last executing test programs: 2m8.31500594s ago: executing program 4 (id=204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 2m8.035443227s ago: executing program 4 (id=206): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000000c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000980)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000b80)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000c40)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2m7.922928979s ago: executing program 4 (id=208): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$cgroup_devices(r4, 0x0, 0x8) write(r2, 0x0, 0x0) 2m6.924705284s ago: executing program 4 (id=215): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0, 0x4}, 0x10005, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000dc0)='./file0\x00') mount$bind(&(0x7f0000000e00)='.\x00', &(0x7f0000000e40)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)='./file0/../file0/../file0\x00') setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 2m6.742384038s ago: executing program 4 (id=220): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x22020600) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe0000004}) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x7fff, 0x0, 0x0) 2m6.549306373s ago: executing program 4 (id=225): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='res', 0x3) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xee01, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0xffffffff}}, './file0\x00'}) utimes(&(0x7f0000000240)='./file0\x00', 0x0) 2m6.549201853s ago: executing program 32 (id=225): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='res', 0x3) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xee01, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0xffffffff}}, './file0\x00'}) utimes(&(0x7f0000000240)='./file0\x00', 0x0) 4.200869937s ago: executing program 2 (id=1807): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000002480)={&(0x7f0000002400)=[{&(0x7f0000000740)="ded3b7e9fb2d8c26bd1f811400eaeba42c7518b3fc37fed253297001a43baf01eebf7ce1060263cf0fe199bead64eeeededb", 0x32}, {0x0}, {&(0x7f0000002100)="865aac9a54197fe13613b732b20326e90a68453aeba3", 0x16}, {&(0x7f0000002200)="5434636014012618bc5bb8440867a86f61484a0117aa1cab7e1155eb2aae952dbcf20a06bd0d939c59eb77cd52ec6c55e062a7813d062ba15ffb17532018bbddf53589c80f", 0x45}], 0x4, 0x1, 0x0, 0x5, 0x0, 0x900, 0x7, 0x9}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0100000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000a80), 0x407f, r2, 0x4}, 0x38) 3.70396107s ago: executing program 3 (id=1813): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000b00)='fd/3\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x8, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@map=r0, 0x26, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0xa8) r1 = add_key$fscrypt_v1(&(0x7f00000009c0), 0x0, &(0x7f0000000a40)={0x0, "c694ef4b3792828d9d7d67e4e3ea7f4993d2127c4a92cb1e61f64b18f1f110afb027899e2d01c12e67367fa6cca9b88dcfc9d15a3a271b34351c934d95487d7e", 0x3a}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000980)='rxrpc_s\x00', &(0x7f0000000ac0)=@keyring={'key_or_keyring:', r1}) 3.298029889s ago: executing program 3 (id=1814): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0xc7) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0xb, 0x4) shutdown(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fe2000/0x13000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.214673442s ago: executing program 3 (id=1819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "9b75f8279d03466f", "18c19be745b431a1b7a6907600", "7d6a63a1", "d749c52a7fa8d9fb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b500", "b70800", "1d1cbe23", "b51788ba0584eb23"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000140)="2e4c6fd4fb0094d48e2c0c18272bf20acb4255bc6e1d1db323bce2331709ad54ed3f2d977d7a3d443687fa979df122f550b338bc2d3873", 0x37}, {&(0x7f0000000180)="0d0d2ae1455fae18d42cdecfe93ad6718df41c262a3823d9c6f13684cd123dadc675d132e277", 0x26}, {&(0x7f0000000240)="aad7a8878a05d95f45da44ee0ecea3c5d08afa", 0x13}, {&(0x7f0000000200)="a4a9b3", 0x3}, {&(0x7f0000000440)="d277e4dbc0", 0x5}], 0x5) 2.523500988s ago: executing program 5 (id=1831): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12002) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 2.523038139s ago: executing program 3 (id=1832): syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x2000011) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, r5, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) 2.160416977s ago: executing program 5 (id=1833): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x24008014) 2.01868999s ago: executing program 5 (id=1834): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) getpeername$l2tp6(r2, 0x0, &(0x7f0000000400)) 1.869912174s ago: executing program 5 (id=1836): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000d40)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="c0"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24049094}, 0x0) 1.861982195s ago: executing program 5 (id=1837): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b700000007000000bca30000000000002403000020feffff620af8ff0000001f71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f0000001240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0xfffffffffffffe8a, 0x10, &(0x7f00000012c0), 0xfffffffffffffd27}, 0x48) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) write(r0, &(0x7f0000000000)='10', 0x2) 1.821102505s ago: executing program 1 (id=1839): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0xcb7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x8) eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000640)) r0 = syz_io_uring_setup(0x102a, &(0x7f0000000000)={0x0, 0xe341, 0x13500, 0x1, 0xffffffff}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x1000}], 0x1, 0x6) 1.62751173s ago: executing program 0 (id=1840): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000600)="781e", 0x2, 0x4c001, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x49, 0x4bc, 0x2}}], 0x20, 0x40801}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7c31}, 0x8) 1.62696809s ago: executing program 5 (id=1841): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.61443168s ago: executing program 0 (id=1842): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) keyctl$search(0xa, 0x0, &(0x7f0000000780)='ceph\x00', &(0x7f00000007c0)={'syz', 0x2}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 1.525868892s ago: executing program 1 (id=1844): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000007b80)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00', 0x4, 0xfd90, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x366, 0x10, &(0x7f0000000700), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/229, 0xec1}], 0x1}, 0x0) 1.443433125s ago: executing program 1 (id=1845): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xe178, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xc, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) ioctl$FIBMAP(r0, 0x1, 0x0) 1.358293617s ago: executing program 1 (id=1846): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x4c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) socket(0x14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.342414237s ago: executing program 0 (id=1847): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x8}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x565d, 0x7, 0xffff0eb3, 0xa3}}]}]}}}]}, 0x74}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 1.285835668s ago: executing program 2 (id=1848): listen(0xffffffffffffffff, 0x10040) mount(0x0, 0x0, &(0x7f00000002c0)='proc\x00', 0x40000, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1000, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x4, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000001300)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000001340), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x2c}}, 0x0) 1.177408801s ago: executing program 2 (id=1849): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_usbip_server_init(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00003f5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000167000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x3f1a, 0xc000, 0x7, 0x20002fd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.043208314s ago: executing program 1 (id=1850): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x81, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x1, 0x6, 0x2, 0x100, 0x4, 0x86020086, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 884.023958ms ago: executing program 0 (id=1851): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x8000c059, 0xc401, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x7, 0x2}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 801.94053ms ago: executing program 1 (id=1852): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000280)={0x3002000, 0x40001000}) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='100', 0x3) socket(0x10, 0x803, 0x0) unshare(0x4c000680) 796.38306ms ago: executing program 3 (id=1853): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x1a6, 0x4) sendmmsg$inet(r2, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r2, 0x0, 0x0, 0x2100, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000200)) 784.714571ms ago: executing program 0 (id=1854): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xfe88, &(0x7f00000000c0)=""/181}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x841e, &(0x7f0000000800)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@grpid}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x101042, 0x15) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000015010200e9ffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r3, 0x0, 0xd, 0x0, &(0x7f0000000780)='\x00'/13, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 385.08462ms ago: executing program 2 (id=1855): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) creat(0x0, 0xecf86c37d53049cc) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r2, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) 142.219586ms ago: executing program 2 (id=1856): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18f3ffff01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) close(r0) 109.531657ms ago: executing program 3 (id=1857): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) keyctl$search(0xa, 0x0, &(0x7f0000000780)='ceph\x00', &(0x7f00000007c0)={'syz', 0x2}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 108.752257ms ago: executing program 0 (id=1867): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) fsync(r1) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x20000, 0x0) umount2(0x0, 0x8) 0s ago: executing program 2 (id=1858): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x7}}}, 0x24}}, 0x4004004) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632", 0x2}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 0-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.752869][ T6121] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.843413][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.899261][ T6135] batadv_slave_1: entered promiscuous mode [ 96.902271][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 96.919575][ T6135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.942214][ T6126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.942973][ T6126] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.002995][ T30] audit: type=1400 audit(1792083322.712:2979): avc: denied { write } for pid=6124 comm="syz.0.869" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.054530][ T6130] loop3: detected capacity change from 0 to 512 [ 97.074543][ T6130] EXT4-fs: Ignoring removed nobh option [ 97.185869][ T6130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.187217][ T6130] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.256275][ T30] audit: type=1400 audit(1792083322.952:2980): avc: denied { write } for pid=6128 comm="syz.3.870" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.272599][ T6130] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #2: comm syz.3.870: corrupted inode contents [ 97.285189][ T6130] EXT4-fs (loop3): Remounting filesystem read-only [ 97.303501][ T30] audit: type=1400 audit(1792083322.980:2981): avc: denied { write } for pid=6128 comm="syz.3.870" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.533457][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.535837][ T6135] batadv_slave_1 (unregistering): left promiscuous mode [ 97.582831][ T6135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.755449][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.825016][ T6155] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 97.831133][ T6155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.892565][ T6155] bond1: (slave veth7): Enslaving as an active interface with a down link [ 97.930633][ T6155] bridge0: left promiscuous mode [ 97.950167][ T6155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.957018][ T6155] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.980624][ T6155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.032205][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.033951][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.038991][ T6155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.039018][ T6155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.059928][ T6155] veth1_vlan: left promiscuous mode [ 98.082255][ T6155] veth0_vlan: left promiscuous mode [ 98.097812][ T6155] veth0_vlan: entered promiscuous mode [ 98.100986][ T6155] veth1_vlan: entered promiscuous mode [ 98.128247][ T6155] veth1_macvtap: left promiscuous mode [ 98.129078][ T6155] veth0_macvtap: left promiscuous mode [ 98.129620][ T6155] veth0_macvtap: entered promiscuous mode [ 98.130343][ T6155] veth1_macvtap: entered promiscuous mode [ 98.136486][ T6155] 8021q: adding VLAN 0 to HW filter on device eth0 [ 98.145199][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 98.175878][ T6155] 8021q: adding VLAN 0 to HW filter on device eth1 [ 98.180434][ T6155] 8021q: adding VLAN 0 to HW filter on device eth2 [ 98.193387][ T6155] 8021q: adding VLAN 0 to HW filter on device eth3 [ 98.195901][ T6155] 8021q: adding VLAN 0 to HW filter on device eth4 [ 98.226152][ T3394] bridge0: entered promiscuous mode [ 98.242476][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 98.255485][ T6163] bond1: (slave batadv1): making interface the new active one [ 98.257020][ T6163] batadv1: entered promiscuous mode [ 98.257235][ T6163] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 98.268114][ T3875] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.268308][ T3875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.276870][ T3875] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.276970][ T3875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.366034][ T3444] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.366179][ T3444] bond1: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 98.366213][ T3444] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.366323][ T3444] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.366360][ T3444] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.366429][ T3444] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.503845][ T30] audit: type=1400 audit(1792083324.097:2982): avc: denied { write } for pid=6172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.612340][ T30] audit: type=1400 audit(1792083324.198:2983): avc: denied { write } for pid=6192 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.795265][ T6210] Illegal XDP return value 4294967274 on prog (id 183) dev N/A, expect packet loss! [ 99.029302][ T30] audit: type=1400 audit(1792083324.586:2984): avc: denied { listen } for pid=6221 comm="syz.0.