last executing test programs: 1m26.04987999s ago: executing program 0 (id=211): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, 0x0}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r0}, &(0x7f0000000100), &(0x7f00000012c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m25.960885148s ago: executing program 0 (id=213): socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x6, 0x0, 0x0, 0x3, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x18) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x809}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 1m25.919286823s ago: executing program 0 (id=214): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m25.781350187s ago: executing program 0 (id=216): r0 = socket(0x2, 0x3, 0xff) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000280)={[0xe]}, 0x0, 0x0, 0x8) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f00000006c0)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000740)=[{{&(0x7f0000000780)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) 1m24.916963195s ago: executing program 0 (id=225): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x80\x00s/\x92ync_\x01\xcaK\x0fA%\x19\x86\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x989046, 0x0) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0/../file0/../file0/file0/../file0\x00') 1m24.895666577s ago: executing program 0 (id=226): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000003c0), &(0x7f0000001500)=@udp6=r1, 0x1}, 0x20) 1m24.654029342s ago: executing program 3 (id=231): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x4000, 0x8, 0xc1}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 1m24.440420744s ago: executing program 3 (id=232): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x10, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000}}, 0x0, 0xa, 0x0, 0x0, 0x41100, 0x73, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m23.828259297s ago: executing program 3 (id=238): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) waitid(0x0, 0x0, 0x0, 0x8100000e, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m23.598505271s ago: executing program 3 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x38ff817, 0x0) umount2(&(0x7f0000000600)='./file0/../file0\x00', 0x1) 1m23.535890597s ago: executing program 3 (id=242): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, {[@ssrr={0x89, 0xb, 0xa2, [@broadcast, @broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x10000, 0x400]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m23.004603101s ago: executing program 3 (id=249): r0 = fsopen(&(0x7f0000000880)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000008c0)='source\x00', &(0x7f0000000900)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000980)='addr\x00', &(0x7f00000009c0)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000a40)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a80)='mountproto\x00', &(0x7f0000000ac0)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m22.962396756s ago: executing program 32 (id=249): r0 = fsopen(&(0x7f0000000880)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000008c0)='source\x00', &(0x7f0000000900)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000980)='addr\x00', &(0x7f00000009c0)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000a40)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a80)='mountproto\x00', &(0x7f0000000ac0)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m9.855308358s ago: executing program 33 (id=226): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000003c0), &(0x7f0000001500)=@udp6=r1, 0x1}, 0x20) 3.426334339s ago: executing program 4 (id=1145): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f0000000200)='%ps \x00'}, 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.397749424s ago: executing program 4 (id=1149): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x3f5, 0x1f, 0x0, 0x0, {0x5}}, [], {0x14, 0x3eb}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x527, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1000000a, 0x20002f7}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.196263445s ago: executing program 2 (id=1150): r0 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) fallocate(r1, 0x0, 0xf6, 0xa) 2.170699408s ago: executing program 4 (id=1151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) capset(&(0x7f0000000b40)={0x20071026}, &(0x7f0000000b80)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) exit(0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 1.984830857s ago: executing program 1 (id=1154): unshare(0x600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x498f, &(0x7f0000000240)={0x0, 0xf4c8, 0x40, 0x1, 0x3c4}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 1.870853738s ago: executing program 1 (id=1156): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 1.766178769s ago: executing program 1 (id=1157): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1.688671667s ago: executing program 6 (id=1158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x8af6a083558a9093) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x10000008, 0x4) sendmmsg$inet6(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="f1a40c60c60fd798d721d99bfa451331e235554b78a19f32b65997d9814c43ca9d72711080a4068e3d4ce687e9cf8f8d330060a06eaf17c96d52e6aaae01f95c68ca8230e9c88257e168523a293c28eaea4768f55d972786ddc0bdad80c9b990e931f045ed646d7a2c6e9eb172ad55498aaef58347b589c3efa2d329fead75f9031f3459d18ef5f8b14a61bf", 0x8c}], 0x1, &(0x7f0000000580)=ANY=[], 0x208}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000007c0)="d57075275ba31ef0993c990e55b65c1eeb8746039057efc2ea428aa249c92ecc1496aace470987027b0e7d3a17d33b0189f3c12a2c9d876c8d7a53311d1e6531a166d6846ee6997329eb4b5cfed4ce6420809bd7992e22748372ef24a324b88d524dd87cade59157db7c95c1fc9a1dc7d09a228370fa7124b56f9449aeb5a6a89d082053c5f17d4a5fa4966715d871ac2b31b9a2e62f6c2749463a0a14ffbb3de1ef2c897ebe", 0xa6}, {&(0x7f0000000880)="38754bc0abb2d7ae542cc0049112beea2406bb7ea28b803cc1388f65268d47413b014ef7d3f30b7e7b5196cf60d57a7b24133f4e91e62e66d6aa3836a18209b140033818a6113cfaac", 0x49}, {&(0x7f0000000900)="8a0e70a59ee7", 0x6}], 0x3}}], 0x2, 0x1c0) recvfrom(r0, 0x0, 0x0, 0x40010062, 0x0, 0x0) 1.679083348s ago: executing program 2 (id=1159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x5d5, 0x66, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0x5e3) 1.617786515s ago: executing program 6 (id=1160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2, r0}, 0xc) 1.510531495s ago: executing program 1 (id=1162): r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000980)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000b80)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1fc, 0x4, 0x4, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r3, 0x5, 0xe, 0x0, &(0x7f0000000cc0)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.490760388s ago: executing program 6 (id=1164): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='my_sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x100) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r1, 0x0) preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f00000001c0)=""/57, 0x39}], 0x2, 0xa, 0xe, 0x1) 1.398210927s ago: executing program 5 (id=1165): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x8919, 0x1c080, 0x10, 0x44d}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x1, 0x8000) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.397719987s ago: executing program 2 (id=1166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc40, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 1.37280592s ago: executing program 6 (id=1167): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000680)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) write$binfmt_elf64(r1, 0x0, 0xde7c) 1.2698424s ago: executing program 4 (id=1168): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x301, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.16720945s ago: executing program 2 (id=1169): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000e40)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 843.528994ms ago: executing program 5 (id=1170): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000180)=0x14) 812.340667ms ago: executing program 5 (id=1171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000740)=@ccm_128={{0x303}, "ee3fa66fbf0f9e55", "a5656c2128eda9fbb14b7442bc5fc5e4", "1d8faf68", "edf7bd5bfadea811"}, 0x28) 610.335118ms ago: executing program 5 (id=1172): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) r2 = dup(r1) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000280)=""/85, 0x55}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 443.447404ms ago: executing program 1 (id=1173): socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001980), 0xfffffedf, 0x10, &(0x7f00000019c0)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x0, 0xe, 0x0, &(0x7f0000001a80)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 442.897035ms ago: executing program 5 (id=1174): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0, 0xa}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f00000008c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000980)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) socket$kcm(0x29, 0x5, 0x0) 375.899092ms ago: executing program 6 (id=1175): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x89) fchdir(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 323.407247ms ago: executing program 4 (id=1176): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x6889, 0x1f280, 0xfffffffd, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000713000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffff78}, 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1e, 0x0, 0x0) 186.865551ms ago: executing program 1 (id=1177): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000400)='GPL\x00', 0x700, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000440)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780)=[r0, r1, r1, r0, r0, r1], &(0x7f00000007c0)=[{0x0, 0x5, 0xf}, {0x3, 0x2, 0x11, 0x8}, {0x4, 0x3, 0xe, 0x6}], 0x10, 0x4}, 0x94) 132.596456ms ago: executing program 2 (id=1178): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000000c0)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000180)=0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) 107.665609ms ago: executing program 6 (id=1179): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 33.871226ms ago: executing program 4 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x8c884) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="08000800060006"], 0xfdef) 15.503379ms ago: executing program 5 (id=1181): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0xfc, &(0x7f00000000c0)=0x7ffffffffffffffd, &(0x7f0000000100)=0x1) socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x0) 0s ago: executing program 2 (id=1182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x9, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x8, 0xffffffff}, 0x70bd2a, 0x800000, 0xa, 0x4, 0x0, 0xe5}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd2e, 0x0, 0x70bd27, 0x0, 0x0, [0x9]}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x164}}, 0x24004000) kernel console output (not intermixed with test programs): 4 89 01 48 [ 43.319204][ T3946] RSP: 002b:00007f49a20d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 43.319232][ T3946] RAX: ffffffffffffffda RBX: 00007f49a3905fa8 RCX: 00007f49a367f559 [ 43.319252][ T3946] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f49a3905fac [ 43.319270][ T3946] RBP: 00007f49a3905fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 43.319289][ T3946] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 43.319307][ T3946] R13: 00007f49a3906038 R14: 00007ffedae5b960 R15: 00007ffedae5ba48 [ 43.319390][ T3946] [ 43.681388][ T3961] netlink: 'syz.4.192': attribute type 4 has an invalid length. [ 43.874660][ T3974] FAULT_INJECTION: forcing a failure. [ 43.874660][ T3974] name failslab, interval 1, probability 0, space 0, times 0 [ 43.874687][ T3974] CPU: 0 UID: 0 PID: 3974 Comm: syz.3.187 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.874720][ T3974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 43.874732][ T3974] Call Trace: [ 43.874738][ T3974] [ 43.874746][ T3974] __dump_stack+0x1d/0x30 [ 43.874769][ T3974] dump_stack_lvl+0x95/0xd0 [ 43.874878][ T3974] dump_stack+0x15/0x1b [ 43.874896][ T3974] should_fail_ex+0x262/0x280 [ 43.875014][ T3974] should_failslab+0x8c/0xb0 [ 43.875036][ T3974] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 43.875058][ T3974] ? lookup_one_qstr_excl+0x160/0x240 [ 43.875103][ T3974] ? debugfs_alloc_inode+0x34/0x40 [ 43.875122][ T3974] ? debugfs_alloc_inode+0x34/0x40 [ 43.875205][ T3974] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 43.875225][ T3974] debugfs_alloc_inode+0x34/0x40 [ 43.875281][ T3974] alloc_inode+0x40/0x170 [ 43.875319][ T3974] new_inode+0x1d/0xe0 [ 43.875381][ T3974] debugfs_create_symlink+0x7c/0x150 [ 43.875415][ T3974] ref_tracker_dir_symlink+0x1ae/0x290 [ 43.875488][ T3974] net_ns_net_init+0x8f/0xa0 [ 43.875514][ T3974] ops_init+0x22a/0x2e0 [ 43.875535][ T3974] setup_net+0x9f/0x230 [ 43.875596][ T3974] copy_net_ns+0x339/0x490 [ 43.875626][ T3974] create_new_namespaces+0x1f6/0x420 [ 43.875645][ T3974] unshare_nsproxy_namespaces+0x115/0x150 [ 43.875666][ T3974] ksys_unshare+0x3a3/0x690 [ 43.875728][ T3974] __x64_sys_unshare+0x1f/0x30 [ 43.875753][ T3974] x64_sys_call+0x1e33/0x2550 [ 43.875776][ T3974] do_syscall_64+0x112/0x360 [ 43.875869][ T3974] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 43.875902][ T3974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.876003][ T3974] RIP: 0033:0x7f49a367f559 [ 43.876018][ T3974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.876034][ T3974] RSP: 002b:00007f49a20d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 43.876149][ T3974] RAX: ffffffffffffffda RBX: 00007f49a3905fa0 RCX: 00007f49a367f559 [ 43.876161][ T3974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 43.876173][ T3974] RBP: 00007f49a3716b20 R08: 0000000000000000 R09: 0000000000000000 [ 43.876184][ T3974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.876195][ T3974] R13: 00007f49a3906038 R14: 00007f49a3905fa0 R15: 00007ffedae5ba48 [ 43.876213][ T3974] [ 43.876265][ T3974] debugfs: out of free dentries, can not create symlink 'netns-42-4026533367-notrefcnt' [ 43.898469][ T3974] dummy0 speed is unknown, defaulting to 1000 [ 44.174700][ T3981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.190'. [ 44.357188][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.557750][ T4010] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 44.883103][ T4036] netlink: 