last executing test programs: 4m37.289261698s ago: executing program 32 (id=88): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564) 4m32.230637245s ago: executing program 33 (id=191): perf_event_open(&(0x7f0000001380)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffc, 0x4e0e7b2abb8edb28, @perf_config_ext={0xc8d, 0x9}, 0x1ccc8, 0x201224, 0x0, 0x6, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) 4m31.169066706s ago: executing program 34 (id=202): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 4m22.644941053s ago: executing program 35 (id=349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500060008"], 0x4a) 4m8.086915434s ago: executing program 36 (id=552): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x137) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x608008, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 4m3.394978s ago: executing program 37 (id=387): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="88a3", 0x2}], 0x1}}], 0x1, 0x4400c800) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="0e000000", 0x4}, {&(0x7f0000000640)="0000b1062ec916864f3674cbb7ba6a444530ef81a885a158d47aaec2a484d9ce2c1a31089da60c9745b4e7e288a91bc8e6738f9085a3ff1d68ab3b149b3bf90decdf0cb39d0224c383dc2ea5f92f1aaa6a92512389d823593e14c3e92c35f766876901efd861d3408e92", 0x2}], 0x37) 3m3.569754323s ago: executing program 38 (id=1461): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0xf3b, 0x4) io_uring_enter(r0, 0x2219, 0xb, 0x16, 0x0, 0x0) 2m56.165283808s ago: executing program 39 (id=1604): syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x1082, 0x80000000, 0x0, 0x9, 0x7ffffc, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0xf0fc, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x2}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000000400)=""/219, &(0x7f0000000500)=0xdb) 2m53.470529986s ago: executing program 40 (id=1612): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(r1) close(0x4) 2m41.900663041s ago: executing program 41 (id=2105): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000380)=r0}, 0x20) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000200)={0x0}) 2m30.790253072s ago: executing program 1 (id=2298): unshare(0x2a020480) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) unshare(0x28000600) 2m30.606592428s ago: executing program 1 (id=2301): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m30.377239825s ago: executing program 1 (id=2302): perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000700)={0xa, 0xfffd, 0x0, @empty, 0x2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0x1000a) sendfile(r0, r1, &(0x7f00000007c0)=0x31, 0xfffc) 2m29.939337657s ago: executing program 1 (id=2308): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r1) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x44) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000390400004000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01990000419a04002000128008000100736974001400028008000300ac1414bb050004"], 0x40}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) sendto$packet(r0, &(0x7f0000000680)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x404c891, &(0x7f00000006c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 2m29.589543607s ago: executing program 1 (id=2325): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil) 2m29.078006722s ago: executing program 1 (id=2328): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000340)={'bridge0\x00', @random="0c0000000988"}) r1 = perf_event_open(&(0x7f0000001800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a2, &(0x7f00000018c0)={'bridge0\x00', @random="1d0000000988"}) 2m13.2748911s ago: executing program 42 (id=2328): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000340)={'bridge0\x00', @random="0c0000000988"}) r1 = perf_event_open(&(0x7f0000001800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a2, &(0x7f00000018c0)={'bridge0\x00', @random="1d0000000988"}) 1m49.717806042s ago: executing program 8 (id=2609): write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff6, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5) r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 1m48.76403494s ago: executing program 8 (id=2627): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000680)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 1m47.679920161s ago: executing program 8 (id=2616): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff356}, 0x0, 0x80000000, 0x0, 0x8, 0xae7, 0x9, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing\x00', 0x1be) mount(0x0, &(0x7f00000008c0)='./tracing\x00', &(0x7f0000000900)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./tracing/set_event\x00', 0x1, 0x0) write(r0, &(0x7f0000000980)='!*', 0x2) 1m47.445114688s ago: executing program 8 (id=2618): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000500)='.\x00', &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/../file0\x00') 1m47.36824067s ago: executing program 8 (id=2621): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3b6, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m47.148034877s ago: executing program 8 (id=2624): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="510302"], 0xc) 1m47.064861969s ago: executing program 43 (id=2624): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="510302"], 0xc) 1m31.608285527s ago: executing program 5 (id=2791): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f00000004c0)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1m31.423235852s ago: executing program 5 (id=2796): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x400001, @empty, 0xfffffffc}, 0x1c) listen(r0, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x8, 0x0, 0x4}}}}}}}, 0x0) 1m31.382958273s ago: executing program 5 (id=2800): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m31.183992329s ago: executing program 5 (id=2806): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m31.15230568s ago: executing program 5 (id=2808): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f00000004c0)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1m30.915963467s ago: executing program 5 (id=2812): r0 = openat(0xffffffffffffff9c, &(0x7f00000110c0)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000011100)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000011180)={[0x7fffffffffffffff]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f00000111c0)='./file0\x00', &(0x7f0000011200), 0x6, &(0x7f0000011240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m30.915797817s ago: executing program 44 (id=2812): r0 = openat(0xffffffffffffff9c, &(0x7f00000110c0)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000011100)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000011180)={[0x7fffffffffffffff]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f00000111c0)='./file0\x00', &(0x7f0000011200), 0x6, &(0x7f0000011240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m15.170633623s ago: executing program 6 (id=3093): r0 = fsopen(&(0x7f0000000540)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x11) getdents64(r2, 0x0, 0x0) 1m15.170167493s ago: executing program 6 (id=3094): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./my_configfs\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./my_configfs/target/dbroot\x00', 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x19a, 0x0, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="2081ffcf5102", 0x6}], 0x1, 0x2, 0x7fffffff) 1m15.122806654s ago: executing program 6 (id=3097): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) unshare(0x400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) 1m15.096014445s ago: executing program 6 (id=3098): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@nogrpid}]}, 0x1, 0x513, &(0x7f0000001000)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) 1m14.94128877s ago: executing program 6 (id=3101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000012c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001300)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000001340)={@val={0x700, 0x9}, @void, @eth={@random="77e8e9a87b48", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x33, 0x67, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x2b}}}}}}}, 0x45) 1m14.714969336s ago: executing program 6 (id=3103): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xd707, 0x1c080, 0xa, 0x20002f7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m14.714676856s ago: executing program 45 (id=3103): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xd707, 0x1c080, 0xa, 0x20002f7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m8.042603689s ago: executing program 9 (id=3231): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028"], 0xc8}}, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee01) keyctl$describe(0x6, 0x0, 0x0, 0x0) 1m7.987703241s ago: executing program 9 (id=3233): r0 = fsopen(&(0x7f00000000c0)='nfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m7.914106193s ago: executing program 9 (id=3234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f963cf5e95b52fa9", "f0ac3078b3aaad2ad39dc8df9fffb99b", "0f5147e6", "2c3fcd2f1c8b32e6"}, 0x28) 1m7.712409549s ago: executing program 9 (id=3236): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@nogrpid}]}, 0x1, 0x513, &(0x7f0000001000)="$eJzs3c9vI1cdAPDvOHHiZNMmLT0AgnZpCwtarZN426jqAcoRoUqIHkHahsQbRbHjKHZKE/aQnrkiUYkTPfIHcO6JAzcuCG5cygGJHxGoQeJgNONJ6s3ajbVJ7Cj+fKTRzJs36+/3xfF78fOOXwBj63ZEHEbEVES8GxHz+fkk3+KtzpZe9+nRo7Xjo0drSbTb7/wzyerTc9H1b1K38scsRcQPP4r4SfJk3Ob+wdZqrVbdzcuLrfrOYnP/4N5mfXWjulHdrlRWlleW3rj/euXS2vpSfSo/+uonfzj81s/StObyM93tuEydphdP46QmI+L7VxFsBCby9kyNOhGeSiEino+Il7PX/3xMZM8mAHCTtdvz0Z7vLgMAN10hmwNLCuV8LmAuCoVyuTOH90LMFmqNZuvuw8be9npnrmwhioWHm7XqUj5XuBDFJC0vZ8eflStnyvcj4rmI+MX0TFYurzVq66P8wwcAxtitM+P/f6Y74z8AcMOVRp0AADB0fcb/w2HnAQAMj/f/ADB+jP8AMH464//MqNMAAIbI+38AGD/GfwAYKz94++10ax/n33+9/t7+3lbjvXvr1eZWub63Vl5r7O6UNxqNjew7e+rnPV6t0dhZfi323l/49k6ztdjcP3hQb+xttx5k3+v9oFrMrsruLPBXBwCMyHMvffznJB2R35zJtuhay6E40syAq1YYdQLAyEyMOgFgZKz2BePrAu/xTQ/ADdFjid7HlHrdINRut9tXlxJwxe58yfw/jKuu+X//HwfGjPl/GF/m/2F8tdvJoGv+x6AXAgDXmzl+oM/n/8/n+9/kHw78eP3sFR9eZVYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwvZ2s/1vO1wKfi0KhXI54JiIWopg83KxVlyLi2Yj403RxOi0vjzhnAOCiCn9L8vW/7sy/OvdY1Yu3Tg+nIuKnv3rnl++vtlq7f4yYSv41fXK+9WF+vjL87AGA852M09m+6438p0eP1k62Yebz9+9GRKkT//hoKo5P40/GZLYvRTEiZv+d5OWOpGvu4iIOP4iIL/ZqfxJz2RxIZ+XTs/HT2M8MNX7hsfiFrK6zT38WX7iEXGDcfJz2P2/1ev0V4na27/36L2U91MXl/V/6UGvHWR/4WfyT/m+iT/93e9AYr/3ue52jmSfrPoj48mTESezjrv7nJH7SJ/6rA8b/y1defLlfXfvXEXeid/zuWIut+s5ic//g3mZ9daO6Ud2uVFaWV5beuP96ZTGbo17sPxr84827z/arS9s/2yd+6Zz2f33A9n/0v3d/9LXPif/NV3rFL8QLnxM/HRO/MWD81dnflvrVpfHX+7T/vOf/7oDxP/nrwRPLhgMAo9PcP9hardWqu2N5EINd/Pv8h3Utch7rg/RZuAZp9Dz4zrBiTUXvqp+/0vk1nY7o/sVut58qVr8e4zJm3YDr4PRFHxH/HXUyAAAAAAAAAAAAAABAT5d6f1LS+96sUbcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAm+v/AQAA///Zycou") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) 1m7.458260316s ago: executing program 9 (id=3238): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/llc/socket\x00') sendfile(r0, r1, 0x0, 0xff) 1m6.372856397s ago: executing program 9 (id=3254): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000740)='hybla', 0x5) recvfrom$inet(r0, &(0x7f0000000780), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1m6.239814152s ago: executing program 46 (id=3254): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000740)='hybla', 0x5) recvfrom$inet(r0, &(0x7f0000000780), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 4.605418426s ago: executing program 4 (id=4358): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000780)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 4.12293618s ago: executing program 4 (id=4370): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') getdents64(r2, &(0x7f0000000180)=""/235, 0xeb) 4.076743872s ago: executing program 4 (id=4372): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000900)="01", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r1, 0x49}, 0x0, &(0x7f00000008c0)="b0f5ec01e02085467da6d8b2b2a69c0000000000000001aa0eedaa25e8466819395b8df98f3c90a03be929d2802703139af648e4340010000000000000e5eae2a670b23de93f4ded4e", 0x0) 3.996446094s ago: executing program 4 (id=4374): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000240)='./file0\x00') mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00') 3.946241006s ago: executing program 4 (id=4375): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3fe, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffff9, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 3.061582661s ago: executing program 4 (id=4394): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000100), 0x788, 0x0, 0x0) 2.974443334s ago: executing program 47 (id=4394): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000100), 0x788, 0x0, 0x0) 1.332848602s ago: executing program 7 (id=4420): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x4000c2}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x5}, 0x0, {}, 0x67, 0x2}) 1.249003554s ago: executing program 7 (id=4421): perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0) socket$xdp(0x2c, 0x3, 0x0) 954.130672ms ago: executing program 7 (id=4426): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xc, 0x4, 0x4, 0x3, 0x0, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000440)}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 880.882675ms ago: executing program 7 (id=4428): mkdirat(0xffffffffffffff9c, &(0x7f0000001640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001680)='./proc\x00', &(0x7f00000016c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001740)='10', 0x2) io_uring_setup(0x48fd, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x80, 0x0) 808.593697ms ago: executing program 7 (id=4430): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x116078, 0x0, 0x0, 0x1, 0x6, 0x8001, 0xf}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) uname(&(0x7f0000000400)=""/22) 639.115952ms ago: executing program 7 (id=4433): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x1b83}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000e40)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000001240)="cd", 0x1, 0x24000885, &(0x7f0000001280)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 547.038354ms ago: executing program 3 (id=4438): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x50}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 537.556284ms ago: executing program 0 (id=4439): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r1, 0x25, 0x2, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}, 0x0) 490.583186ms ago: executing program 0 (id=4440): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x300884c, &(0x7f0000000240)={[{@debug}]}, 0x3, 