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.085744][ T6224] smc: net device vlan1 applied user defined pnetid SYZ2 [ 99.175801][ T6231] ip_tables: iptables: counters copy to user failed while replacing table [ 99.363894][ T30] audit: type=1326 audit(1792083324.900:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.5.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204b10e559 code=0x7ffc0000 [ 100.422509][ T3396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.422973][ T3396] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.567232][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'. [ 101.036804][ T6294] syzkaller0: entered promiscuous mode [ 101.036824][ T6294] syzkaller0: entered allmulticast mode [ 101.284103][ T6314] syzkaller1: entered promiscuous mode [ 101.284128][ T6314] syzkaller1: entered allmulticast mode [ 101.393894][ T6323] FAULT_INJECTION: forcing a failure. [ 101.393894][ T6323] name fail_futex, interval 1, probability 0, space 0, times 1 [ 101.393931][ T6323] CPU: 0 UID: 0 PID: 6323 Comm: syz.2.928 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.393963][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.393980][ T6323] Call Trace: [ 101.393988][ T6323] [ 101.393998][ T6323] __dump_stack+0x1d/0x30 [ 101.394104][ T6323] dump_stack_lvl+0x95/0xd0 [ 101.394134][ T6323] dump_stack+0x15/0x1b [ 101.394188][ T6323] should_fail_ex+0x262/0x280 [ 101.394222][ T6323] should_fail+0xb/0x20 [ 101.394252][ T6323] get_futex_key+0x12d/0xb10 [ 101.394290][ T6323] ? __free_event+0x61d/0x710 [ 101.394388][ T6323] futex_wake+0x89/0x400 [ 101.394443][ T6323] ? _raw_spin_unlock+0x9/0x30 [ 101.394490][ T6323] do_futex+0x3f8/0x460 [ 101.394552][ T6323] ? _raw_spin_unlock+0x9/0x30 [ 101.394583][ T6323] __se_sys_futex+0x2f6/0x370 [ 101.394630][ T6323] __x64_sys_futex+0x78/0x90 [ 101.394700][ T6323] x64_sys_call+0x22e2/0x2550 [ 101.394766][ T6323] do_syscall_64+0x112/0x360 [ 101.394848][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.394872][ T6323] RIP: 0033:0x7fa6d726e559 [ 101.394888][ T6323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.394909][ T6323] RSP: 002b:00007fa6d5cc70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.395016][ T6323] RAX: ffffffffffffffda RBX: 00007fa6d74f5fa8 RCX: 00007fa6d726e559 [ 101.395041][ T6323] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa6d74f5fac [ 101.395055][ T6323] RBP: 00007fa6d74f5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.395072][ T6323] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 101.395151][ T6323] R13: 00007fa6d74f6038 R14: 00007ffc0015e690 R15: 00007ffc0015e778 [ 101.395184][ T6323] [ 101.723972][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 101.723992][ T30] audit: type=1400 audit(1792083327.069:3056): avc: denied { read } for pid=3305 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.724074][ T30] audit: type=1400 audit(1792083327.069:3057): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.724154][ T30] audit: type=1400 audit(1792083327.069:3058): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.816889][ T30] audit: type=1400 audit(1792083327.161:3059): avc: denied { open } for pid=6333 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 101.837288][ T30] audit: type=1400 audit(1792083327.180:3060): avc: denied { perfmon } for pid=6333 comm="syz.2.931" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.837325][ T30] audit: type=1400 audit(1792083327.180:3061): avc: denied { kernel } for pid=6333 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 101.863957][ T30] audit: type=1400 audit(1792083327.189:3062): avc: denied { create } for pid=6333 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.883379][ T30] audit: type=1400 audit(1792083327.208:3063): avc: denied { map_create } for pid=6333 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 101.883520][ T30] audit: type=1400 audit(1792083327.208:3064): avc: denied { bpf } for pid=6333 comm="syz.2.931" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.883553][ T30] audit: type=1400 audit(1792083327.208:3065): avc: denied { map_read map_write } for pid=6333 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.552057][ T6345] FAULT_INJECTION: forcing a failure. [ 102.552057][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 102.552146][ T6345] CPU: 1 UID: 0 PID: 6345 Comm: syz.2.935 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.552239][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.552293][ T6345] Call Trace: [ 102.552299][ T6345] [ 102.552307][ T6345] __dump_stack+0x1d/0x30 [ 102.552340][ T6345] dump_stack_lvl+0x95/0xd0 [ 102.552461][ T6345] dump_stack+0x15/0x1b [ 102.552487][ T6345] should_fail_ex+0x262/0x280 [ 102.552515][ T6345] should_failslab+0x8c/0xb0 [ 102.552616][ T6345] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 102.552677][ T6345] ? sidtab_sid2str_get+0xa0/0x130 [ 102.552761][ T6345] ? sidtab_sid2str_get+0xa0/0x130 [ 102.552800][ T6345] kmemdup_noprof+0x2b/0x70 [ 102.552877][ T6345] sidtab_sid2str_get+0xa0/0x130 [ 102.552918][ T6345] security_sid_to_context_core+0x179/0x2d0 [ 102.553028][ T6345] security_sid_to_context+0x27/0x40 [ 102.553080][ T6345] avc_audit_post_callback+0x10f/0x520 [ 102.553134][ T6345] ? audit_log_lsm_data+0xb41/0xbb0 [ 102.553200][ T6345] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 102.553234][ T6345] common_lsm_audit+0x1ba/0x230 [ 102.553255][ T6345] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 102.553290][ T6345] ? avc_denied+0xe4/0x100 [ 102.553368][ T6345] slow_avc_audit+0x14c/0x190 [ 102.553419][ T6345] avc_has_perm+0x144/0x190 [ 102.553473][ T6345] selinux_socket_connect_helper+0x1a9/0x490 [ 102.553515][ T6345] selinux_socket_connect+0x2f/0x70 [ 102.553672][ T6345] security_socket_connect+0x44/0x80 [ 102.553714][ T6345] __sys_connect+0x19a/0x2a0 [ 102.553747][ T6345] __x64_sys_connect+0x3f/0x50 [ 102.553771][ T6345] x64_sys_call+0x1c0b/0x2550 [ 102.553875][ T6345] do_syscall_64+0x112/0x360 [ 102.553917][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.553946][ T6345] RIP: 0033:0x7fa6d726e559 [ 102.553967][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.554040][ T6345] RSP: 002b:00007fa6d5cc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 102.554066][ T6345] RAX: ffffffffffffffda RBX: 00007fa6d74f5fa0 RCX: 00007fa6d726e559 [ 102.554087][ T6345] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000006 [ 102.554105][ T6345] RBP: 00007fa6d73058b0 R08: 0000000000000000 R09: 0000000000000000 [ 102.554154][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.554166][ T6345] R13: 00007fa6d74f6038 R14: 00007fa6d74f5fa0 R15: 00007ffc0015e778 [ 102.554185][ T6345] [ 104.258991][ T3875] batadv1: left promiscuous mode [ 105.943322][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.943450][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.943517][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.943680][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.943803][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.943894][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.944001][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.944122][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.944319][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.946124][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.946246][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.946389][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.946512][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.946673][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.946798][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.946924][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.947083][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.947206][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.947336][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.947454][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.947689][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.947816][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.947975][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.948206][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.948293][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.948490][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.948721][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.948865][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.950881][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.951481][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.951934][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.952759][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.955568][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.956915][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.959780][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.960712][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.962162][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.962252][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.962376][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.962556][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.962717][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.962803][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.963735][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.966078][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.966489][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.969086][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.969938][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.975467][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.980479][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.981268][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.986608][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.987483][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.989659][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.990988][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.995535][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.995830][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.996546][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.997200][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.002612][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.002917][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.006847][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.007534][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.013933][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.014295][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.014671][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.015096][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.022147][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.023180][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.031379][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.033439][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.034194][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.043620][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.044152][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.045001][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.053516][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.053606][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.053730][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.053817][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.053889][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.053976][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.071473][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.078282][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.079409][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.090889][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.096087][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.097596][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.099223][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.100052][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.102467][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.103606][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.104311][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.105002][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.105301][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.105864][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.107144][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.108190][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.111178][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.111458][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.113007][ T6383] ieee802154 phy1 wpan1: encryption failed: -22 [ 106.151320][ T6376] loop3: detected capacity change from 0 to 512 [ 106.493691][ T6394] smc: net device lo applied user defined pnetid SYZ0 [ 106.746183][ T6409] syzkaller0: entered promiscuous mode [ 106.746228][ T6409] syzkaller0: entered allmulticast mode [ 106.840785][ T6423] ip6gretap1: entered allmulticast mode [ 106.841713][ T6423] batman_adv: batadv0: Adding interface: ip6gretap1 [ 106.841728][ T6423] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.841771][ T6423] batman_adv: batadv0: Interface activated: ip6gretap1 [ 106.926336][ T6430] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.965'. [ 107.163007][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 107.163027][ T30] audit: type=1400 audit(1792083332.091:3168): avc: denied { create } for pid=6449 comm="syz.3.