'syz.0.213': attribute type 5 has an invalid length. [ 44.883444][ T4036] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 44.883879][ T4036] netlink: 'syz.0.213': attribute type 5 has an invalid length. [ 44.883929][ T4036] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 44.884010][ T4036] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 45.853800][ T4058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 45.853871][ T4058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 46.218438][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 46.218458][ T29] audit: type=1326 audit(1792784062.289:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.4.223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1417a4fd8e code=0x7ffc0000 [ 46.219005][ T29] audit: type=1326 audit(1792784062.299:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.4.223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1417a4fd8e code=0x7ffc0000 [ 46.220439][ T29] audit: type=1326 audit(1792784062.299:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.4.223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1417a4fd8e code=0x7ffc0000 [ 46.222036][ T29] audit: type=1326 audit(1792784062.299:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.4.223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1417a4fd8e code=0x7ffc0000 [ 46.223516][ T29] audit: type=1326 audit(1792784062.299:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.4.223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1417a4fd8e code=0x7ffc0000 [ 46.226440][ T29] audit: type=1326 audit(1792784062.299:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.4.223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1417a4fd8e code=0x7ffc0000 [ 46.226623][ T29] audit: type=1326 audit(1792784062.299:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.4.223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1417a4fd8e code=0x7ffc0000 [ 46.233480][ T29] audit: type=1326 audit(1792784062.309:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.4.223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1417a4fd8e code=0x7ffc0000 [ 46.233568][ T29] audit: type=1326 audit(1792784062.309:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.4.223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1417a4fd8e code=0x7ffc0000 [ 46.233668][ T29] audit: type=1326 audit(1792784062.309:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.4.223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1417a4fd8e code=0x7ffc0000 [ 46.957141][ T4091] netlink: 'syz.2.235': attribute type 8 has an invalid length. [ 46.957180][ T4091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 46.976409][ T4091] veth1_to_team: entered promiscuous mode [ 46.980259][ T4091] gretap0: entered promiscuous mode [ 46.993308][ T4091] veth1_to_team: left promiscuous mode [ 47.001091][ T4095] loop4: detected capacity change from 0 to 512 [ 47.006780][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 47.017039][ T4095] EXT4-fs (loop4): 1 truncate cleaned up [ 47.017921][ T4095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.043812][ T4091] gretap0: left promiscuous mode [ 47.054668][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 47.084547][ T4095] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.237: bg 0: block 465: padding at end of block bitmap is not set [ 47.084775][ T4095] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 47.084809][ T4095] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.084809][ T4095] [ 47.102360][ T4095] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.237: invalid indirect mapped block 234881024 (level 0) [ 47.102489][ T4095] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 47.151683][ T4095] syz.4.237 (4095) used greatest stack depth: 9640 bytes left [ 47.153158][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.179392][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 47.191463][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 47.702343][ T4121] tap0: tun_chr_ioctl cmd 1074025677 [ 47.702433][ T4121] tap0: linktype set to 825 [ 47.704488][ T4121] tap0: tun_chr_ioctl cmd 35108 [ 47.704595][ T4121] tap0: tun_chr_ioctl cmd 2148553947 [ 47.833264][ T4123] netlink: 'syz.1.250': attribute type 12 has an invalid length. [ 47.833290][ T4123] netlink: 132 bytes leftover after parsing attributes in process `syz.1.250'. [ 47.902498][ T4125] bridge_slave_0: left allmulticast mode [ 47.902531][ T4125] bridge_slave_0: left promiscuous mode [ 47.902711][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.933064][ T4125] bridge_slave_1: left allmulticast mode [ 47.933088][ T4125] bridge_slave_1: left promiscuous mode [ 47.933232][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.965326][ T4125] bond0: (slave bond_slave_0): Releasing backup interface [ 48.098557][ T4125] bond0: (slave bond_slave_1): Releasing backup interface [ 48.131632][ T4125] team0: Port device team_slave_0 removed [ 48.144865][ T4125] team0: Port device team_slave_1 removed [ 48.145743][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.145761][ T4125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.154368][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.154388][ T4125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.187452][ T4125] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 48.340475][ T4130] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.345187][ T4130] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.351853][ T4130] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.497781][ T4130] infiniband rxe0: set active [ 48.497803][ T4130] infiniband rxe0: added rxe_eth0 [ 48.498091][ T3371] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.549826][ T4130] RDS/IB: rxe0: added [ 48.549845][ T4130] smc: adding ib device rxe0 with port count 1 [ 48.549857][ T4130] smc: ib device rxe0 port 1 has no pnetid [ 48.550134][ T4130] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.550870][ T3371] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.627279][ T4152] geneve2: entered promiscuous mode [ 48.705231][ T4152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 48.705351][ T4130] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.830251][ T4130] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.891990][ T4130] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.892103][ T4164] netlink: 72 bytes leftover after parsing attributes in process `syz.2.263'. [ 48.903632][ T4164] netlink: 72 bytes leftover after parsing attributes in process `syz.2.263'. [ 48.931854][ T354] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.016758][ T4130] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.173854][ T4130] dummy0 speed is unknown, defaulting to 1000 [ 49.174256][ T4130] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.482092][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.482123][ T4130] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.482258][ T4130] bridge_slave_0: entered allmulticast mode [ 49.482797][ T4130] bridge_slave_0: entered promiscuous mode [ 49.512273][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.512306][ T4130] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.512454][ T4130] bridge_slave_1: entered allmulticast mode [ 49.513867][ T4130] bridge_slave_1: entered promiscuous mode [ 49.556586][ T4130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.566978][ T4130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.588279][ T4130] team0: Port device team_slave_0 added [ 49.589282][ T4130] team0: Port device team_slave_1 added [ 49.612239][ T4130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.612257][ T4130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.612293][ T4130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.613037][ T4130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.613053][ T4130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.613080][ T4130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.710749][ T4130] hsr_slave_0: entered promiscuous mode [ 49.711337][ T4130] hsr_slave_1: entered promiscuous mode [ 49.711620][ T4130] debugfs: 'hsr0' already exists in 'hsr' [ 49.711636][ T4130] Cannot create hsr debugfs directory [ 49.848123][ T4130] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.851999][ T4130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.852506][ T4186] veth1_macvtap: left promiscuous mode [ 49.852614][ T4186] macsec0: entered allmulticast mode [ 49.855234][ T4130] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.858475][ T4130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.860023][ T4130] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.870354][ T4130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.873783][ T4130] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.885989][ T4130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.927950][ T4186] veth1_macvtap: entered promiscuous mode [ 49.927977][ T4186] veth1_macvtap: entered allmulticast mode [ 49.928029][ T4186] macsec0: entered promiscuous mode [ 50.029118][ T4130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.056461][ T4130] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.067856][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.067902][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.076793][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.076830][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.261546][ T4207] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 50.351500][ T4130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.519196][ T4234] batadv_slave_0: entered promiscuous mode [ 50.538940][ T4234] erspan0: entered promiscuous mode [ 50.538986][ T4234] macsec1: entered promiscuous mode [ 50.543003][ T4234] erspan0: left promiscuous mode [ 50.588563][ T4233] batadv_slave_0: left promiscuous mode [ 50.635648][ T4130] veth0_vlan: entered promiscuous mode [ 50.645618][ T4130] veth1_vlan: entered promiscuous mode [ 50.669241][ T4130] veth0_macvtap: entered promiscuous mode [ 50.673075][ T4130] veth1_macvtap: entered promiscuous mode [ 50.696090][ T4130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.715771][ T4130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.759283][ T38] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.759544][ T38] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.759744][ T38] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.759908][ T38] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.997256][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.282622][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 51.282643][ T29] audit: type=1400 audit(1792784067.349:826): avc: denied { create } for pid=4269 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 51.286985][ T29] audit: type=1400 audit(1792784067.359:827): avc: denied { setopt } for pid=4269 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 51.293333][ T29] audit: type=1400 audit(1792784067.369:828): avc: denied { bind } for pid=4269 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 51.434744][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 51.491184][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 51.514641][ T4275] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 51.620340][ T4283] ip6gre1: entered promiscuous mode [ 51.620366][ T4283] ip6gre1: entered allmulticast mode [ 54.094444][ T4294] FAULT_INJECTION: forcing a failure. [ 54.094444][ T4294] name failslab, interval 1, probability 0, space 0, times 0 [ 54.094484][ T4294] CPU: 0 UID: 0 PID: 4294 Comm: syz.2.301 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.094558][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 54.094575][ T4294] Call Trace: [ 54.094584][ T4294] [ 54.094596][ T4294] __dump_stack+0x1d/0x30 [ 54.094668][ T4294] dump_stack_lvl+0x95/0xd0 [ 54.094697][ T4294] dump_stack+0x15/0x1b [ 54.094725][ T4294] should_fail_ex+0x262/0x280 [ 54.094757][ T4294] ? security_inode_alloc+0x37/0x100 [ 54.094786][ T4294] should_failslab+0x8c/0xb0 [ 54.094862][ T4294] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 54.094883][ T4294] ? security_inode_alloc+0x37/0x100 [ 54.094911][ T4294] security_inode_alloc+0x37/0x100 [ 54.094941][ T4294] inode_init_always_gfp+0x495/0x4e0 [ 54.095007][ T4294] ? __pfx_proc_alloc_inode+0x10/0x10 [ 54.095054][ T4294] alloc_inode+0x58/0x170 [ 54.095082][ T4294] new_inode+0x1d/0xe0 [ 54.095188][ T4294] proc_get_inode+0x21/0x370 [ 54.095354][ T4294] proc_lookup_de+0x196/0x240 [ 54.095382][ T4294] proc_tgid_net_lookup+0x43/0xf0 [ 54.095419][ T4294] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 54.095440][ T4294] lookup_open+0x6f1/0x1010 [ 54.095500][ T4294] path_openat+0x492/0x11c0 [ 54.095537][ T4294] do_file_open+0x16c/0x290 [ 54.095570][ T4294] ? __pfx_kfree_link+0x10/0x10 [ 54.095604][ T4294] do_sys_openat2+0xa1/0x140 [ 54.095701][ T4294] __x64_sys_openat+0xf2/0x120 [ 54.095740][ T4294] x64_sys_call+0x1f72/0x2550 [ 54.095766][ T4294] do_syscall_64+0x112/0x360 [ 54.095844][ T4294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.095878][ T4294] RIP: 0033:0x7fd12ec3fd8e [ 54.095900][ T4294] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.095924][ T4294] RSP: 002b:00007fd12d6d6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 54.095944][ T4294] RAX: ffffffffffffffda RBX: 00007fd12d6d76c0 RCX: 00007fd12ec3fd8e [ 54.095963][ T4294] RDX: 0000000000000002 RSI: 00007fd12d6d6f90 RDI: ffffffffffffff9c [ 54.096036][ T4294] RBP: 00007fd12ed16b20 R08: 0000000000000000 R09: 0000000000000000 [ 54.096051][ T4294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.096067][ T4294] R13: 00007fd12ef06038 R14: 00007fd12ef05fa0 R15: 00007ffc70be26c8 [ 54.096094][ T4294] [ 54.390295][ T29] audit: type=1400 audit(1792784070.469:829): avc: denied { block_suspend } for pid=4303 comm="syz.5.305" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.683247][ T29] audit: type=1400 audit(1792784070.759:830): avc: denied { watch } for pid=4310 comm="syz.4.308" path="/66" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.686273][ T4311] process 'syz.4.308' launched './file1' with NULL argv: empty string added [ 54.686562][ T29] audit: type=1400 audit(1792784070.759:831): avc: denied { execute_no_trans } for pid=4310 comm="syz.4.308" path="/66/file1" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.713304][ T4300] loop2: detected capacity change from 0 to 32768 [ 54.758027][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 54.768025][ T4300] loop2: p1 p2 p3 < p5 p6 > p4 [ 54.769876][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 54.771472][ T4300] loop2: p2 size 16777216 extends beyond EOD, truncated [ 54.779719][ T4300] loop2: p4 start 1426063360 is beyond EOD, truncated [ 54.781347][ T4300] loop2: p6 start 4294974214 is beyond EOD, truncated [ 54.799969][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 54.833075][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 54.853927][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 54.862879][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 54.889102][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 54.894575][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 54.988000][ T29] audit: type=1400 audit(1792784071.059:832): avc: denied { write } for pid=4319 comm="syz.2.310" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.175600][ T29] audit: type=1400 audit(1792784071.249:833): avc: denied { read } for pid=4326 comm="syz.4.313" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 55.175644][ T29] audit: type=1400 audit(1792784071.249:834): avc: denied { open } for pid=4326 comm="syz.4.313" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 55.329820][ T29] audit: type=1400 audit(1792784071.399:835): avc: denied { setopt } for pid=4329 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.454446][ T4306] Set syz1 is full, maxelem 65536 reached [ 55.590390][ T354] IPVS: starting estimator thread 0... [ 55.610954][ T4347] netlink: 20 bytes leftover after parsing attributes in process `syz.4.322'. [ 55.677176][ T4348] IPVS: using max 2208 ests per chain, 110400 per kthread [ 55.724128][ T4359] tmpfs: Unknown parameter 'ÿÿ' [ 55.726706][ T4359] FAULT_INJECTION: forcing a failure. [ 55.726706][ T4359] name failslab, interval 1, probability 0, space 0, times 0 [ 55.726823][ T4359] CPU: 1 UID: 0 PID: 4359 Comm: syz.2.327 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.726859][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 55.726879][ T4359] Call Trace: [ 55.726889][ T4359] [ 55.726901][ T4359] __dump_stack+0x1d/0x30 [ 55.726953][ T4359] dump_stack_lvl+0x95/0xd0 [ 55.726983][ T4359] dump_stack+0x15/0x1b [ 55.727029][ T4359] should_fail_ex+0x262/0x280 [ 55.727059][ T4359] ? __anon_vma_prepare+0xc8/0x2f0 [ 55.727096][ T4359] should_failslab+0x8c/0xb0 [ 55.727129][ T4359] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 55.727207][ T4359] ? __anon_vma_prepare+0xc8/0x2f0 [ 55.727274][ T4359] __anon_vma_prepare+0xc8/0x2f0 [ 55.727343][ T4359] handle_mm_fault+0x31da/0x3c60 [ 55.727400][ T4359] do_user_addr_fault+0x3ce/0xde0 [ 55.727527][ T4359] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 55.727568][ T4359] ? trace_page_fault_user+0x1f/0xa0 [ 55.727603][ T4359] exc_page_fault+0x62/0xa0 [ 55.727676][ T4359] asm_exc_page_fault+0x26/0x30 [ 55.727705][ T4359] RIP: 0033:0x7fd12ec41482 [ 55.727726][ T4359] Code: 8d 15 d0 26 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 89 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 55.727751][ T4359] RSP: 002b:00007fd12d6d5d20 EFLAGS: 00010286 [ 55.727850][ T4359] RAX: ffffffffffffffff RBX: 00007fd128000000 RCX: 00007fd12ec7f357 [ 55.727886][ T4359] RDX: 00007fd12ed33b2e RSI: 0000000000021000 RDI: 00007fd128000000 [ 55.727954][ T4359] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 55.727973][ T4359] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 55.727991][ T4359] R13: 0000000000001000 R14: 00007fd12c000000 R15: 0000000002949000 [ 55.728019][ T4359] [ 55.734221][ T4359] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 55.976001][ T4365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.329'. [ 56.156996][ T4374] capability: warning: `syz.1.334' uses deprecated v2 capabilities in a way that may be insecure [ 56.451221][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 56.451237][ T29] audit: type=1400 audit(1792784072.529:844): avc: denied { cpu } for pid=4393 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 56.539571][ T29] audit: type=1400 audit(1792784072.619:845): avc: denied { create } for pid=4395 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.540508][ T29] audit: type=1400 audit(1792784072.619:846): avc: denied { ioctl } for pid=4395 comm="syz.2.343" path="socket:[8567]" dev="sockfs" ino=8567 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.540926][ T29] audit: type=1400 audit(1792784072.619:847): avc: denied { bind } for pid=4395 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.541215][ T29] audit: type=1400 audit(1792784072.619:848): avc: denied { connect } for pid=4395 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.610797][ T29] audit: type=1400 audit(1792784072.679:849): avc: denied { ioctl } for pid=4395 comm="syz.2.343" path="socket:[8568]" dev="sockfs" ino=8568 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.664840][ T29] audit: type=1400 audit(1792784072.739:850): avc: denied { write } for pid=4398 comm="dhcpcd-run-hook" name="null" dev="sda1" ino=2047 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:mnt_t tclass=file permissive=1 [ 56.664881][ T29] audit: type=1400 audit(1792784072.739:851): avc: denied { open } for pid=4398 comm="dhcpcd-run-hook" path="/dev/null" dev="sda1" ino=2047 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:mnt_t tclass=file permissive=1 [ 56.689472][ T29] audit: type=1400 audit(1792784072.759:852): avc: denied { getattr } for pid=4400 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.712725][ T29] audit: type=1400 audit(1792784072.789:853): avc: denied { getattr } for pid=4401 comm="dhcpcd-run-hook" path="/dev/null" dev="sda1" ino=2047 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:mnt_t tclass=file permissive=1 [ 57.436291][ T4474] dummy0 speed is unknown, defaulting to 1000 [ 57.439430][ T4474] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.661255][ T4482] dummy0 speed is unknown, defaulting to 1000 [ 57.661584][ T4482] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.041235][ T4501] 9pnet: p9_errstr2errno: server reported unknown error ile0 [ 58.172098][ T4516] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 58.333096][ T4532] tipc: Started in network mode [ 58.333141][ T4532] tipc: Node identity f2159fbe9ba6, cluster identity 4711 [ 58.333267][ T4532] tipc: Enabled bearer , priority 10 [ 58.342427][ T4531] tipc: Resetting bearer [ 58.361513][ T4531] tipc: Disabling bearer [ 58.433331][ T4543] netlink: 'syz.5.389': attribute type 1 has an invalid length. [ 58.433353][ T4543] netlink: 'syz.5.389': attribute type 4 has an invalid length. [ 58.433365][ T4543] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.389'. [ 58.436227][ T4543] netlink: 'syz.5.389': attribute type 1 has an invalid length. [ 58.436247][ T4543] netlink: 'syz.5.389': attribute type 4 has an invalid length. [ 58.436280][ T4543] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.389'. [ 59.754952][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 59.828101][ T4570] FAULT_INJECTION: forcing a failure. [ 59.828101][ T4570] name failslab, interval 1, probability 0, space 0, times 0 [ 59.828250][ T4570] CPU: 1 UID: 0 PID: 4570 Comm: syz.4.401 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.828314][ T4570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.828333][ T4570] Call Trace: [ 59.828344][ T4570] [ 59.828355][ T4570] __dump_stack+0x1d/0x30 [ 59.828389][ T4570] dump_stack_lvl+0x95/0xd0 [ 59.828473][ T4570] dump_stack+0x15/0x1b [ 59.828500][ T4570] should_fail_ex+0x262/0x280 [ 59.828525][ T4570] ? security_inode_alloc+0x37/0x100 [ 59.828559][ T4570] should_failslab+0x8c/0xb0 [ 59.828592][ T4570] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 59.828623][ T4570] ? security_inode_alloc+0x37/0x100 [ 59.828650][ T4570] security_inode_alloc+0x37/0x100 [ 59.828720][ T4570] inode_init_always_gfp+0x495/0x4e0 [ 59.828759][ T4570] ? __pfx_proc_alloc_inode+0x10/0x10 [ 59.828797][ T4570] alloc_inode+0x58/0x170 [ 59.828874][ T4570] new_inode+0x1d/0xe0 [ 59.828916][ T4570] proc_sys_make_inode+0x31/0x2a0 [ 59.828952][ T4570] proc_sys_fill_cache+0x1c5/0x250 [ 59.829062][ T4570] proc_sys_readdir+0x328/0x620 [ 59.829109][ T4570] iterate_dir+0x142/0x350 [ 59.829148][ T4570] ? __se_sys_getdents64+0xbb/0x230 [ 59.829175][ T4570] __se_sys_getdents64+0xd2/0x230 [ 59.829351][ T4570] ? __pfx_filldir64+0x10/0x10 [ 59.829389][ T4570] __x64_sys_getdents64+0x43/0x50 [ 59.829426][ T4570] x64_sys_call+0x2387/0x2550 [ 59.829460][ T4570] do_syscall_64+0x112/0x360 [ 59.829517][ T4570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.829549][ T4570] RIP: 0033:0x7f1417a8f559 [ 59.829571][ T4570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.829608][ T4570] RSP: 002b:00007f14164e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 59.829631][ T4570] RAX: ffffffffffffffda RBX: 00007f1417d15fa0 RCX: 00007f1417a8f559 [ 59.829647][ T4570] RDX: 0000000000000400 RSI: 0000200000000340 RDI: 0000000000000004 [ 59.829661][ T4570] RBP: 00007f1417b26b20 R08: 0000000000000000 R09: 0000000000000000 [ 59.829673][ T4570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.829718][ T4570] R13: 00007f1417d16038 R14: 00007f1417d15fa0 R15: 00007ffcd623cc18 [ 59.829814][ T4570] [ 60.247397][ T4579] tipc: Started in network mode [ 60.247471][ T4579] tipc: Node identity e275cdec56a5, cluster identity 4711 [ 60.247606][ T4579] tipc: Enabled bearer , priority 10 [ 60.625745][ T4578] tipc: Resetting bearer [ 60.639256][ T4578] tipc: Disabling bearer [ 60.915807][ T4595] ./dev/sda1: Can't lookup blockdev [ 61.029295][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.413'. [ 61.517212][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 61.517236][ T29] audit: type=1400 audit(1792784333.592:887): avc: denied { mounton } for pid=4614 comm="syz.1.417" path=2F38342FE91F7189591E9233614B dev="tmpfs" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 61.576317][ T4610] syzkaller0: entered promiscuous mode [ 61.576406][ T4610] syzkaller0: entered allmulticast mode [ 61.606274][ T354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.677466][ T354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.767460][ T354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.876480][ T354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.913144][ T29] audit: type=1400 audit(1792784333.992:888): avc: denied { create } for pid=4605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.916819][ T4605] rxe0: rxe_newlink: already configured on rxe_eth0 [ 61.917024][ T29] audit: type=1400 audit(1792784333.992:889): avc: denied { write } for pid=4605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.918250][ T3374] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.975422][ T29] audit: type=1400 audit(1792784334.052:890): avc: denied { read } for pid=4605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.022354][ T4605] dummy0 speed is unknown, defaulting to 1000 [ 62.036814][ T4605] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.087317][ T354] bridge_slave_1: left allmulticast mode [ 62.087346][ T354] bridge_slave_1: left promiscuous mode [ 62.087655][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.096337][ T354] bridge_slave_0: left allmulticast mode [ 62.096438][ T354] bridge_slave_0: left promiscuous mode [ 62.096626][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.430131][ T354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.450013][ T354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.468732][ T354] bond0 (unregistering): Released all slaves [ 62.530254][ T29] audit: type=1400 audit(1792784334.612:891): avc: denied { bind } for pid=4632 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.578673][ T4633] tipc: Failed to remove unknown binding: 66,1,1/0:2144556210/2144556212 [ 62.824746][ T354] hsr_slave_0: left promiscuous mode [ 62.828615][ T354] hsr_slave_1: left promiscuous mode [ 62.836819][ T354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.836876][ T354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.845175][ T354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.845237][ T354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.947419][ T354] veth1_macvtap: left promiscuous mode [ 62.947487][ T354] veth0_macvtap: left promiscuous mode [ 62.947570][ T354] veth1_vlan: left promiscuous mode [ 62.947613][ T354] veth0_vlan: left promiscuous mode [ 63.295735][ T29] audit: type=1400 audit(1792784335.372:892): avc: denied { write } for pid=4643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.414183][ T29] audit: type=1400 audit(1792784335.492:893): avc: denied { write } for pid=4654 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.461278][ T354] team0 (unregistering): Port device team_slave_1 removed [ 63.488320][ T354] team0 (unregistering): Port device team_slave_0 removed [ 63.687998][ T3015] 8021q: adding VLAN 0 to HW filter on device eth1 [ 63.983992][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.984093][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.984654][ T4605] bridge_slave_0: entered allmulticast mode [ 63.986247][ T4605] bridge_slave_0: entered promiscuous mode [ 64.016511][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.016592][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.017000][ T4605] bridge_slave_1: entered allmulticast mode [ 64.040064][ T4605] bridge_slave_1: entered promiscuous mode [ 64.086968][ T4605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.112547][ T4605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.202208][ T4605] team0: Port device team_slave_0 added [ 64.206161][ T29] audit: type=1400 audit(1792784336.282:894): avc: denied { execute_no_trans } for pid=4670 comm="syz.2.426" path="/93/file0" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.248874][ T4605] team0: Port device team_slave_1 added [ 64.394867][ T4681] netlink: 7 bytes leftover after parsing attributes in process `syz.5.428'. [ 64.399084][ T4605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.399204][ T4605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.399355][ T4605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.438674][ T4605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.438792][ T4605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.438891][ T4605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.451672][ T29] audit: type=1400 audit(1792784336.532:895): avc: denied { write } for pid=4661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.525586][ T4683] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.596168][ T29] audit: type=1400 audit(1792784336.672:896): avc: denied { read write } for pid=4685 comm="syz.2.431" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.606962][ T4687] FAULT_INJECTION: forcing a failure. [ 64.606962][ T4687] name failslab, interval 1, probability 0, space 0, times 0 [ 64.607070][ T4687] CPU: 1 UID: 0 PID: 4687 Comm: syz.2.431 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.607236][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.607298][ T4687] Call