047'. [ 438.767896][T19337] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 438.767981][T19337] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 438.768032][T19337] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 438.768068][T19337] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 439.334162][T21029] FAULT_INJECTION: forcing a failure. [ 439.334162][T21029] name failslab, interval 1, probability 0, space 0, times 0 [ 439.334205][T21029] CPU: 0 UID: 0 PID: 21029 Comm: syz.0.5034 Not tainted syzkaller #0 PREEMPT(lazy) [ 439.334239][T21029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.334256][T21029] Call Trace: [ 439.334265][T21029] [ 439.334275][T21029] __dump_stack+0x1d/0x30 [ 439.334305][T21029] dump_stack_lvl+0x95/0xd0 [ 439.334333][T21029] dump_stack+0x15/0x1b [ 439.334357][T21029] should_fail_ex+0x262/0x280 [ 439.334383][T21029] ? vm_area_dup+0x33/0x300 [ 439.334415][T21029] should_failslab+0x8c/0xb0 [ 439.334448][T21029] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 439.334482][T21029] ? vm_area_dup+0x33/0x300 [ 439.334525][T21029] vm_area_dup+0x33/0x300 [ 439.334557][T21029] __split_vma+0xe4/0x720 [ 439.334589][T21029] vms_gather_munmap_vmas+0x265/0x7f0 [ 439.334618][T21029] do_vmi_align_munmap+0x1e1/0x400 [ 439.334647][T21029] do_vmi_munmap+0x1da/0x220 [ 439.334668][T21029] do_munmap+0x8d/0xc0 [ 439.334705][T21029] mremap_to+0x196/0x450 [ 439.334736][T21029] ? check_prep_vma+0x463/0x640 [ 439.334765][T21029] __se_sys_mremap+0x89e/0xc40 [ 439.334802][T21029] __x64_sys_mremap+0x67/0x80 [ 439.334829][T21029] x64_sys_call+0x1072/0x2550 [ 439.334858][T21029] do_syscall_64+0x112/0x360 [ 439.334891][T21029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.334913][T21029] RIP: 0033:0x7fcfc60ee159 [ 439.334934][T21029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.334955][T21029] RSP: 002b:00007fcfc4b47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 439.334980][T21029] RAX: ffffffffffffffda RBX: 00007fcfc6375fa0 RCX: 00007fcfc60ee159 [ 439.334996][T21029] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000200000001000 [ 439.335012][T21029] RBP: 00007fcfc6185024 R08: 0000200000005000 R09: 0000000000000000 [ 439.335027][T21029] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 439.335042][T21029] R13: 00007fcfc6376038 R14: 00007fcfc6375fa0 R15: 00007ffdec6bb198 [ 439.335063][T21029] [ 439.801584][T21112] loop9: detected capacity change from 0 to 512 [ 439.809495][T21112] EXT4-fs: Ignoring removed oldalloc option [ 439.836852][T21112] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.5055: bg 0: block 5: invalid block bitmap [ 439.837011][T21112] loop9: lost filesystem error report for type 5 error -117 [ 439.850049][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 439.850076][ C0] EXT4-fs (loop9): initial error at time 1788397107: ext4_validate_block_bitmap:436 [ 439.850111][ C0] EXT4-fs (loop9): last error at time 1788397107: ext4_validate_block_bitmap:436 [ 439.888102][T21112] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 439.888182][T21112] loop9: lost filesystem error report for type 5 error -117 [ 439.900597][T21112] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5055: invalid indirect mapped block 3 (level 2) [ 439.900643][T21112] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 439.902491][T21112] EXT4-fs (loop9): 1 orphan inode deleted [ 439.902513][T21112] EXT4-fs (loop9): 1 truncate cleaned up [ 439.902854][T21112] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.952890][T21112] EXT4-fs (loop9): shut down requested (0) [ 439.973848][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5059'. [ 439.973921][T21122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5059'. [ 439.998596][T21122] geneve3: entered promiscuous mode [ 439.998683][T21122] geneve3: entered allmulticast mode [ 440.060699][T21125] device-mapper: ioctl: only supply one of name or uuid, cmd(17) [ 440.077228][T14777] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.222844][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 440.222906][ T29] audit: type=1400 audit(1788397108.061:3666): avc: denied { write } for pid=21133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.266340][T21161] netlink: 'syz.9.5069': attribute type 4 has an invalid length. [ 440.282082][T21161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.282285][T21161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.304342][ T29] audit: type=1400 audit(1788397108.141:3667): avc: denied { write } for pid=21162 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.450754][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 440.587686][ T29] audit: type=1400 audit(1788397108.421:3668): avc: denied { write } for pid=21173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.611808][ T29] audit: type=1400 audit(1788397108.431:3669): avc: denied { write } for pid=21184 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.692094][ T29] audit: type=1400 audit(1788397108.531:3670): avc: denied { write } for