0x515, &(0x7f0000000b40)="$eJzs3V9oHHkdAPDvbJOY6+W6FQ7U49Cg4B2eJm2T63kcyB34j3optfFFGyhJu01CN9mQbLSJoBWLFHzxSYRK0T4oiGJ87JuKoMWiD4WiL6VIQS20harPkdnd6YVk02zbdCdJPx+Yzm9+2+zvO/PNbGZ+O/ObAJ5ZvRHxdkTsiojXIqLYqC80pjhbn9L/NzawNJFOSSwvD99LIomIQwNLE9l7JY358403eDUift+ZxNi5te3OLSyeHi2XS7ON5f7q1Ez/3MLipyanRsdL46XpgTff+PTBgdcHDw5s2rreHD029cvK0Fs/u334Nx/++CfuJfF29DReW7kem6U3ehvbpDNeWPlCEvH1zW4sZ90ryklHjoHQsj+/8fIP844BAGi/QuPYv6N2/F+MXVE/eOu+NnK/GLf+st7PHRq5+O92xgkAAAA8vuXljzTmAAAAwM6VOPcHAACAHS67DuDQwNJENrXr2oPbX2hXS6znzjsRsbee/+z+7vorHY17erujMyJ2/yeJlbf1Jqvu+X0c1c9F9MY3/lg9+4NT6RRP6T5stqalf+QdAXnqGsw7AvL00pfzjoA8/fV83hGQp2t38o6APB0dzjsC8nT4YN4RkKcL9/KOgN++Ux8AcG3/X6E25l/Wy7O6/yctP/eEbd8tRPRG969W1un/aa+s/29sTf9f4UH/3651+v/2tNjG5a9d/1Cz+i9+Nc3/8FjW//fJkR+X0vbT+ROvGC25852Ilzqa5T95kP9knfwXW2zjD1cHm/b0/25Pmv+f/yLNdzbJf3st/zTilWie/0zy8PFZ+09Nlkv76v82beOj9//5v2b1039L83/lM9n+n05p+9l3ATx96f6/e538b/T5v7fFNi5N3mra0zvck+b/lW89PP+F213JV2q/jF2NmjOj1ers/oiu5N219QcedQs8W7JtlG3DNP+vfqz53/8P1ubNP//T34n3t9jmu8cKbzWrH/x1mv/vf97+n580/yc32P/X+/v/YqttXL852qx+4rNp/o9ekn8AAAAAAAAAeDKFiOiJpND3oFwo9PXVn+H9YuwulCtz1ddOVeanT0btWdl7o7OQXelVrC8n6fL+xvVA2fKBVcsDjetFzhefqy33naiUT+a98gAAALDD9UTcOPbdyx94ftX5/7+K9fN/AAAAYPtLz/9f/snFC2n5v60O5AMAAABsK+n5//3v3b0Szv8BAABgx+rpdv4PAAAAO132/f+RoaE4MjS0nD33b7oyPnl6YubNA/v6puZP9J2ozM70jVcq47UR+6Y2ft9ypTKz//WYP9NfLc1V++cWFo9PVeanq8drz409Xupsw7oBGzv398sjeccAAAC0T8864/+/sGLs/n0RsScirhY735eN9Q8AAABsfT0RN770o2/+aW5h8fRouVyaVXjUwvK3I7ZAGAprCtlFJlslnm1ZyPkDCgAA2HTvHfTnHQkAAAAAAAAAAAAAAAAAAAA8u9oxnFje6wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD28f8AAAD//0FW/Wk=") r1 = openat(r0, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x2c) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe9f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x2141, 0x59) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 454.181627ms ago: executing program 3 (id=4442): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 421.691768ms ago: executing program 3 (id=4443): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x1ff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={r1, 0x20, &(0x7f0000000dc0)={0x0, 0x0, 0x0, &(0x7f0000000e00)=""/105, 0x69}}, 0x10) 363.117309ms ago: executing program 0 (id=4445): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) unshare(0x26020480) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000001140)={0x1, 'lo\x00'}, 0x18) 349.04322ms ago: executing program 0 (id=4446): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) 213.929224ms ago: executing program 2 (id=4448): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000050012"], 0x4c}}, 0x20) 213.435244ms ago: executing program 3 (id=4449): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x10) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='100', 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 180.325075ms ago: executing program 2 (id=4450): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 179.772395ms ago: executing program 0 (id=4451): unshare(0x22020600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r1, 0x0, 0x482, &(0x7f0000000000)="110000007f0000014e200000000000006d6800000000000000000000000000001000"/44, 0x2c) setsockopt(r1, 0x0, 0x487, &(0x7f0000000100)="110000007f0000014e200000000000006d6800000000000000000000000000001000000000000000000000007f0000014e210000010000000100"/68, 0x44) 132.355626ms ago: executing program 2 (id=4452): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8066, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 131.986766ms ago: executing program 3 (id=4453): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='- 0 -', 0x5) 118.081547ms ago: executing program 0 (id=4454): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xc, 0x8, 0x0, 0x8000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.653019ms ago: executing program 3 (id=4455): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e0"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 40.358229ms ago: executing program 2 (id=4456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11, 0x1000}}}}}}}, 0x0) 18.39058ms ago: executing program 2 (id=4457): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 0s ago: executing program 2 (id=4458): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a40)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 1:8620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14511 comm="syz.2.3247" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 250.190627][ T281] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.364647][ T281] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.382358][T14516] team_slave_0: entered promiscuous mode [ 250.382726][T14516] batadv_slave_0: entered promiscuous mode [ 250.382996][T14515] batadv_slave_0: left promiscuous mode [ 250.383058][T14515] team_slave_0: left promiscuous mode [ 250.464381][ T281] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.558893][T14041] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.595747][T14527] loop3: detected capacity change from 0 to 512 [ 250.605801][T14527] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 250.605897][T14527] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 250.636729][T14527] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3253: invalid indirect mapped block 32768 (level 2) [ 250.636776][T14527] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 250.639067][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 250.639090][ C1] EXT4-fs (loop3): initial error at time 1792357273: ext4_free_branches:1023: inode 16 [ 250.639129][ C1] EXT4-fs (loop3): last error at time 1792357273: ext4_free_branches:1023: inode 16 [ 250.642005][T14527] EXT4-fs (loop3): 1 orphan inode deleted [ 250.642048][T14527] EXT4-fs (loop3): 1 truncate cleaned up [ 250.660110][T14527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.756862][ T281] bridge_slave_1: left allmulticast mode [ 250.756891][ T281] bridge_slave_1: left promiscuous mode [ 250.757009][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.758001][ T281] bridge_slave_0: left allmulticast mode [ 250.758023][ T281] bridge_slave_0: left promiscuous mode [ 250.759173][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.940362][T13305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.062829][T14549] netlink: 37 bytes leftover after parsing attributes in process `syz.3.3258'. [ 251.062853][T14549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3258'. [ 251.093714][ T281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.119660][ T281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.124401][ T281] bond0 (unregistering): Released all slaves [ 251.146010][T14549] netlink: 37 bytes leftover after parsing attributes in process `syz.3.3258'. [ 251.213506][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 251.345721][T14537] rxe_eth0 speed is unknown, defaulting to 1000 [ 251.449992][ T281] hsr_slave_0: left promiscuous mode [ 251.460292][ T281] hsr_slave_1: left promiscuous mode [ 251.460862][ T281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.460931][ T281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.492527][ T281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.492550][ T281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.551296][ T281] veth1_macvtap: left promiscuous mode [ 251.551328][ T281] veth0_macvtap: left promiscuous mode [ 251.551445][ T281] veth1_vlan: left promiscuous mode [ 251.551521][ T281] veth0_vlan: left promiscuous mode [ 251.771593][T14598] loop7: detected capacity change from 0 to 1024 [ 251.772903][T14598] EXT4-fs: Ignoring removed oldalloc option [ 251.772927][T14598] EXT4-fs: Ignoring removed oldalloc option [ 251.800325][T14598] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.814583][T14601] netlink: 'syz.2.3270': attribute type 1 has an invalid length. [ 251.815040][ T281] team0 (unregistering): Port device team_slave_1 removed [ 251.838110][ T281] team0 (unregistering): Port device team_slave_0 removed [ 251.925547][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 251.948859][T12699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.949159][T14601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.996222][T14608] ip_tables: iptables: counters copy to user failed while replacing table [ 252.243836][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 252.282240][T14537] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.283735][T14537] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.283858][T14537] bridge_slave_0: entered allmulticast mode [ 252.284411][T14537] bridge_slave_0: entered promiscuous mode [ 252.312724][T14537] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.312873][T14537] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.313494][T14537] bridge_slave_1: entered allmulticast mode [ 252.314428][T14537] bridge_slave_1: entered promiscuous mode [ 252.353442][T14537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.354601][T14537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.390027][T14537] team0: Port device team_slave_0 added [ 252.391061][T14537] team0: Port device team_slave_1 added [ 252.418839][T14537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.418858][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.418896][T14537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.419571][T14537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.419587][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.419621][T14537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.455891][T14537] hsr_slave_0: entered promiscuous mode [ 252.456945][T14537] hsr_slave_1: entered promiscuous mode [ 252.457541][T14537] debugfs: 'hsr0' already exists in 'hsr' [ 252.457584][T14537] Cannot create hsr debugfs directory [ 252.606215][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 252.796571][T14537] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.798648][T14537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.799352][T14537] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.801598][T14537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.802458][T14537] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 252.840353][T14537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.840998][T14537] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.859195][T14537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.872052][T14537] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.872097][T14537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.872260][T14537] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.872312][T14537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.917030][T14537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.929534][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.930437][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.951963][T14537] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.963721][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.963762][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.967888][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.967924][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.128405][T14722] bridge_slave_0: left allmulticast mode [ 253.128434][T14722] bridge_slave_0: left promiscuous mode [ 253.128620][T14722] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.157205][T14722] bridge_slave_1: left allmulticast mode [ 253.162973][T14722] bridge_slave_1: left promiscuous mode [ 253.163120][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.189687][T14722] bond0: (slave bond_slave_0): Releasing backup interface [ 253.212049][T14722] bond0: (slave bond_slave_1): Releasing backup interface [ 253.247723][T14722] team0: Port device team_slave_0 removed [ 253.264259][T14722] team0: Port device team_slave_1 removed [ 253.267896][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.267916][T14722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.292074][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.292098][T14722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.292677][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3284'. [ 253.300540][T14722] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 253.362242][T14726] team0: Mode changed to "loadbalance" [ 253.448069][T14754] batadv_slave_0: entered promiscuous mode [ 253.458064][T14754] batadv_slave_0: left promiscuous mode [ 253.470871][T14537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.661011][T14789] loop3: detected capacity change from 0 to 512 [ 253.661539][T14789] EXT4-fs: Ignoring removed nobh option [ 253.661564][T14789] EXT4-fs: Ignoring removed oldalloc option [ 253.661984][T14789] EXT4-fs: old and new quota format mixing [ 253.847418][T14537] veth0_vlan: entered promiscuous mode [ 253.863591][T14537] veth1_vlan: entered promiscuous mode [ 253.912490][T14537] veth0_macvtap: entered promiscuous mode [ 253.923285][T14537] veth1_macvtap: entered promiscuous mode [ 253.942609][T14537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.944633][T14537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.975348][T14825] bridge_slave_0: entered promiscuous mode [ 253.978251][T14825] team0: Port device bridge_slave_0 added [ 254.015727][ T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.016120][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.016164][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.016202][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.077611][T14830] batadv_slave_0: entered promiscuous mode [ 254.078172][T14830] batadv_slave_0: left promiscuous mode [ 254.251181][T14844] bridge_slave_0: left promiscuous mode [ 254.257538][T14844] team0: Port device bridge_slave_0 removed [ 254.289422][T14844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.299464][T14853] team0: Mode changed to "loadbalance" [ 254.426435][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 254.426455][ T29] audit: type=1400 audit(1792357277.633:8698): avc: denied { write } for pid=14857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.478635][ T29] audit: type=1400 audit(1792357277.683:8699): avc: denied { transition } for pid=14863 comm="syz.4.3306" path="/1/file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 254.478675][ T29] audit: type=1400 audit(1792357277.683:8700): avc: denied { entrypoint } for pid=14863 comm="syz.4.3306" path="/1/file0" dev="tmpfs" ino=24 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.478790][ T29] audit: type=1400 audit(1792357277.683:8701): avc: denied { share } for pid=14863 comm="syz.4.3306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 254.478822][ T29] audit: type=1400 audit(1792357277.683:8702): avc: denied { noatsecure } for pid=14863 comm="syz.4.3306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 254.479065][ T29] audit: type=1400 audit(1792357277.683:8703): avc: denied { write } for pid=14872 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.779395][ T29] audit: type=1400 audit(1792357277.985:8704): avc: denied { write } for pid=14875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.817542][ T29] audit: type=1400 audit(1792357278.015:8705): avc: denied { write } for pid=14886 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.943579][ T29] audit: type=1400 audit(1792357278.146:8706): avc: denied { write } for pid=14890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.989183][ T29] audit: type=1400 audit(1792357278.196:8707): avc: denied { write } for pid=14901 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.285384][T14932] FAULT_INJECTION: forcing a failure. [ 255.285384][T14932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.285416][T14932] CPU: 0 UID: 0 PID: 14932 Comm: syz.7.3311 Not tainted syzkaller #0 PREEMPT(lazy) [ 255.285441][T14932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 255.285455][T14932] Call Trace: [ 255.285463][T14932] [ 255.285474][T14932] __dump_stack+0x1d/0x30 [ 255.285575][T14932] dump_stack_lvl+0x95/0xd0 [ 255.285604][T14932] dump_stack+0x15/0x1b [ 255.285669][T14932] should_fail_ex+0x262/0x280 [ 255.285709][T14932] should_fail_alloc_page+0xf2/0x100 [ 255.285822][T14932] __alloc_frozen_pages_noprof+0x157/0x400 [ 255.285949][T14932] alloc_pages_mpol+0xaf/0x1d0 [ 255.286033][T14932] folio_alloc_mpol_noprof+0x39/0x80 [ 255.286078][T14932] shmem_get_folio_gfp+0x3ff/0xd90 [ 255.286133][T14932] shmem_fault+0xf6/0x250 [ 255.286291][T14932] ? __pfx_shmem_fault+0x10/0x10 [ 255.286336][T14932] handle_mm_fault+0x2672/0x3bb0 [ 255.286377][T14932] __get_user_pages+0x12e9/0x1eb0 [ 255.286421][T14932] faultin_page_range+0xfe/0x500 [ 255.286457][T14932] madvise_do_behavior+0x189/0x990 [ 255.286505][T14932] do_madvise+0x1bd/0x220 [ 255.286604][T14932] __x64_sys_madvise+0x63/0x80 [ 255.286632][T14932] x64_sys_call+0x251e/0x2550 [ 255.286670][T14932] do_syscall_64+0x112/0x360 [ 255.286741][T14932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.286828][T14932] RIP: 0033:0x7fd0d3a4e559 [ 255.286848][T14932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.286922][T14932] RSP: 002b:00007fd0d24a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 255.286966][T14932] RAX: ffffffffffffffda RBX: 00007fd0d3cd5fa0 RCX: 00007fd0d3a4e559 [ 255.286984][T14932] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 255.287003][T14932] RBP: 00007fd0d3ae5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 255.287023][T14932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.287036][T14932] R13: 00007fd0d3cd6038 R14: 00007fd0d3cd5fa0 R15: 00007fff004bfdd8 [ 255.287137][T14932] [ 255.443349][T14937] rxe_eth0 speed is unknown, defaulting to 1000 [ 255.604630][T14949] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.610888][T14949] bridge_slave_0: left allmulticast mode [ 255.610916][T14949] bridge_slave_0: left promiscuous mode [ 255.611077][T14949] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.659209][T14949] team0: Port device bridge_slave_0 added [ 256.157484][T14990] loop4: detected capacity change from 0 to 1024 [ 256.159549][T14990] EXT4-fs: Ignoring removed oldalloc option [ 256.159581][T14990] EXT4-fs: Ignoring removed oldalloc option [ 256.202323][T14990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.392437][T14537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.515908][T15013] team0: Port device bridge_slave_0 removed [ 256.517079][T15013] bridge_slave_1: left allmulticast mode [ 256.517157][T15013] bridge_slave_1: left promiscuous mode [ 256.517347][T15013] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.591438][T15013] bond0: (slave bond_slave_0): Releasing backup interface [ 256.607092][T15013] bond0: (slave bond_slave_1): Releasing backup interface [ 256.629149][T15013] team0: Port device team_slave_0 removed [ 256.695543][T15013] team0: Port device team_slave_1 removed [ 256.702137][T15013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.702191][T15013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.717524][T15013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.717584][T15013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.733763][T15013] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.746539][T15017] team0: Mode changed to "loadbalance" [ 257.073026][T15043] rxe_eth0 speed is unknown, defaulting to 1000 [ 257.385820][T15056] loop4: detected capacity change from 0 to 1024 [ 257.386173][T15056] EXT4-fs: Ignoring removed oldalloc option [ 257.386283][T15056] EXT4-fs: Ignoring removed oldalloc option [ 257.484197][T15056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.607609][T14537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.827234][T15066] bridge_slave_0: left allmulticast mode [ 257.827262][T15066] bridge_slave_0: left promiscuous mode [ 257.827427][T15066] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.865471][T15066] bridge_slave_1: left allmulticast mode [ 257.865499][T15066] bridge_slave_1: left promiscuous mode [ 257.865697][T15066] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.907270][T15066] bond0: (slave bond_slave_0): Releasing backup interface [ 257.950796][T15066] bond0: (slave bond_slave_1): Releasing backup interface [ 257.989549][T15066] team0: Port device team_slave_0 removed [ 258.018814][T15066] team0: Port device team_slave_1 removed [ 258.024398][T15066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.024420][T15066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.035180][T15066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.035232][T15066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.225939][T15066] bond1: (slave geneve2): Releasing active interface [ 258.258595][T15073] team0: Mode changed to "loadbalance" [ 258.564797][T15086] loop7: detected capacity change from 0 to 1024 [ 258.598614][T15086] EXT4-fs: Ignoring removed bh option [ 258.611874][T15086] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 258.612020][T15086] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.623794][T15086] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.3348: bg 0: block 112: padding at end of block bitmap is not set [ 258.674653][T15086] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: comm syz.7.3348: lblock 0 mapped to illegal pblock 0 (length 1) [ 258.721196][T12699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 258.767597][T15098] team0: Port device bridge_slave_0 added [ 258.885786][T15110] loop3: detected capacity change from 0 to 512 [ 258.887862][T15110] EXT4-fs (loop3): 1 truncate cleaned up [ 258.889531][T15110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.990694][T15112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.991155][T15114] team0: Unable to change to the same mode the team is in [ 259.086459][T13305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.335656][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3361'. [ 259.415066][T15126] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.416267][T15127] team0: Unable to change to the same mode the team is in [ 260.055443][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3375'. [ 260.347679][T15179] loop3: detected capacity change from 0 to 164 [ 260.359938][T15179] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 260.373840][T15179] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 260.378936][T15179] rock: directory entry would overflow storage [ 260.379016][T15179] rock: sig=0x4f50, size=4, remaining=3 [ 260.379037][T15179] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 260.499554][T15168] loop4: detected capacity change from 0 to 512 [ 260.723914][T15168] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.3380: bg 0: block 385: padding at end of block bitmap is not set [ 260.724033][T15168] loop4: lost filesystem error report for type 5 error -117 [ 260.726971][T15168] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 260.727032][T15168] loop4: lost filesystem error report for type 5 error -117 [ 260.731245][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 260.731299][ C1] EXT4-fs (loop4): initial error at time 1792357283: ext4_validate_block_bitmap:445 [ 260.731393][ C1] EXT4-fs (loop4): last error at time 1792357283: ext4_mb_clear_bb:6680 [ 260.752996][T15168] EXT4-fs (loop4): 2 truncates cleaned up [ 260.754382][T15168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.825638][T14537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.101114][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 261.101135][ T29] audit: type=1326 audit(1792357284.347:8725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.2.3406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 261.101177][ T29] audit: type=1326 audit(1792357284.347:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.2.3406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 261.102358][ T29] audit: type=1326 audit(1792357284.347:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.2.3406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 261.102394][ T29] audit: type=1326 audit(1792357284.347:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.2.3406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 261.103711][ T29] audit: type=1326 audit(1792357284.347:8729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.2.3406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 261.161585][ T29] audit: type=1326 audit(1792357284.397:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.2.3406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 261.161629][ T29] audit: type=1326 audit(1792357284.397:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.2.3406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f84fcc3e2c2 code=0x7ffc0000 [ 261.161668][ T29] audit: type=1326 audit(1792357284.397:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.2.3406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f84fcc3e357 code=0x7ffc0000 [ 261.161818][ T29] audit: type=1326 audit(1792357284.397:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.2.3406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f84fcbfb251 code=0x7ffc0000 [ 261.161852][ T29] audit: type=1326 audit(1792357284.397:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.2.3406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f84fcc3f349 code=0x7ffc0000 [ 261.174927][T15227] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 261.388156][T15233] syzkaller1: entered promiscuous mode [ 261.388175][T15233] syzkaller1: entered allmulticast mode [ 261.526770][T15243] loop7: detected capacity change from 0 to 2048 [ 261.556510][T15243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.582081][T12699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.856610][T15288] loop4: detected capacity change from 0 to 1024 [ 261.857014][T15288] EXT4-fs: Ignoring removed nobh option [ 261.857145][T15288] EXT4-fs: Ignoring removed bh option [ 261.857164][T15288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.882229][T15288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.927972][T14537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.940845][T15296] bonding: no command found in bonding_masters - use +ifname or -ifname [ 262.048455][T15314] FAULT_INJECTION: forcing a failure. [ 262.048455][T15314] name failslab, interval 1, probability 0, space 0, times 0 [ 262.048495][T15314] CPU: 1 UID: 0 PID: 15314 Comm: syz.7.3434 Not tainted syzkaller #0 PREEMPT(lazy) [ 262.048538][T15314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 262.048558][T15314] Call Trace: [ 262.048569][T15314] [ 262.048580][T15314] __dump_stack+0x1d/0x30 [ 262.048621][T15314] dump_stack_lvl+0x95/0xd0 [ 262.048692][T15314] dump_stack+0x15/0x1b [ 262.048717][T15314] should_fail_ex+0x262/0x280 [ 262.048756][T15314] ? __alloc_skb+0x2e0/0x6f0 [ 262.048784][T15314] should_failslab+0x8c/0xb0 [ 262.048893][T15314] kmem_cache_alloc_node_noprof+0x82/0x400 [ 262.048942][T15314] ? __alloc_skb+0x2e0/0x6f0 [ 262.048975][T15314] __alloc_skb+0x2e0/0x6f0 [ 262.049032][T15314] tcp_stream_alloc_skb+0x30/0x320 [ 262.049071][T15314] tcp_connect+0xc6a/0x2400 [ 262.049103][T15314] tcp_v6_connect+0xc55/0xd40 [ 262.049133][T15314] ? should_fail_ex+0xdb/0x280 [ 262.049173][T15314] __inet_stream_connect+0x166/0x7d0 [ 262.049269][T15314] ? __kmalloc_cache_noprof+0x19b/0x400 [ 262.049317][T15314] ? tcp_sendmsg_fastopen+0x15b/0x510 [ 262.049357][T15314] tcp_sendmsg_fastopen+0x420/0x510 [ 262.049405][T15314] tcp_sendmsg_locked+0x2775/0x2ad0 [ 262.049434][T15314] ? tcp_sendmsg_locked+0x1a1/0x2ad0 [ 262.049472][T15314] ? selinux_netlbl_socket_connect+0x114/0x130 [ 262.049558][T15314] ? selinux_socket_sendmsg+0x3d9/0x410 [ 262.049643][T15314] ? __pfx_tcp_sendmsg+0x10/0x10 [ 262.049671][T15314] ? __pfx_inet6_sendmsg+0x10/0x10 [ 262.049724][T15314] tcp_sendmsg+0x2f/0x50 [ 262.049755][T15314] inet6_sendmsg+0x76/0xd0 [ 262.049796][T15314] __sys_sendto+0x308/0x470 [ 262.049833][T15314] __x64_sys_sendto+0x76/0x90 [ 262.049864][T15314] x64_sys_call+0x200c/0x2550 [ 262.049896][T15314] do_syscall_64+0x112/0x360 [ 262.050004][T15314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.050027][T15314] RIP: 0033:0x7fd0d3a4e559 [ 262.050044][T15314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.050067][T15314] RSP: 002b:00007fd0d24a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 262.050096][T15314] RAX: ffffffffffffffda RBX: 00007fd0d3cd5fa0 RCX: 00007fd0d3a4e559 [ 262.050139][T15314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 262.050154][T15314] RBP: 00007fd0d3ae5ab8 R08: 0000200000000140 R09: 000000000000001c [ 262.050168][T15314] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000000 [ 262.050181][T15314] R13: 00007fd0d3cd6038 R14: 00007fd0d3cd5fa0 R15: 00007fff004bfdd8 [ 262.050202][T15314] [ 262.130499][T15316] netlink: 'syz.4.3433': attribute type 9 has an invalid length. [ 262.130552][T15316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3433'. [ 262.386947][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3440'. [ 262.541003][ T32] Bluetooth: hci0: Frame reassembly failed (-84) [ 262.819444][T15403] FAULT_INJECTION: forcing a failure. [ 262.819444][T15403] name failslab, interval 1, probability 0, space 0, times 0 [ 262.819592][T15403] CPU: 1 UID: 0 PID: 15403 Comm: syz.7.3455 Not tainted syzkaller #0 PREEMPT(lazy) [ 262.819687][T15403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 262.819773][T15403] Call Trace: [ 262.819783][T15403] [ 262.819794][T15403] __dump_stack+0x1d/0x30 [ 262.819829][T15403] dump_stack_lvl+0x95/0xd0 [ 262.819941][T15403] dump_stack+0x15/0x1b [ 262.819970][T15403] should_fail_ex+0x262/0x280 [ 262.820012][T15403] should_failslab+0x8c/0xb0 [ 262.820089][T15403] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 262.820136][T15403] ? __d_alloc+0x34/0x320 [ 262.820218][T15403] ? __d_alloc+0x34/0x320 [ 262.820256][T15403] ? _raw_spin_unlock+0x9/0x30 [ 262.820350][T15403] __d_alloc+0x34/0x320 [ 262.820470][T15403] d_alloc_name+0x6b/0x160 [ 262.820512][T15403] proc_setup_self+0x2a/0x110 [ 262.820545][T15403] proc_fill_super+0x314/0x3c0 [ 262.820657][T15403] ? __pfx_proc_fill_super+0x10/0x10 [ 262.820700][T15403] get_tree_nodev+0x83/0x100 [ 262.820744][T15403] proc_get_tree+0x1c/0x30 [ 262.820852][T15403] vfs_get_tree+0x57/0x1d0 [ 262.820897][T15403] do_new_mount+0x288/0x730 [ 262.820926][T15403] ? security_capable+0x7b/0x90 [ 262.821018][T15403] path_mount+0x4ad/0xb90 [ 262.821081][T15403] __se_sys_mount+0x28c/0x2e0 [ 262.821116][T15403] __x64_sys_mount+0x67/0x80 [ 262.821148][T15403] x64_sys_call+0xc3b/0x2550 [ 262.821199][T15403] do_syscall_64+0x112/0x360 [ 262.821238][T15403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.821270][T15403] RIP: 0033:0x7fd0d3a4e559 [ 262.821292][T15403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.821363][T15403] RSP: 002b:00007fd0d24a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 262.821391][T15403] RAX: ffffffffffffffda RBX: 00007fd0d3cd5fa0 RCX: 00007fd0d3a4e559 [ 262.821411][T15403] RDX: 00002000000008c0 RSI: 0000200000000880 RDI: 0000000000000000 [ 262.821431][T15403] RBP: 00007fd0d3ae5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 262.821456][T15403] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 262.821549][T15403] R13: 00007fd0d3cd6038 R14: 00007fd0d3cd5fa0 R15: 00007fff004bfdd8 [ 262.821579][T15403] [ 262.826128][T15403] proc_fill_super: can't allocate /proc/self [ 263.079335][T15407] xt_hashlimit: size too large, truncated to 1048576 [ 263.624752][T15374] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 263.697128][T15427] bridge0: entered promiscuous mode [ 263.697208][T15427] bridge0: entered allmulticast mode [ 263.722000][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3466'. [ 263.831446][T15450] FAULT_INJECTION: forcing a failure. [ 263.831446][T15450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.831481][T15450] CPU: 0 UID: 0 PID: 15450 Comm: syz.4.3475 Not tainted syzkaller #0 PREEMPT(lazy) [ 263.831598][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 263.831643][T15450] Call