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.164591][ T30] audit: type=1400 audit(1792083332.100:3169): avc: denied { connect } for pid=6449 comm="syz.3.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.224274][ T30] audit: type=1400 audit(1792083332.155:3170): avc: denied { ioctl } for pid=6449 comm="syz.3.971" path="socket:[16066]" dev="sockfs" ino=16066 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.963763][ T6437] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 108.000652][ T30] audit: type=1400 audit(1792083332.866:3171): avc: denied { execute } for pid=6455 comm="syz.2.974" path="/163/file0" dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.031933][ T6453] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 108.032492][ T6453] bridge1: entered promiscuous mode [ 108.059121][ T30] audit: type=1400 audit(1792083332.922:3172): avc: denied { shutdown } for pid=6459 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.081141][ T30] audit: type=1400 audit(1792083332.931:3173): avc: denied { write } for pid=6459 comm="syz.3.975" lport=57395 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 108.105419][ T30] audit: type=1400 audit(1792083332.949:3174): avc: denied { getopt } for pid=6459 comm="syz.3.975" lport=57395 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 108.139268][ T30] audit: type=1400 audit(1792083332.995:3175): avc: denied { mmap_zero } for pid=6461 comm="syz.0.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 108.177374][ T30] audit: type=1400 audit(1792083333.032:3176): avc: denied { write } for pid=6464 comm="syz.2.977" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.177485][ T30] audit: type=1400 audit(1792083333.032:3177): avc: denied { open } for pid=6464 comm="syz.2.977" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.502219][ T6476] loop1: detected capacity change from 0 to 512 [ 108.575328][ T6500] loop2: detected capacity change from 0 to 256 [ 108.822556][ T6531] tipc: Started in network mode [ 108.823097][ T6531] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 108.824035][ T6531] tipc: Enabled bearer , priority 0 [ 108.829148][ T6531] tipc: Disabling bearer [ 108.878546][ T6537] ./dev/sda1: Can't lookup blockdev [ 108.941921][ T6534] loop0: detected capacity change from 0 to 164 [ 109.203386][ T6555] loop2: detected capacity change from 0 to 8192 [ 109.667008][ T6562] loop3: detected capacity change from 0 to 256 [ 110.380759][ T3444] batadv1: left promiscuous mode [ 110.584709][ T6592] netlink: 'syz.2.1022': attribute type 12 has an invalid length. [ 110.702490][ T3873] kworker/u8:41: attempt to access beyond end of device [ 110.702490][ T3873] loop3: rw=1, sector=1800, nr_sectors = 32 limit=256 [ 110.702689][ T3873] kworker/u8:41: attempt to access beyond end of device [ 110.702689][ T3873] loop3: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 110.702829][ T3873] kworker/u8:41: attempt to access beyond end of device [ 110.702829][ T3873] loop3: rw=1, sector=1928, nr_sectors = 32 limit=256 [ 110.702952][ T3873] kworker/u8:41: attempt to access beyond end of device [ 110.702952][ T3873] loop3: rw=1, sector=1992, nr_sectors = 32 limit=256 [ 110.703055][ T3873] kworker/u8:41: attempt to access beyond end of device [ 110.703055][ T3873] loop3: rw=1, sector=2056, nr_sectors = 32 limit=256 [ 110.703200][ T3873] kworker/u8:41: attempt to access beyond end of device [ 110.703200][ T3873] loop3: rw=1, sector=2120, nr_sectors = 32 limit=256 [ 110.703279][ T3873] kworker/u8:41: attempt to access beyond end of device [ 110.703279][ T3873] loop3: rw=1, sector=2184, nr_sectors = 32 limit=256 [ 110.703455][ T3873] kworker/u8:41: attempt to access beyond end of device [ 110.703455][ T3873] loop3: rw=1, sector=2248, nr_sectors = 32 limit=256 [ 110.703533][ T3873] kworker/u8:41: attempt to access beyond end of device [ 110.703533][ T3873] loop3: rw=1, sector=2312, nr_sectors = 32 limit=256 [ 110.703630][ T3873] kworker/u8:41: attempt to access beyond end of device [ 110.703630][ T3873] loop3: rw=1, sector=2376, nr_sectors = 32 limit=256 [ 111.278402][ T6618] netlink: 'syz.3.1032': attribute type 39 has an invalid length. [ 111.576542][ T6622] loop3: detected capacity change from 0 to 256 [ 112.590494][ T30] kauditd_printk_skb: 574 callbacks suppressed [ 112.590520][ T30] audit: type=1326 audit(1792083337.113:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.1.1043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb56488ed8e code=0x7ffc0000 [ 112.592064][ T30] audit: type=1326 audit(1792083337.113:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.1.1043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb56488ed8e code=0x7ffc0000 [ 112.593977][ T30] audit: type=1326 audit(1792083337.113:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.1.1043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb56488ed8e code=0x7ffc0000 [ 112.594645][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.594760][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.595841][ T30] audit: type=1326 audit(1792083337.113:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.1.1043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb56488ed8e code=0x7ffc0000 [ 112.597989][ T30] audit: type=1326 audit(1792083337.113:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.1.1043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb56488ed8e code=0x7ffc0000 [ 112.598736][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 112.600349][ T30] audit: type=1326 audit(1792083337.113:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.1.1043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb56488ed8e code=0x7ffc0000 [ 112.606854][ T30] audit: type=1326 audit(1792083337.122:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.1.1043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb56488ed8e code=0x7ffc0000 [ 112.610789][ T6654] vlan2: entered promiscuous mode [ 112.610845][ T6654] bond0: entered promiscuous mode [ 112.610943][ T6654] bond_slave_0: entered promiscuous mode [ 112.616269][ T6654] bond_slave_1: entered promiscuous mode [ 112.640390][ T30] audit: type=1326 audit(1792083337.149:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.1.1043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb56488ed8e code=0x7ffc0000 [ 112.640526][ T30] audit: type=1326 audit(1792083337.149:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.1.1043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb56488ed8e code=0x7ffc0000 [ 112.640638][ T30] audit: type=1326 audit(1792083337.149:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.1.1043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb56488ed8e code=0x7ffc0000 [ 112.641773][ T6644] loop3: detected capacity change from 0 to 512 [ 112.752650][ T6644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.754027][ T6644] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.767058][ T6644] EXT4-fs error (device loop3): ext4_readdir:280: inode #2: block 3: comm syz.3.1041: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 112.772492][ T6644] EXT4-fs error (device loop3): ext4_readdir:280: inode #2: block 12: comm syz.3.1041: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 112.776341][ T6644] EXT4-fs error (device loop3): ext4_readdir:280: inode #2: block 13: comm syz.3.1041: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 113.032327][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.199667][ T6674] FAULT_INJECTION: forcing a failure. [ 113.199667][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 113.199764][ T6674] CPU: 1 UID: 0 PID: 6674 Comm: syz.2.1052 Not tainted syzkaller #0 PREEMPT(lazy) [ 113.199801][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.199819][ T6674] Call Trace: [ 113.199829][ T6674] [ 113.199841][ T6674] __dump_stack+0x1d/0x30 [ 113.199892][ T6674] dump_stack_lvl+0x95/0xd0 [ 113.199945][ T6674] dump_stack+0x15/0x1b [ 113.199976][ T6674] should_fail_ex+0x262/0x280 [ 113.200134][ T6674] ? tipc_group_create_member+0x40/0x260 [ 113.200179][ T6674] should_failslab+0x8c/0xb0 [ 113.200226][ T6674] __kmalloc_cache_noprof+0x7a/0x400 [ 113.200294][ T6674] ? _raw_spin_lock_bh+0x57/0xb0 [ 113.200379][ T6674] ? tipc_group_create_member+0x40/0x260 [ 113.200436][ T6674] ? _raw_spin_unlock_bh+0x17/0x20 [ 113.200490][ T6674] tipc_group_create_member+0x40/0x260 [ 113.200530][ T6674] ? tipc_group_add_member+0x19/0x40 [ 113.200656][ T6674] tipc_group_add_member+0x2e/0x40 [ 113.200744][ T6674] tipc_nametbl_build_group+0x1d0/0x240 [ 113.200770][ T6674] tipc_sk_join+0x237/0x450 [ 113.200811][ T6674] tipc_setsockopt+0x594/0x620 [ 113.200870][ T6674] ? __pfx_tipc_setsockopt+0x10/0x10 [ 113.200906][ T6674] __sys_setsockopt+0x184/0x200 [ 113.200941][ T6674] __x64_sys_setsockopt+0x64/0x80 [ 113.200978][ T6674] x64_sys_call+0x248f/0x2550 [ 113.201084][ T6674] do_syscall_64+0x112/0x360 [ 113.201121][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.201154][ T6674] RIP: 0033:0x7fa6d726e559 [ 113.201180][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.201207][ T6674] RSP: 002b:00007fa6d5cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.201236][ T6674] RAX: ffffffffffffffda RBX: 00007fa6d74f5fa0 RCX: 00007fa6d726e559 [ 113.201257][ T6674] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 113.201275][ T6674] RBP: 00007fa6d73058b0 R08: 0000000000000127 R09: 0000000000000000 [ 113.201289][ T6674] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 113.201344][ T6674] R13: 00007fa6d74f6038 R14: 00007fa6d74f5fa0 R15: 00007ffc0015e778 [ 113.201369][ T6674] [ 113.383408][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1056'. [ 113.389288][ T6669] loop3: detected capacity change from 0 to 1024 [ 113.457379][ T6680] loop2: detected capacity change from 0 to 512 [ 113.473576][ T6680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.473649][ T6680] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.474601][ T6669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.541404][ T6689] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 113.835128][ T6692] loop1: detected capacity change from 0 to 512 [ 113.875370][ T6692] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.1060: Invalid inode bitmap blk 4 in block_group 0 [ 113.875500][ T6692] loop1: lost filesystem error report for type 5 error -117 [ 113.882047][ T6692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.930833][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.968672][ T6700] ip_tables: iptables: counters copy to user failed while replacing table [ 113.991820][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.150088][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.305776][ T6733] loop1: detected capacity change from 0 to 512 [ 114.324425][ T6733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.324502][ T6733] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.579805][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.674374][ T6842] loop3: detected capacity change from 0 to 512 [ 115.701520][ T6842] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.701708][ T6842] EXT4-fs warning (device loop3): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.701909][ T6842] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 115.702759][ T6842] EXT4-fs (loop3): 1 orphan inode deleted [ 115.702781][ T6842] EXT4-fs (loop3): 1 truncate cleaned up [ 115.703242][ T6842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.919909][ T6865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1086'. [ 116.284330][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.457869][ T6879] loop2: detected capacity change from 0 to 164 [ 116.499343][ T6883] batadv_slave_1: entered promiscuous mode [ 116.547978][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 116.551954][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.568833][ T6879] rock: directory entry would overflow storage [ 116.568843][ T6879] rock: sig=0x66, size=4, remaining=3 [ 116.926014][ T6882] batadv_slave_1 (unregistering): left promiscuous mode [ 116.926058][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.373192][ T6915] loop2: detected capacity change from 0 to 512 [ 117.396625][ T6915] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 117.396654][ T6915] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.422985][ T6915] EXT4-fs (loop2): 1 truncate cleaned up [ 117.426743][ T6915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.469747][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.578060][ T6928] loop0: detected capacity change from 0 to 512 [ 117.613523][ T6928] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.1111: Invalid inode bitmap blk 4 in block_group 0 [ 117.613729][ T6928] loop0: lost filesystem error report for type 5 error -117 [ 117.619327][ T6928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.698465][ T6926] netlink: 'syz.2.1110': attribute type 2 has an invalid length. [ 117.726838][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.772558][ T6938] ip6gre1: entered promiscuous mode [ 117.772575][ T6938] ip6gre1: entered allmulticast mode [ 117.774347][ T3849] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.774408][ T3849] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.775766][ T6938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.775785][ T6938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.812741][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.848492][ T6940] batadv_slave_1: entered promiscuous mode [ 117.860203][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 117.860698][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.942412][ T6940] batadv_slave_1 (unregistering): left promiscuous mode [ 117.942617][ T6940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.087781][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 118.087798][ T30] audit: type=1326 audit(1792083342.180:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.2.1122" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6d726e559 code=0x0 [ 118.124978][ T6956] loop3: detected capacity change from 0 to 512 [ 118.148804][ T6956] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.1121: bad orphan inode 15 [ 118.148937][ T6956] loop3: lost filesystem error report for type 5 error -117 [ 118.149178][ T6956] ext4_test_bit(bit=14, block=5) = 0 [ 118.151244][ T6956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.196422][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.201688][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.278933][ T6972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.279318][ T6972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.284089][ T30] audit: type=1400 audit(1792083342.356:3956): avc: denied { sqpoll } for pid=6971 comm="syz.3.