pid=21187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.716474][ T29] audit: type=1400 audit(1788397108.531:3671): avc: denied { write } for pid=21198 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.732847][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 440.819248][ T29] audit: type=1400 audit(1788397108.661:3672): avc: denied { write } for pid=21201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.872689][ T29] audit: type=1400 audit(1788397108.711:3673): avc: denied { write } for pid=21220 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.911374][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 441.110237][ T29] audit: type=1400 audit(1788397108.951:3674): avc: denied { write } for pid=21224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.158763][T21250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5082'. [ 441.158802][T21250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5082'. [ 441.168122][T21250] geneve2: entered promiscuous mode [ 441.168143][T21250] geneve2: entered allmulticast mode [ 441.191390][ T29] audit: type=1400 audit(1788397109.021:3675): avc: denied { write } for pid=21251 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.220725][T21255] netlink: 'syz.6.5083': attribute type 4 has an invalid length. [ 441.250795][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 441.994183][T21326] netlink: 'syz.1.5112': attribute type 4 has an invalid length. [ 442.000453][T21326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.000554][T21326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.525439][T21334] netlink: 'syz.0.5124': attribute type 4 has an invalid length. [ 442.532943][T21334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.533083][T21334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.260871][T21443] loop9: detected capacity change from 0 to 4096 [ 445.355455][T21443] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.373892][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 445.373915][ T29] audit: type=1400 audit(1788397625.211:3677): avc: denied { write } for pid=21441 comm="syz.9.5159" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.418458][T21455] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5163'. [ 445.421442][ T29] audit: type=1400 audit(1788397625.261:3678): avc: denied { execheap } for pid=21454 comm="syz.4.5163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 446.062107][T14777] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.095508][T21483] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5175'. [ 446.570451][T21490] vcan0 speed is unknown, defaulting to 1000 [ 446.876069][T21490] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.876113][T21490] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.876239][T21490] bridge_slave_0: entered allmulticast mode [ 446.876738][T21490] bridge_slave_0: entered promiscuous mode [ 446.904418][T21490] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.904461][T21490] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.904617][T21490] bridge_slave_1: entered allmulticast mode [ 446.905196][T21490] bridge_slave_1: entered promiscuous mode [ 446.944406][T21490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.956197][T21490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.976772][T21490] team0: Port device team_slave_0 added [ 446.983918][T21490] team0: Port device team_slave_1 added [ 447.001233][T21490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.001272][T21490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.001309][T21490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.003691][T21490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.003705][T21490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.003734][T21490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.041687][T21490] hsr_slave_0: entered promiscuous mode [ 447.042208][T21490] hsr_slave_1: entered promiscuous mode [ 447.042421][T21490] debugfs: 'hsr0' already exists in 'hsr' [ 447.042437][T21490] Cannot create hsr debugfs directory [ 447.315820][ T29] audit: type=1400 audit(1788397883.154:3679): avc: denied { write } for pid=21509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.366343][ T29] audit: type=1400 audit(1788397883.204:3680): avc: denied { write } for pid=21520 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.452507][T21490] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 447.461468][T21490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.462239][T21490] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 447.472583][T21490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.473265][T21490] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 447.479496][T21490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.481761][T21490] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 