Trace: [ 64.607333][ T4687] [ 64.607382][ T4687] __dump_stack+0x1d/0x30 [ 64.607490][ T4687] dump_stack_lvl+0x95/0xd0 [ 64.607582][ T4687] dump_stack+0x15/0x1b [ 64.607724][ T4687] should_fail_ex+0x262/0x280 [ 64.607805][ T4687] ? alloc_workqueue_va+0x54d/0x15d0 [ 64.607906][ T4687] should_failslab+0x8c/0xb0 [ 64.608048][ T4687] __kmalloc_cache_node_noprof+0x5f/0x3f0 [ 64.608155][ T4687] ? alloc_workqueue_va+0x54d/0x15d0 [ 64.608322][ T4687] alloc_workqueue_va+0x54d/0x15d0 [ 64.608432][ T4687] alloc_workqueue_noprof+0x84/0xb0 [ 64.608616][ T4687] nci_register_device+0x11e/0x510 [ 64.608717][ T4687] virtual_ncidev_open+0xca/0x130 [ 64.608868][ T4687] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 64.609060][ T4687] misc_open+0x1df/0x220 [ 64.609157][ T4687] chrdev_open+0x2eb/0x3a0 [ 64.609257][ T4687] do_dentry_open+0x496/0xa40 [ 64.609421][ T4687] ? __pfx_chrdev_open+0x10/0x10 [ 64.609530][ T4687] vfs_open_consume+0x46/0x1f0 [ 64.609650][ T4687] path_openat+0xc16/0x11c0 [ 64.609794][ T4687] do_file_open+0x16c/0x290 [ 64.609913][ T4687] do_sys_openat2+0xa1/0x140 [ 64.610069][ T4687] __x64_sys_openat+0xf2/0x120 [ 64.610224][ T4687] x64_sys_call+0x1f72/0x2550 [ 64.610380][ T4687] do_syscall_64+0x112/0x360 [ 64.610468][ T4687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.610555][ T4687] RIP: 0033:0x7fd12ec7f559 [ 64.610622][ T4687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.610764][ T4687] RSP: 002b:00007fd12d6d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.610856][ T4687] RAX: ffffffffffffffda RBX: 00007fd12ef05fa0 RCX: 00007fd12ec7f559 [ 64.610912][ T4687] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 64.610968][ T4687] RBP: 00007fd12ed16b20 R08: 0000000000000000 R09: 0000000000000000 [ 64.611023][ T4687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.611078][ T4687] R13: 00007fd12ef06038 R14: 00007fd12ef05fa0 R15: 00007ffc70be26c8 [ 64.611207][ T4687] [ 64.883943][ T4605] hsr_slave_0: entered promiscuous mode [ 64.901979][ T4605] hsr_slave_1: entered promiscuous mode [ 64.906806][ T4605] debugfs: 'hsr0' already exists in 'hsr' [ 64.906832][ T4605] Cannot create hsr debugfs directory [ 64.984686][ T3015] 8021q: adding VLAN 0 to HW filter on device eth3 [ 65.114800][ T4697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.434'. [ 65.322816][ T4710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.439'. [ 65.583846][ T4723] ip_tables: iptables: counters copy to user failed while replacing table [ 65.652783][ T4723] syzkaller1: entered promiscuous mode [ 65.652818][ T4723] syzkaller1: entered allmulticast mode [ 65.785876][ T4605] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 65.811726][ T4605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.814495][ T4605] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 65.850458][ T4605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.853291][ T4605] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 65.888295][ T4605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.895784][ T4605] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 65.942738][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'. [ 65.944910][ T4605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.022811][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'. [ 66.128328][ T38] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.128445][ T38] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.128622][ T38] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.128673][ T38] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.339507][ T3015] 8021q: adding VLAN 0 to HW filter on device eth2 [ 66.466336][ T4760] netlink: 'syz.1.451': attribute type 39 has an invalid length. [ 66.535503][ T4605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.603763][ T4605] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.657620][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.657711][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.723170][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.723287][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.823070][ T4625] udevd[4625]: inotify_add_watch(7, /dev/sda, 10) failed: No such file or directory [ 66.906612][ T4625] udevd[4625]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 67.282302][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 67.282320][ T29] audit: type=1400 audit(1792784339.362:902): avc: denied { write } for pid=4762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.460483][ T4796] FAULT_INJECTION: forcing a failure. [ 67.460483][ T4796] name failslab, interval 1, probability 0, space 0, times 0 [ 67.460596][ T4796] CPU: 1 UID: 0 PID: 4796 Comm: syz.2.459 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.460629][ T4796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 67.460679][ T4796] Call Trace: [ 67.460692][ T4796] [ 67.460706][ T4796] __dump_stack+0x1d/0x30 [ 67.460856][ T4796] dump_stack_lvl+0x95/0xd0 [ 67.460891][ T4796] dump_stack+0x15/0x1b [ 67.460923][ T4796] should_fail_ex+0x262/0x280 [ 67.460972][ T4796] ? security_inode_alloc+0x37/0x100 [ 67.460998][ T4796] should_failslab+0x8c/0xb0 [ 67.461109][ T4796] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 67.461135][ T4796] ? security_inode_alloc+0x37/0x100 [ 67.461245][ T4796] security_inode_alloc+0x37/0x100 [ 67.461330][ T4796] inode_init_always_gfp+0x495/0x4e0 [ 67.461455][ T4796] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 67.461508][ T4796] alloc_inode+0x58/0x170 [ 67.461601][ T4796] new_inode+0x1d/0xe0 [ 67.461647][ T4796] hugetlbfs_get_inode+0x7b/0x330 [ 67.461694][ T4796] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 67.461750][ T4796] hugetlb_file_setup+0x192/0x3d0 [ 67.461876][ T4796] ksys_mmap_pgoff+0x13f/0x310 [ 67.461930][ T4796] x64_sys_call+0x23b3/0x2550 [ 67.461970][ T4796] do_syscall_64+0x112/0x360 [ 67.462025][ T4796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.462060][ T4796] RIP: 0033:0x7fd12ec7f559 [ 67.462094][ T4796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.462227][ T4796] RSP: 002b:00007fd12d6d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 67.462263][ T4796] RAX: ffffffffffffffda RBX: 00007fd12ef05fa0 RCX: 00007fd12ec7f559 [ 67.462286][ T4796] RDX: 0000000002000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 67.462309][ T4796] RBP: 00007fd12ed16b20 R08: ffffffffffffffff R09: 0000000000000000 [ 67.462380][ T4796] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 67.462395][ T4796] R13: 00007fd12ef06038 R14: 00007fd12ef05fa0 R15: 00007ffc70be26c8 [ 67.462423][ T4796] [ 67.741675][ T29] audit: type=1400 audit(1792784339.822:903): avc: denied { mount } for pid=4805 comm="syz.5.462" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.765093][ T29] audit: type=1400 audit(1792784339.842:904): avc: denied { write } for pid=4800 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.809573][ T4806] PM: suspend entry (s2idle) [ 67.809619][ T4806] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 67.809644][ T4806] PM: suspend exit [ 67.922214][ T29] audit: type=1400 audit(1792784340.002:905): avc: denied { unmount } for pid=4130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.951102][ T3015] 8021q: adding VLAN 0 to HW filter on device eth4 [ 68.004453][ T4816] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 68.096925][ T4605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.340393][ T4828] batman_adv: batadv0: Adding interface: syzkaller0 [ 68.340424][ T4828] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.340568][ T4828] batman_adv: batadv0: Interface activated: syzkaller0 [ 68.405076][ T4826] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 68.427257][ T29] audit: type=1400 audit(1792784340.502:906): avc: denied { create } for pid=4831 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.460771][ T4826] batman_adv: batadv0: Removing interface: syzkaller0 [ 68.510010][ T29] audit: type=1400 audit(1792784340.592:907): avc: denied { connect } for pid=4835 comm="syz.5.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.997892][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.386919][ T4605] veth0_vlan: entered promiscuous mode [ 69.413237][ T4605] veth1_vlan: entered promiscuous mode [ 69.579092][ T4605] veth0_macvtap: entered promiscuous mode [ 69.586042][ T4605] veth1_macvtap: entered promiscuous mode [ 69.587546][ T354] IPVS: starting estimator thread 0... [ 69.663789][ T4605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.688616][ T4859] IPVS: using max 2112 ests per chain, 105600 per kthread [ 69.705564][ T4605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.757434][ T53] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.757603][ T53] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.757659][ T53] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.757704][ T53] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.038895][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.077606][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.078750][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.423287][ T29] audit: type=1400 audit(1792784343.502:908): avc: denied { mounton } for pid=4605 comm="syz-executor" path="/root/syzkaller.QRSOiJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.462631][ T29] audit: type=1400 audit(1792784343.542:909): avc: denied { mount } for pid=4605 comm="syz-executor" name="/" dev="gadgetfs" ino=4649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.495570][ T29] audit: type=1400 audit(1792784343.572:910): avc: denied { watch } for pid=4868 comm="syz.2.479" path="/104/file0" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.818868][ T29] audit: type=1400 audit(1792784343.902:911): avc: denied { setopt } for pid=4879 comm="syz.6.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 72.042821][ T4894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.489'. [ 72.341508][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 72.341531][ T29] audit: type=1326 audit(1792784344.422:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.491" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f3ef559 code=0x7ffc0000 [ 72.341925][ T29] audit: type=1326 audit(1792784344.422:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.491" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f3ef559 code=0x7ffc0000 [ 72.342194][ T29] audit: type=1326 audit(1792784344.422:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.491" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f3ef559 code=0x7ffc0000 [ 72.343322][ T29] audit: type=1326 audit(1792784344.422:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.491" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f3ef559 code=0x7ffc0000 [ 72.344721][ T29] audit: type=1326 audit(1792784344.422:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.491" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f975f3ef559 code=0x7ffc0000 [ 72.345103][ T29] audit: type=1326 audit(1792784344.422:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.491" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f3ef559 code=0x7ffc0000 [ 72.345415][ T29] audit: type=1326 audit(1792784344.422:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.491" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f3ef559 code=0x7ffc0000 [ 72.345795][ T29] audit: type=1326 audit(1792784344.422:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.491" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f3ef559 code=0x7ffc0000 [ 72.585005][ T29] audit: type=1326 audit(1792784344.422:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.491" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f3ef559 code=0x7ffc0000 [ 72.636102][ T29] audit: type=1326 audit(1792784344.712:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.491" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f975f3ef559 code=0x7ffc0000 [ 72.960250][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.967261][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.309170][ T4906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.495'. [ 74.043843][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.118477][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.383864][ T4952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 75.083365][ T3582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.179995][ T4966] netlink: 28 bytes leftover after parsing attributes in process `syz.5.515'. [ 75.180105][ T4966] netlink: 28 bytes leftover after parsing attributes in process `syz.5.515'. [ 75.428320][ T4987] loop4: detected capacity change from 0 to 164 [ 75.435465][ T4987] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 75.458827][ T4990] udevd[4990]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 75.466977][ T4990] udevd[4990]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 75.489203][ T4990] udevd[4990]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 76.047468][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.122365][ T3582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.322411][ T5045] netlink: 'syz.6.540': attribute type 1 has an invalid length. [ 77.161364][ T3582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.392767][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 77.392790][ T29] audit: type=1400 audit(1792784349.472:949): avc: denied { sqpoll } for pid=5072 comm="syz.5.