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.376633][ T30] audit: type=1400 audit(1792083342.448:3957): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 118.448927][ T6979] batadv_slave_1: entered promiscuous mode [ 118.456596][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1130'. [ 118.470610][ T6979] batadv_slave_1 (unregistering): left promiscuous mode [ 118.474206][ T6979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.559384][ T3396] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.038859][ T7003] loop3: detected capacity change from 0 to 128 [ 119.180399][ T7003] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.200905][ T7003] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.210755][ T7005] loop1: detected capacity change from 0 to 1024 [ 119.227014][ T7005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.248925][ T30] audit: type=1400 audit(1792083343.242:3958): avc: denied { write } for pid=7004 comm="syz.1.1139" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.355192][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.737046][ T30] audit: type=1400 audit(1792083343.703:3959): avc: denied { write } for pid=7025 comm="syz.3.1144" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 119.780464][ T7027] batadv_slave_1: entered promiscuous mode [ 119.800547][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 120.077172][ T7027] batadv_slave_1 (unregistering): left promiscuous mode [ 120.188218][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.266193][ T7038] loop1: detected capacity change from 0 to 512 [ 120.282436][ T7040] loop3: detected capacity change from 0 to 512 [ 120.284543][ T7038] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 120.284560][ T7038] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.288039][ T7038] EXT4-fs (loop1): 1 truncate cleaned up [ 120.288508][ T7038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.309190][ T30] audit: type=1400 audit(1792083344.230:3960): avc: denied { write } for pid=7037 comm="syz.1.1147" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.309229][ T30] audit: type=1400 audit(1792083344.230:3961): avc: denied { read write } for pid=7037 comm="syz.1.1147" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.309308][ T30] audit: type=1400 audit(1792083344.230:3962): avc: denied { open } for pid=7037 comm="syz.1.1147" path="/259/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.319247][ T30] audit: type=1400 audit(1792083344.239:3963): avc: denied { map } for pid=7037 comm="syz.1.1147" path="/259/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.385720][ T7040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.385950][ T7040] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.453345][ T30] audit: type=1400 audit(1792083344.359:3964): avc: denied { write } for pid=7039 comm="syz.3.1148" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.535269][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.788385][ T7052] loop0: detected capacity change from 0 to 512 [ 120.804340][ T7052] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.804492][ T7052] EXT4-fs warning (device loop0): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.804627][ T7052] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 120.805366][ T7052] EXT4-fs (loop0): 1 orphan inode deleted [ 120.805387][ T7052] EXT4-fs (loop0): 1 truncate cleaned up [ 120.805780][ T7052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.807975][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.516513][ T7089] loop2: detected capacity change from 0 to 512 [ 121.529232][ T7089] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 121.529249][ T7089] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.559795][ T7089] EXT4-fs (loop2): 1 truncate cleaned up [ 121.560380][ T7089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.756203][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.857775][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.885901][ T7094] loop1: detected capacity change from 0 to 128 [ 121.910032][ T7094] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 121.910317][ T7094] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.111587][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.394853][ T7104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 122.395168][ T7104] System zones: 1-12 [ 122.397159][ T7119] netlink: 'syz.5.1174': attribute type 4 has an invalid length. [ 122.399190][ T7104] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.1169: missing EA_INODE flag [ 122.399319][ T7104] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 122.404325][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 122.404563][ C0] EXT4-fs (loop3): initial error at time 1700000002: ext4_xattr_inode_iget:437: inode 12 [ 122.404906][ C0] EXT4-fs (loop3): last error at time 1700000002: ext4_xattr_inode_iget:437: inode 12 [ 122.473350][ T7120] netlink: 'syz.5.1174': attribute type 4 has an invalid length. [ 122.483234][ T7104] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1169: error while reading EA inode 12 err=-117 [ 122.483329][ T7104] loop3: lost filesystem error report for type 5 error -117 [ 122.485641][ T7104] EXT4-fs (loop3): 1 orphan inode deleted [ 122.488149][ T7104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.587381][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 122.657902][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.980562][ T7136] set_capacity_and_notify: 1 callbacks suppressed [ 122.980584][ T7136] loop3: detected capacity change from 0 to 512 [ 123.240633][ T7148] netlink: 'syz.1.1185': attribute type 12 has an invalid length. [ 123.243775][ T7146] loop2: detected capacity change from 0 to 1024 [ 123.246753][ T7146] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 123.546772][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 123.546789][ T30] audit: type=1400 audit(1700000003.260:3981): avc: denied { setopt } for pid=7161 comm="syz.1.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.547756][ T30] audit: type=1400 audit(1700000003.260:3982): avc: denied { bind } for pid=7161 comm="syz.1.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.547786][ T30] audit: type=1400 audit(1700000003.260:3983): avc: denied { name_bind } for pid=7161 comm="syz.1.1191" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.547855][ T30] audit: type=1400 audit(1700000003.260:3984): avc: denied { node_bind } for pid=7161 comm="syz.1.1191" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 123.550591][ T30] audit: type=1400 audit(1700000003.260:3985): avc: denied { write } for pid=7161 comm="syz.1.1191" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.564539][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 123.747618][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.213115][ T30] audit: type=1400 audit(1700000003.870:3986): avc: denied { name_connect } for pid=7182 comm="syz.3.1198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 124.270660][ T30] audit: type=1400 audit(1700000003.934:3987): avc: denied { listen } for pid=7182 comm="syz.3.1198" lport=46862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.270699][ T30] audit: type=1400 audit(1700000003.934:3988): avc: denied { accept } for pid=7182 comm="syz.3.1198" lport=46862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.734326][ T7193] netlink: 'syz.5.1203': attribute type 12 has an invalid length. [ 124.952781][ T7198] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 124.997930][ T7202] syzkaller1: entered promiscuous mode [ 124.998023][ T7202] syzkaller1: entered allmulticast mode [ 125.072250][ T30] audit: type=1400 audit(1700000004.673:3989): avc: denied { create } for pid=7203 comm="syz.0.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 125.073862][ T30] audit: type=1400 audit(1700000004.673:3990): avc: denied { bind } for pid=7203 comm="syz.0.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 125.322447][ T7229] loop2: detected capacity change from 0 to 164 [ 125.347840][ T7229] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 125.474369][ T7234] loop2: detected capacity change from 0 to 256 [ 126.432186][ T7254] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1234'. [ 126.874980][ T7276] netlink: 'syz.1.1230': attribute type 1 has an invalid length. [ 126.875034][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 126.959106][ T7278] loop1: detected capacity change from 0 to 2048 [ 126.983607][ T7278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.983685][ T7278] ext4 filesystem being mounted at /283/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.047478][ T7285] SELinux: Context ¼OPcÕÇ™»žÅè?‰sÞ Uâ²Éì^tú”Q`wê& ò˜m [ 127.047478][ T7285] ¤ù¡ ×%ÓZÊó®Ç@L0õNïµr‘L²1X‹)Ù’i†jÏÉ’%Ø‘ÙfËíîYjwõÔLݘ»ã8ôÇݱá bV:±vÓiý is not valid (left unmapped). [ 127.866149][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.930014][ T7325] loop1: detected capacity change from 0 to 512 [ 127.932350][ T7325] EXT4-fs: Ignoring removed nobh option [ 127.957148][ T7325] EXT4-fs (loop1): orphan cleanup on readonly fs [ 127.957579][ T7325] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.1251: EA inode 11 has unexpected i_nlink=2 ref_count=7168869689169281024 [ 127.957645][ T7325] loop1: lost filesystem error report for type 5 error -117 [ 127.959605][ T7325] EXT4-fs (loop1): 1 orphan inode deleted [ 127.959978][ T7325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 128.008792][ T7322] tipc: Enabling of bearer rejected, failed to enable media [ 128.697782][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1255'. [ 128.697807][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1255'. [ 128.697824][ T7335] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1255'. [ 129.081191][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.252109][ T7354] loop2: detected capacity change from 0 to 512 [ 129.257966][ T7354] EXT4-fs (loop2): orphan cleanup on readonly fs [ 129.258113][ T7354] __quota_error: 14 callbacks suppressed [ 129.258129][ T7354] Quota error (device loop2): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 129.258171][ T7354] EXT4-fs warning (device loop2): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 129.258355][ T7354] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 129.259014][ T7354] EXT4-fs (loop2): 1 orphan inode deleted [ 129.259069][ T7354] EXT4-fs (loop2): 1 truncate cleaned up [ 129.259771][ T7354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.364920][ T7347] loop3: detected capacity change from 0 to 512 [ 129.817075][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.834592][ T7359] loop3: detected capacity change from 0 to 128 [ 129.864946][ T7359] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 129.865139][ T7359] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.899844][ T30] audit: type=1400 audit(1700000009.123:4005): avc: denied { write } for pid=7357 comm="syz.3.1266" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.902882][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.053727][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.182408][ T30] audit: type=1326 audit(1700000009.390:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7373 comm="syz.1.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5648ce559 code=0x7ffc0000 [ 130.182454][ T30] audit: type=1326 audit(1700000009.390:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7373 comm="syz.1.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5648ce559 code=0x7ffc0000 [ 130.182633][ T30] audit: type=1326 audit(1700000009.390:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7373 comm="syz.1.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5648ce559 code=0x7ffc0000 [ 130.183113][ T30] audit: type=1326 audit(1700000009.390:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7373 comm="syz.1.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5648ce559 code=0x7ffc0000 [ 130.184790][ T30] audit: type=1326 audit(1700000009.390:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7373 comm="syz.1.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb5648ce559 code=0x7ffc0000 [ 130.186208][ T30] audit: type=1326 audit(1700000009.390:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7373 comm="syz.1.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5648ce559 code=0x7ffc0000 [ 130.243612][ T30] audit: type=1326 audit(1700000009.446:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7373 comm="syz.1.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb56488ed8e code=0x7ffc0000 [ 130.245945][ T30] audit: type=1326 audit(1700000009.446:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7373 comm="syz.1.