447.484756][T21490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.586803][T21490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.606291][T21490] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.613493][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.613537][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.619924][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.619967][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.655771][ T29] audit: type=1400 audit(1788397883.494:3681): avc: denied { write } for pid=21522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.709047][ T29] audit: type=1400 audit(1788397883.554:3682): avc: denied { write } for pid=21541 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.880844][ T29] audit: type=1400 audit(1788397883.724:3683): avc: denied { write } for pid=21544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.922895][T21490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.944756][ T29] audit: type=1400 audit(1788397883.784:3684): avc: denied { write } for pid=21562 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.195615][ T29] audit: type=1400 audit(1788397884.034:3685): avc: denied { write } for pid=21573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.216413][ T29] audit: type=1400 audit(1788397884.054:3686): avc: denied { write } for pid=21590 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.312199][T21490] veth0_vlan: entered promiscuous mode [ 448.328830][T21490] veth1_vlan: entered promiscuous mode [ 448.366071][T21614] loop4: detected capacity change from 0 to 128 [ 448.438421][T21490] veth0_macvtap: entered promiscuous mode [ 448.442060][T21490] veth1_macvtap: entered promiscuous mode [ 448.447532][T21490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.452719][T21490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.468727][T19337] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.471210][T19335] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.471380][T19335] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.471481][T19335] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.666462][T21734] bridge1: entered promiscuous mode [ 449.666497][T21734] bridge1: entered allmulticast mode [ 449.852497][T21754] loop7: detected capacity change from 0 to 512 [ 449.893236][T21754] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 449.893395][T21754] EXT4-fs (loop7): orphan cleanup on readonly fs [ 449.908530][T21754] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 449.924512][T21754] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 449.931487][T21754] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #16: comm syz.7.5204: inode has both inline data and extents flags [ 449.931525][T21754] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 449.944928][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 449.944970][ C1] EXT4-fs (loop7): initial error at time 1788397885: ext4_orphan_get:1403: inode 16 [ 449.945009][ C1] EXT4-fs (loop7): last error at time 1788397885: ext4_orphan_get:1403: inode 16 [ 449.945324][T21754] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.5204: couldn't read orphan inode 16 (err -117) [ 449.945357][T21754] loop7: lost filesystem error report for type 5 error -117 [ 449.969193][T21754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 449.998516][T21754] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 450.046978][T21490] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.276191][T21778] selinux_netlink_send: 6 callbacks suppressed [ 450.276223][T21778] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21778 comm=syz.7.5207 [ 450.541289][T21799] loop7: detected capacity change from 0 to 4096 [ 450.554210][T21799] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.560382][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 450.560399][ T29] audit: type=1400 audit(1788397886.394:3705): avc: denied { write } for pid=21798 comm="syz.7.5216" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 450.606733][T21804] loop4: detected capacity change from 0 to 512 [ 450.614761][T21804] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 450.729416][T21812] loop4: detected capacity change from 0 to 512 [ 450.761095][T21812] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 450.761197][T21812] EXT4-fs (loop4): orphan cleanup on readonly fs [ 450.769526][T21812] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 450.769579][T21812] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 450.776630][T21812] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 450.788128][T21812] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #16: comm syz.4.5220: inode has both inline data and extents flags [ 450.788182][T21812] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 450.789615][T21812] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.5220: couldn't read orphan inode 16 (err -117) [ 450.789648][T21812] loop4: lost filesystem error report for type 5 error -117 [ 450.790518][T21812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 450.794340][T21815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21815 comm=syz.6.5222 [ 450.806310][T21812] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 