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.628034][ T5088] 9p: Bad value for 'wfdno' [ 77.647927][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 77.771451][ T5094] FAULT_INJECTION: forcing a failure. [ 77.771451][ T5094] name failslab, interval 1, probability 0, space 0, times 0 [ 77.771534][ T5094] CPU: 0 UID: 0 PID: 5094 Comm: syz.6.561 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.771571][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.771592][ T5094] Call Trace: [ 77.771604][ T5094] [ 77.771617][ T5094] __dump_stack+0x1d/0x30 [ 77.771667][ T5094] dump_stack_lvl+0x95/0xd0 [ 77.771691][ T5094] dump_stack+0x15/0x1b [ 77.771718][ T5094] should_fail_ex+0x262/0x280 [ 77.771853][ T5094] should_failslab+0x8c/0xb0 [ 77.771888][ T5094] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 77.771962][ T5094] ? __d_alloc+0x34/0x320 [ 77.771989][ T5094] ? __d_alloc+0x34/0x320 [ 77.772020][ T5094] __d_alloc+0x34/0x320 [ 77.772042][ T5094] ? d_alloc_pseudo+0x13/0x80 [ 77.772077][ T5094] d_alloc_pseudo+0x1e/0x80 [ 77.772182][ T5094] alloc_path_pseudo+0xa4/0x140 [ 77.772224][ T5094] alloc_file_pseudo+0x55/0x120 [ 77.772279][ T5094] sock_alloc_file+0x9c/0x1e0 [ 77.772349][ T5094] __sys_socketpair+0x1ca/0x470 [ 77.772395][ T5094] __x64_sys_socketpair+0x52/0x60 [ 77.772419][ T5094] x64_sys_call+0x1bf7/0x2550 [ 77.772471][ T5094] do_syscall_64+0x112/0x360 [ 77.772502][ T5094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.772536][ T5094] RIP: 0033:0x7f35d4eff559 [ 77.772561][ T5094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.772627][ T5094] RSP: 002b:00007f35d3957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 77.772715][ T5094] RAX: ffffffffffffffda RBX: 00007f35d5185fa0 RCX: 00007f35d4eff559 [ 77.772731][ T5094] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 77.772750][ T5094] RBP: 00007f35d4f96b20 R08: 0000000000000000 R09: 0000000000000000 [ 77.772771][ T5094] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.772793][ T5094] R13: 00007f35d5186038 R14: 00007f35d5185fa0 R15: 00007ffc9ccaaf88 [ 77.772829][ T5094] [ 78.090941][ T29] audit: type=1400 audit(1792784350.172:950): avc: denied { map } for pid=5104 comm="syz.2.566" path="socket:[10305]" dev="sockfs" ino=10305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 78.092034][ T5106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.092246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.151817][ T29] audit: type=1400 audit(1792784350.232:951): avc: denied { read } for pid=5105 comm="syz.1.567" path="socket:[10141]" dev="sockfs" ino=10141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.201706][ T3582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.356017][ T29] audit: type=1400 audit(1792784350.432:952): avc: denied { ioctl } for pid=5127 comm="syz.6.575" path="socket:[10334]" dev="sockfs" ino=10334 ioctlcmd=0x400261f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 78.603669][ T29] audit: type=1400 audit(1792784350.682:953): avc: denied { bind } for pid=5145 comm="syz.6.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.732344][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.732526][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.732851][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.833660][ T29] audit: type=1400 audit(1792784350.912:954): avc: denied { write } for pid=5122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.034762][ T29] audit: type=1400 audit(1792784351.112:955): avc: denied { write } for pid=5159 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.816373][ T29] audit: type=1400 audit(2000000000.160:956): avc: denied { write } for pid=5165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.974321][ T29] audit: type=1400 audit(2000000000.320:957): avc: denied { write } for pid=5196 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.285494][ T3374] net_ratelimit: 66 callbacks suppressed [ 80.285520][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.399143][ T29] audit: type=1400 audit(2000000000.740:958): avc: denied { write } for pid=5204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.611006][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ba9ce00: rx timeout, send abort [ 80.611348][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ba9ce00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 81.328402][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.385787][ T5273] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 81.469660][ T5114] Set syz1 is full, maxelem 65536 reached [ 82.128367][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.233538][ T5346] FAULT_INJECTION: forcing a failure. [ 82.233538][ T5346] name failslab, interval 1, probability 0, space 0, times 0 [ 82.233588][ T5346] CPU: 1 UID: 0 PID: 5346 Comm: syz.5.618 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 82.233633][ T5346] Tainted: [Y]=FORCED_BIND [ 82.233675][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.233695][ T5346] Call Trace: [ 82.233708][ T5346] [ 82.233717][ T5346] __dump_stack+0x1d/0x30 [ 82.233745][ T5346] dump_stack_lvl+0x95/0xd0 [ 82.233773][ T5346] dump_stack+0x15/0x1b [ 82.233822][ T5346] should_fail_ex+0x262/0x280 [ 82.233860][ T5346] ? single_open+0xc4/0x170 [ 82.233896][ T5346] should_failslab+0x8c/0xb0 [ 82.233933][ T5346] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 82.233967][ T5346] ? trace_event_raw_event_kmem_cache_alloc+0x131/0x190 [ 82.234010][ T5346] ? single_open+0xc4/0x170 [ 82.234050][ T5346] single_open+0xc4/0x170 [ 82.234086][ T5346] single_open_net+0x190/0x2a0 [ 82.234167][ T5346] proc_reg_open+0x1a4/0x350 [ 82.234197][ T5346] do_dentry_open+0x496/0xa40 [ 82.234234][ T5346] ? __pfx_proc_reg_open+0x10/0x10 [ 82.234338][ T5346] vfs_open_consume+0x46/0x1f0 [ 82.234373][ T5346] path_openat+0xc16/0x11c0 [ 82.234418][ T5346] do_file_open+0x16c/0x290 [ 82.234447][ T5346] ? __pfx_kfree_link+0x10/0x10 [ 82.234503][ T5346] do_sys_openat2+0xa1/0x140 [ 82.234545][ T5346] __x64_sys_openat+0xf2/0x120 [ 82.234583][ T5346] x64_sys_call+0x1f72/0x2550 [ 82.234696][ T5346] do_syscall_64+0x112/0x360 [ 82.234731][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.234788][ T5346] RIP: 0033:0x7f368586fd8e [ 82.234813][ T5346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 82.234841][ T5346] RSP: 002b:00007f36842feec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.234865][ T5346] RAX: ffffffffffffffda RBX: 00007f36842ff6c0 RCX: 00007f368586fd8e [ 82.234932][ T5346] RDX: 0000000000000002 RSI: 00007f36842fef90 RDI: ffffffffffffff9c [ 82.234954][ T5346] RBP: 00007f3685946b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.234975][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.234992][ T5346] R13: 00007f3685b36038 R14: 00007f3685b35fa0 R15: 00007ffc23da8fd8 [ 82.235015][ T5346] [ 82.366689][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.504303][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 82.504328][ T29] audit: type=1400 audit(2000000002.850:975): avc: denied { read } for pid=5350 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.543480][ T29] audit: type=1400 audit(2000000002.890:976): avc: denied { setopt } for pid=5352 comm="syz.6.621" lport=60194 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 82.877058][ T29] audit: type=1326 audit(2000000003.220:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.5.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36858af559 code=0x7ffc0000 [ 82.877288][ T29] audit: type=1326 audit(2000000003.220:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.5.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36858af559 code=0x7ffc0000 [ 82.883319][ T29] audit: type=1326 audit(2000000003.230:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.5.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36858af559 code=0x7ffc0000 [ 82.889163][ T29] audit: type=1326 audit(2000000003.240:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.5.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36858af559 code=0x7ffc0000 [ 82.890850][ T29] audit: type=1326 audit(2000000003.240:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.5.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f36858af559 code=0x7ffc0000 [ 82.892696][ T29] audit: type=1326 audit(2000000003.240:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.5.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36858af559 code=0x7ffc0000 [ 82.954147][ T29] audit: type=1326 audit(2000000003.300:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.5.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f368586fd8e code=0x7ffc0000 [ 82.962599][ T29] audit: type=1326 audit(2000000003.310:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.5.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f368586fd8e code=0x7ffc0000 [ 83.259566][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.259846][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.393304][ T5389] netlink: 'syz.6.636': attribute type 1 has an invalid length. [ 83.408761][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.639602][ T5404] netlink: 'syz.1.644': attribute type 10 has an invalid length. [ 83.644821][ T5404] syz_tun: entered promiscuous mode [ 83.680378][ T5404] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 83.718130][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.763779][ T5412] netlink: 'syz.5.645': attribute type 4 has an invalid length. [ 83.790101][ T5412] netlink: 'syz.5.645': attribute type 4 has an invalid length. [ 84.003072][ T5423] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.351309][ T5426] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 84.443641][ T3582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.525502][ T5437] dummy0 speed is unknown, defaulting to 1000 [ 84.526030][ T5437] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.580157][ T5439] FAULT_INJECTION: forcing a failure. [ 84.580157][ T5439] name failslab, interval 1, probability 0, space 0, times 0 [ 84.580213][ T5439] CPU: 1 UID: 0 PID: 5439 Comm: syz.6.656 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 84.580279][ T5439] Tainted: [Y]=FORCED_BIND [ 84.580293][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.580315][ T5439] Call Trace: [ 84.580327][ T5439] [ 84.580341][ T5439] __dump_stack+0x1d/0x30 [ 84.580385][ T5439] dump_stack_lvl+0x95/0xd0 [ 84.580487][ T5439] dump_stack+0x15/0x1b [ 84.580518][ T5439] should_fail_ex+0x262/0x280 [ 84.580553][ T5439] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 84.580666][ T5439] should_failslab+0x8c/0xb0 [ 84.580698][ T5439] __kmalloc_cache_noprof+0x5d/0x3e0 [ 84.580743][ T5439] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 84.580804][ T5439] selinux_netlbl_sock_genattr+0x88/0x260 [ 84.580850][ T5439] selinux_netlbl_socket_post_create+0x66/0x100 [ 84.581025][ T5439] selinux_socket_post_create+0x219/0x290 [ 84.581068][ T5439] security_socket_post_create+0x59/0xa0 [ 84.581153][ T5439] __sock_create+0x356/0x580 [ 84.581206][ T5439] sock_create_kern+0x38/0x50 [ 84.581257][ T5439] udp_sock_create6+0x68/0x3f0 [ 84.581348][ T5439] rxe_net_init+0x24a/0x460 [ 84.581379][ T5439] rxe_newlink+0xbc/0x1a0 [ 84.581448][ T5439] nldev_newlink+0x3a8/0x430 [ 84.581538][ T5439] ? __pfx_nldev_newlink+0x10/0x10 [ 84.581611][ T5439] rdma_nl_rcv+0x439/0x570 [ 84.581649][ T5439] ? selinux_nlmsg_lookup+0x9b/0x870 [ 84.581774][ T5439] netlink_unicast+0x665/0x740 [ 84.581811][ T5439] netlink_sendmsg+0x5ef/0x740 [ 84.581850][ T5439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.581889][ T5439] ____sys_sendmsg+0x54a/0x590 [ 84.581966][ T5439] ___sys_sendmsg+0x195/0x1e0 [ 84.582026][ T5439] __x64_sys_sendmsg+0xd4/0x160 [ 84.582071][ T5439] x64_sys_call+0x22ab/0x2550 [ 84.582120][ T5439] do_syscall_64+0x112/0x360 [ 84.582154][ T5439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.582252][ T5439] RIP: 0033:0x7f35d4eff559 [ 84.582278][ T5439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.582324][ T5439] RSP: 002b:00007f35d3957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.582359][ T5439] RAX: ffffffffffffffda RBX: 00007f35d5185fa0 RCX: 00007f35d4eff559 [ 84.582517][ T5439] RDX: 0000000000004004 RSI: 0000200000000140 RDI: 0000000000000005 [ 84.582539][ T5439] RBP: 00007f35d4f96b20 R08: 0000000000000000 R09: 0000000000000000 [ 84.582561][ T5439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.582582][ T5439] R13: 00007f35d5186038 R14: 00007f35d5185fa0 R15: 00007ffc9ccaaf88 [ 84.582607][ T5439] [ 84.583072][ T5439] rdma_rxe: Failed to create IPv6 UDP tunnel [ 85.157517][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.481426][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.706801][ T5474] ./dev/sda1: Can't lookup blockdev [ 86.558441][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.916346][ T5513] netlink: 'syz.6.687': attribute type 4 has an invalid length. [ 86.946885][ T5513] netlink: 'syz.6.687': attribute type 4 has an invalid length. [ 87.639440][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.854109][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.711'. [ 88.208343][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.520073][ T5573] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 88.679376][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.723540][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.349526][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.349854][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.443937][ T5593] ./dev/sda1: Can't lookup blockdev [ 90.758127][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.853942][ T5604] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.371163][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.437365][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 91.437384][ T29] audit: type=1400 audit(2000000011.790:1023): avc: denied { connect } for pid=5614 comm="syz.6.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.473893][ T29] audit: type=1400 audit(2000000011.820:1024): avc: denied { read } for pid=5614 comm="syz.6.