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb56488ed8e code=0x7ffc0000 [ 130.588219][ T7406] FAULT_INJECTION: forcing a failure. [ 130.588219][ T7406] name fail_futex, interval 1, probability 0, space 0, times 0 [ 130.588265][ T7406] CPU: 0 UID: 0 PID: 7406 Comm: syz.2.1279 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.588299][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.588396][ T7406] Call Trace: [ 130.588405][ T7406] [ 130.588415][ T7406] __dump_stack+0x1d/0x30 [ 130.588450][ T7406] dump_stack_lvl+0x95/0xd0 [ 130.588475][ T7406] dump_stack+0x15/0x1b [ 130.588504][ T7406] should_fail_ex+0x262/0x280 [ 130.588597][ T7406] should_fail+0xb/0x20 [ 130.588631][ T7406] get_futex_key+0x12d/0xb10 [ 130.588674][ T7406] futex_wake+0x89/0x400 [ 130.588755][ T7406] ? vfs_readv+0x584/0x6d0 [ 130.588785][ T7406] do_futex+0x3f8/0x460 [ 130.588819][ T7406] __se_sys_futex+0x2f6/0x370 [ 130.588868][ T7406] ? fput+0x91/0xc0 [ 130.588901][ T7406] __x64_sys_futex+0x78/0x90 [ 130.588935][ T7406] x64_sys_call+0x22e2/0x2550 [ 130.588991][ T7406] do_syscall_64+0x112/0x360 [ 130.589024][ T7406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.589047][ T7406] RIP: 0033:0x7fa6d726e559 [ 130.589074][ T7406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.589135][ T7406] RSP: 002b:00007fa6d5cc70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.589164][ T7406] RAX: ffffffffffffffda RBX: 00007fa6d74f5fa8 RCX: 00007fa6d726e559 [ 130.589185][ T7406] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa6d74f5fac [ 130.589201][ T7406] RBP: 00007fa6d74f5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 130.589215][ T7406] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 130.589258][ T7406] R13: 00007fa6d74f6038 R14: 00007ffc0015e690 R15: 00007ffc0015e778 [ 130.589287][ T7406] [ 130.853042][ T7423] TC_ACT_REPEAT abuse ? [ 130.893478][ T7417] loop3: detected capacity change from 0 to 512 [ 130.940801][ T7417] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 130.940866][ T7417] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.977114][ T7417] EXT4-fs (loop3): 1 truncate cleaned up [ 130.980645][ T7417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.085260][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.154418][ T7440] loop3: detected capacity change from 0 to 512 [ 131.170145][ T7440] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 131.170160][ T7440] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.171900][ T7440] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1291: corrupted in-inode xattr: invalid ea_ino [ 131.171929][ T7440] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.172093][ T7440] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1291: couldn't read orphan inode 15 (err -117) [ 131.172117][ T7440] loop3: lost filesystem error report for type 5 error -117 [ 131.172541][ T7440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.213466][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.272499][ T7450] lo speed is unknown, defaulting to 1000 [ 131.272538][ T7450] lo speed is unknown, defaulting to 1000 [ 131.272803][ T7450] lo speed is unknown, defaulting to 1000 [ 131.273199][ T7450] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.273655][ T7450] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 131.309578][ T7450] lo speed is unknown, defaulting to 1000 [ 131.313287][ T7450] lo speed is unknown, defaulting to 1000 [ 131.313761][ T7450] lo speed is unknown, defaulting to 1000 [ 131.314145][ T7450] lo speed is unknown, defaulting to 1000 [ 131.314544][ T7450] lo speed is unknown, defaulting to 1000 [ 131.363474][ T7450] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 132.003877][ T7476] loop1: detected capacity change from 0 to 128 [ 132.239448][ T7493] loop0: detected capacity change from 0 to 512 [ 132.718775][ T7507] loop3: detected capacity change from 0 to 1024 [ 132.719638][ T7507] EXT4-fs: Ignoring removed i_version option [ 132.723153][ T7507] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.723177][ T7507] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 132.923477][ T7504] loop0: detected capacity change from 0 to 1024 [ 133.059539][ T7512] lo: entered allmulticast mode [ 133.062178][ T7515] dvmrp6: entered allmulticast mode [ 133.065992][ T7504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.076167][ T7508] lo: left allmulticast mode [ 133.263507][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1319'. [ 133.263993][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1319'. [ 133.434034][ T7535] loop1: detected capacity change from 0 to 512 [ 133.476998][ T7535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 133.477236][ T7535] System zones: 1-12 [ 133.483843][ T7535] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.1320: missing EA_INODE flag [ 133.510089][ T7535] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 133.512027][ T7535] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1320: error while reading EA inode 12 err=-117 [ 133.512041][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.512072][ T7535] loop1: lost filesystem error report for type 5 error -117 [ 133.514232][ T7535] EXT4-fs (loop1): 1 orphan inode deleted [ 133.577021][ T7535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.633468][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.662611][ T7548] 0: reclassify loop, rule prio 0, protocol 03 [ 133.736890][ T7487] syz.2.1303 (7487) used greatest stack depth: 9416 bytes left [ 133.768363][ T7553] tipc: Failed to remove unknown binding: 66,0,0/0:3520562591/3520562592 [ 133.768501][ T7553] tipc: Failed to remove unknown binding: 66,0,0/0:3520562591/3520562592 [ 133.833828][ T7559] FAULT_INJECTION: forcing a failure. [ 133.833828][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 133.833862][ T7559] CPU: 1 UID: 0 PID: 7559 Comm: syz.0.1331 Not tainted syzkaller #0 PREEMPT(lazy) [ 133.834024][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.834039][ T7559] Call Trace: [ 133.834055][ T7559] [ 133.834063][ T7559] __dump_stack+0x1d/0x30 [ 133.834092][ T7559] dump_stack_lvl+0x95/0xd0 [ 133.834117][ T7559] dump_stack+0x15/0x1b [ 133.834151][ T7559] should_fail_ex+0x262/0x280 [ 133.834183][ T7559] ? addr_event+0x9b/0x270 [ 133.834216][ T7559] should_failslab+0x8c/0xb0 [ 133.834252][ T7559] __kmalloc_cache_noprof+0x7a/0x400 [ 133.834312][ T7559] ? addr_event+0x9b/0x270 [ 133.834348][ T7559] addr_event+0x9b/0x270 [ 133.834441][ T7559] ? __pfx_inet6addr_event+0x10/0x10 [ 133.834476][ T7559] inet6addr_event+0x7b/0xa0 [ 133.834515][ T7559] atomic_notifier_call_chain+0x79/0x1a0 [ 133.834555][ T7559] inet6addr_notifier_call_chain+0x24/0x30 [ 133.834582][ T7559] ipv6_add_addr+0x829/0x860 [ 133.834620][ T7559] inet6_addr_add+0x296/0x8e0 [ 133.834676][ T7559] ? selinux_capable+0x31/0x40 [ 133.834776][ T7559] ? should_fail_ex+0xdb/0x280 [ 133.834807][ T7559] addrconf_add_ifaddr+0x1b8/0x280 [ 133.834854][ T7559] inet6_ioctl+0xb0/0x190 [ 133.834891][ T7559] ? ioctl_has_perm+0x273/0x2c0 [ 133.834927][ T7559] sock_do_ioctl+0x73/0x230 [ 133.835039][ T7559] sock_ioctl+0x439/0x610 [ 133.835088][ T7559] ? __pfx_sock_ioctl+0x10/0x10 [ 133.835184][ T7559] __se_sys_ioctl+0xce/0x140 [ 133.835291][ T7559] __x64_sys_ioctl+0x43/0x50 [ 133.835397][ T7559] x64_sys_call+0x239d/0x2550 [ 133.835452][ T7559] do_syscall_64+0x112/0x360 [ 133.835481][ T7559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.835505][ T7559] RIP: 0033:0x7fea59ace559 [ 133.835523][ T7559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.835609][ T7559] RSP: 002b:00007fea58527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.835633][ T7559] RAX: ffffffffffffffda RBX: 00007fea59d55fa0 RCX: 00007fea59ace559 [ 133.835650][ T7559] RDX: 00002000000002c0 RSI: 0000000000008916 RDI: 0000000000000005 [ 133.835718][ T7559] RBP: 00007fea59b658b0 R08: 0000000000000000 R09: 0000000000000000 [ 133.835734][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.835748][ T7559] R13: 00007fea59d56038 R14: 00007fea59d55fa0 R15: 00007ffeb806eb28 [ 133.835770][ T7559] [ 134.409051][ T7572] rxe_eth0 speed is unknown, defaulting to 1000 [ 134.735718][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 134.735736][ T30] audit: type=1400 audit(1700000013.591:4093): avc: denied { bind } for pid=7581 comm="syz.1.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.807514][ T30] audit: type=1400 audit(1700000013.665:4094): avc: denied { create } for pid=7584 comm="syz.1.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 134.809926][ T30] audit: type=1400 audit(1700000013.665:4095): avc: denied { setopt } for pid=7584 comm="syz.1.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 134.826108][ T7580] loop2: detected capacity change from 0 to 512 [ 134.845203][ T7580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 134.845293][ T7580] System zones: 1-12 [ 134.872291][ T7580] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.1337: missing EA_INODE flag [ 134.872316][ T7580] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 134.872498][ T7580] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1337: error while reading EA inode 12 err=-117 [ 134.872585][ T7580] loop2: lost filesystem error report for type 5 error -117 [ 134.883035][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 134.883097][ C0] EXT4-fs (loop2): initial error at time 1700000013: ext4_xattr_inode_iget:437: inode 12 [ 134.883190][ C0] EXT4-fs (loop2): last error at time 1700000013: ext4_xattr_inode_iget:442 [ 134.899423][ T7580] EXT4-fs (loop2): 1 orphan inode deleted [ 134.900431][ T7580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.925813][ T30] audit: type=1400 audit(1700000013.766:4096): avc: denied { write } for pid=7579 comm="syz.2.1337" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.027431][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.046161][ T30] audit: type=1400 audit(1700000013.886:4097): avc: denied { watch watch_reads } for pid=7588 comm="syz.1.1341" path="/303/file1" dev="tmpfs" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.050128][ T30] audit: type=1400 audit(1700000013.886:4098): avc: denied { execute_no_trans } for pid=7588 comm="syz.1.1341" path="/303/file1" dev="tmpfs" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.358355][ T7572] lo speed is unknown, defaulting to 1000 [ 135.368463][ T7578] rxe_eth0 speed is unknown, defaulting to 1000 [ 135.498148][ T30] audit: type=1400 audit(1700000014.292:4099): avc: denied { ioctl } for pid=7604 comm="syz.5.1346" path="socket:[18776]" dev="sockfs" ino=18776 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.500296][ T30] audit: type=1400 audit(1700000014.292:4100): avc: denied { bind } for pid=7604 comm="syz.5.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.547341][ T30] audit: type=1400 audit(1700000014.338:4101): avc: denied { write } for pid=7604 comm="syz.5.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.548387][ T7605] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 135.622367][ T7578] lo speed is unknown, defaulting to 1000 [ 135.693348][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1348'. [ 135.748949][ T30] audit: type=1400 audit(1700000014.523:4102): avc: denied { bind } for pid=7608 comm="syz.5.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.070309][ T7621] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1353'. [ 136.114103][ T7623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.458404][ T7642] netlink: 'syz.3.1361': attribute type 1 has an invalid length. [ 136.493508][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1362'. [ 136.494712][ T7642] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.496743][ T7642] bond3: (slave bond4): making interface the new active one [ 136.512631][ T7642] bond3: (slave bond4): Enslaving as an active interface with an up link [ 136.542325][ T7636] wg2: entered promiscuous mode [ 136.542727][ T7636] wg2: entered allmulticast mode [ 136.556160][ T7642] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 136.568388][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1361'. [ 136.569513][ T7642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.746887][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1377'. [ 137.747038][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1377'. [ 137.875500][ T7708] siw: device registration error -23 [ 137.875872][ T7708] siw: device registration error -23 [ 138.259792][ T7725] loop0: detected capacity change from 0 to 512 [ 139.171794][ T7751] loop1: detected capacity change from 0 to 512 [ 139.315152][ T7774] loop3: detected capacity change from 0 to 1024 [ 139.326390][ T7774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.326466][ T7774] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.336545][ T7774] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.1407: lblock 0 mapped to illegal pblock 0 (length 6) [ 139.341171][ T7774] EXT4-fs error (device loop3): ext4_ext_remove_space:2977: inode #15: comm syz.3.1407: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 139.344955][ T7774] EXT4-fs error (device loop3) in ext4_setattr:6247: Corrupt filesystem [ 139.348275][ T7774] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.1407: bg 0: block 112: padding at end of block bitmap is not set [ 139.350762][ T7774] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 139.350834][ T7774] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.350834][ T7774] [ 139.350884][ T7774] EXT4-fs (loop3): Total free blocks count 0 [ 139.350927][ T7774] EXT4-fs (loop3): Free/Dirty block details [ 139.350961][ T7774] EXT4-fs (loop3): free_blocks=0 [ 139.351041][ T7774] EXT4-fs (loop3): dirty_blocks=0 [ 139.351114][ T7774] EXT4-fs (loop3): Block reservation details [ 139.351155][ T7774] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 139.363501][ T7772] ip_tables: iptables: counters copy to user failed while replacing table [ 139.443031][ T7779] siw: device registration error -23 [ 139.444533][ T7779] siw: device registration error -23 [ 139.457318][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.767274][ T7788] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 139.836228][ T7788] 8021q: adding VLAN 0 to HW filter on device bond5 [ 139.839259][ T7788] bond4: (slave bond5): making interface the new active one [ 139.839688][ T7788] bond4: (slave bond5): Enslaving as an active interface with an up link [ 139.883105][ T7788] bond4: (slave gretap0): Enslaving as a backup interface with an up link [ 139.904542][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1411'. [ 139.905281][ T7788] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.542353][ T7820] TC_ACT_REPEAT abuse ? [ 140.667184][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 140.667204][ T30] audit: type=1400 audit(1700000275.063:4113): avc: denied { read } for pid=7819 comm="syz.1.1433" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.667304][ T30] audit: type=1400 audit(1700000275.063:4114): avc: denied { read open } for pid=7819 comm="syz.1.1433" path="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.645978][ T30] audit: type=1400 audit(1700000275.968:4115): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 142.506513][ T7867] FAULT_INJECTION: forcing a failure. [ 142.506513][ T7867] name failslab, interval 1, probability 0, space 0, times 0 [ 142.506552][ T7867] CPU: 0 UID: 0 PID: 7867 Comm: syz.2.1442 Not tainted syzkaller #0 PREEMPT(lazy) [ 142.506590][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.506607][ T7867] Call Trace: [ 142.506616][ T7867] [ 142.506627][ T7867] __dump_stack+0x1d/0x30 [ 142.506712][ T7867] dump_stack_lvl+0x95/0xd0 [ 142.506746][ T7867] dump_stack+0x15/0x1b [ 142.506776][ T7867] should_fail_ex+0x262/0x280 [ 142.506904][ T7867] ? tunnel_key_init_net+0x70/0x110 [ 142.506954][ T7867] should_failslab+0x8c/0xb0 [ 142.506992][ T7867] __kmalloc_cache_noprof+0x7a/0x400 [ 142.507092][ T7867] ? tunnel_key_init_net+0x70/0x110 [ 142.507140][ T7867] ? ops_init+0x4b/0x2e0 [ 142.507225][ T7867] tunnel_key_init_net+0x70/0x110 [ 142.507263][ T7867] ops_init+0x22a/0x2e0 [ 142.507290][ T7867] setup_net+0x9f/0x230 [ 142.507393][ T7867] copy_net_ns+0x333/0x490 [ 142.507431][ T7867] create_new_namespaces+0x1f6/0x420 [ 142.507513][ T7867] unshare_nsproxy_namespaces+0x115/0x150 [ 142.507636][ T7867] ksys_unshare+0x3fd/0x6f0 [ 142.507666][ T7867] __x64_sys_unshare+0x1f/0x30 [ 142.507713][ T7867] x64_sys_call+0x1e33/0x2550 [ 142.507751][ T7867] do_syscall_64+0x112/0x360 [ 142.507845][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.507878][ T7867] RIP: 0033:0x7fa6d726e559 [ 142.507901][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.507929][ T7867] RSP: 002b:00007fa6d5cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 142.507976][ T7867] RAX: ffffffffffffffda RBX: 00007fa6d74f5fa0 RCX: 00007fa6d726e559 [ 142.507998][ T7867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 142.508016][ T7867] RBP: 00007fa6d73058b0 R08: 0000000000000000 R09: 0000000000000000 [ 142.508035][ T7867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.508053][ T7867] R13: 00007fa6d74f6038 R14: 00007fa6d74f5fa0 R15: 00007ffc0015e778 [ 142.508081][ T7867] [ 143.057287][ T7890] loop2: detected capacity change from 0 to 1024 [ 143.057637][ T7890] EXT4-fs: Ignoring removed i_version option [ 143.079959][ T30] audit: type=1326 audit(1700000277.297:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.0.1447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea59ace559 code=0x7fc00000 [ 143.080164][ T7890] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 143.080185][ T7890] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 143.083562][ T30] audit: type=1326 audit(1700000277.297:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.0.1447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fea59ace559 code=0x7fc00000 [ 143.661959][ T30] audit: type=1400 audit(1700000277.833:4118): avc: denied { read } for pid=7909 comm="syz.2.1457" lport=49870 faddr=2001::2 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.962794][ T30] audit: type=1400 audit(1700000278.110:4119): avc: denied { read } for pid=7927 comm="syz.0.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.122222][ T7926] loop2: detected capacity change from 0 to 1024 [ 144.234583][ T7926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.267453][ T30] audit: type=1400 audit(1700000278.386:4120): avc: denied { write } for pid=7923 comm="syz.2.1461" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.570067][ T7945] loop1: detected capacity change from 0 to 512 [ 144.600147][ T7945] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 144.600181][ T7945] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.652700][ T7945] EXT4-fs (loop1): 1 truncate cleaned up [ 144.653753][ T7945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.697553][ T30] audit: type=1400 audit(1700000278.783:4121): avc: denied { write } for pid=7944 comm="syz.1.1466" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.737130][ T30] audit: type=1400 audit(1700000278.820:4122): avc: denied { write } for pid=7944 comm="syz.1.1466" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.873924][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.909523][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.039117][ T7962] loop2: detected capacity change from 0 to 512 [ 145.039652][ T7962] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 145.039668][ T7962] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.060472][ T7962] EXT4-fs (loop2): 1 truncate cleaned up [ 145.060839][ T7962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.350885][ T7975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1476'. [ 145.354783][ T7975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1476'. [ 145.846581][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.909494][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.977987][ T7978] loop0: detected capacity change from 0 to 512 [ 145.981026][ T7978] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 145.981061][ T7978] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.986527][ T7978] EXT4-fs (loop0): 1 truncate cleaned up [ 146.022784][ T7978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.098958][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 146.098974][ T30] audit: type=1400 audit(1700000280.085:4128): avc: denied { write } for pid=7977 comm="syz.0.1479" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.143572][ T30] audit: type=1400 audit(1700000280.122:4129): avc: denied { write } for pid=7977 comm="syz.0.1479" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.171875][ T30] audit: type=1400 audit(1700000280.150:4130): avc: denied { write } for pid=7977 comm="syz.0.1479" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.171995][ T30] audit: type=1400 audit(1700000280.150:4131): avc: denied { write } for pid=7977 comm="syz.0.1479" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.268780][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.451254][ T30] audit: type=1400 audit(1700000280.399:4132): avc: denied { read } for pid=3024 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 146.481207][ T30] audit: type=1400 audit(1700000280.436:4133): avc: denied { search } for pid=3024 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.481301][ T30] audit: type=1400 audit(1700000280.436:4134): avc: denied { search } for pid=3024 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.481336][ T30] audit: type=1400 audit(1700000280.436:4135): avc: denied { search } for pid=3024 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.481439][ T30] audit: type=1400 audit(1700000280.436:4136): avc: denied { read } for pid=3024 comm="dhcpcd" name="n827" dev="tmpfs" ino=2931 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.481464][ T30] audit: type=1400 audit(1700000280.436:4137): avc: denied { open } for pid=3024 comm="dhcpcd" path="/run/udev/data/n827" dev="tmpfs" ino=2931 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.740985][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1491'. [ 146.744579][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1491'. [ 146.855450][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.863047][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.160377][ T8037] ip_tables: iptables: counters copy to user failed while replacing table [ 147.205169][ T8040] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1499'. [ 147.206792][ T8040] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1499'. [ 147.611844][ T8047] ip_tables: iptables: counters copy to user failed while replacing table [ 147.622929][ T8038] loop2: detected capacity change from 0 to 512 [ 147.771545][ T8054] loop0: detected capacity change from 0 to 1024 [ 147.771824][ T8054] EXT4-fs: Ignoring removed i_version option [ 147.786977][ T8054] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.787072][ T8054] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 147.789183][ T8057] ip_tables: iptables: counters copy to user failed while replacing table [ 147.993597][ T8038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.001252][ T8038] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.193091][ T8070] loop3: detected capacity change from 0 to 128 [ 148.485856][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'. [ 148.485913][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'. [ 148.523847][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.935854][ T8100] tipc: Cannot configure node identity twice [ 150.000241][ T8102] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1522'. [ 150.043654][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1524'. [ 150.094347][ T8108] syz.1.1525 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 151.364341][ T8116] ip_tables: iptables: counters copy to user failed while replacing table [ 151.473296][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'. [ 151.473409][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'. [ 151.539788][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 151.539808][ T30] audit: type=1326 audit(1700000285.097:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.2.1532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d726e559 code=0x7ffc0000 [ 151.540107][ T30] audit: type=1326 audit(1700000285.097:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.2.1532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6d726e2c2 code=0x7ffc0000 [ 151.540275][ T30] audit: type=1326 audit(1700000285.097:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.2.1532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa6d726e357 code=0x7ffc0000 [ 151.540478][ T30] audit: type=1326 audit(1700000285.097:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.2.1532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa6d722b251 code=0x7ffc0000 [ 151.540706][ T30] audit: type=1326 audit(1700000285.097:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.2.1532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa6d726f349 code=0x7ffc0000 [ 151.541036][ T30] audit: type=1326 audit(1700000285.097:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.2.1532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa6d722a9ac code=0x7ffc0000 [ 151.541150][ T30] audit: type=1326 audit(1700000285.097:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.2.1532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa6d722aa0e code=0x7ffc0000 [ 151.541280][ T30] audit: type=1326 audit(1700000285.097:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.2.1532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d726e559 code=0x7ffc0000 [ 151.541406][ T30] audit: type=1326 audit(1700000285.097:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.2.1532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa6d722b2bb code=0x7ffc0000 [ 151.541594][ T30] audit: type=1326 audit(1700000285.097:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.2.1532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d726e559 code=0x7ffc0000 [ 151.797145][ T8126] rxe_eth0 speed is unknown, defaulting to 1000 [ 151.912076][ T8140] loop3: detected capacity change from 0 to 512 [ 151.919316][ T8140] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 151.919337][ T8140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.937490][ T8140] EXT4-fs (loop3): 1 truncate cleaned up [ 151.962069][ T8140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.057762][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.117775][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 152.128929][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 152.238676][ T8155] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 152.239070][ T8155] bridge3: entered promiscuous mode [ 152.555760][ T8126] lo speed is unknown, defaulting to 1000 [ 152.839417][ T8162] loop3: detected capacity change from 0 to 512 [ 152.908009][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'. [ 152.908069][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'. [ 152.947776][ T8162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.948806][ T8162] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.020421][ T8176] ref_ctr increment failed for inode: 0x639 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88812cb54380 [ 153.020643][ T8175] uprobe: syz.0.1549:8175 failed to unregister, leaking uprobe [ 153.057645][ T8178] caller generic_access_phys+0x153/0x310 mapping multiple BARs [ 153.076981][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.077158][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.082266][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.312268][ T8189] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 153.312747][ T8189] bridge3: entered promiscuous mode [ 153.424513][ T8204] loop0: detected capacity change from 0 to 512 [ 153.425131][ T8204] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 153.425149][ T8204] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.426542][ T8204] EXT4-fs (loop0): 1 truncate cleaned up [ 153.427065][ T8204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.546816][ T8208] ip_tables: iptables: counters copy to user failed while replacing table [ 153.770132][ T8216] ip_tables: iptables: counters copy to user failed while replacing table [ 153.792645][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1561'. [ 153.796419][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1561'. [ 153.896291][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1563'. [ 154.058141][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.133448][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 154.303140][ T8239] loop3: detected capacity change from 0 to 1024 [ 154.303950][ T8239] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 154.304000][ T8239] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.304582][ T8239] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 154.304760][ T8239] EXT4-fs (loop3): orphan cleanup on readonly fs [ 154.304914][ T8239] EXT4-fs error (device loop3): ext4_read_inode_bitmap:169: comm syz.3.1568: Inode bitmap for bg 0 marked uninitialized [ 154.304946][ T8239] loop3: lost filesystem error report for type 5 error -117 [ 154.305049][ T8239] EXT4-fs (loop3): Remounting filesystem read-only [ 154.305673][ T8239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.429143][ T8238] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 154.429522][ T8238] bridge1: entered promiscuous mode [ 154.472399][ T8233] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.551766][ T8233] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.575760][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.592748][ T8233] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.668220][ T8233] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.698109][ T8248] loop2: detected capacity change from 0 to 128 [ 154.710059][ T3290] udevd[3290]: incorrect ext4 checksum on /dev/loop2 [ 154.824495][ T3880] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.826689][ T3847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.827637][ T3847] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.891651][ T3849] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.079651][ T8253] FAULT_INJECTION: forcing a failure. [ 155.079651][ T8253] name failslab, interval 1, probability 0, space 0, times 0 [ 155.079716][ T8253] CPU: 0 UID: 0 PID: 8253 Comm: syz.1.1583 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.079753][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 155.079771][ T8253] Call Trace: [ 155.079780][ T8253] [ 155.079791][ T8253] __dump_stack+0x1d/0x30 [ 155.079884][ T8253] dump_stack_lvl+0x95/0xd0 [ 155.079913][ T8253] dump_stack+0x15/0x1b [ 155.079934][ T8253] should_fail_ex+0x262/0x280 [ 155.080029][ T8253] ? __proc_create+0x3f1/0x6b0 [ 155.080071][ T8253] should_failslab+0x8c/0xb0 [ 155.080120][ T8253] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 155.080229][ T8253] ? ida_alloc_range+0x6f4/0x730 [ 155.080275][ T8253] ? __proc_create+0x3f1/0x6b0 [ 155.080319][ T8253] __proc_create+0x3f1/0x6b0 [ 155.080359][ T8253] ? rb_insert_color+0x6e/0x2a0 [ 155.080394][ T8253] proc_create_reg+0x87/0xe0 [ 155.080504][ T8253] proc_create_net_data+0x59/0x100 [ 155.080549][ T8253] igmp6_net_init+0x17d/0x260 [ 155.080586][ T8253] ops_init+0x22a/0x2e0 [ 155.080618][ T8253] setup_net+0x9f/0x230 [ 155.080655][ T8253] copy_net_ns+0x333/0x490 [ 155.080689][ T8253] create_new_namespaces+0x1f6/0x420 [ 155.080725][ T8253] unshare_nsproxy_namespaces+0x115/0x150 [ 155.080828][ T8253] ksys_unshare+0x3fd/0x6f0 [ 155.080864][ T8253] __x64_sys_unshare+0x1f/0x30 [ 155.080903][ T8253] x64_sys_call+0x1e33/0x2550 [ 155.080941][ T8253] do_syscall_64+0x112/0x360 [ 155.080993][ T8253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.081033][ T8253] RIP: 0033:0x7fb5648ce559 [ 155.081102][ T8253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.081130][ T8253] RSP: 002b:00007fb563327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 155.081159][ T8253] RAX: ffffffffffffffda RBX: 00007fb564b55fa0 RCX: 00007fb5648ce559 [ 155.081180][ T8253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 155.081198][ T8253] RBP: 00007fb5649658b0 R08: 0000000000000000 R09: 0000000000000000 [ 155.081218][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.081235][ T8253] R13: 00007fb564b56038 R14: 00007fb564b55fa0 R15: 00007ffff264c1e8 [ 155.081288][ T8253] [ 155.868591][ T8285] FAULT_INJECTION: forcing a failure. [ 155.868591][ T8285] name failslab, interval 1, probability 0, space 0, times 0 [ 155.868631][ T8285] CPU: 1 UID: 0 PID: 8285 Comm: syz.2.1585 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.868667][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 155.868685][ T8285] Call Trace: [ 155.868694][ T8285] [ 155.868735][ T8285] __dump_stack+0x1d/0x30 [ 155.868772][ T8285] dump_stack_lvl+0x95/0xd0 [ 155.868805][ T8285] dump_stack+0x15/0x1b [ 155.868830][ T8285] should_fail_ex+0x262/0x280 [ 155.868923][ T8285] ? alloc_empty_file+0x70/0x1e0 [ 155.868964][ T8285] should_failslab+0x8c/0xb0 [ 155.869000][ T8285] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 155.869080][ T8285] ? alloc_empty_file+0x70/0x1e0 [ 155.869118][ T8285] alloc_empty_file+0x70/0x1e0 [ 155.869157][ T8285] alloc_file_pseudo+0x92/0x120 [ 155.869214][ T8285] __shmem_file_setup+0x226/0x260 [ 155.869254][ T8285] shmem_file_setup+0x3b/0x50 [ 155.869345][ T8285] memfd_alloc_file+0x4e/0x300 [ 155.869388][ T8285] __se_sys_memfd_create+0x2e1/0x3b0 [ 155.869480][ T8285] __x64_sys_memfd_create+0x31/0x40 [ 155.869517][ T8285] x64_sys_call+0x1955/0x2550 [ 155.869551][ T8285] do_syscall_64+0x112/0x360 [ 155.869655][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.869687][ T8285] RIP: 0033:0x7fa6d726e559 [ 155.869707][ T8285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.869813][ T8285] RSP: 002b:00007fa6d5cc6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 155.869840][ T8285] RAX: ffffffffffffffda RBX: 00000000000005b1 RCX: 00007fa6d726e559 [ 155.869855][ T8285] RDX: 00007fa6d5cc6ee0 RSI: 0000000000000000 RDI: 00007fa6d7305a90 [ 155.869884][ T8285] RBP: 0000200000000640 R08: 00000000ffffffff R09: 0000000000000000 [ 155.869897][ T8285] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000540 [ 155.869923][ T8285] R13: 00007fa6d5cc6ee0 R14: 00007fa6d5cc6ea0 R15: 0000200000000580 [ 155.869949][ T8285] [ 155.960157][ T8281] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 155.970512][ T8285] loop2: detected capacity change from 0 to 512 [ 155.993498][ T8285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.993713][ T8285] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.001234][ T8281] bridge4: entered promiscuous mode [ 159.118523][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.249206][ T8303] __nla_validate_parse: 2 callbacks suppressed [ 159.249232][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1586'. [ 159.253607][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1586'. [ 159.342021][ T8309] sctp: [Deprecated]: syz.2.1591 (pid 8309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.342021][ T8309] Use struct sctp_sack_info instead [ 159.463810][ T8313] loop3: detected capacity change from 0 to 128 [ 159.521940][ T8313] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 159.545132][ T8313] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.555680][ T8313] ext2 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.697960][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.020929][ T30] kauditd_printk_skb: 274 callbacks suppressed [ 160.020952][ T30] audit: type=1400 audit(1700000292.935:4457): avc: denied { read } for pid=8354 comm="syz.0.1609" path="socket:[21592]" dev="sockfs" ino=21592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.281102][ T8374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1613'. [ 160.385209][ T30] audit: type=1400 audit(1700000293.276:4458): avc: denied { create } for pid=8375 comm="syz.5.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 160.394193][ T30] audit: type=1400 audit(1700000293.276:4459): avc: denied { sys_admin } for pid=8375 comm="syz.5.1615" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 161.075408][ T8400] io-wq is not configured for unbound workers [ 161.709824][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811bf55800: rx timeout, send abort [ 161.711042][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811bf55800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 161.719023][ T30] audit: type=1400 audit(1700000294.504:4460): avc: denied { read } for pid=2967 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 161.719179][ T30] audit: type=1400 audit(1700000294.504:4461): avc: denied { search } for pid=2967 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.719280][ T30] audit: type=1400 audit(1700000294.504:4462): avc: denied { write search } for pid=2967 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.719313][ T30] audit: type=1400 audit(1700000294.504:4463): avc: denied { add_name } for pid=2967 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.720573][ T30] audit: type=1400 audit(1700000294.504:4464): avc: denied { create } for pid=2967 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.720744][ T30] audit: type=1400 audit(1700000294.504:4465): avc: denied { append open } for pid=2967 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.720905][ T30] audit: type=1400 audit(1700000294.504:4466): avc: denied { getattr } for pid=2967 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.128162][ T8407] ip_tables: iptables: counters copy to user failed while replacing table [ 162.212083][ T8433] loop1: detected capacity change from 0 to 1024 [ 162.224229][ T8433] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.1636: Failed to acquire dquot type 0 [ 162.224264][ T8433] loop1: lost filesystem error report for type 5 error -117 [ 162.225030][ T8433] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 162.225421][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 162.225445][ C0] EXT4-fs (loop1): initial error at time 1700000294: ext4_acquire_dquot:7070 [ 162.225473][ C0] EXT4-fs (loop1): last error at time 1700000294: mb_free_blocks:2049: inode 13: block 160 [ 162.226890][ T8433] EXT4-fs (loop1): 1 truncate cleaned up [ 162.227910][ T8433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.246833][ T8431] loop2: detected capacity change from 0 to 128 [ 162.268214][ T8433] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.1636: Failed to acquire dquot type 0 [ 162.386413][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.430713][ T8438] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 162.431091][ T8438] bridge4: entered promiscuous mode [ 162.460296][ T8431] bio_check_eod: 82 callbacks suppressed [ 162.460354][ T8431] syz.2.1635: attempt to access beyond end of device [ 162.460354][ T8431] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 162.467049][ T8431] syz.2.1635: attempt to access beyond end of device [ 162.467049][ T8431] loop2: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 162.467136][ T8431] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 162.467200][ T8431] syz.2.1635: attempt to access beyond end of device [ 162.467200][ T8431] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 162.467275][ T8431] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 162.467406][ T8431] syz.2.1635: attempt to access beyond end of device [ 162.467406][ T8431] loop2: rw=2049, sector=162, nr_sectors = 16 limit=128 [ 162.468347][ T8431] syz.2.1635: attempt to access beyond end of device [ 162.468347][ T8431] loop2: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 162.469127][ T8431] syz.2.1635: attempt to access beyond end of device [ 162.469127][ T8431] loop2: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 162.469293][ T8431] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 162.469366][ T8431] syz.2.1635: attempt to access beyond end of device [ 162.469366][ T8431] loop2: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 162.469442][ T8431] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 162.469878][ T8431] syz.2.1635: attempt to access beyond end of device [ 162.469878][ T8431] loop2: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 162.474157][ T8431] syz.2.1635: attempt to access beyond end of device [ 162.474157][ T8431] loop2: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 162.474319][ T8431] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 162.474376][ T8431] syz.2.1635: attempt to access beyond end of device [ 162.474376][ T8431] loop2: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 162.474460][ T8431] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 162.480568][ T8431] Buffer I/O error on dev loop2, logical block 107, lost async page write [ 162.480642][ T8431] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 162.489967][ T8431] Buffer I/O error on dev loop2, logical block 119, lost async page write [ 162.490043][ T8431] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 162.777509][ T8449] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 162.781581][ T8449] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 163.146716][ T8471] SELinux: DCCP has been removed, pid=8471 comm=syz.2.1652 [ 163.489703][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1659'. [ 164.842818][ T8532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1676'. [ 165.496107][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 165.709040][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 165.709061][ T30] audit: type=1326 audit(1700000298.178:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8579 comm="syz.5.1694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204b10e559 code=0x7ffc0000 [ 165.710109][ T30] audit: type=1326 audit(1700000298.178:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8579 comm="syz.5.1694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204b10e559 code=0x7ffc0000 [ 165.710142][ T30] audit: type=1326 audit(1700000298.178:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8579 comm="syz.5.1694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204b10e559 code=0x7ffc0000 [ 165.710525][ T30] audit: type=1326 audit(1700000298.178:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8579 comm="syz.5.1694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f204b10e559 code=0x7ffc0000 [ 165.710972][ T30] audit: type=1326 audit(1700000298.178:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8579 comm="syz.5.1694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204b10e559 code=0x7ffc0000 [ 165.711487][ T30] audit: type=1326 audit(1700000298.178:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8579 comm="syz.5.1694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204b10e559 code=0x7ffc0000 [ 165.711687][ T30] audit: type=1326 audit(1700000298.178:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8579 comm="syz.5.1694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204b10e559 code=0x7ffc0000 [ 165.712506][ T30] audit: type=1326 audit(1700000298.178:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8579 comm="syz.5.1694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204b10e559 code=0x7ffc0000 [ 165.712696][ T30] audit: type=1326 audit(1700000298.178:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8579 comm="syz.5.1694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204b10e559 code=0x7ffc0000 [ 165.713430][ T30] audit: type=1326 audit(1700000298.178:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8579 comm="syz.5.1694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204b10e559 code=0x7ffc0000 [ 166.266956][ T8592] loop2: detected capacity change from 0 to 128 [ 166.317712][ T8592] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 166.339742][ T8592] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.367737][ T8592] ext2 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.480329][ T8601] loop1: detected capacity change from 0 to 512 [ 166.540815][ T8601] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 166.541651][ T8601] System zones: 1-12 [ 166.547260][ T8601] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.1700: missing EA_INODE flag [ 166.547324][ T8601] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 166.547812][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 166.547899][ C0] EXT4-fs (loop1): initial error at time 1700000298: ext4_xattr_inode_iget:437: inode 12 [ 166.548327][ C0] EXT4-fs (loop1): last error at time 1700000298: ext4_xattr_inode_iget:437: inode 12 [ 166.550399][ T8601] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1700: error while reading EA inode 12 err=-117 [ 166.550498][ T8601] loop1: lost filesystem error report for type 5 error -117 [ 166.550893][ T8601] EXT4-fs (loop1): 1 orphan inode deleted [ 166.552119][ T8601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.693324][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.733333][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.158740][ T3880] Bluetooth: hci0: Frame reassembly failed (-84) [ 168.688400][ T8671] rxe_eth0 speed is unknown, defaulting to 1000 [ 168.810805][ T8671] lo speed is unknown, defaulting to 1000 [ 169.106807][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bfbb200: rx timeout, send abort [ 169.108893][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a021e00: rx timeout, send abort [ 169.108945][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a021e00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 169.332695][ T3627] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.648740][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bfbb200: abort rx timeout. Force session deactivation [ 169.839920][ T8707] loop2: detected capacity change from 0 to 512 [ 169.874950][ T8707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.875046][ T8707] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.943906][ T8710] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1740'. [ 169.945788][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 170.041635][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.514955][ T8724] TC_ACT_REPEAT abuse ? [ 170.821384][ T8739] loop1: detected capacity change from 0 to 128 [ 170.825393][ T8739] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 170.847632][ T8739] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.861633][ T8739] ext2 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.562938][ T8791] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1755'. [ 171.563100][ T30] kauditd_printk_skb: 363 callbacks suppressed [ 171.563112][ T30] audit: type=1400 audit(1700000303.578:4882): avc: denied { nlmsg_read } for pid=8776 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.282093][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.640193][ T30] audit: type=1400 audit(1700000305.498:4883): avc: denied { watch_reads } for pid=8895 comm="syz.0.1772" path="/344" dev="tmpfs" ino=1813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 173.713265][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1766'. [ 173.713561][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1766'. [ 173.713593][ T8887] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 173.713830][ T8887] iwpm_mapping_info_cb: Unable to parse nlmsg [ 173.860036][ T30] audit: type=1400 audit(1700000305.701:4884): avc: denied { write } for pid=8902 comm="syz.0.1775" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 173.994776][ T30] audit: type=1400 audit(1700000305.830:4885): avc: denied { connect } for pid=8909 comm="syz.3.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.781230][ T8929] netlink: 'syz.1.1784': attribute type 5 has an invalid length. [ 174.861384][ T8912] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.862399][ T8912] team0: Device ipvlan2 is already an upper device of the team interface [ 175.006250][ T8904] rxe_eth0 speed is unknown, defaulting to 1000 [ 175.203834][ T8904] lo speed is unknown, defaulting to 1000 [ 175.422367][ T30] audit: type=1326 audit(1700000307.150:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.0.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea59ace559 code=0x7ffc0000 [ 175.422474][ T30] audit: type=1326 audit(1700000307.150:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.0.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea59ace559 code=0x7ffc0000 [ 175.422586][ T30] audit: type=1326 audit(1700000307.150:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.0.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea59ace559 code=0x7ffc0000 [ 175.422830][ T30] audit: type=1326 audit(1700000307.150:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.0.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea59ace559 code=0x7ffc0000 [ 175.422999][ T30] audit: type=1326 audit(1700000307.150:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.0.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea59ace559 code=0x7ffc0000 [ 175.423149][ T30] audit: type=1326 audit(1700000307.150:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.0.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea59ace559 code=0x7ffc0000 [ 175.467815][ T8960] loop1: detected capacity change from 0 to 512 [ 175.562222][ T8960] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.1794: iget: bad i_size value: 38620345925642 [ 175.562339][ T8960] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.562975][ T8960] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1794: couldn't read orphan inode 15 (err -117) [ 175.563220][ T8960] loop1: lost filesystem error report for type 5 error -117 [ 175.565475][ T8960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.723925][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.848687][ T8970] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 176.129627][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 176.134446][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 176.134912][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 176.164069][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 176.164272][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 176.346073][ T8992] tipc: Failed to remove unknown binding: 66,0,0/0:3192538252/3192538253 [ 176.348114][ T8992] tipc: Failed to remove unknown binding: 66,0,0/0:3192538252/3192538253 [ 176.885482][ T9005] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1810'. [ 177.322094][ T9015] rxe_eth0 speed is unknown, defaulting to 1000 [ 177.427427][ T9015] lo speed is unknown, defaulting to 1000 [ 177.750529][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.373262][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 178.373283][ T30] audit: type=1400 audit(1700000309.873:4943): avc: denied { read } for pid=9051 comm="syz.3.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.544819][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 179.301443][ T9083] loop0: detected capacity change from 0 to 512 [ 179.371164][ T9083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 179.371576][ T9083] System zones: 1-12 [ 179.376462][ T9083] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.1842: missing EA_INODE flag [ 179.376548][ T9083] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 179.377018][ T9083] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1842: error while reading EA inode 12 err=-117 [ 179.377133][ T9083] loop0: lost filesystem error report for type 5 error -117 [ 179.377677][ T9083] EXT4-fs (loop0): 1 orphan inode deleted [ 179.378873][ T9083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.400313][ T30] audit: type=1400 audit(1700000310.824:4944): avc: denied { write } for pid=9082 comm="syz.0.1842" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.432404][ T30] audit: type=1400 audit(1700000310.843:4945): avc: denied { read } for pid=9087 comm="syz.1.1845" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 179.437182][ T9088] SET target dimension over the limit! [ 179.437989][ T9088] program syz.1.1845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.509157][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.522571][ T30] audit: type=1400 audit(1700000310.935:4946): avc: denied { create } for pid=9089 comm="syz.1.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 179.563986][ T9090] netlink: 'syz.1.1846': attribute type 22 has an invalid length. [ 179.564009][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 179.609204][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1847'. [ 179.645154][ T9090] netlink: 'syz.1.1846': attribute type 22 has an invalid length. [ 179.645178][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 179.696420][ T9097] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 179.696451][ T9097] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 179.696487][ T9097] vhci_hcd vhci_hcd.0: Device attached [ 179.777162][ T9098] vhci_hcd: connection closed [ 179.777527][ T3880] vhci_hcd vhci_hcd.2: stop threads [ 179.777550][ T3880] vhci_hcd vhci_hcd.2: release socket [ 179.777570][ T3880] vhci_hcd vhci_hcd.2: disconnect device [ 179.983476][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1850'. [ 180.117609][ T9118] FAULT_INJECTION: forcing a failure. [ 180.117609][ T9118] name failslab, interval 1, probability 0, space 0, times 0 [ 180.117648][ T9118] CPU: 0 UID: 0 PID: 9118 Comm: syz.1.1852 Not tainted syzkaller #0 PREEMPT(lazy) [ 180.117683][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.117702][ T9118] Call Trace: [ 180.117714][ T9118] [ 180.117766][ T9118] __dump_stack+0x1d/0x30 [ 180.117802][ T9118] dump_stack_lvl+0x95/0xd0 [ 180.117826][ T9118] dump_stack+0x15/0x1b [ 180.117884][ T9118] should_fail_ex+0x262/0x280 [ 180.117970][ T9118] ? sk_prot_alloc+0xa8/0x180 [ 180.117995][ T9118] should_failslab+0x8c/0xb0 [ 180.118109][ T9118] __kmalloc_noprof+0xd0/0x4d0 [ 180.118157][ T9118] ? sk_prot_alloc+0xa8/0x180 [ 180.118223][ T9118] sk_prot_alloc+0xa8/0x180 [ 180.118319][ T9118] sk_alloc+0x34/0x3e0 [ 180.118343][ T9118] __netlink_kernel_create+0xe9/0x550 [ 180.118451][ T9118] ? ops_init+0x4b/0x2e0 [ 180.118478][ T9118] audit_net_init+0x8b/0x180 [ 180.118511][ T9118] ? __pfx_audit_receive+0x10/0x10 [ 180.118549][ T9118] ? __pfx_audit_multicast_bind+0x10/0x10 [ 180.118628][ T9118] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 180.118671][ T9118] ops_init+0x22a/0x2e0 [ 180.118697][ T9118] setup_net+0x9f/0x230 [ 180.118813][ T9118] copy_net_ns+0x333/0x490 [ 180.118883][ T9118] create_new_namespaces+0x1f6/0x420 [ 180.118936][ T9118] unshare_nsproxy_namespaces+0x115/0x150 [ 180.118985][ T9118] ksys_unshare+0x3fd/0x6f0 [ 180.119083][ T9118] __x64_sys_unshare+0x1f/0x30 [ 180.119121][ T9118] x64_sys_call+0x1e33/0x2550 [ 180.119158][ T9118] do_syscall_64+0x112/0x360 [ 180.119190][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.119298][ T9118] RIP: 0033:0x7fb5648ce559 [ 180.119322][ T9118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.119347][ T9118] RSP: 002b:00007fb563306028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 180.119379][ T9118] RAX: ffffffffffffffda RBX: 00007fb564b56090 RCX: 00007fb5648ce559 [ 180.119396][ T9118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680 [ 180.119415][ T9118] RBP: 00007fb5649658b0 R08: 0000000000000000 R09: 0000000000000000 [ 180.119487][ T9118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.119505][ T9118] R13: 00007fb564b56128 R14: 00007fb564b56090 R15: 00007ffff264c1e8 [ 180.119533][ T9118] [ 180.121309][ T9118] audit: cannot initialize netlink socket in namespace [ 180.299804][ T9117] loop0: detected capacity change from 0 to 512 [ 180.331747][ T9117] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 180.331912][ T9117] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.363719][ T9117] EXT4-fs (loop0): 1 truncate cleaned up [ 180.382270][ T9117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.445406][ T30] audit: type=1400 audit(1700000311.784:4947): avc: denied { write } for pid=9116 comm="syz.0.1854" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.751975][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.895106][ T2945] ================================================================== [ 180.895156][ T2945] BUG: KCSAN: data-race in __blk_mq_alloc_driver_tag / blk_mq_tagset_busy_iter [ 180.895217][ T2945] [ 180.895223][ T2945] write to 0xffff8881035913a0 of 4 bytes by task 403 on cpu 0: [ 180.895245][ T2945] __blk_mq_alloc_driver_tag+0x181/0x380 [ 180.895291][ T2945] blk_mq_dispatch_rq_list+0x1a6/0xef0 [ 180.895335][ T2945] __blk_mq_sched_dispatch_requests+0x1db/0xce0 [ 180.895382][ T2945] blk_mq_sched_dispatch_requests+0x86/0x120 [ 180.895429][ T2945] blk_mq_run_work_fn+0x66/0xe0 [ 180.895460][ T2945] process_scheduled_works+0x56a/0xa50 [ 180.895500][ T2945] worker_thread+0x569/0x750 [ 180.895540][ T2945] kthread+0x223/0x270 [ 180.895566][ T2945] ret_from_fork+0x146/0x330 [ 180.895612][ T2945] ret_from_fork_asm+0x1a/0x30 [ 180.895648][ T2945] [ 180.895656][ T2945] read to 0xffff8881035913a0 of 4 bytes by task 2945 on cpu 1: [ 180.895679][ T2945] blk_mq_tagset_busy_iter+0x673/0x890 [ 180.895715][ T2945] scsi_host_busy+0x4e/0x80 [ 180.895759][ T2945] scsi_queue_rq+0x4ec/0x1a20 [ 180.895801][ T2945] blk_mq_dispatch_rq_list+0x5d2/0xef0 [ 180.895843][ T2945] __blk_mq_sched_dispatch_requests+0x1db/0xce0 [ 180.895891][ T2945] blk_mq_sched_dispatch_requests+0x86/0x120 [ 180.895937][ T2945] blk_mq_run_hw_queue+0x17d/0x220 [ 180.895978][ T2945] blk_mq_run_hw_queues+0x18e/0x270 [ 180.896014][ T2945] blk_mq_requeue_work+0x3ca/0x400 [ 180.896043][ T2945] process_scheduled_works+0x56a/0xa50 [ 180.896085][ T2945] worker_thread+0x569/0x750 [ 180.896142][ T2945] kthread+0x223/0x270 [ 180.896168][ T2945] ret_from_fork+0x146/0x330 [ 180.896202][ T2945] ret_from_fork_asm+0x1a/0x30 [ 180.896227][ T2945] [ 180.896231][ T2945] value changed: 0xffffffff -> 0x00000c4e [ 180.896242][ T2945] [ 180.896246][ T2945] Reported by Kernel Concurrency Sanitizer on: [ 180.896258][ T2945] CPU: 1 UID: 0 PID: 2945 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(lazy) [ 180.896288][ T2945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.896307][ T2945] Workqueue: kblockd blk_mq_requeue_work [ 180.896336][ T2945] ================================================================== [ 181.070290][ T9129] loop0: detected capacity change from 0 to 128 [ 181.153444][ T9130] loop3: detected capacity change from 0 to 512 [ 181.196359][ T9130] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 181.196459][ T9130] System zones: 1-12 [ 181.200126][ T9130] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.1857: missing EA_INODE flag [ 181.200386][ T9130] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 181.201252][ T9130] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1857: error while reading EA inode 12 err=-117 [ 181.201338][ T9130] loop3: lost filesystem error report for type 5 error -117 [ 181.205098][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 181.205227][ C0] EXT4-fs (loop3): initial error at time 1700000312: ext4_xattr_inode_iget:437: inode 12 [ 181.205303][ C0] EXT4-fs (loop3): last error at time 1700000312: ext4_xattr_inode_iget:442 [ 181.238357][ T9130] EXT4-fs (loop3): 1 orphan inode deleted [ 181.302805][ T9129] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.303013][ T9130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.306298][ T9129] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.366078][ T30] audit: type=1400 audit(1700000312.633:4948): avc: denied { write } for pid=9128 comm="syz.3.1857" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.449900][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.484456][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.671583][ T24] page_pool_release_retry() stalled pool shutdown: id 57, 1 inflight 60 sec