450.858566][T18295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.418695][T21805] ================================================================== [ 451.418736][T21805] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 451.418782][T21805] [ 451.418790][T21805] write to 0xffff88811a4c66ec of 4 bytes by task 21799 on cpu 0: [ 451.418810][T21805] xas_set_mark+0x12b/0x140 [ 451.418840][T21805] __folio_start_writeback+0x16b/0x370 [ 451.418874][T21805] ext4_bio_write_folio+0x5a2/0xa10 [ 451.418895][T21805] mpage_process_page_bufs+0x484/0x5e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 451.418927][T21805] mpage_prepare_extent_to_map+0x83e/0xca0 [ 451.418958][T21805] ext4_do_writepages+0x70f/0x2870 [ 451.418983][T21805] ext4_writepages+0x191/0x300 [ 451.419011][T21805] do_writepages+0x1b9/0x300 [ 451.419040][T21805] file_write_and_wait_range+0x178/0x2f0 [ 451.419097][T21805] ext4_sync_file+0x114/0x5c0 [ 451.419122][T21805] vfs_fsync_range+0xc5/0xe0 [ 451.419144][T21805] ext4_buffered_write_iter+0x427/0x480 [ 451.419170][T21805] ext4_file_write_iter+0x36e/0x1020 [ 451.419193][T21805] iter_file_splice_write+0x6a0/0xa60 [ 451.419229][T21805] direct_splice_actor+0x158/0x280 [ 451.419272][T21805] splice_direct_to_actor+0x2f9/0x680 [ 451.419308][T21805] do_splice_direct+0x119/0x1a0 [ 451.419342][T21805] do_sendfile+0x37d/0x640 [ 451.419361][T21805] __x64_sys_sendfile64+0x105/0x150 [ 451.419396][T21805] x64_sys_call+0x1015/0x2550 [ 451.419424][T21805] do_syscall_64+0x112/0x360 [ 451.419452][T21805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.419476][T21805] [ 451.419484][T21805] read to 0xffff88811a4c66ec of 4 bytes by task 21805 on cpu 1: [ 451.419503][T21805] __writeback_single_inode+0x208/0x790 [ 451.419535][T21805] writeback_single_inode+0x16d/0x410 [ 451.419564][T21805] sync_inode_metadata+0x6e/0xa0 [ 451.419591][T21805] ext4_sync_file+0x214/0x5c0 [ 451.419617][T21805] vfs_fsync_range+0xc5/0xe0 [ 451.419639][T21805] ext4_buffered_write_iter+0x427/0x480 [ 451.419664][T21805] ext4_file_write_iter+0x36e/0x1020 [ 451.419688][T21805] iter_file_splice_write+0x6a0/0xa60 [ 451.419723][T21805] direct_splice_actor+0x158/0x280 [ 451.419758][T21805] splice_direct_to_actor+0x2f9/0x680 [ 451.419794][T21805] do_splice_direct+0x119/0x1a0 [ 451.419829][T21805] do_sendfile+0x37d/0x640 [ 451.419847][T21805] __x64_sys_sendfile64+0x105/0x150 [ 451.419882][T21805] x64_sys_call+0x1015/0x2550 [ 451.419910][T21805] do_syscall_64+0x112/0x360 [ 451.419936][T21805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.419959][T21805] [ 451.419968][T21805] value changed: 0x05000021 -> 0x02000021 [ 451.419980][T21805] [ 451.419985][T21805] Reported by Kernel Concurrency Sanitizer on: [ 451.419996][T21805] CPU: 1 UID: 0 PID: 21805 Comm: syz.7.5216 Not tainted syzkaller #0 PREEMPT(lazy) [ 451.420021][T21805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.420035][T21805] ================================================================== [ 451.425839][T21618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.478150][ T29] audit: type=1400 audit(1788397887.324:3706): avc: denied { write } for pid=3286 comm="syz-executor" path="pipe:[2358]" dev="pipefs" ino=2358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 451.862912][ T29] audit: type=1400 audit(1788397887.704:3707): avc: denied { write } for pid=21842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.886555][ T29] audit: type=1400 audit(1788397887.724:3708): avc: denied { write } for pid=21853 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.046981][ T38] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.094412][T21798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.113974][ T38] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.161167][ T38] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.210223][ T38] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.280452][ T38] bridge_slave_1: left allmulticast mode [ 452.280487][ T38] bridge_slave_1: left promiscuous mode [ 452.280719][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.300856][ T38] bridge_slave_0: left allmulticast mode [ 452.300885][ T38] bridge_slave_0: left promiscuous mode [ 452.301061][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.355733][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.366208][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.375935][ T38] bond0 (unregistering): Released all slaves [ 452.445488][ T38] hsr_slave_0: left promiscuous mode [ 452.453155][ T38] hsr_slave_1: left promiscuous mode [ 452.461410][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.461435][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.474528][ T29] audit: type=1400 audit(1788397888.314:3709): avc: denied { write } for pid=21857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.494643][ T29] audit: type=1400 audit(1788397888.334:3710): avc: denied { write } for pid=21868 