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.612147][ T5624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.732'. [ 91.797411][ T3582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.049468][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.103187][ T5646] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 92.143260][ T29] audit: type=1400 audit(2000000012.490:1025): avc: denied { create } for pid=5647 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.487919][ T29] audit: type=1400 audit(2000000012.820:1026): avc: denied { listen } for pid=5655 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.487979][ T29] audit: type=1400 audit(2000000012.820:1027): avc: denied { setopt } for pid=5655 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.162170][ T3582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.319497][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.865038][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.865585][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.866070][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.302185][ T5694] loop4: detected capacity change from 0 to 512 [ 94.303574][ T5694] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 94.307952][ T5606] udevd[5606]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 94.345610][ T5606] udevd[5606]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 94.363938][ T5606] udevd[5606]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 94.382885][ T5694] loop4: detected capacity change from 0 to 512 [ 94.385786][ T5697] netlink: 'syz.6.765': attribute type 4 has an invalid length. [ 94.414098][ T5606] udevd[5606]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 94.415607][ T5694] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 94.415625][ T5694] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 94.444793][ T5694] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.774: bg 0: block 4: invalid block bitmap [ 94.444908][ T5694] loop4: lost filesystem error report for type 5 error -117 [ 94.447269][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 94.447348][ C1] EXT4-fs (loop4): initial error at time 2000000014: ext4_validate_block_bitmap:436 [ 94.447455][ C1] EXT4-fs (loop4): last error at time 2000000014: ext4_validate_block_bitmap:436 [ 94.450780][ T5694] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 94.450845][ T5694] loop4: lost filesystem error report for type 5 error -117 [ 94.452958][ T5694] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.774: invalid indirect mapped block 1 (level 1) [ 94.453068][ T5694] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.464671][ T5694] EXT4-fs (loop4): 1 truncate cleaned up [ 94.466233][ T5694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.620856][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.643372][ T5606] udevd[5606]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 94.674099][ T5606] udevd[5606]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 94.736176][ T5704] netlink: 'syz.5.769': attribute type 5 has an invalid length. [ 94.736263][ T5704] netlink: 'syz.5.769': attribute type 1 has an invalid length. [ 94.736326][ T5704] netlink: 'syz.5.769': attribute type 5 has an invalid length. [ 94.736345][ T5704] netlink: 'syz.5.769': attribute type 1 has an invalid length. [ 94.736361][ T5704] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 95.264651][ T5725] FAULT_INJECTION: forcing a failure. [ 95.264651][ T5725] name failslab, interval 1, probability 0, space 0, times 0 [ 95.264695][ T5725] CPU: 0 UID: 0 PID: 5725 Comm: syz.5.778 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 95.264783][ T5725] Tainted: [Y]=FORCED_BIND [ 95.264796][ T5725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.264817][ T5725] Call Trace: [ 95.264828][ T5725] [ 95.264841][ T5725] __dump_stack+0x1d/0x30 [ 95.264877][ T5725] dump_stack_lvl+0x95/0xd0 [ 95.264940][ T5725] dump_stack+0x15/0x1b [ 95.265051][ T5725] should_fail_ex+0x262/0x280 [ 95.265079][ T5725] ? udpv6_init_sock+0xfa/0x1f0 [ 95.265120][ T5725] should_failslab+0x8c/0xb0 [ 95.265201][ T5725] __kmalloc_noprof+0xb6/0x4b0 [ 95.265243][ T5725] ? udpv6_init_sock+0xfa/0x1f0 [ 95.265290][ T5725] udpv6_init_sock+0xfa/0x1f0 [ 95.265379][ T5725] inet6_create+0x7f2/0x860 [ 95.265474][ T5725] __sock_create+0x2e5/0x580 [ 95.265526][ T5725] sock_create_kern+0x38/0x50 [ 95.265627][ T5725] udp_sock_create6+0x68/0x3f0 [ 95.265678][ T5725] rxe_net_init+0x24a/0x460 [ 95.265721][ T5725] rxe_newlink+0xbc/0x1a0 [ 95.265768][ T5725] nldev_newlink+0x3a8/0x430 [ 95.265880][ T5725] ? __pfx_nldev_newlink+0x10/0x10 [ 95.265963][ T5725] rdma_nl_rcv+0x439/0x570 [ 95.266001][ T5725] ? selinux_nlmsg_lookup+0x9b/0x870 [ 95.266045][ T5725] netlink_unicast+0x665/0x740 [ 95.266148][ T5725] netlink_sendmsg+0x5ef/0x740 [ 95.266193][ T5725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.266298][ T5725] ____sys_sendmsg+0x54a/0x590 [ 95.266342][ T5725] ___sys_sendmsg+0x195/0x1e0 [ 95.266435][ T5725] __x64_sys_sendmsg+0xd4/0x160 [ 95.266511][ T5725] x64_sys_call+0x22ab/0x2550 [ 95.266550][ T5725] do_syscall_64+0x112/0x360 [ 95.266652][ T5725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.266685][ T5725] RIP: 0033:0x7f36858af559 [ 95.266710][ T5725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.266763][ T5725] RSP: 002b:00007f36842ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.266796][ T5725] RAX: ffffffffffffffda RBX: 00007f3685b35fa0 RCX: 00007f36858af559 [ 95.266820][ T5725] RDX: 0000000000004004 RSI: 0000200000000140 RDI: 0000000000000005 [ 95.266920][ T5725] RBP: 00007f3685946b20 R08: 0000000000000000 R09: 0000000000000000 [ 95.267011][ T5725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.267031][ T5725] R13: 00007f3685b36038 R14: 00007f3685b35fa0 R15: 00007ffc23da8fd8 [ 95.267062][ T5725] [ 95.490689][ T5725] rdma_rxe: Failed to create IPv6 UDP tunnel [ 95.767333][ T5681] net_ratelimit: 794 callbacks suppressed [ 95.767427][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.769998][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.770474][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.771046][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.772879][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.773343][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.775786][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.776304][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.776738][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.780941][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.988979][ T29] audit: type=1400 audit(2000000016.340:1028): avc: denied { setopt } for pid=5739 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.040946][ T5743] loop4: detected capacity change from 0 to 512 [ 96.044655][ T5743] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 96.044675][ T5743] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.069330][ T5606] udevd[5606]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 96.099950][ T5743] EXT4-fs (loop4): 1 truncate cleaned up [ 96.100726][ T5743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.136841][ T29] audit: type=1400 audit(2000000016.480:1029): avc: denied { write } for pid=5742 comm="syz.4.787" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.176030][ T29] audit: type=1400 audit(2000000016.520:1030): avc: denied { append } for pid=5742 comm="syz.4.787" path="/149/file0/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 96.272869][ T29] audit: type=1400 audit(2000000016.620:1031): avc: denied { map } for pid=5742 comm="syz.4.787" path="/149/file0/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 96.442271][ T5762] rdma_rxe: rxe_newlink: failed to add wg0 [ 96.740649][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.763351][ T5606] udevd[5606]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 96.767212][ T5606] udevd[5606]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 96.837877][ T5778] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 64 (only 8 groups) [ 96.959566][ T5784] netlink: 'syz.4.799': attribute type 1 has an invalid length. [ 97.009599][ T5784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.121979][ T5789] bond1: (slave erspan1): making interface the new active one [ 97.144655][ T5789] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 97.282629][ T5795] FAULT_INJECTION: forcing a failure. [ 97.282629][ T5795] name failslab, interval 1, probability 0, space 0, times 0 [ 97.282734][ T5795] CPU: 0 UID: 0 PID: 5795 Comm: syz.4.805 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 97.282789][ T5795] Tainted: [Y]=FORCED_BIND [ 97.282958][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.282977][ T5795] Call Trace: [ 97.282986][ T5795] [ 97.282998][ T5795] __dump_stack+0x1d/0x30 [ 97.283039][ T5795] dump_stack_lvl+0x95/0xd0 [ 97.283151][ T5795] dump_stack+0x15/0x1b [ 97.283256][ T5795] should_fail_ex+0x262/0x280 [ 97.283341][ T5795] ? udpv6_init_sock+0xfa/0x1f0 [ 97.283393][ T5795] should_failslab+0x8c/0xb0 [ 97.283496][ T5795] __kmalloc_noprof+0xb6/0x4b0 [ 97.283582][ T5795] ? udpv6_init_sock+0xfa/0x1f0 [ 97.283622][ T5795] udpv6_init_sock+0xfa/0x1f0 [ 97.283735][ T5795] inet6_create+0x7f2/0x860 [ 97.283773][ T5795] __sock_create+0x2e5/0x580 [ 97.283826][ T5795] sock_create_kern+0x38/0x50 [ 97.283876][ T5795] udp_sock_create6+0x68/0x3f0 [ 97.284004][ T5795] rxe_net_init+0x24a/0x460 [ 97.284071][ T5795] rxe_newlink+0xbc/0x1a0 [ 97.284160][ T5795] nldev_newlink+0x3a8/0x430 [ 97.284289][ T5795] ? __pfx_nldev_newlink+0x10/0x10 [ 97.284318][ T5795] rdma_nl_rcv+0x439/0x570 [ 97.284406][ T5795] ? selinux_nlmsg_lookup+0x9b/0x870 [ 97.284454][ T5795] netlink_unicast+0x665/0x740 [ 97.284634][ T5795] netlink_sendmsg+0x5ef/0x740 [ 97.284668][ T5795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.284706][ T5795] ____sys_sendmsg+0x54a/0x590 [ 97.284779][ T5795] ___sys_sendmsg+0x195/0x1e0 [ 97.284854][ T5795] __x64_sys_sendmsg+0xd4/0x160 [ 97.284886][ T5795] x64_sys_call+0x22ab/0x2550 [ 97.284930][ T5795] do_syscall_64+0x112/0x360 [ 97.284957][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.284991][ T5795] RIP: 0033:0x7f1417a8f559 [ 97.285096][ T5795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.285127][ T5795] RSP: 002b:00007f14164e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.285165][ T5795] RAX: ffffffffffffffda RBX: 00007f1417d15fa0 RCX: 00007f1417a8f559 [ 97.285208][ T5795] RDX: 0000000000004004 RSI: 0000200000000140 RDI: 0000000000000005 [ 97.285227][ T5795] RBP: 00007f1417b26b20 R08: 0000000000000000 R09: 0000000000000000 [ 97.285244][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.285264][ T5795] R13: 00007f1417d16038 R14: 00007f1417d15fa0 R15: 00007ffcd623cc18 [ 97.285295][ T5795] [ 97.285925][ T5795] rdma_rxe: Failed to create IPv6 UDP tunnel [ 97.555807][ T5791] io-wq is not configured for unbound workers [ 97.626136][ T5799] syzkaller0: entered promiscuous mode [ 97.626165][ T5799] syzkaller0: entered allmulticast mode [ 97.750682][ T5801] loop4: detected capacity change from 0 to 1024 [ 97.755268][ T5606] udevd[5606]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 97.763736][ T5801] EXT4-fs: Ignoring removed bh option [ 97.812194][ T5801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.836869][ T29] audit: type=1400 audit(2000000018.190:1032): avc: denied { write } for pid=5800 comm="syz.4.807" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.836989][ T29] audit: type=1400 audit(2000000018.190:1033): avc: denied { append } for pid=5800 comm="syz.4.807" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.845047][ T29] audit: type=1400 audit(2000000018.190:1034): avc: denied { open } for pid=5800 comm="syz.4.807" path="/153/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.913405][ T29] audit: type=1400 audit(2000000018.260:1035): avc: denied { write } for pid=5800 comm="syz.4.807" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.913888][ T5801] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.957784][ T29] audit: type=1400 audit(2000000018.310:1036): avc: denied { read } for pid=5800 comm="syz.4.807" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.959717][ T29] audit: type=1400 audit(2000000018.310:1037): avc: denied { ioctl } for pid=5800 comm="syz.4.807" path="/153/file1/file1" dev="loop4" ino=15 ioctlcmd=0xc020660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.043236][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.362132][ T5831] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 98.396847][ T5831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.517053][ T5841] netlink: 'syz.4.823': attribute type 4 has an invalid length. [ 98.592145][ T5841] netlink: 'syz.4.823': attribute type 4 has an invalid length. [ 98.713552][ T5852] loop4: detected capacity change from 0 to 512 [ 98.718849][ T5852] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 98.758549][ T5852] loop4: detected capacity change from 0 to 512 [ 98.769508][ T5852] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 98.769531][ T5852] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 98.772919][ T5852] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.828: bg 0: block 4: invalid block bitmap [ 98.772951][ T5852] loop4: lost filesystem error report for type 5 error -117 [ 98.773624][ T5852] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 98.773645][ T5852] loop4: lost filesystem error report for type 5 error -117 [ 98.774250][ T5852] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.828: invalid indirect mapped block 1 (level 1) [ 98.774280][ T5852] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 98.775326][ T5852] EXT4-fs (loop4): 1 truncate cleaned up [ 98.776145][ T5852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.934195][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.115057][ T5866] netlink: 'syz.1.830': attribute type 4 has an invalid length. [ 99.197429][ T5872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.253139][ T5872] bond1: (slave erspan1): making interface the new active one [ 99.265395][ T5872] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 100.509641][ T5905] validate_nla: 2 callbacks suppressed [ 100.509666][ T5905] netlink: 'syz.5.845': attribute type 1 has an invalid length. [ 100.571586][ T5905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.869277][ T5908] bond1: (slave erspan1): making interface the new active one [ 100.894028][ T5908] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 101.117919][ T29] audit: type=1400 audit(2000000021.460:1038): avc: denied { getopt } for pid=5911 comm="syz.5.847" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.159080][ T3354] net_ratelimit: 976 callbacks suppressed [ 101.159105][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.403124][ T5849] Set syz1 is full, maxelem 65536 reached [ 101.445150][ T29] audit: type=1400 audit(2000000021.790:1039): avc: denied { getopt } for pid=5921 comm="syz.5.