Trace: [ 263.831650][T15450] [ 263.831658][T15450] __dump_stack+0x1d/0x30 [ 263.831684][T15450] dump_stack_lvl+0x95/0xd0 [ 263.831714][T15450] dump_stack+0x15/0x1b [ 263.831789][T15450] should_fail_ex+0x262/0x280 [ 263.831825][T15450] should_fail+0xb/0x20 [ 263.831928][T15450] should_fail_usercopy+0x1a/0x20 [ 263.831959][T15450] _copy_from_user+0x1c/0xb0 [ 263.832003][T15450] oom_score_adj_write+0x75/0x170 [ 263.832037][T15450] ? __pfx_oom_score_adj_write+0x10/0x10 [ 263.832062][T15450] vfs_write+0x254/0x9a0 [ 263.832096][T15450] ? __fget_files+0x184/0x1c0 [ 263.832139][T15450] ? mutex_lock+0x57/0x90 [ 263.832164][T15450] ksys_write+0xdc/0x1a0 [ 263.832209][T15450] __x64_sys_write+0x40/0x50 [ 263.832255][T15450] x64_sys_call+0x154e/0x2550 [ 263.832422][T15450] do_syscall_64+0x112/0x360 [ 263.832460][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.832554][T15450] RIP: 0033:0x7f3a4430e559 [ 263.832578][T15450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.832605][T15450] RSP: 002b:00007f3a42d67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.832633][T15450] RAX: ffffffffffffffda RBX: 00007f3a44595fa0 RCX: 00007f3a4430e559 [ 263.832655][T15450] RDX: 0000000000000012 RSI: 0000200000000500 RDI: 0000000000000003 [ 263.832672][T15450] RBP: 00007f3a443a5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 263.832686][T15450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.832706][T15450] R13: 00007f3a44596038 R14: 00007f3a44595fa0 R15: 00007ffe75162258 [ 263.832727][T15450] [ 263.996184][T15453] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 264.145440][T15471] ip_tables: iptables: counters copy to user failed while replacing table [ 264.153750][T15472] netlink: 'syz.4.3484': attribute type 1 has an invalid length. [ 264.174190][T15472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.294884][T15493] netlink: 'syz.4.3497': attribute type 1 has an invalid length. [ 264.306546][T15493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.326834][T15493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.336843][T15493] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 264.337584][T15493] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 264.412381][T15499] loop7: detected capacity change from 0 to 512 [ 264.535439][T15509] IPv6: Can't replace route, no match found [ 264.609053][ T3761] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 264.670626][T15519] loop4: detected capacity change from 0 to 512 [ 264.680409][T15519] EXT4-fs: Ignoring removed mblk_io_submit option [ 264.704619][T15519] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.3506: corrupted in-inode xattr: e_value size too large [ 264.704665][T15519] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.704930][T15519] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.3506: couldn't read orphan inode 15 (err -117) [ 264.704970][T15519] loop4: lost filesystem error report for type 5 error -117 [ 264.708137][T15519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.899210][T14537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.914911][T15499] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.3500: bg 0: block 385: padding at end of block bitmap is not set [ 264.915036][T15499] loop7: lost filesystem error report for type 5 error -117 [ 264.915565][T15499] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 264.915656][T15499] loop7: lost filesystem error report for type 5 error -117 [ 264.924165][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 264.924238][ C0] EXT4-fs (loop7): initial error at time 1792357288: ext4_validate_block_bitmap:445 [ 264.924327][ C0] EXT4-fs (loop7): last error at time 1792357288: ext4_mb_clear_bb:6680 [ 264.933557][T15499] EXT4-fs (loop7): 2 truncates cleaned up [ 264.938564][T15499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.035539][T12699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.281141][T15547] FAULT_INJECTION: forcing a failure. [ 265.281141][T15547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 265.281179][T15547] CPU: 0 UID: 0 PID: 15547 Comm: syz.3.3521 Not tainted syzkaller #0 PREEMPT(lazy) [ 265.281207][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 265.281226][T15547] Call Trace: [ 265.281246][T15547] [ 265.281258][T15547] __dump_stack+0x1d/0x30 [ 265.281285][T15547] dump_stack_lvl+0x95/0xd0 [ 265.281308][T15547] dump_stack+0x15/0x1b [ 265.281410][T15547] should_fail_ex+0x262/0x280 [ 265.281442][T15547] should_fail_alloc_page+0xf2/0x100 [ 265.281492][T15547] __alloc_frozen_pages_noprof+0x157/0x400 [ 265.281528][T15547] alloc_pages_mpol+0xaf/0x1d0 [ 265.281654][T15547] folio_alloc_mpol_noprof+0x39/0x80 [ 265.281769][T15547] shmem_get_folio_gfp+0x3ff/0xd90 [ 265.281824][T15547] shmem_fallocate+0x631/0x8d0 [ 265.281865][T15547] vfs_fallocate+0x3ac/0x400 [ 265.281893][T15547] __x64_sys_fallocate+0x7a/0xd0 [ 265.281915][T15547] x64_sys_call+0x1e1d/0x2550 [ 265.282004][T15547] do_syscall_64+0x112/0x360 [ 265.282043][T15547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.282145][T15547] RIP: 0033:0x7fa46f30e559 [ 265.282176][T15547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.282225][T15547] RSP: 002b:00007fa46dd67028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 265.282248][T15547] RAX: ffffffffffffffda RBX: 00007fa46f595fa0 RCX: 00007fa46f30e559 [ 265.282263][T15547] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 265.282276][T15547] RBP: 00007fa46f3a5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 265.282293][T15547] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 265.282308][T15547] R13: 00007fa46f596038 R14: 00007fa46f595fa0 R15: 00007ffc6a869918 [ 265.282352][T15547] [ 265.776469][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3517'. [ 265.794687][T15572] Set syz1 is full, maxelem 1029 reached [ 265.812926][T15569] netlink: 'syz.7.3517': attribute type 10 has an invalid length. [ 265.818964][ T7999] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 265.819761][ T7999] ref_tracker: netdev@ffff88810b3d05e0 has 1/2 users at [ 265.819761][ T7999] netdev_get_by_index+0x138/0x1a0 [ 265.819761][ T7999] fib6_nh_init+0x150/0x16c0 [ 265.819761][ T7999] ip6_route_info_create_nh+0xd3/0x6b0 [ 265.819761][ T7999] addrconf_f6i_alloc+0x1f5/0x2f0 [ 265.819761][ T7999] ipv6_add_addr+0x3ca/0x860 [ 265.819761][ T7999] inet6_addr_add+0x296/0x8e0 [ 265.819761][ T7999] inet6_rtm_newaddr+0x826/0x9d0 [ 265.819761][ T7999] rtnetlink_rcv_msg+0x64b/0x720 [ 265.819761][ T7999] netlink_rcv_skb+0x11e/0x220 [ 265.819761][ T7999] rtnetlink_rcv+0x1c/0x30 [ 265.819761][ T7999] netlink_unicast+0x665/0x740 [ 265.819761][ T7999] netlink_sendmsg+0x5be/0x6f0 [ 265.819761][ T7999] __sys_sendto+0x411/0x470 [ 265.819761][ T7999] __x64_sys_sendto+0x76/0x90 [ 265.819761][ T7999] x64_sys_call+0x200c/0x2550 [ 265.819761][ T7999] do_syscall_64+0x112/0x360 [ 265.819761][ T7999] [ 265.820673][ T7999] ref_tracker: netdev@ffff88810b3d05e0 has 1/2 users at [ 265.820673][ T7999] ipv6_add_dev+0x334/0xab0 [ 265.820673][ T7999] addrconf_notify+0x3ad/0x8e0 [ 265.820673][ T7999] raw_notifier_call_chain+0x72/0x1a0 [ 265.820673][ T7999] call_netdevice_notifiers+0xb5/0x110 [ 265.820673][ T7999] register_netdevice+0xfbf/0x11a0 [ 265.820673][ T7999] tun_set_iff+0x5fe/0x870 [ 265.820673][ T7999] __tun_chr_ioctl+0x682/0x1550 [ 265.820673][ T7999] tun_chr_ioctl+0x27/0x40 [ 265.820673][ T7999] __se_sys_ioctl+0xce/0x140 [ 265.820673][ T7999] __x64_sys_ioctl+0x43/0x50 [ 265.820673][ T7999] x64_sys_call+0x239d/0x2550 [ 265.820673][ T7999] do_syscall_64+0x112/0x360 [ 265.820673][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.820673][ T7999] [ 265.830676][T15569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.836229][T15569] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 266.041376][T15575] ip_tables: iptables: counters copy to user failed while replacing table [ 266.116925][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 266.116944][ T29] audit: type=1326 audit(1792357289.387:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 266.128204][ T29] audit: type=1326 audit(1792357289.397:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 266.128595][ T29] audit: type=1326 audit(1792357289.397:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 266.136564][ T29] audit: type=1326 audit(1792357289.397:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 266.142944][ T29] audit: type=1326 audit(1792357289.397:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 266.143340][ T29] audit: type=1326 audit(1792357289.397:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 266.145141][ T29] audit: type=1326 audit(1792357289.397:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 266.145975][ T29] audit: type=1326 audit(1792357289.397:9147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 266.146106][ T29] audit: type=1326 audit(1792357289.397:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 266.146266][ T29] audit: type=1326 audit(1792357289.397:9149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 266.380466][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3528'. [ 266.414137][T15584] loop4: detected capacity change from 0 to 2048 [ 266.444859][T15589] 9p: Bad value for 'rfdno' [ 266.459659][T15584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.578949][T14537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.600836][T15601] Set syz1 is full, maxelem 1029 reached [ 266.722283][T15614] bridge0: port 1(syz_tun) entered blocking state [ 266.722335][T15614] bridge0: port 1(syz_tun) entered disabled state [ 266.722460][T15614] syz_tun: entered allmulticast mode [ 266.723020][T15614] syz_tun: entered promiscuous mode [ 266.723314][T15614] bridge0: port 1(syz_tun) entered blocking state [ 266.723349][T15614] bridge0: port 1(syz_tun) entered forwarding state [ 266.873186][T15626] loop7: detected capacity change from 0 to 2048 [ 266.896429][T15626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.048913][T12699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.112761][T15645] loop7: detected capacity change from 0 to 512 [ 267.787814][T15682] bond0: entered promiscuous mode [ 267.787844][T15682] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 267.900867][T15694] syzkaller1: entered promiscuous mode [ 267.900894][T15694] syzkaller1: entered allmulticast mode [ 267.942006][T15697] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3574'. [ 267.944253][T15697] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3574'. [ 268.156037][ T8138] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 268.156475][ T8138] ref_tracker: netdev@ffff88810cfd45e0 has 1/2 users at [ 268.156475][ T8138] netdev_get_by_index+0x138/0x1a0 [ 268.156475][ T8138] fib6_nh_init+0x150/0x16c0 [ 268.156475][ T8138] ip6_route_info_create_nh+0xd3/0x6b0 [ 268.156475][ T8138] addrconf_f6i_alloc+0x1f5/0x2f0 [ 268.156475][ T8138] ipv6_add_addr+0x3ca/0x860 [ 268.156475][ T8138] inet6_addr_add+0x296/0x8e0 [ 268.156475][ T8138] inet6_rtm_newaddr+0x826/0x9d0 [ 268.156475][ T8138] rtnetlink_rcv_msg+0x64b/0x720 [ 268.156475][ T8138] netlink_rcv_skb+0x11e/0x220 [ 268.156475][ T8138] rtnetlink_rcv+0x1c/0x30 [ 268.156475][ T8138] netlink_unicast+0x665/0x740 [ 268.156475][ T8138] netlink_sendmsg+0x5be/0x6f0 [ 268.156475][ T8138] __sys_sendto+0x411/0x470 [ 268.156475][ T8138] __x64_sys_sendto+0x76/0x90 [ 268.156475][ T8138] x64_sys_call+0x200c/0x2550 [ 268.156475][ T8138] do_syscall_64+0x112/0x360 [ 268.156475][ T8138] [ 268.156862][ T8138] ref_tracker: netdev@ffff88810cfd45e0 has 1/2 users at [ 268.156862][ T8138] ipv6_add_dev+0x334/0xab0 [ 268.156862][ T8138] addrconf_notify+0x3ad/0x8e0 [ 268.156862][ T8138] raw_notifier_call_chain+0x72/0x1a0 [ 268.156862][ T8138] call_netdevice_notifiers+0xb5/0x110 [ 268.156862][ T8138] register_netdevice+0xfbf/0x11a0 [ 268.156862][ T8138] tun_set_iff+0x5fe/0x870 [ 268.156862][ T8138] __tun_chr_ioctl+0x682/0x1550 [ 268.156862][ T8138] tun_chr_ioctl+0x27/0x40 [ 268.156862][ T8138] __se_sys_ioctl+0xce/0x140 [ 268.156862][ T8138] __x64_sys_ioctl+0x43/0x50 [ 268.156862][ T8138] x64_sys_call+0x239d/0x2550 [ 268.156862][ T8138] do_syscall_64+0x112/0x360 [ 268.156862][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.156862][ T8138] [ 268.377922][T15737] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3578'. [ 268.378559][T15737] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3578'. [ 268.470309][T15753] bond0: entered promiscuous mode [ 270.150052][T15840] loop4: detected capacity change from 0 to 512 [ 270.817618][T15846] FAULT_INJECTION: forcing a failure. [ 270.817618][T15846] name failslab, interval 1, probability 0, space 0, times 0 [ 270.817652][T15846] CPU: 1 UID: 0 PID: 15846 Comm: syz.4.3620 Not tainted syzkaller #0 PREEMPT(lazy) [ 270.817686][T15846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 270.817709][T15846] Call Trace: [ 270.817726][T15846] [ 270.817737][T15846] __dump_stack+0x1d/0x30 [ 270.817770][T15846] dump_stack_lvl+0x95/0xd0 [ 270.817802][T15846] dump_stack+0x15/0x1b [ 270.817831][T15846] should_fail_ex+0x262/0x280 [ 270.817920][T15846] should_failslab+0x8c/0xb0 [ 270.818014][T15846] __kvmalloc_node_noprof+0x168/0x5c0 [ 270.818099][T15846] ? alloc_fdtable+0x115/0x1d0 [ 270.818131][T15846] ? alloc_fdtable+0x115/0x1d0 [ 270.818164][T15846] alloc_fdtable+0x115/0x1d0 [ 270.818265][T15846] dup_fd+0x4ae/0x530 [ 270.818343][T15846] ? _raw_spin_unlock+0x9/0x30 [ 270.818375][T15846] ksys_unshare+0x36a/0x6f0 [ 270.818413][T15846] __x64_sys_unshare+0x1f/0x30 [ 270.818468][T15846] x64_sys_call+0x1e33/0x2550 [ 270.818522][T15846] do_syscall_64+0x112/0x360 [ 270.818557][T15846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.818638][T15846] RIP: 0033:0x7f3a4430e559 [ 270.818776][T15846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.818818][T15846] RSP: 002b:00007f3a42d67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 270.818845][T15846] RAX: ffffffffffffffda RBX: 00007f3a44595fa0 RCX: 00007f3a4430e559 [ 270.818865][T15846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 270.818883][T15846] RBP: 00007f3a443a5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 270.818903][T15846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.818998][T15846] R13: 00007f3a44596038 R14: 00007f3a44595fa0 R15: 00007ffe75162258 [ 270.819026][T15846] [ 271.119360][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 271.119380][ T29] audit: type=1326 audit(1792357294.415:9664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15855 comm="syz.4.3622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4430e559 code=0x7ffc0000 [ 271.119476][ T29] audit: type=1326 audit(1792357294.415:9665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15855 comm="syz.4.3622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3a4430e2c2 code=0x7ffc0000 [ 271.119576][ T29] audit: type=1326 audit(1792357294.415:9666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15855 comm="syz.4.3622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3a4430e357 code=0x7ffc0000 [ 271.119623][ T29] audit: type=1326 audit(1792357294.415:9667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15855 comm="syz.4.3622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3a442cb251 code=0x7ffc0000 [ 271.119661][ T29] audit: type=1326 audit(1792357294.415:9668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15855 comm="syz.4.3622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3a4430f349 code=0x7ffc0000 [ 271.119758][ T29] audit: type=1326 audit(1792357294.425:9669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15855 comm="syz.4.3622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3a442cb2bb code=0x7ffc0000 [ 271.119797][ T29] audit: type=1326 audit(1792357294.425:9670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15855 comm="syz.4.3622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4430e559 code=0x7ffc0000 [ 271.119836][ T29] audit: type=1326 audit(1792357294.425:9671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15855 comm="syz.4.3622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4430e559 code=0x7ffc0000 [ 271.120647][ T29] audit: type=1326 audit(1792357294.425:9672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15855 comm="syz.4.3622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3a442ca9ac code=0x7ffc0000 [ 271.120687][ T29] audit: type=1326 audit(1792357294.425:9673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15855 comm="syz.4.3622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3a442caa0e code=0x7ffc0000 [ 271.730288][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811fff8800: rx timeout, send abort [ 271.730336][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c96ca00: rx timeout, send abort [ 271.730383][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811fff8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 271.730466][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811c96ca00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 272.191335][T15883] FAULT_INJECTION: forcing a failure. [ 272.191335][T15883] name failslab, interval 1, probability 0, space 0, times 0 [ 272.191446][T15883] CPU: 0 UID: 0 PID: 15883 Comm: syz.4.3627 Not tainted syzkaller #0 PREEMPT(lazy) [ 272.191483][T15883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 272.191525][T15883] Call Trace: [ 272.191535][T15883] [ 272.191544][T15883] __dump_stack+0x1d/0x30 [ 272.191572][T15883] dump_stack_lvl+0x95/0xd0 [ 272.191630][T15883] dump_stack+0x15/0x1b [ 272.191660][T15883] should_fail_ex+0x262/0x280 [ 272.191693][T15883] ? __se_sys_fsopen+0x10d/0x1e0 [ 272.191749][T15883] should_failslab+0x8c/0xb0 [ 272.191786][T15883] __kmalloc_cache_noprof+0x7a/0x400 [ 272.191886][T15883] ? __se_sys_fsopen+0x10d/0x1e0 [ 272.192006][T15883] __se_sys_fsopen+0x10d/0x1e0 [ 272.192040][T15883] __x64_sys_fsopen+0x31/0x40 [ 272.192079][T15883] x64_sys_call+0x1f0f/0x2550 [ 272.192120][T15883] do_syscall_64+0x112/0x360 [ 272.192156][T15883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.192243][T15883] RIP: 0033:0x7f3a4430e559 [ 272.192267][T15883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.192289][T15883] RSP: 002b:00007f3a42d67028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 272.192388][T15883] RAX: ffffffffffffffda RBX: 00007f3a44595fa0 RCX: 00007f3a4430e559 [ 272.192409][T15883] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000580 [ 272.192473][T15883] RBP: 00007f3a443a5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 272.192556][T15883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.192572][T15883] R13: 00007f3a44596038 R14: 00007f3a44595fa0 R15: 00007ffe75162258 [ 272.192601][T15883] [ 272.401459][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3638'. [ 272.401529][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3638'. [ 272.685198][T15927] IPv4: Oversized IP packet from 127.202.26.0 [ 272.752983][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 272.753006][T15931] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3654'. [ 272.753029][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 272.753072][T15931] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3654'. [ 273.006882][T15946] loop4: detected capacity change from 0 to 512 [ 273.072340][T15946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.072445][T15946] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.130941][T14537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.557248][ T4141] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 273.557650][ T4141] ref_tracker: netdev@ffff88811bba85e0 has 1/2 users at [ 273.557650][ T4141] netdev_get_by_index+0x138/0x1a0 [ 273.557650][ T4141] fib6_nh_init+0x150/0x16c0 [ 273.557650][ T4141] ip6_route_info_create_nh+0xd3/0x6b0 [ 273.557650][ T4141] addrconf_f6i_alloc+0x1f5/0x2f0 [ 273.557650][ T4141] addrconf_permanent_addr+0x295/0x880 [ 273.557650][ T4141] addrconf_notify+0x5e1/0x8e0 [ 273.557650][ T4141] raw_notifier_call_chain+0x72/0x1a0 [ 273.557650][ T4141] __dev_notify_flags+0x2b4/0x490 [ 273.557650][ T4141] netif_change_flags+0xa5/0xc0 [ 273.557650][ T4141] do_setlink+0x8fc/0x2860 [ 273.557650][ T4141] rtnl_newlink+0x115a/0x1510 [ 273.557650][ T4141] rtnetlink_rcv_msg+0x64b/0x720 [ 273.557650][ T4141] netlink_rcv_skb+0x11e/0x220 [ 273.557650][ T4141] rtnetlink_rcv+0x1c/0x30 [ 273.557650][ T4141] netlink_unicast+0x665/0x740 [ 273.557650][ T4141] netlink_sendmsg+0x5be/0x6f0 [ 273.557650][ T4141] [ 273.557966][ T4141] ref_tracker: netdev@ffff88811bba85e0 has 1/2 users at [ 273.557966][ T4141] ipv6_add_dev+0x334/0xab0 [ 273.557966][ T4141] addrconf_notify+0x3ad/0x8e0 [ 273.557966][ T4141] raw_notifier_call_chain+0x72/0x1a0 [ 273.557966][ T4141] call_netdevice_notifiers+0xb5/0x110 [ 273.557966][ T4141] register_netdevice+0xfbf/0x11a0 [ 273.557966][ T4141] tun_set_iff+0x5fe/0x870 [ 273.557966][ T4141] __tun_chr_ioctl+0x682/0x1550 [ 273.557966][ T4141] tun_chr_ioctl+0x27/0x40 [ 273.557966][ T4141] __se_sys_ioctl+0xce/0x140 [ 273.557966][ T4141] __x64_sys_ioctl+0x43/0x50 [ 273.557966][ T4141] x64_sys_call+0x239d/0x2550 [ 273.557966][ T4141] do_syscall_64+0x112/0x360 [ 273.557966][ T4141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.557966][ T4141] [ 275.782442][T16056] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3709'. [ 275.826987][T16062] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3712'. [ 275.934018][T16071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.751494][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 276.751523][ T29] audit: type=1326 audit(1792357300.094:10192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.7.3719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d3a4e559 code=0x7ffc0000 [ 276.751604][ T29] audit: type=1326 audit(1792357300.094:10193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.7.3719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d3a4e559 code=0x7ffc0000 [ 276.753480][ T29] audit: type=1326 audit(1792357300.094:10194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.7.3719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d3a4e559 code=0x7ffc0000 [ 276.753509][ T29] audit: type=1326 audit(1792357300.094:10195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.7.3719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d3a4e559 code=0x7ffc0000 [ 276.753588][ T29] audit: type=1326 audit(1792357300.094:10196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.7.3719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0d3a4e559 code=0x7ffc0000 [ 276.753661][ T29] audit: type=1326 audit(1792357300.094:10197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.7.3719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d3a4e559 code=0x7ffc0000 [ 276.753745][ T29] audit: type=1326 audit(1792357300.094:10198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.7.3719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d3a4e559 code=0x7ffc0000 [ 276.753774][ T29] audit: type=1326 audit(1792357300.094:10199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.7.3719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d3a4e559 code=0x7ffc0000 [ 276.753864][ T29] audit: type=1326 audit(1792357300.094:10200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.7.3719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d3a4e559 code=0x7ffc0000 [ 276.753890][ T29] audit: type=1326 audit(1792357300.094:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.7.3719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fd0d3a4e559 code=0x7ffc0000 [ 277.148616][T16100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.155068][T16100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.155122][T16100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.155194][T16100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.155450][T16100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.155577][T16100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.155660][T16100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.155706][T16100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.155755][T16100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.187079][T16096] 9pnet: p9_errstr2errno: server reported unknown error [ 277.595105][T16123] coredump: 527(syz.7.3739): Core dump to core aborted: cannot preserve file permissions [ 277.689518][T16135] loop4: detected capacity change from 0 to 128 [ 277.727115][T16135] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 277.730358][T16135] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.835960][T14537] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.892943][T16150] dummy0: entered promiscuous mode [ 277.894322][T16150] gretap0: entered promiscuous mode [ 277.907616][T16150] debugfs: 'hsr0' already exists in 'hsr' [ 277.907633][T16150] Cannot create hsr debugfs directory [ 277.907702][T16150] hsr0: entered allmulticast mode [ 277.907716][T16150] dummy0: entered allmulticast mode [ 277.907750][T16150] gretap0: entered allmulticast mode [ 278.728421][T16190] dummy0: entered promiscuous mode [ 278.729398][T16190] gretap0: entered promiscuous mode [ 278.730380][T16190] debugfs: 'hsr0' already exists in 'hsr' [ 278.730395][T16190] Cannot create hsr debugfs directory [ 278.730459][T16190] hsr0: entered allmulticast mode [ 278.730475][T16190] dummy0: entered allmulticast mode [ 278.730545][T16190] gretap0: entered allmulticast mode [ 280.339983][T16245] net_ratelimit: 56 callbacks suppressed [ 280.340003][T16245] IPv4: Oversized IP packet from 127.202.26.0 [ 280.586178][ T281] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.657204][ T281] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.725936][ T281] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.841532][ T281] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.075510][ T281] bond0 (unregistering): Released all slaves [ 281.077550][ T281] bond1 (unregistering): Released all slaves [ 281.084598][ T281] bond2 (unregistering): Released all slaves [ 281.204975][T16270] rxe_eth0 speed is unknown, defaulting to 1000 [ 281.290838][ T281] hsr_slave_0: left promiscuous mode [ 281.297893][ T281] hsr_slave_1: left promiscuous mode [ 281.315434][ T281] veth1_macvtap: left promiscuous mode [ 281.315469][ T281] veth0_macvtap: left promiscuous mode [ 281.315532][ T281] veth1_vlan: left promiscuous mode [ 281.315574][ T281] veth0_vlan: left promiscuous mode [ 281.379531][T16299] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 281.446633][T16299] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 281.446779][T16299] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 281.447025][T16299] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 281.447154][T16299] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 281.447317][T16299] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 281.447482][T16299] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 281.447673][T16299] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 281.447939][T16299] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 282.206504][T16326] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3813'. [ 282.206565][T16326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3813'. [ 282.206584][T16326] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3813'. [ 282.206599][T16326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3813'. [ 282.206614][T16326] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3813'. [ 282.386407][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 282.402442][T16329] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3815'. [ 282.402472][T16329] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3815'. [ 282.527115][T16344] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 282.527169][T16344] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.586625][T16344] bond0: (slave netdevsim2): Releasing backup interface [ 282.588062][T16344] netdevsim netdevsim0 netdevsim2 (unregistering): left promiscuous mode [ 282.590192][T16344] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 282.590233][T16344] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.653810][T16354] ./dev/sda1: Can't lookup blockdev [ 282.671075][T16344] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 282.671125][T16344] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.805753][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 282.805805][ T29] audit: type=1400 audit(1792357306.173:10241): avc: denied { write } for pid=16349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.869491][T16270] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.869532][T16270] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.869691][T16270] bridge_slave_0: entered allmulticast mode [ 282.870380][T16270] bridge_slave_0: entered promiscuous mode [ 282.897504][T16270] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.897592][T16270] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.897781][T16270] bridge_slave_1: entered allmulticast mode [ 282.898375][T16270] bridge_slave_1: entered promiscuous mode [ 282.930421][ T29] audit: type=1400 audit(1792357306.293:10242): avc: denied { write } for pid=16373 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.961195][T16270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.963100][T16270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.994344][T16270] team0: Port device team_slave_0 added [ 282.995468][T16270] team0: Port device team_slave_1 added [ 283.018477][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 283.019224][T16270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.019247][T16270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.019279][T16270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.020090][T16270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.020103][T16270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.020135][T16270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.157606][T16270] hsr_slave_0: entered promiscuous mode [ 283.158022][T16270] hsr_slave_1: entered promiscuous mode [ 283.158286][T16270] debugfs: 'hsr0' already exists in 'hsr' [ 283.158304][T16270] Cannot create hsr debugfs directory [ 283.327321][ T29] audit: type=1400 audit(1792357306.695:10243): avc: denied { write } for pid=16381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.376196][ T29] audit: type=1400 audit(1792357306.735:10244): avc: denied { write } for pid=16395 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.596930][T16391] bridge0: entered promiscuous mode [ 283.596954][T16391] bridge0: entered allmulticast mode [ 283.623931][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 283.668138][T16344] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 283.668326][T16344] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.791322][ T51] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 283.791362][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.797564][ T51] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 283.797730][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.797933][ T51] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 283.798097][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.814011][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 