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.510953][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.510973][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.529853][ T38] veth1_macvtap: left promiscuous mode [ 452.529883][ T38] veth0_macvtap: left promiscuous mode [ 452.529928][ T38] veth1_vlan: left promiscuous mode [ 452.530032][ T38] veth0_vlan: left promiscuous mode [ 452.610703][ T38] team0 (unregistering): Port device team_slave_1 removed [ 452.618375][ T38] team0 (unregistering): Port device team_slave_0 removed [ 452.645331][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 452.704269][ T29] audit: type=1400 audit(1788397888.544:3711): avc: denied { write } for pid=21870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.724943][ T29] audit: type=1400 audit(1788397888.544:3712): avc: denied { write } for pid=21881 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.802158][ T29] audit: type=1400 audit(1788397888.644:3713): avc: denied { write } for pid=21884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.925999][T19343] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.926048][T19343] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 452.926132][T19343] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.971493][T19343] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.971643][T19343] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 452.971677][T19343] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.031040][T19343] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.031093][T19343] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 453.031138][T19343] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.101615][T19343] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.101665][T19343] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 453.101708][T19343] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.167933][T19343] bridge_slave_1: left allmulticast mode [ 453.168018][T19343] bridge_slave_1: left promiscuous mode [ 453.168191][T19343] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.251713][T19343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.262748][T19343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.272665][T19343] bond0 (unregistering): Released all slaves [ 453.280338][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 453.334382][T19343] hsr_slave_0: left promiscuous mode [ 453.340620][T19343] hsr_slave_1: left promiscuous mode [ 453.341109][T19343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.341133][T19343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.363748][T19343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.363774][T19343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.382669][T19343] veth1_macvtap: left promiscuous mode [ 453.382752][T19343] veth0_macvtap: left promiscuous mode [ 453.382824][T19343] veth1_vlan: left promiscuous mode [ 453.382865][T19343] veth0_vlan: left promiscuous mode [ 453.456154][T19343] team0 (unregistering): Port device team_slave_1 removed [ 453.463600][T19343] team0 (unregistering): Port device team_slave_0 removed [ 453.485312][ T38] smc: removing ib device syz0 [ 453.494188][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 453.494579][ T3400] vcan0 speed is unknown, defaulting to 1000 [ 453.494596][ T3400] syz0: Port: 1 Link DOWN [ 453.710606][T19343] IPVS: stop unused estimator thread 0... [ 453.732461][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20 [ 453.759636][T19343] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 453.809926][T19343] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 453.854841][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21 [ 453.863122][T19343] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 453.910154][T19343] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 453.978477][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22 [ 454.048631][T19343] bond2 (unregistering): (slave vti0): Releasing backup interface [ 454.048750][T19343] vti0 (unregistering): left allmulticast mode [ 454.065699][T19343] bond3 (unregistering): (slave geneve2): Releasing active interface [ 454.087329][T19343] bond0 (unregistering): Released all slaves [ 454.094027][T19343] bond1 (unregistering): (slave veth3): Releasing backup interface [ 454.103644][T19343] bond1 (unregistering): Released all slaves [ 454.109886][T19343] bond2 (unregistering): Released all slaves [ 454.115754][T19343] bond3 (unregistering): Released all slaves [ 454.121805][T19343] bond4 (unregistering): Released all slaves [ 454.127839][T19343] bond5 (unregistering): Released all slaves [ 454.456167][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23 [ 454.467037][T19343] IPVS: stop unused estimator thread 0... [ 454.589189][ T3021] 8021q: adding VLAN 0 to HW filter on device eth24 [ 454.690194][ T3021] 8021q: adding VLAN 0 to HW filter on device eth25 [ 454.795011][ T3021] 8021q: adding VLAN 0 to HW filter on device eth26 [ 454.909824][ T3021] 8021q: adding VLAN 0 to HW filter on device eth27 [ 455.014164][ T3021] 8021q: adding VLAN 0 to HW filter on device eth28