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.482507][ T3582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.625850][ T5926] netlink: 'syz.5.864': attribute type 1 has an invalid length. [ 101.681242][ T5926] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.702630][ T5933] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.778537][ T5932] bond2: (slave gretap1): making interface the new active one [ 101.783878][ T5932] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 101.842777][ T5932] syz.5.864 (5932) used greatest stack depth: 9632 bytes left [ 102.367197][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.521484][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.945104][ T29] audit: type=1400 audit(2000000023.290:1040): avc: denied { mount } for pid=5987 comm="syz.5.872" name="/" dev="rpc_pipefs" ino=12321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 102.971163][ T5988] netlink: 'syz.2.871': attribute type 1 has an invalid length. [ 103.035290][ T29] audit: type=1400 audit(2000000023.380:1041): avc: denied { unmount } for pid=4130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 103.109755][ T5988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.195977][ T5996] FAULT_INJECTION: forcing a failure. [ 103.195977][ T5996] name failslab, interval 1, probability 0, space 0, times 0 [ 103.196016][ T5996] CPU: 1 UID: 0 PID: 5996 Comm: syz.5.873 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 103.196060][ T5996] Tainted: [Y]=FORCED_BIND [ 103.196073][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.196094][ T5996] Call Trace: [ 103.196137][ T5996] [ 103.196147][ T5996] __dump_stack+0x1d/0x30 [ 103.196192][ T5996] dump_stack_lvl+0x95/0xd0 [ 103.196235][ T5996] dump_stack+0x15/0x1b [ 103.196257][ T5996] should_fail_ex+0x262/0x280 [ 103.196301][ T5996] ? devcgroup_css_alloc+0x2e/0xa0 [ 103.196340][ T5996] should_failslab+0x8c/0xb0 [ 103.196444][ T5996] __kmalloc_cache_noprof+0x5d/0x3e0 [ 103.196512][ T5996] ? devcgroup_css_alloc+0x2e/0xa0 [ 103.196544][ T5996] devcgroup_css_alloc+0x2e/0xa0 [ 103.196582][ T5996] cgroup_apply_control_enable+0x1f9/0x8b0 [ 103.196696][ T5996] cgroup_mkdir+0x1104/0x11b0 [ 103.196731][ T5996] ? __pfx_cgroup_mkdir+0x10/0x10 [ 103.196772][ T5996] kernfs_iop_mkdir+0x11e/0x1c0 [ 103.196920][ T5996] vfs_mkdir+0x29d/0x3e0 [ 103.196960][ T5996] filename_mkdirat+0x138/0x300 [ 103.196990][ T5996] __se_sys_mkdirat+0x32/0xf0 [ 103.197044][ T5996] __x64_sys_mkdirat+0x43/0x50 [ 103.197127][ T5996] x64_sys_call+0x368/0x2550 [ 103.197158][ T5996] do_syscall_64+0x112/0x360 [ 103.197236][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.197270][ T5996] RIP: 0033:0x7f36858af559 [ 103.197295][ T5996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.197420][ T5996] RSP: 002b:00007f36842ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 103.197509][ T5996] RAX: ffffffffffffffda RBX: 00007f3685b35fa0 RCX: 00007f36858af559 [ 103.197532][ T5996] RDX: 00000000000001ff RSI: 00002000000008c0 RDI: ffffffffffffff9c [ 103.197568][ T5996] RBP: 00007f3685946b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.197587][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.197673][ T5996] R13: 00007f3685b36038 R14: 00007f3685b35fa0 R15: 00007ffc23da8fd8 [ 103.197702][ T5996] [ 103.438484][ T5993] bond2: (slave gretap1): making interface the new active one [ 103.456237][ T5993] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 103.602398][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.077554][ T6049] netlink: 'syz.6.875': attribute type 1 has an invalid length. [ 104.128040][ T6049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.229797][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.229913][ T6058] bridge0: port 2(bridge_slave_1) entered listening state [ 104.230194][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.230259][ T6058] bridge0: port 1(bridge_slave_0) entered listening state [ 104.388998][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.584498][ T6071] netlink: 104 bytes leftover after parsing attributes in process `syz.4.887'. [ 104.677534][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.817616][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.940798][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 104.940898][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 104.940948][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.892'. [ 105.179347][ T6091] netlink: 'syz.5.895': attribute type 1 has an invalid length. [ 105.209306][ T6091] bond3: entered promiscuous mode [ 105.209336][ T6091] bond3: entered allmulticast mode [ 105.210204][ T6091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.165001][ T6115] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 106.196099][ T6115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.306664][ T6118] net_ratelimit: 2 callbacks suppressed [ 106.306738][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.306897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.758937][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.759172][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.799293][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.438359][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.488923][ T6115] bond2: (slave gretap1): making interface the new active one [ 108.514585][ T6115] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 108.776888][ T6142] loop4: detected capacity change from 0 to 512 [ 108.833350][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 108.834189][ T6142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.834746][ T6142] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.852806][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.961617][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.994173][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 109.024733][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 109.183063][ T29] audit: type=1400 audit(2000000029.530:1042): avc: denied { create } for pid=6154 comm="syz.6.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.878544][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.073911][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.934'. [ 110.120892][ T6182] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.168249][ T6184] bond4: Unable to set up delay as MII monitoring is disabled [ 110.455262][ T6186] loop4: detected capacity change from 0 to 8192 [ 110.461572][ T6186] syz.4.935: attempt to access beyond end of device [ 110.461572][ T6186] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 110.461610][ T6186] Buffer I/O error on dev loop4, logical block 57847, async page read [ 110.462273][ T6186] syz.4.935: attempt to access beyond end of device [ 110.462273][ T6186] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 110.462349][ T6186] Buffer I/O error on dev loop4, logical block 57847, async page read [ 110.462505][ T6186] syz.4.935: attempt to access beyond end of device [ 110.462505][ T6186] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 110.462536][ T6186] Buffer I/O error on dev loop4, logical block 57847, async page read [ 110.462601][ T6186] syz.4.935: attempt to access beyond end of device [ 110.462601][ T6186] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 110.462637][ T6186] Buffer I/O error on dev loop4, logical block 57847, async page read [ 110.462737][ T6186] syz.4.935: attempt to access beyond end of device [ 110.462737][ T6186] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 110.462763][ T6186] Buffer I/O error on dev loop4, logical block 57847, async page read [ 110.462920][ T6186] syz.4.935: attempt to access beyond end of device [ 110.462920][ T6186] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 110.462953][ T6186] Buffer I/O error on dev loop4, logical block 57847, async page read [ 110.463027][ T6186] syz.4.935: attempt to access beyond end of device [ 110.463027][ T6186] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 110.463060][ T6186] Buffer I/O error on dev loop4, logical block 57847, async page read [ 110.463123][ T6186] syz.4.935: attempt to access beyond end of device [ 110.463123][ T6186] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 110.463148][ T6186] Buffer I/O error on dev loop4, logical block 57847, async page read [ 110.463869][ T6186] syz.4.935: attempt to access beyond end of device [ 110.463869][ T6186] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 110.463906][ T6186] Buffer I/O error on dev loop4, logical block 57847, async page read [ 110.464018][ T6186] syz.4.935: attempt to access beyond end of device [ 110.464018][ T6186] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 110.464051][ T6186] Buffer I/O error on dev loop4, logical block 57847, async page read [ 110.562853][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 110.917998][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.125958][ T29] audit: type=1400 audit(2000000031.470:1043): avc: denied { cmd } for pid=6196 comm="syz.5.939" path="socket:[12524]" dev="sockfs" ino=12524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 111.173908][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 111.188565][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 111.400940][ T6207] netlink: 'syz.2.942': attribute type 5 has an invalid length. [ 111.478409][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.543489][ T29] audit: type=1400 audit(2000000031.890:1044): avc: denied { mount } for pid=6217 comm="syz.2.945" name="/" dev="autofs" ino=13603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 111.632055][ T6220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.958084][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.051804][ T6237] netlink: 7 bytes leftover after parsing attributes in process `syz.2.953'. [ 112.698615][ T6249] FAULT_INJECTION: forcing a failure. [ 112.698615][ T6249] name failslab, interval 1, probability 0, space 0, times 0 [ 112.698660][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.5.960 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 112.698695][ T6249] Tainted: [Y]=FORCED_BIND [ 112.698719][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.698736][ T6249] Call Trace: [ 112.698745][ T6249] [ 112.698754][ T6249] __dump_stack+0x1d/0x30 [ 112.698833][ T6249] dump_stack_lvl+0x95/0xd0 [ 112.698866][ T6249] dump_stack+0x15/0x1b [ 112.698892][ T6249] should_fail_ex+0x262/0x280 [ 112.698968][ T6249] ? security_inode_alloc+0x37/0x100 [ 112.698999][ T6249] should_failslab+0x8c/0xb0 [ 112.699066][ T6249] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 112.699090][ T6249] ? security_inode_alloc+0x37/0x100 [ 112.699119][ T6249] security_inode_alloc+0x37/0x100 [ 112.699217][ T6249] inode_init_always_gfp+0x495/0x4e0 [ 112.699268][ T6249] ? __pfx_sock_alloc_inode+0x10/0x10 [ 112.699395][ T6249] alloc_inode+0x58/0x170 [ 112.699426][ T6249] __sock_create+0x121/0x580 [ 112.699481][ T6249] ? __kmalloc_noprof+0x3e9/0x4b0 [ 112.699516][ T6249] ? full_name_hash+0x92/0xe0 [ 112.699564][ T6249] sock_create_kern+0x38/0x50 [ 112.699635][ T6249] start_sync_thread+0x9a4/0x1790 [ 112.699675][ T6249] ? __pfx_sync_thread_backup+0x10/0x10 [ 112.699795][ T6249] ? should_fail_ex+0xdb/0x280 [ 112.699831][ T6249] do_ip_vs_set_ctl+0x313/0xab0 [ 112.699886][ T6249] nf_setsockopt+0x199/0x1b0 [ 112.699984][ T6249] ip_setsockopt+0x102/0x110 [ 112.700095][ T6249] tcp_setsockopt+0x98/0xb0 [ 112.700126][ T6249] sock_common_setsockopt+0x69/0x80 [ 112.700166][ T6249] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 112.700225][ T6249] smc_setsockopt+0x16e/0x7b0 [ 112.700290][ T6249] ? __pfx_smc_setsockopt+0x10/0x10 [ 112.700354][ T6249] __sys_setsockopt+0x184/0x200 [ 112.700390][ T6249] __x64_sys_setsockopt+0x64/0x80 [ 112.700417][ T6249] x64_sys_call+0x248f/0x2550 [ 112.700577][ T6249] do_syscall_64+0x112/0x360 [ 112.700617][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.700642][ T6249] RIP: 0033:0x7f36858af559 [ 112.700666][ T6249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.700694][ T6249] RSP: 002b:00007f36842ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.700766][ T6249] RAX: ffffffffffffffda RBX: 00007f3685b35fa0 RCX: 00007f36858af559 [ 112.700796][ T6249] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 112.700817][ T6249] RBP: 00007f3685946b20 R08: 0000000000000018 R09: 0000000000000000 [ 112.700838][ T6249] R10: 0000200000001f40 R11: 0000000000000246 R12: 0000000000000000 [ 112.700856][ T6249] R13: 00007f3685b36038 R14: 00007f3685b35fa0 R15: 00007ffc23da8fd8 [ 112.700934][ T6249] [ 112.700970][ T6249] socket: no more sockets [ 112.700980][ T6249] IPVS: Error during creation of socket; terminating [ 113.021355][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.197763][ T6257] FAULT_INJECTION: forcing a failure. [ 113.197763][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 113.197803][ T6257] CPU: 0 UID: 0 PID: 6257 Comm: syz.5.962 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 113.197852][ T6257] Tainted: [Y]=FORCED_BIND [ 113.197869][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.197884][ T6257] Call Trace: [ 113.197893][ T6257] [ 113.197906][ T6257] __dump_stack+0x1d/0x30 [ 113.197942][ T6257] dump_stack_lvl+0x95/0xd0 [ 113.197980][ T6257] dump_stack+0x15/0x1b [ 113.198001][ T6257] should_fail_ex+0x262/0x280 [ 113.198035][ T6257] ? __d_alloc+0x8c/0x320 [ 113.198062][ T6257] should_failslab+0x8c/0xb0 [ 113.198114][ T6257] __kmalloc_noprof+0xb6/0x4b0 [ 113.198149][ T6257] ? __d_alloc+0x34/0x320 [ 113.198175][ T6257] ? __d_alloc+0x8c/0x320 [ 113.198199][ T6257] __d_alloc+0x8c/0x320 [ 113.198229][ T6257] __d_alloc_parallel+0x4f/0xd80 [ 113.198263][ T6257] ? trace_buffer_unlock_commit_regs+0x115/0x310 [ 113.198328][ T6257] ? __rcu_read_unlock+0x4e/0x70 [ 113.198360][ T6257] ? __d_lookup+0x30c/0x340 [ 113.198390][ T6257] d_alloc_parallel+0x1f/0x30 [ 113.198418][ T6257] lookup_open+0x21d/0x1010 [ 113.198460][ T6257] path_openat+0x492/0x11c0 [ 113.198645][ T6257] do_file_open+0x16c/0x290 [ 113.198680][ T6257] do_sys_openat2+0xa1/0x140 [ 113.198715][ T6257] __x64_sys_open+0xe6/0x110 [ 113.198769][ T6257] x64_sys_call+0x23a8/0x2550 [ 113.198797][ T6257] do_syscall_64+0x112/0x360 [ 113.198824][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.198932][ T6257] RIP: 0033:0x7f36858af559 [ 113.198955][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.198976][ T6257] RSP: 002b:00007f36842ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 113.199040][ T6257] RAX: ffffffffffffffda RBX: 00007f3685b35fa0 RCX: 00007f36858af559 [ 113.199059][ T6257] RDX: 0000000000000018 RSI: 0000000000058100 RDI: 0000200000000180 [ 113.199075][ T6257] RBP: 00007f3685946b20 R08: 0000000000000000 R09: 0000000000000000 [ 113.199090][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.199106][ T6257] R13: 00007f3685b36038 R14: 00007f3685b35fa0 R15: 00007ffc23da8fd8 [ 113.199140][ T6257] [ 113.506990][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.507286][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.507530][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.507833][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.507958][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.992179][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.992243][ T6280] bridge0: port 2(bridge_slave_1) entered listening state [ 113.992438][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.992492][ T6280] bridge0: port 1(bridge_slave_0) entered listening state [ 114.606822][ T381] ip6_tunnel:  xmit: Local address not yet configured! [ 114.680962][ T6295] loop4: detected capacity change from 0 to 128 [ 114.686083][ T6295] FAT-fs (loop4): bogus number of reserved sectors [ 114.686107][ T6295] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 114.686129][ T6295] FAT-fs (loop4): Can't find a valid FAT filesystem [ 114.726068][ T6280] syz.1.971 (6280) used greatest stack depth: 9584 bytes left [ 114.752077][ T6297] udevd[6297]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 114.772542][ T6297] udevd[6297]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 114.789947][ T6297] udevd[6297]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 115.052272][ T6320] netlink: 64 bytes leftover after parsing attributes in process `syz.6.989'. [ 115.089102][ T6320] ip6gre1: entered promiscuous mode [ 115.089124][ T6320] ip6gre1: entered allmulticast mode [ 115.144724][ T6320] netlink: 64 bytes leftover after parsing attributes in process `syz.6.989'. [ 115.744689][ T6356] loop4: detected capacity change from 0 to 512 [ 115.755888][ T6297] udevd[6297]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 