283.814103][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.905939][ T29] audit: type=1400 audit(1792357307.267:10245): avc: denied { write } for pid=16408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.961759][ T29] audit: type=1400 audit(1792357307.328:10246): avc: denied { write } for pid=16424 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.041938][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3838'. [ 284.041979][T16437] netlink: 'syz.0.3838': attribute type 10 has an invalid length. [ 284.042038][T16437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3838'. [ 284.053849][T16437] geneve2: entered promiscuous mode [ 284.053911][T16437] geneve2: entered allmulticast mode [ 284.123299][T16270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.129396][T16270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.133376][T16270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.146886][T16270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 284.148812][ T29] audit: type=1400 audit(1792357307.518:10247): avc: denied { write } for pid=16429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.153401][T16270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.167902][T16270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 284.171081][T16270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.192554][T16270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 284.235901][ T29] audit: type=1400 audit(1792357307.609:10248): avc: denied { write } for pid=16456 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.268610][T16270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.284336][T16270] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.296714][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.296749][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.301567][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.301603][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.411166][ T29] audit: type=1400 audit(1792357307.780:10249): avc: denied { write } for pid=16459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.468346][ T29] audit: type=1400 audit(1792357307.840:10250): avc: denied { write } for pid=16476 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.539878][T16270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.683389][T16270] veth0_vlan: entered promiscuous mode [ 284.692314][T16270] veth1_vlan: entered promiscuous mode [ 284.715750][T16270] veth0_macvtap: entered promiscuous mode [ 284.718264][T16270] veth1_macvtap: entered promiscuous mode [ 284.739905][T16270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.754656][T16270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.793284][ T281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.793460][ T281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.793534][ T281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.793620][ T281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.253891][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3842'. [ 285.277132][T16532] hsr_slave_1 (unregistering): left promiscuous mode [ 285.355767][T16547] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.355824][T16547] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.407246][T16547] bond0: (slave netdevsim2): Releasing backup interface [ 285.410031][T16547] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.410081][T16547] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.465876][T16547] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.465926][T16547] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.565642][T16547] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.565691][T16547] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.659848][ T12] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.659956][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.669403][ T51] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.669582][ T51] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.669676][ T51] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.669825][ T51] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.669907][ T51] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.669987][ T51] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.354672][T16601] netlink: 'syz.0.3875': attribute type 1 has an invalid length. [ 286.375223][T16601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 286.404405][T16604] netlink: 'syz.2.3874': attribute type 10 has an invalid length. [ 286.404525][T16601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 286.405141][T16601] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 286.405706][T16601] bond4: (slave xfrm1): Error -95 calling set_mac_address [ 286.459096][T16604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.460094][T16604] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 286.461136][T16604] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 286.768790][T16621] net_ratelimit: 4217 callbacks suppressed [ 286.768812][T16621] ip_tables: iptables: counters copy to user failed while replacing table [ 286.966997][T16638] netdevsim netdevsim3 netdevsim3: IPsec offload requires 128 bit authentication [ 287.791645][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 287.791674][ T29] audit: type=1326 audit(1792357567.168:10667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa46f2ced8e code=0x7ffc0000 [ 287.792794][ T29] audit: type=1326 audit(1792357567.178:10668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa46f2ced8e code=0x7ffc0000 [ 287.793946][ T29] audit: type=1326 audit(1792357567.178:10669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa46f2ced8e code=0x7ffc0000 [ 287.795136][ T29] audit: type=1326 audit(1792357567.178:10670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa46f2ced8e code=0x7ffc0000 [ 287.796297][ T29] audit: type=1326 audit(1792357567.178:10671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa46f2ced8e code=0x7ffc0000 [ 287.797500][ T29] audit: type=1326 audit(1792357567.178:10672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa46f2ced8e code=0x7ffc0000 [ 287.798668][ T29] audit: type=1326 audit(1792357567.178:10673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa46f2ced8e code=0x7ffc0000 [ 287.799882][ T29] audit: type=1326 audit(1792357567.178:10674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa46f2ced8e code=0x7ffc0000 [ 287.801079][ T29] audit: type=1326 audit(1792357567.178:10675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa46f2ced8e code=0x7ffc0000 [ 287.808333][ T29] audit: type=1326 audit(1792357567.188:10676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa46f2ced8e code=0x7ffc0000 [ 288.691165][T16691] loop4: detected capacity change from 0 to 2048 [ 288.718744][T16691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.772281][T16701] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 288.778491][T16701] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 288.778723][T16701] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 288.778938][T16701] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 288.779165][T16701] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 288.779377][T16701] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 288.779543][T16701] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 288.779705][T16701] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 288.779873][T16701] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 289.531687][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 289.636090][T16270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.702202][T16710] __nla_validate_parse: 3 callbacks suppressed [ 289.702219][T16710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3918'. [ 289.702246][T16710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3918'. [ 289.712187][T16710] gretap0: entered promiscuous mode [ 289.735959][T16710] gretap0: left promiscuous mode [ 289.755197][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3918'. [ 289.755283][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3918'. [ 289.760207][T16712] gretap0: entered promiscuous mode [ 289.784268][T16712] gretap0: left promiscuous mode [ 291.858758][T16779] IPv6: Can't replace route, no match found [ 293.361379][T16827] IPv6: Can't replace route, no match found [ 295.948463][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 295.948483][ T29] audit: type=1326 audit(1792357575.328:10828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16828 comm="syz.4.3965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82b435e559 code=0x0 [ 295.998652][T16835] net_ratelimit: 3321 callbacks suppressed [ 295.998669][T16835] ip_tables: iptables: counters copy to user failed while replacing table [ 296.809297][ T29] audit: type=1400 audit(1792357576.188:10829): avc: denied { bind } for pid=16859 comm="syz.2.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 296.835707][ T29] audit: type=1400 audit(1792357576.218:10830): avc: denied { listen } for pid=16859 comm="syz.2.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 296.837873][ T29] audit: type=1400 audit(1792357576.218:10831): avc: denied { accept } for pid=16859 comm="syz.2.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 296.893084][ T29] audit: type=1400 audit(1792357576.278:10832): avc: denied { connect } for pid=16859 comm="syz.2.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 296.954958][ T29] audit: type=1400 audit(1792357576.338:10833): avc: denied { mounton } for pid=16874 comm="syz.4.3975" path="/20/dev/kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 297.116849][T16887] FAULT_INJECTION: forcing a failure. [ 297.116849][T16887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.116894][T16887] CPU: 0 UID: 0 PID: 16887 Comm: syz.4.3990 Not tainted syzkaller #0 PREEMPT(lazy) [ 297.116938][T16887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 297.116955][T16887] Call Trace: [ 297.116966][T16887] [ 297.116977][T16887] __dump_stack+0x1d/0x30 [ 297.117011][T16887] dump_stack_lvl+0x95/0xd0 [ 297.117094][T16887] dump_stack+0x15/0x1b [ 297.117152][T16887] should_fail_ex+0x262/0x280 [ 297.117190][T16887] should_fail+0xb/0x20 [ 297.117222][T16887] should_fail_usercopy+0x1a/0x20 [ 297.117291][T16887] _copy_to_user+0x20/0xa0 [ 297.117353][T16887] bpf_verifier_vlog+0x455/0x5a0 [ 297.117454][T16887] btf_verifier_log+0xb2/0xf0 [ 297.117492][T16887] ? __btf_verifier_log+0x7f/0xb0 [ 297.117530][T16887] btf_func_proto_log+0x2ef/0x4a0 [ 297.117599][T16887] __btf_verifier_log_type+0x275/0x330 [ 297.117721][T16887] btf_func_proto_check_meta+0xa0/0x100 [ 297.117767][T16887] btf_parse_type_sec+0x291/0x1520 [ 297.117814][T16887] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 297.117847][T16887] ? btf_parse_hdr+0x43a/0x440 [ 297.117874][T16887] ? btf_parse_str_sec+0x1ae/0x1b0 [ 297.117905][T16887] btf_new_fd+0x2ec/0x6a0 [ 297.117940][T16887] bpf_btf_load+0x116/0x130 [ 297.117994][T16887] __sys_bpf+0xbce/0xc30 [ 297.118098][T16887] ? do_futex+0x300/0x460 [ 297.118157][T16887] __x64_sys_bpf+0x69/0x80 [ 297.118192][T16887] x64_sys_call+0xf26/0x2550 [ 297.118361][T16887] do_syscall_64+0x112/0x360 [ 297.118399][T16887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.118430][T16887] RIP: 0033:0x7f82b435e559 [ 297.118458][T16887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.118545][T16887] RSP: 002b:00007f82b2db7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.118571][T16887] RAX: ffffffffffffffda RBX: 00007f82b45e5fa0 RCX: 00007f82b435e559 [ 297.118589][T16887] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 297.118658][T16887] RBP: 00007f82b43f5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 297.118675][T16887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.118692][T16887] R13: 00007f82b45e6038 R14: 00007f82b45e5fa0 R15: 00007ffc0661c998 [ 297.118718][T16887] [ 297.171772][ T29] audit: type=1400 audit(1792357576.548:10834): avc: denied { read } for pid=16888 comm="syz.0.3991" lport=57039 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 297.479853][T16905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=16905 comm=syz.0.3997 [ 297.583340][ T29] audit: type=1400 audit(1792357576.968:10835): avc: denied { listen } for pid=16911 comm="syz.3.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 297.766668][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4009'. [ 297.791300][ T29] audit: type=1400 audit(1792357577.168:10836): avc: denied { name_bind } for pid=16939 comm="syz.2.4011" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 297.897470][T16957] netlink: 'syz.2.4019': attribute type 18 has an invalid length. [ 297.897496][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4019'. [ 297.912742][T16957] netlink: 'syz.2.4019': attribute type 18 has an invalid length. [ 297.912822][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4019'. [ 297.934791][ T281] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.934950][ T281] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.935063][ T281] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.935164][ T281] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.051299][ T29] audit: type=1400 audit(1792357577.428:10837): avc: denied { create } for pid=16969 comm="syz.2.4025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 298.100885][T16972] xt_CT: No such helper "pptp" [ 298.200594][T16978] loop4: detected capacity change from 0 to 1024 [ 298.224080][T16978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 298.224205][T16978] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.260482][T16270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 298.282072][T16983] lo: entered promiscuous mode [ 298.283778][T16983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.491101][T16998] bridge0: port 3(batadv1) entered blocking state [ 298.491223][T16998] bridge0: port 3(batadv1) entered disabled state [ 298.498440][T16998] batadv1: entered allmulticast mode [ 298.501966][T16998] batadv1: entered promiscuous mode [ 298.610941][T17015] FAULT_INJECTION: forcing a failure. [ 298.610941][T17015] name fail_futex, interval 1, probability 0, space 0, times 0 [ 298.611044][T17015] CPU: 1 UID: 0 PID: 17015 Comm: syz.4.4043 Not tainted syzkaller #0 PREEMPT(lazy) [ 298.611078][T17015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 298.611098][T17015] Call Trace: [ 298.611107][T17015] [ 298.611128][T17015] __dump_stack+0x1d/0x30 [ 298.611194][T17015] dump_stack_lvl+0x95/0xd0 [ 298.611232][T17015] dump_stack+0x15/0x1b [ 298.611261][T17015] should_fail_ex+0x262/0x280 [ 298.611376][T17015] should_fail+0xb/0x20 [ 298.611412][T17015] get_futex_key+0x12c/0xc10 [ 298.611445][T17015] futex_wake+0x89/0x400 [ 298.611488][T17015] ? inode_to_bdi+0x47/0xa0 [ 298.611575][T17015] ? file_ra_state_init+0x48/0x60 [ 298.611610][T17015] do_futex+0x3f8/0x460 [ 298.611653][T17015] ? mntput+0x72/0xb0 [ 298.611694][T17015] __se_sys_futex+0x2f6/0x370 [ 298.611775][T17015] __x64_sys_futex+0x78/0x90 [ 298.611818][T17015] x64_sys_call+0x22e2/0x2550 [ 298.611849][T17015] do_syscall_64+0x112/0x360 [ 298.611934][T17015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.611958][T17015] RIP: 0033:0x7f82b435e559 [ 298.611975][T17015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.611994][T17015] RSP: 002b:00007f82b2db70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 298.612020][T17015] RAX: ffffffffffffffda RBX: 00007f82b45e5fa8 RCX: 00007f82b435e559 [ 298.612121][T17015] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f82b45e5fac [ 298.612170][T17015] RBP: 00007f82b45e5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 298.612190][T17015] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 298.612214][T17015] R13: 00007f82b45e6038 R14: 00007ffc0661c8b0 R15: 00007ffc0661c998 [ 298.612243][T17015] [ 298.983045][ T54] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 298.983069][ T54] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 299.007194][T17042] all: renamed from batadv_slave_1 (while UP) [ 299.354851][T17075] netlink: 'syz.3.4070': attribute type 1 has an invalid length. [ 299.602250][T17093] ip_tables: iptables: counters copy to user failed while replacing table [ 299.750232][T17107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4084'. [ 299.750572][T17107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4084'. [ 299.905224][T17125] bridge0: port 1(batadv1) entered blocking state [ 299.905257][T17125] bridge0: port 1(batadv1) entered disabled state [ 299.905463][T17125] batadv1: entered allmulticast mode [ 299.932955][T17125] batadv1: entered promiscuous mode [ 299.982008][T17137] ./dev/sda1: Can't lookup blockdev [ 300.141803][T17143] bridge0: port 2(batadv1) entered blocking state [ 300.141845][T17143] bridge0: port 2(batadv1) entered disabled state [ 300.142010][T17143] batadv1: entered allmulticast mode [ 300.220176][T17143] batadv1: entered promiscuous mode [ 300.325720][T17152] syz_tun: entered allmulticast mode [ 300.326478][T17151] syz_tun: left allmulticast mode [ 300.391667][ T54] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 300.391691][ T54] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 300.551710][ T281] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 300.551731][ T281] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 300.630086][T17164] loop4: detected capacity change from 0 to 512 [ 300.655077][T17164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.655164][T17164] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.687861][T17164] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 300.694556][T17164] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 300.720026][T16270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.772448][T17175] syzkaller1: entered promiscuous mode [ 300.772541][T17175] syzkaller1: entered allmulticast mode [ 300.913576][T17180] loop4: detected capacity change from 0 to 4096 [ 300.936697][T17180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.962498][T17180] EXT4-fs (loop4): shut down requested (0) [ 300.998303][T16270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.029493][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 301.029510][ T29] audit: type=1326 audit(1792357580.408:10890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.2.4118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 301.029619][ T29] audit: type=1326 audit(1792357580.408:10891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.2.4118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 301.037836][ T29] audit: type=1326 audit(1792357580.418:10892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.2.4118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 301.037882][ T29] audit: type=1326 audit(1792357580.418:10893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.2.4118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 301.037953][ T29] audit: type=1326 audit(1792357580.418:10894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.2.4118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 301.037993][ T29] audit: type=1326 audit(1792357580.418:10895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.2.4118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 301.038049][ T29] audit: type=1326 audit(1792357580.418:10896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.2.4118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 301.038086][ T29] audit: type=1326 audit(1792357580.418:10897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.2.4118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 301.064017][ T29] audit: type=1326 audit(1792357580.418:10898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.2.4118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 301.064065][ T29] audit: type=1326 audit(1792357580.418:10899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.2.4118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 301.312824][T17202] ./dev/sda1: Can't lookup blockdev [ 301.896507][T17225] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4131'. [ 302.350035][T17247] loop4: detected capacity change from 0 to 512 [ 302.708657][T17267] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4149'. [ 302.872378][T17294] netlink: 'syz.7.4160': attribute type 83 has an invalid length. [ 303.429294][T17332] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 303.477516][T17336] ip_tables: iptables: counters copy to user failed while replacing table [ 303.639263][T17349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4181'. [ 303.687471][T17353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17353 comm=syz.3.4183 [ 304.171020][T17387] bridge0: port 1(batadv1) entered blocking state [ 304.172768][T17387] bridge0: port 1(batadv1) entered disabled state [ 304.173123][T17387] batadv1: entered allmulticast mode [ 304.175275][T17387] batadv1: entered promiscuous mode [ 304.227595][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4208'. [ 304.334413][T17419] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.4212'. [ 304.334432][T17419] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.4212'. [ 304.514984][T17428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1984 sclass=netlink_route_socket pid=17428 comm=syz.2.4215 [ 304.602218][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 304.602236][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 304.687727][T17438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 304.994252][T17440] bridge0: port 1(batadv1) entered blocking state [ 304.994519][T17440] bridge0: port 1(batadv1) entered disabled state [ 304.994868][T17440] batadv1: entered allmulticast mode [ 304.997914][T17440] batadv1: entered promiscuous mode [ 305.058049][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4220'. [ 305.058195][T17446] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4220'. [ 305.493052][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 305.493074][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 305.494640][T17472] bridge0: port 2(batadv2) entered blocking state [ 305.495343][T17472] bridge0: port 2(batadv2) entered disabled state [ 305.497083][T17472] batadv2: entered allmulticast mode [ 305.554121][T17472] batadv2: entered promiscuous mode [ 305.952152][ T386] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 305.952172][ T386] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 306.089964][T17485] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 306.162545][T17488] md: could not open device unknown-block(1,0). [ 306.248139][T17510] rxe_eth0 speed is unknown, defaulting to 1000 [ 306.626663][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 306.626681][ T29] audit: type=1400 audit(1792357586.008:11429): avc: denied { ioctl } for pid=17531 comm="syz.0.4259" path="socket:[46809]" dev="sockfs" ino=46809 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 306.635126][T17517] bridge0: port 3(batadv3) entered blocking state [ 306.635247][T17517] bridge0: port 3(batadv3) entered disabled state [ 306.635705][T17517] batadv3: entered allmulticast mode [ 306.637187][T17517] batadv3: entered promiscuous mode [ 306.714627][ T29] audit: type=1400 audit(1792357586.098:11430): avc: denied { setopt } for pid=17533 comm="syz.7.4261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 307.013438][ T12] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 307.013461][ T12] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 307.048331][T17554] TCP: TCP_TX_DELAY enabled [ 307.197816][T17567] bridge0: port 2(batadv2) entered blocking state [ 307.197989][T17567] bridge0: port 2(batadv2) entered disabled state [ 307.198542][T17567] batadv2: entered allmulticast mode [ 307.201408][T17567] batadv2: entered promiscuous mode [ 307.286469][T17572] 8021q: adding VLAN 0 to HW filter on device eth0 [ 307.289195][T17572] 8021q: adding VLAN 0 to HW filter on device eth1 [ 307.310083][T17572] 8021q: adding VLAN 0 to HW filter on device eth2 [ 307.320470][T17572] 8021q: adding VLAN 0 to HW filter on device eth3 [ 307.379707][T17572] bridge0: port 1(batadv1) entered blocking state [ 307.379743][T17572] bridge0: port 1(batadv1) entered forwarding state [ 307.379840][T17572] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 307.402407][T17581] netlink: 'syz.0.4278': attribute type 1 has an invalid length. [ 307.427223][T17581] bond5: entered promiscuous mode [ 307.427350][T17581] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.466024][T17581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.468031][T17581] bond5: (slave bond6): making interface the new active one [ 307.468057][T17581] bond6: entered promiscuous mode [ 307.469156][T17581] bond5: (slave bond6): Enslaving as an active interface with an up link [ 307.526542][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4280'. [ 307.526642][T17587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4280'. [ 307.671701][ T386] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 307.671768][ T386] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 308.101753][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 308.177380][T17597] loop4: detected capacity change from 0 to 32768 [ 308.196161][T17606] bridge0: port 3(batadv2) entered blocking state [ 308.196371][T17606] bridge0: port 3(batadv2) entered disabled state [ 308.196989][T17606] batadv2: entered allmulticast mode [ 308.200294][T17606] batadv2: entered promiscuous mode [ 308.225835][T17597] loop4: p1 p3 < > [ 308.309380][T17524] udevd[17524]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 308.310973][T16863] udevd[16863]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 308.409059][ T29] audit: type=1326 audit(1792357587.788:11431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.2.4292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 308.409114][ T29] audit: type=1326 audit(1792357587.788:11432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.2.4292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f84fcc3e559 code=0x7ffc0000 [ 308.409154][ T29] audit: type=1326 audit(1792357587.788:11433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.2.4292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f84fcc3e2c2 code=0x7ffc0000 [ 308.409207][ T29] audit: type=1326 audit(1792357587.788:11434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.2.4292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f84fcbfed8e code=0x7ffc0000 [ 308.440418][ T29] audit: type=1326 audit(1792357587.808:11435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.2.4292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f84fcc3e387 code=0x7ffc0000 [ 308.440489][ T29] audit: type=1326 audit(1792357587.808:11436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.2.4292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84fcbfed8e code=0x7ffc0000 [ 308.440529][ T29] audit: type=1326 audit(1792357587.808:11437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.2.4292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84fcc3e1eb code=0x7ffc0000 [ 308.440566][ T29] audit: type=1326 audit(1792357587.808:11438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.2.4292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f84fcbfed8e code=0x7ffc0000 [ 308.639370][T17626] loop4: detected capacity change from 0 to 1764 [ 308.666223][T17628] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 308.692497][ T51] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 308.692546][ T51] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 308.806097][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4303'. [ 309.769073][T17649] ip_tables: iptables: counters copy to user failed while replacing table [ 309.966889][T17661] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 309.990200][T17641] ip_tables: iptables: counters copy to user failed while replacing table [ 310.000964][T17661] bond4: (slave lo): Enslaving as an active interface with an up link [ 310.001121][T17661] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 310.415772][T17705] lo: entered promiscuous mode [ 310.427962][T17705] tunl0: entered promiscuous mode [ 310.439061][T17705] gre0: entered promiscuous mode [ 310.522394][T17705] erspan0: entered promiscuous mode [ 310.525750][T17705] ip_vti0: entered promiscuous mode [ 310.534624][T17705] ip6_vti0: entered promiscuous mode [ 310.556718][T17705] sit0: entered promiscuous mode [ 310.557998][T17707] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4333'. [ 310.601250][T17705] ip6tnl0: entered promiscuous mode [ 310.678712][T17721] ip_tables: iptables: counters copy to user failed while replacing table [ 310.688124][T17705] ip6gre0: entered promiscuous mode [ 310.725532][T17705] syz_tun: entered promiscuous mode [ 310.743418][T17705] ip6gretap0: entered promiscuous mode [ 310.763782][T17705] bridge0: port 1(batadv1) entered disabled state [ 310.815775][T17705] vcan0: entered promiscuous mode [ 310.838362][T17705] bond0: entered promiscuous mode [ 310.854246][T17705] team0: entered promiscuous mode [ 310.938544][T17705] nlmon0: entered promiscuous mode [ 310.955702][T17705] batadv0: entered promiscuous mode [ 310.985005][T17705] veth0: entered promiscuous mode [ 311.003326][T17705] veth1: entered promiscuous mode [ 311.033915][T17705] wg0: entered promiscuous mode [ 311.050059][T17705] wg1: entered promiscuous mode [ 311.079287][T17705] wg2: entered promiscuous mode [ 311.116084][T17705] veth0_to_bridge: entered promiscuous mode [ 311.168447][T17705] bridge_slave_0: entered promiscuous mode [ 311.184301][T17705] veth1_to_bridge: entered promiscuous mode [ 311.208489][T17705] bridge_slave_1: entered promiscuous mode [ 311.290051][T17705] veth0_to_bond: entered promiscuous mode [ 311.305686][T17705] bond_slave_0: entered promiscuous mode [ 311.324054][T17705] veth1_to_bond: entered promiscuous mode [ 311.348824][T17705] bond_slave_1: entered promiscuous mode [ 311.359397][T17705] veth1_to_team: entered promiscuous mode [ 311.375310][T17705] team_slave_1: entered promiscuous mode [ 311.400362][T17705] veth0_to_batadv: entered promiscuous mode [ 311.421729][T17705] batadv_slave_0: entered promiscuous mode [ 311.439178][T17705] veth1_to_batadv: entered promiscuous mode [ 311.463707][T17705] batadv_slave_1: entered promiscuous mode [ 311.502606][T17705] xfrm0: entered promiscuous mode [ 311.537439][T17705] veth0_to_hsr: entered promiscuous mode [ 311.540439][T17705] hsr_slave_0: entered promiscuous mode [ 311.550075][T17705] veth1_to_hsr: entered promiscuous mode [ 311.562507][T17705] hsr_slave_1: entered promiscuous mode [ 311.565455][T17705] veth1_virt_wifi: entered promiscuous mode [ 311.571258][T17705] veth0_virt_wifi: entered promiscuous mode [ 311.598937][T17705] vlan0: entered promiscuous mode [ 311.605460][T17705] vlan1: entered promiscuous mode [ 311.613153][T17705] macvlan0: entered promiscuous mode [ 311.617258][T17705] macvlan1: entered promiscuous mode [ 311.619402][T17705] ipvlan0: entered promiscuous mode [ 311.621305][T17705] ipvlan1: entered promiscuous mode [ 311.647560][T17705] macvtap0: entered promiscuous mode [ 311.649631][T17705] macsec0: entered promiscuous mode [ 311.653326][T17705] geneve0: entered promiscuous mode [ 311.656763][T17705] geneve1: entered promiscuous mode [ 311.660645][T17705] vxlan0: entered promiscuous mode [ 311.679323][T17705] bond1: entered promiscuous mode [ 311.680892][T17705] geneve2: entered promiscuous mode [ 311.696607][T17705] sit1: entered promiscuous mode [ 311.734739][T17705] hsr0: entered promiscuous mode [ 311.736069][T17705] netdevsim netdevsim7 eth0: entered promiscuous mode [ 311.740337][T17705] netdevsim netdevsim7 eth1: entered promiscuous mode [ 311.761639][T17705] netdevsim netdevsim7 eth2: entered promiscuous mode [ 311.763294][T17705] netdevsim netdevsim7 eth3: entered promiscuous mode [ 311.764105][T17705] sit2: entered promiscuous mode [ 311.768618][T17705] ipip0: entered promiscuous mode [ 312.008392][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 312.008412][ T29] audit: type=1400 audit(1792357591.368:11446): avc: denied { write } for pid=17774 comm="syz.3.4362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 312.125657][T17723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.149097][T17723] bridge0: port 1(batadv1) entered blocking state [ 312.149140][T17723] bridge0: port 1(batadv1) entered forwarding state [ 312.149301][T17723] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 312.154656][T17723] bridge0: port 2(batadv2) entered blocking state [ 312.154774][T17723] bridge0: port 2(batadv2) entered forwarding state [ 312.155075][T17723] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 312.163563][T17723] bridge0: port 3(batadv3) entered blocking state [ 312.163695][T17723] bridge0: port 3(batadv3) entered forwarding state [ 312.163923][T17723] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 312.168651][T17723] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.221693][ T54] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.221765][ T54] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.221882][ T54] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.221926][ T54] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.231945][ T12] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.232046][ T12] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.232251][ T12] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.232375][ T12] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.396563][T17793] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4359'. [ 312.396978][T17793] bridge0: port 1(syz_tun) entered disabled state [ 312.397111][T17793] bridge0: left allmulticast mode [ 312.425100][ T29] audit: type=1326 audit(1792357591.808:11447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17794 comm="syz.0.4360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 312.425144][ T29] audit: type=1326 audit(1792357591.808:11448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17794 comm="syz.0.4360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 312.428077][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4359'. [ 312.430351][ T29] audit: type=1326 audit(1792357591.808:11449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17794 comm="syz.0.4360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 312.430387][ T29] audit: type=1326 audit(1792357591.808:11450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17794 comm="syz.0.4360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 312.485291][ T29] audit: type=1326 audit(1792357591.818:11451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17794 comm="syz.0.4360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa7a32fe559 code=0x7ffc0000 [ 312.485348][ T29] audit: type=1326 audit(1792357591.818:11452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17794 comm="syz.0.4360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa7a32fe2c2 code=0x7ffc0000 [ 312.485389][ T29] audit: type=1326 audit(1792357591.818:11453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17794 comm="syz.0.4360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7a32bed8e code=0x7ffc0000 [ 312.485493][ T29] audit: type=1326 audit(1792357591.848:11454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17794 comm="syz.0.4360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa7a32fe387 code=0x7ffc0000 [ 312.493966][ T29] audit: type=1326 audit(1792357591.878:11455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17794 comm="syz.0.4360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7a32bed8e code=0x7ffc0000 [ 312.647109][T17799] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 312.720888][T17803] bridge0: port 1(syz_tun) entered blocking state [ 312.720932][T17803] bridge0: port 1(syz_tun) entered listening state [ 312.731051][T17805] netlink: 'syz.2.4367': attribute type 9 has an invalid length. [ 312.731103][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4367'. [ 312.819307][T17803] bridge0: port 2(batadv1) entered blocking state [ 312.819357][T17803] bridge0: port 2(batadv1) entered listening state [ 312.819517][T17803] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 312.846911][T17803] bridge0: port 3(batadv2) entered blocking state [ 312.846948][T17803] bridge0: port 3(batadv2) entered listening state [ 312.847050][T17803] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 312.849556][T17805] netlink: 'syz.2.4367': attribute type 9 has an invalid length. [ 312.849638][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4367'. [ 313.018813][T17808] ip_tables: iptables: counters copy to user failed while replacing table [ 313.140901][T17832] ./dev/sda1: Can't lookup blockdev [ 313.438183][T17834] bridge0: port 3(batadv3) entered blocking state [ 313.456545][T17834] bridge0: port 3(batadv3) entered disabled state [ 313.458364][T17834] batadv3: entered allmulticast mode [ 313.489720][T17834] batadv3: entered promiscuous mode [ 313.593183][ T54] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.696847][ T54] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.731008][ T54] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.785858][ T54] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.803356][ T12] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 313.803372][ T12] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 313.944557][ T54] batadv1: left allmulticast mode [ 313.944581][ T54] batadv1: left promiscuous mode [ 313.944698][ T54] bridge0: port 3(batadv1) entered disabled state [ 313.949674][ T54] bridge_slave_1: left allmulticast mode [ 313.949780][ T54] bridge_slave_1: left promiscuous mode [ 313.950024][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.990729][ T54] bridge_slave_0: left allmulticast mode [ 313.990755][ T54] bridge_slave_0: left promiscuous mode [ 313.990932][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.190439][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.201897][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.208331][ T54] bond0 (unregistering): Released all slaves [ 314.323198][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 314.457653][T17885] rxe_eth0 speed is unknown, defaulting to 1000 [ 314.468353][ T54] hsr_slave_0: left promiscuous mode [ 314.468813][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.468898][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.469227][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.469244][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.482235][ T54] veth1_macvtap: left promiscuous mode [ 314.482316][ T54] veth0_macvtap: left promiscuous mode [ 314.482495][ T54] veth1_vlan: left promiscuous mode [ 314.482662][ T54] veth0_vlan: left promiscuous mode [ 314.713206][ T54] team0 (unregistering): Port device team_slave_1 removed [ 314.717891][ T54] team0 (unregistering): Port device team_slave_0 removed [ 314.771402][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 314.839553][T17935] 8021q: adding VLAN 0 to HW filter on device eth0 [ 314.850250][T17935] 8021q: adding VLAN 0 to HW filter on device eth1 [ 314.864252][T17935] 8021q: adding VLAN 0 to HW filter on device eth2 [ 314.866768][T17935] 8021q: adding VLAN 0 to HW filter on device eth3 [ 314.868659][T17935] 8021q: adding VLAN 0 to HW filter on device bond4 [ 314.902507][T17935] bridge0: port 1(batadv1) entered blocking state [ 314.902619][T17935] bridge0: port 1(batadv1) entered forwarding state [ 314.902789][T17935] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 314.906809][T17935] bridge0: port 2(batadv2) entered blocking state [ 314.906859][T17935] bridge0: port 2(batadv2) entered forwarding state [ 314.906937][T17935] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 314.911290][T17935] bridge0: port 3(batadv3) entered blocking state [ 314.911320][T17935] bridge0: port 3(batadv3) entered forwarding state [ 314.911416][T17935] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 315.177494][T17885] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.177537][T17885] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.177684][T17885] bridge_slave_0: entered allmulticast mode [ 315.178345][T17885] bridge_slave_0: entered promiscuous mode [ 315.207105][T17885] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.207136][T17885] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.207291][T17885] bridge_slave_1: entered allmulticast mode [ 315.208062][T17885] bridge_slave_1: entered promiscuous mode [ 315.253635][T17885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.256225][T17885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.269783][T17969] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4412'. [ 315.303334][T17969] bridge_slave_0: left promiscuous mode [ 315.303571][T17969] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 315.305082][T17885] team0: Port device team_slave_0 added [ 315.307271][T17885] team0: Port device team_slave_1 added [ 315.364406][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 315.382550][T17885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.382566][T17885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.382675][T17885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.383344][T17885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.383358][T17885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.383458][T17885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.493266][T17885] hsr_slave_0: entered promiscuous mode [ 315.493846][T17885] hsr_slave_1: entered promiscuous mode [ 315.494205][T17885] debugfs: 'hsr0' already exists in 'hsr' [ 315.494225][T17885] Cannot create hsr debugfs directory [ 315.664373][T17885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.664419][T17885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 315.677040][T17885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.754745][T17885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.754793][T17885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 315.754982][T17885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.863815][T17885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.863856][T17885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 315.868479][T17885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.924050][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 316.060296][T17885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.060341][T17885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 316.060408][T17885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.150057][T18030] syz_tun: entered allmulticast mode [ 316.157614][T18028] syz_tun: left allmulticast mode [ 316.234229][T17885] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 316.241400][T17885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 316.246661][T17885] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 316.267419][T17885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 316.270319][T17885] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 316.276108][T17885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 316.278991][T17885] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 316.291109][T17885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 316.383095][T18053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4435'. [ 316.384855][T17885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.391490][T17885] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.419410][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.419447][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.443405][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.443450][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.541525][T18067] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.4442'. [ 316.712210][T17885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.755718][T18089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4448'. [ 316.859778][T17885] veth0_vlan: entered promiscuous mode [ 316.868823][T17885] veth1_vlan: entered promiscuous mode [ 316.893628][T17885] veth0_macvtap: entered promiscuous mode [ 316.896840][T17885] veth1_macvtap: entered promiscuous mode [ 316.924055][T17885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.926134][T17885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.007312][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4455'. [ 317.235439][T18114] ================================================================== [ 317.235484][T18114] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 317.235524][T18114] [ 317.235531][T18114] write to 0xffff88810a96c0a0 of 8 bytes by task 18117 on cpu 1: [ 317.235547][T18114] shmem_file_splice_read+0x401/0x590 [ 317.235570][T18114] splice_direct_to_actor+0x261/0x680 [ 317.235594][T18114] do_splice_direct+0x119/0x1a0 [ 317.235615][T18114] do_sendfile+0x37d/0x640 [ 317.235646][T18114] __x64_sys_sendfile64+0x105/0x150 [ 317.235672][T18114] x64_sys_call+0x1015/0x2550 [ 317.235706][T18114] do_syscall_64+0x112/0x360 [ 317.235734][T18114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.235762][T18114] [ 317.235767][T18114] write to 0xffff88810a96c0a0 of 8 bytes by task 18114 on cpu 0: [ 317.235785][T18114] shmem_file_splice_read+0x401/0x590 [ 317.235808][T18114] splice_direct_to_actor+0x261/0x680 [ 317.235830][T18114] do_splice_direct+0x119/0x1a0 [ 317.235858][T18114] do_sendfile+0x37d/0x640 [ 317.235886][T18114] __x64_sys_sendfile64+0x105/0x150 [ 317.235907][T18114] x64_sys_call+0x1015/0x2550 [ 317.235932][T18114] do_syscall_64+0x112/0x360 [ 317.235966][T18114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.235995][T18114] [ 317.236001][T18114] value changed: 0x0000000000003233 -> 0x0000000000003235 [ 317.236017][T18114] [ 317.236023][T18114] Reported by Kernel Concurrency Sanitizer on: [ 317.236035][T18114] CPU: 0 UID: 0 PID: 18114 Comm: syz.2.4458 Not tainted syzkaller #0 PREEMPT(lazy) [ 317.236064][T18114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 317.236078][T18114] ================================================================== [ 317.473845][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.474331][ T386] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.474443][ T386] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.474477][ T386] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.617394][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 326.617414][ T29] audit: type=1400 audit(1792357605.998:11504): avc: denied { write } for pid=18127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.662309][ T29] audit: type=1400 audit(1792357606.048:11505): avc: denied { write } for pid=18138 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1