115.757317][ T6356] EXT4-fs: Ignoring removed oldalloc option [ 115.779411][ T6356] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 115.779435][ T6356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.813473][ T6356] EXT4-fs (loop4): 1 truncate cleaned up [ 115.814363][ T6356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.852829][ T29] audit: type=1400 audit(2000000036.200:1045): avc: denied { write } for pid=6355 comm="syz.4.1005" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.915402][ T29] audit: type=1400 audit(2000000036.260:1046): avc: denied { sys_module } for pid=6359 comm="syz.2.1006" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.968789][ T29] audit: type=1400 audit(2000000036.320:1047): avc: denied { map } for pid=6364 comm="syz.5.1007" path="socket:[13829]" dev="sockfs" ino=13829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.124997][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1008'. [ 116.233878][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.256518][ T6297] udevd[6297]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 116.274231][ T6297] udevd[6297]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 116.305650][ T29] audit: type=1400 audit(2000000036.650:1048): avc: denied { write } for pid=6380 comm="syz.5.1015" lport=51245 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 116.495173][ T6371] net_ratelimit: 905 callbacks suppressed [ 116.495261][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.495609][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.495913][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.496303][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.496882][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.559737][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.560060][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.560333][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.562231][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.562561][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.141161][ T29] audit: type=1400 audit(2000000037.500:1049): avc: denied { create } for pid=6406 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.211829][ T6436] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.287796][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 118.811297][ T6452] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1040'. [ 118.825975][ T6452] ip6gre1: entered promiscuous mode [ 118.826047][ T6452] ip6gre1: entered allmulticast mode [ 118.896957][ T6452] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1040'. [ 119.073829][ T6465] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 120.018295][ T29] audit: type=1400 audit(2000000040.370:1050): avc: denied { write } for pid=6488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.202692][ T29] audit: type=1400 audit(2000000040.550:1051): avc: denied { write } for pid=6504 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.543525][ T6517] FAULT_INJECTION: forcing a failure. [ 120.543525][ T6517] name failslab, interval 1, probability 0, space 0, times 0 [ 120.543596][ T6517] CPU: 1 UID: 0 PID: 6517 Comm: syz.4.1060 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 120.543719][ T6517] Tainted: [Y]=FORCED_BIND [ 120.543733][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.543767][ T6517] Call Trace: [ 120.543781][ T6517] [ 120.543792][ T6517] __dump_stack+0x1d/0x30 [ 120.543852][ T6517] dump_stack_lvl+0x95/0xd0 [ 120.543887][ T6517] dump_stack+0x15/0x1b [ 120.543917][ T6517] should_fail_ex+0x262/0x280 [ 120.543953][ T6517] ? ip_mc_add_src+0x2f4/0xa30 [ 120.544000][ T6517] should_failslab+0x8c/0xb0 [ 120.544040][ T6517] __kmalloc_cache_noprof+0x5d/0x3e0 [ 120.544078][ T6517] ? ip_mc_add_src+0x2f4/0xa30 [ 120.544133][ T6517] ip_mc_add_src+0x2f4/0xa30 [ 120.544181][ T6517] ip_mc_msfilter+0x3e2/0x590 [ 120.544222][ T6517] ? set_mcast_msfilter+0x3c/0x180 [ 120.544367][ T6517] set_mcast_msfilter+0x15d/0x180 [ 120.544404][ T6517] ip_set_mcast_msfilter+0x239/0x280 [ 120.544452][ T6517] do_ip_setsockopt+0x1720/0x22f0 [ 120.544525][ T6517] ip_setsockopt+0x58/0x110 [ 120.544638][ T6517] udp_setsockopt+0x89/0xa0 [ 120.544679][ T6517] sock_common_setsockopt+0x69/0x80 [ 120.544718][ T6517] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 120.544809][ T6517] __sys_setsockopt+0x184/0x200 [ 120.544848][ T6517] __x64_sys_setsockopt+0x64/0x80 [ 120.544951][ T6517] x64_sys_call+0x248f/0x2550 [ 120.544979][ T6517] do_syscall_64+0x112/0x360 [ 120.545004][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.545066][ T6517] RIP: 0033:0x7f1417a8f559 [ 120.545085][ T6517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.545106][ T6517] RSP: 002b:00007f14164e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 120.545137][ T6517] RAX: ffffffffffffffda RBX: 00007f1417d15fa0 RCX: 00007f1417a8f559 [ 120.545262][ T6517] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000004 [ 120.545280][ T6517] RBP: 00007f1417b26b20 R08: 0000000000000310 R09: 0000000000000000 [ 120.545314][ T6517] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 120.545414][ T6517] R13: 00007f1417d16038 R14: 00007f1417d15fa0 R15: 00007ffcd623cc18 [ 120.545435][ T6517] [ 121.028322][ T29] audit: type=1400 audit(2000000041.380:1052): avc: denied { ioctl } for pid=6539 comm="syz.1.1067" path="socket:[12910]" dev="sockfs" ino=12910 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.029521][ T29] audit: type=1400 audit(2000000041.380:1053): avc: denied { bind } for pid=6539 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.029577][ T29] audit: type=1400 audit(2000000041.380:1054): avc: denied { setopt } for pid=6539 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.079908][ T6527] team0 (unregistering): Port device team_slave_0 removed [ 121.162529][ T29] audit: type=1400 audit(2000000041.510:1055): avc: denied { write } for pid=6511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.188362][ T6527] team0 (unregistering): Port device team_slave_1 removed [ 121.283272][ T29] audit: type=1400 audit(2000000041.630:1056): avc: denied { write } for pid=6548 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.651817][ T29] audit: type=1400 audit(2000000042.000:1057): avc: denied { setopt } for pid=6569 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.703377][ T29] audit: type=1400 audit(2000000042.050:1058): avc: denied { create } for pid=6572 comm="syz.4.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.746572][ T29] audit: type=1400 audit(2000000042.090:1059): avc: denied { map } for pid=6572 comm="syz.4.1074" path="socket:[14146]" dev="sockfs" ino=14146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.746629][ T29] audit: type=1400 audit(2000000042.090:1060): avc: denied { read } for pid=6572 comm="syz.4.1074" path="socket:[14146]" dev="sockfs" ino=14146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.801159][ T29] audit: type=1400 audit(2000000042.150:1061): avc: denied { write } for pid=6554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.370046][ T3374] net_ratelimit: 77 callbacks suppressed [ 122.370145][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.430631][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1082'. [ 122.430673][ T6613] netlink: 'syz.6.1082': attribute type 11 has an invalid length. [ 122.500939][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1082'. [ 122.501118][ T6613] netlink: 'syz.6.1082': attribute type 11 has an invalid length. [ 122.517949][ T5309] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.518179][ T5309] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.518310][ T5309] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.518513][ T5309] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.835545][ T6628] tipc: Started in network mode [ 122.835642][ T6628] tipc: Node identity ac14140f, cluster identity 4711 [ 122.836039][ T6628] tipc: New replicast peer: 255.255.255.255 [ 122.836460][ T6628] tipc: Enabled bearer , priority 10 [ 123.043272][ T6638] bridge1: entered promiscuous mode [ 123.043342][ T6638] bridge1: entered allmulticast mode [ 123.048804][ T6638] team0: Port device bridge1 added [ 123.078480][ T6638] bridge0: port 3(team0) entered blocking state [ 123.078539][ T6638] bridge0: port 3(team0) entered disabled state [ 123.079311][ T6638] team0: entered allmulticast mode [ 123.079351][ T6638] team_slave_0: entered allmulticast mode [ 123.079433][ T6638] team_slave_1: entered allmulticast mode [ 123.082318][ T6638] team0: entered promiscuous mode [ 123.082345][ T6638] team_slave_0: entered promiscuous mode [ 123.082477][ T6638] team_slave_1: entered promiscuous mode [ 123.083495][ T6638] bridge0: port 3(team0) entered blocking state [ 123.083549][ T6638] bridge0: port 3(team0) entered forwarding state [ 123.412655][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.637904][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.735563][ T6684] batman_adv: batadv0: Adding interface: syzkaller0 [ 123.735588][ T6684] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.735632][ T6684] batman_adv: batadv0: Interface activated: syzkaller0 [ 123.770856][ T6683] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 123.792291][ T6683] batman_adv: batadv0: Removing interface: syzkaller0 [ 123.807329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.807586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.807764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.807954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.808129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.808315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.808449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.949902][ T3374] tipc: Node number set to 2886997007 [ 124.405784][ T6682] syz.1.1091 (6682) used greatest stack depth: 9296 bytes left [ 125.646083][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 125.814515][ T6811] netlink: 'syz.5.1122': attribute type 10 has an invalid length. [ 125.957272][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 126.620445][ T6825] veth0_to_team: entered promiscuous mode [ 127.046040][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 127.046062][ T29] audit: type=1400 audit(2000000047.390:1066): avc: denied { write } for pid=6867 comm="syz.5.1140" name="kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 127.046098][ T29] audit: type=1400 audit(2000000047.390:1067): avc: denied { open } for pid=6867 comm="syz.5.1140" path="/216/dev/kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 127.054241][ T29] audit: type=1400 audit(2000000047.400:1068): avc: denied { read } for pid=6867 comm="syz.5.1140" name="kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 127.071456][ T29] audit: type=1400 audit(2000000047.400:1069): avc: denied { mounton } for pid=6867 comm="syz.5.1140" path="/216/dev/kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 127.080421][ T3371] kernel read not supported for file /kmsg (pid: 3371 comm: kworker/0:3) [ 127.134740][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 127.213350][ T6874] gretap0: entered promiscuous mode [ 127.673547][ T3374] net_ratelimit: 656 callbacks suppressed [ 127.673569][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.784031][ T6919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.832796][ T6919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.846621][ T6921] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 127.879154][ T6919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.886812][ T6919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.906015][ T6919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.575213][ T6917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.678160][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.722795][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.731587][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.834031][ T7011] syzkaller1: entered promiscuous mode [ 130.834158][ T7011] syzkaller1: entered allmulticast mode [ 130.872009][ T7005] ================================================================== [ 130.872056][ T7005] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 130.872105][ T7005] [ 130.872113][ T7005] write to 0xffff88812595fca0 of 8 bytes by task 7012 on cpu 1: [ 130.872138][ T7005] shmem_file_splice_read+0x3eb/0x570 [ 130.872184][ T7005] splice_direct_to_actor+0x25d/0x680 [ 130.872215][ T7005] do_splice_direct+0x119/0x1a0 [ 130.872244][ T7005] do_sendfile+0x37d/0x640 [ 130.872281][ T7005] __x64_sys_sendfile64+0x105/0x150 [ 130.872321][ T7005] x64_sys_call+0x1015/0x2550 [ 130.872359][ T7005] do_syscall_64+0x112/0x360 [ 130.872386][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.872409][ T7005] [ 130.872417][ T7005] write to 0xffff88812595fca0 of 8 bytes by task 7005 on cpu 0: [ 130.872435][ T7005] shmem_file_splice_read+0x3eb/0x570 [ 130.872476][ T7005] splice_direct_to_actor+0x25d/0x680 [ 130.872517][ T7005] do_splice_direct+0x119/0x1a0 [ 130.872546][ T7005] do_sendfile+0x37d/0x640 [ 130.872574][ T7005] __x64_sys_sendfile64+0x105/0x150 [ 130.872613][ T7005] x64_sys_call+0x1015/0x2550 [ 130.872651][ T7005] do_syscall_64+0x112/0x360 [ 130.872679][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.872705][ T7005] [ 130.872711][ T7005] value changed: 0x0000000000000727 -> 0x0000000000000728 [ 130.872726][ T7005] [ 130.872735][ T7005] Reported by Kernel Concurrency Sanitizer on: [ 130.872752][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.1.1177 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 130.872788][ T7005] Tainted: [Y]=FORCED_BIND [ 130.872798][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 130.872813][ T7005] ================================================================== [ 131.074245][ T7019] pimreg: entered allmulticast mode [ 132.758869][ T3354] net_ratelimit: 2 callbacks suppressed [ 132.758887][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.838038][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.881444][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.277269][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 134.277378][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 134.918278][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.558176][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.799077][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.958203][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.001031][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.038034][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.838722][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.080796][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.122281][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog