last executing test programs: 46.182099199s ago: executing program 0 (id=385): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100002, 0x9) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000002580)=""/4096}, {&(0x7f00000014c0)=""/155}, {&(0x7f00000024c0)=""/170}], 0x1}, 0xe5c}], 0x40000000000013e, 0x2, 0x0) 45.249151353s ago: executing program 0 (id=393): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x7, 0xe80, 0x0, &(0x7f0000000040)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000500)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x121281, 0x0) write$vga_arbiter(r2, &(0x7f0000000200)=@target={'target ', {'PCI:', 'c', ':', '1f', ':', '3', '.', '0'}}, 0x14) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) 44.921458971s ago: executing program 0 (id=397): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=ANY=[], 0x48}}, 0x400c0c0) r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x18, 0x0}}], 0x40000000000024e, 0x20002040) ptrace$setregset(0x4205, r1, 0x202, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 42.831682814s ago: executing program 0 (id=400): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x100000001, 0x81}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@usrquota}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000380)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2b80414, 0x0) 41.523316888s ago: executing program 0 (id=410): socket(0x10, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000540)="2e1c007f9037358c8dec6e86c2", 0xd, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x2, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x400002e, 0x141, 0x0) 41.185350876s ago: executing program 0 (id=412): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczBSCFMYwYyKEKBiDK2NM3BuX/guudGOMKxO3ujckxLABXNXc9l6mLW1hSkuV/n7JhXPuPZdznp572nPvaQlgbM1kfyQRWyPi94iYamRbC8w0/rp6+ezStctnl5Ko1d7+K6mXu3L57FJRtDhvS56ZTSPSz5LY3aHe1dNnji9Wq5VTeX5+7cQH86unzzx37MTi0crRysn9hw4dPLDw4gv7nx9InFmbruz6eGXPzjfe++rNw1+0xN8Wx4DM9Dr4ZK024OpGa1tTOpkYYUPYkFJEZN1Vro//qSjFeudNxeufjrRxwFDVarXalu6Hz9WAu1gSrXlDHsZF8UGf3f8WW/sk4OXhTT9G7tIrjRugLO6r+dY4MhFpXqbcdn87SDMR8e65v7/JthjOcwgAgBY/ZPOfZzvN/9J4oKncPfna0HRE3BsR2yPivojYERH3R9TLPhgRD22w/vZFkhvnP+nFvgK7Rdn876V8bat1/lfM/mK6lOe21eMvJ0eOVSv78tdkNsqbsvxCjzp+fO23L7sda57/ZVtWfzEXzNtxcWJT6znLi2uLtxNzs0vnI3ZNdIo/ub4SkETEzojY1Wcdx57+bk+3YzePv4cBrDPVvo14qtH/56It/kLSe31y/n9RreybL66KG/3y64W3utV/W/EPQNb//+94/V+PfzppXq9d3XgdF/74vOs9Tb/X/2TyTj09me/7aHFt7dRCxGRyuNHo5v37188t8kX5LP7ZvZ3H//ZYfyV2R0R2ET8cEY9ExKN52x+LiMcjYm+P+H9+9Yn3+49/uLL4lzfU/+uJyWjf0zlROv7T9y2VTt8Q/7Xe/X+wnprN99zK+9+ttKu/qxkAAAD+e9KI2BpJOnc9naZzc43vy++ISKsrq2vPHFn58ORy4zcC01FOiyddU03PQxfy2/pG/nxENL5aUBw/kD83/rq0uZ6fW1qpLo86eBhzW7qM/8yfpVG3Dhg6v9eC8WX8w/gy/mF8Gf8wvjqM/82jaAdw53X6/P9kBO0A7ry28W/ZD8aI+38YX13H/938P/8AdT7/YSytbo6b/0i+Z6L4l/o8/a5NRPlf0YzbT9SSjp0b6agbVjmVuuqGlhjt+xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCg/BMAAP//YzDfZQ==") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x39, 0x4, &(0x7f0000001180)) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4}, 0x14) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000640)={&(0x7f00000004c0)=[{0x1, 0x0, 0x57, 0x6, 0x8, 0x5, 0x6, 0x5}, {0x0, 0x0, 0x49, 0x6, 0x6, 0x7fffffff, 0x10, 0x3}, {0x0, 0x0, 0x3, 0x2, 0x10000, 0x3, 0x5, 0x5}, {0x1, 0x0, 0x4, 0x5, 0xcd15, 0xa, 0x2, 0x4}, {0x3, 0x0, 0x8, 0xfffffffffffffffa, 0x1ff, 0x1ff, 0xd0, 0x2}], 0x5, 0x38, 0x1, 0x800}) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 41.167563637s ago: executing program 32 (id=412): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczBSCFMYwYyKEKBiDK2NM3BuX/guudGOMKxO3ujckxLABXNXc9l6mLW1hSkuV/n7JhXPuPZdznp572nPvaQlgbM1kfyQRWyPi94iYamRbC8w0/rp6+ezStctnl5Ko1d7+K6mXu3L57FJRtDhvS56ZTSPSz5LY3aHe1dNnji9Wq5VTeX5+7cQH86unzzx37MTi0crRysn9hw4dPLDw4gv7nx9InFmbruz6eGXPzjfe++rNw1+0xN8Wx4DM9Dr4ZK024OpGa1tTOpkYYUPYkFJEZN1Vro//qSjFeudNxeufjrRxwFDVarXalu6Hz9WAu1gSrXlDHsZF8UGf3f8WW/sk4OXhTT9G7tIrjRugLO6r+dY4MhFpXqbcdn87SDMR8e65v7/JthjOcwgAgBY/ZPOfZzvN/9J4oKncPfna0HRE3BsR2yPivojYERH3R9TLPhgRD22w/vZFkhvnP+nFvgK7Rdn876V8bat1/lfM/mK6lOe21eMvJ0eOVSv78tdkNsqbsvxCjzp+fO23L7sda57/ZVtWfzEXzNtxcWJT6znLi2uLtxNzs0vnI3ZNdIo/ub4SkETEzojY1Wcdx57+bk+3YzePv4cBrDPVvo14qtH/56It/kLSe31y/n9RreybL66KG/3y64W3utV/W/EPQNb//+94/V+PfzppXq9d3XgdF/74vOs9Tb/X/2TyTj09me/7aHFt7dRCxGRyuNHo5v37188t8kX5LP7ZvZ3H//ZYfyV2R0R2ET8cEY9ExKN52x+LiMcjYm+P+H9+9Yn3+49/uLL4lzfU/+uJyWjf0zlROv7T9y2VTt8Q/7Xe/X+wnprN99zK+9+ttKu/qxkAAAD+e9KI2BpJOnc9naZzc43vy++ISKsrq2vPHFn58ORy4zcC01FOiyddU03PQxfy2/pG/nxENL5aUBw/kD83/rq0uZ6fW1qpLo86eBhzW7qM/8yfpVG3Dhg6v9eC8WX8w/gy/mF8Gf8wvjqM/82jaAdw53X6/P9kBO0A7ry28W/ZD8aI+38YX13H/938P/8AdT7/YSytbo6b/0i+Z6L4l/o8/a5NRPlf0YzbT9SSjp0b6agbVjmVuuqGlhjt+xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCg/BMAAP//YzDfZQ==") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x39, 0x4, &(0x7f0000001180)) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4}, 0x14) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000640)={&(0x7f00000004c0)=[{0x1, 0x0, 0x57, 0x6, 0x8, 0x5, 0x6, 0x5}, {0x0, 0x0, 0x49, 0x6, 0x6, 0x7fffffff, 0x10, 0x3}, {0x0, 0x0, 0x3, 0x2, 0x10000, 0x3, 0x5, 0x5}, {0x1, 0x0, 0x4, 0x5, 0xcd15, 0xa, 0x2, 0x4}, {0x3, 0x0, 0x8, 0xfffffffffffffffa, 0x1ff, 0x1ff, 0xd0, 0x2}], 0x5, 0x38, 0x1, 0x800}) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 6.065657355s ago: executing program 4 (id=702): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000009c0)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nodiscard}, {@nogrpid}, {@nolazytime}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0x1001}}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x532, &(0x7f0000000480)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r1, 0x5}}, 0x48) writev(r0, &(0x7f0000000040), 0x0) openat(0xffffffffffffff9c, 0x0, 0x60000, 0x80) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) 5.517979298s ago: executing program 4 (id=704): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f0000001200)) 5.517559418s ago: executing program 2 (id=705): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x51b, &(0x7f0000001000)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26, 0x0, 0x0, 0x20000}, 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc41, 0x0) fallocate(r0, 0x0, 0x2000, 0x8003) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) 5.289803284s ago: executing program 4 (id=711): syz_open_dev$loop(&(0x7f0000000000), 0x8001, 0x183000) r0 = socket$inet6(0xa, 0x2, 0x0) brk(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x6e, 0x9, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1, 0x5}, 0x0, 0x35, 0x6, 0x1, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x1, 0x6, 0x8004, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x2, 0x0, 0x0, 0x7f, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xef2, 0x4aecd42e}, 0x10ecc8, 0x1224, 0x88000, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, &(0x7f0000000800)) 5.150821288s ago: executing program 4 (id=712): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000a00)={0x2, &(0x7f0000000940)=[{0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) 3.821570632s ago: executing program 2 (id=716): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) preadv2(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/187, 0xbb}, {0x0}], 0x2, 0x1, 0x3e, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x10) r2 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000000000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x2}, 0x40000) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000080)=[r2], 0x1) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, 0x0) 2.640945752s ago: executing program 5 (id=718): set_mempolicy(0x3, 0x0, 0x7) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x4, 0x1, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00') setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x8000, &(0x7f00000000c0)=0x7, 0x6) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) io_setup(0x443, &(0x7f0000001100)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x5}]) 2.640625632s ago: executing program 2 (id=719): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffff7fb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r1, 0x0, 0x11000000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073153a00000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x61780, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r4, 0x1}, 0xc) 2.622193653s ago: executing program 4 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a3000000000e4000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f40000000069800098008000140000000045400028024"], 0x174}}, 0x8000) r1 = open(&(0x7f0000000040)='./file4\x00', 0x0, 0x44) flock(r1, 0x2) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000000c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x5f}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.32678225s ago: executing program 5 (id=722): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 1.53460017s ago: executing program 2 (id=724): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3048, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) io_setup(0xb, &(0x7f0000000080)=0x0) io_submit(r2, 0x1a, &(0x7f0000000080)) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e725f696e6f6465733d2c342c3979205965816c61c2ba7042c0bd1282bb8ae4d6d7e72780d19fa6c13fa5d62996bf892c"]) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '%\x00', 0x0, 0x33, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@hopopts={0x3b}]}}}}}}}, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0xffffffffdf003fff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x0, 0x57f2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_CORR={0x10, 0x1, {0xc7, 0x5, 0x4}}]}}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) 1.389393074s ago: executing program 5 (id=725): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200100001a0001000004000000000000fc000000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x120}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000600)=0xc) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x20, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xd7, 0x80000007, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7800, 0x8000, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) 1.366791555s ago: executing program 5 (id=726): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000880)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x1000, 0x0, 0xbd4c3b8bc89fc43c, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f0000000040), 0x0, 0x5, 0x0, 0x3, r1}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x3, 0x6, 0x6, 0x3f8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) 1.219889248s ago: executing program 5 (id=728): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000010800)={@remote, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x66, 0x0, 0x4, 0x21, 0x0, @loopback, @multicast1}, {{0x4e24, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x3, "3abd73", 0x70, ' Y\b'}}}}}}, 0x0) 1.185698799s ago: executing program 5 (id=729): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 1.034324083s ago: executing program 3 (id=731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xb5, &(0x7f00000000c0)=""/181}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') syz_open_dev$loop(0x0, 0x5, 0x0) 811.626769ms ago: executing program 3 (id=732): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="030000001b0000000800000001000000000b0000000100", 0x17) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr\n', 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0x100, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600884700000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)="0891d81ff9b15a644ed2cfb3e1caf76f7129285785e38c14dbe68dfc70ce6c3e764cfc105d87de4abfbc2d4b80f3bad5cf211a74efb842bef63c2148040000d8d8813fc7fe0ccb46bdd6b60667ab4a5cedab", 0x52) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) 780.911559ms ago: executing program 3 (id=733): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x24020870) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 769.63031ms ago: executing program 4 (id=734): syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1208060001080006040001000000000000ac1e01017792d99bba25ac141411aaf6cd67c459e6a6c688226319d8b6a7592bac5a7cec2f1656df72ee103f928e68c23ac37a8cdc15dffa"], 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4b, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000000), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000000102000004000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000091000000"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*sgr\x00dx:De', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) 696.803031ms ago: executing program 1 (id=735): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r4}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) 385.544589ms ago: executing program 1 (id=736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002f00)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x1, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xf}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 385.187199ms ago: executing program 2 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xcd83, 0xfffffffffffffec0, &(0x7f0000000140)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x20e6, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 370.62552ms ago: executing program 1 (id=738): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x2}}, 0x10) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) getdents64(r2, 0x0, 0x22) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) 364.58055ms ago: executing program 3 (id=739): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0), 0xc}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x5, 0x0) listen(r1, 0x0) setreuid(0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00') close_range(r0, 0xffffffffffffffff, 0x0) 321.101721ms ago: executing program 1 (id=740): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f00000000c0)={0x0, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r4) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 203.768364ms ago: executing program 1 (id=741): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 203.287794ms ago: executing program 3 (id=742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbc2, {0x0, 0x0, 0x0, r6, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7fff, 0x2, 0x5}, {0x1, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2005, 0x1, 0x1}, {0x8, 0x40001, 0x7, 0x2, 0x5, 0x1, 0x2}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r3, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="7494", 0x2}], 0x1}, 0x0) 147.734376ms ago: executing program 2 (id=743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 85.558567ms ago: executing program 1 (id=744): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getpid() perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc, 0x7}, 0x8601, 0x42000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map, 0xc, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) 0s ago: executing program 3 (id=745): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x40800, 0x0) read(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000005b00)=[{&(0x7f0000000280)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000fc0)="d0", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="3000000000000000840000000100000027007f000100000003f3000008000000000000000600000007000000", @ANYRES32, @ANYBLOB="1800000000000000840000000000000000000000ff01000018000000000000008400000007"], 0x60, 0x4000000}], 0x1, 0x20040099) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4005}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) kernel console output (not intermixed with test programs): 1133][ T3771] unevictable 0 [ 45.953626][ T3771] hierarchical_memory_limit 314572800 [ 45.962636][ T28] audit: type=1400 audit(1785779610.260:292): avc: denied { create } for pid=3795 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.963855][ T3794] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.992478][ T3771] hierarchical_memsw_limit 9223372036854771712 [ 46.006836][ T3771] total_cache 16384 [ 46.010937][ T3796] netlink: 1 bytes leftover after parsing attributes in process `syz.2.95'. [ 46.014924][ T3771] total_rss 0 [ 46.023495][ T3771] total_shmem 0 [ 46.027061][ T3771] total_mapped_file 0 [ 46.033380][ T3771] total_dirty 0 [ 46.037464][ T3771] total_writeback 0 [ 46.041472][ T3794] EXT4-fs (loop1): 1 truncate cleaned up [ 46.041963][ T3771] total_workingset_refault_anon 9 [ 46.054027][ T3771] total_workingset_refault_file 21 [ 46.060918][ T3771] total_swap 2293760 [ 46.071147][ T3771] total_swapcached 9756672 [ 46.074122][ T3794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.076994][ T3771] total_pgpgin 10189 [ 46.097268][ T3771] total_pgpgout 10184 [ 46.103139][ T3771] total_pgfault 10991 [ 46.108113][ T3771] total_pgmajfault 5 [ 46.114378][ T3771] total_inactive_anon 4096 [ 46.119016][ T3771] total_active_anon 0 [ 46.124066][ T3771] total_inactive_file 4096 [ 46.138523][ T3771] total_active_file 12288 [ 46.160226][ T3771] total_unevictable 0 [ 46.164345][ T3771] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.88,pid=3771,uid=0 [ 46.179271][ T3771] Memory cgroup out of memory: Killed process 3771 (syz.3.88) total-vm:96236kB, anon-rss:1268kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 46.191842][ T3772] syz.3.88 (3772) used greatest stack depth: 9992 bytes left [ 46.257058][ T28] audit: type=1400 audit(1785779610.560:293): avc: denied { create } for pid=3801 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 46.312085][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.592712][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.626174][ T3861] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 47.643782][ T3861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.686716][ T3861] bond1: (slave veth0_to_bond): making interface the new active one [ 47.704457][ T3861] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 47.737743][ T3861] bond1: entered promiscuous mode [ 47.764997][ T3861] veth0_to_bond: entered promiscuous mode [ 47.779014][ T3861] bond1: entered allmulticast mode [ 47.794858][ T3861] veth0_to_bond: entered allmulticast mode [ 47.858415][ T3861] macvlan2: entered promiscuous mode [ 47.873405][ T3861] macvlan2: entered allmulticast mode [ 47.881164][ T3861] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 47.893271][ T3861] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 48.462679][ T3885] loop0: detected capacity change from 0 to 1024 [ 48.472618][ T3885] EXT4-fs: inline encryption not supported [ 48.484153][ T3891] loop2: detected capacity change from 0 to 512 [ 48.490994][ T3885] EXT4-fs: Ignoring removed bh option [ 48.521923][ T3891] ext4: Unknown parameter 'subj_user' [ 48.529637][ T3885] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 48.581503][ T3885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.653571][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 48.653593][ T28] audit: type=1400 audit(1785779612.960:327): avc: denied { bpf } for pid=3897 comm="syz.3.126" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.694232][ T28] audit: type=1400 audit(1785779612.960:328): avc: denied { perfmon } for pid=3897 comm="syz.3.126" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.761706][ T28] audit: type=1400 audit(1785779613.070:329): avc: denied { getopt } for pid=3897 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 48.796239][ T28] audit: type=1400 audit(1785779613.070:330): avc: denied { write } for pid=3897 comm="syz.3.126" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 48.851320][ T28] audit: type=1400 audit(1785779613.070:331): avc: denied { open } for pid=3897 comm="syz.3.126" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 48.923298][ T28] audit: type=1400 audit(1785779613.130:332): avc: denied { module_request } for pid=3897 comm="syz.3.126" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.977365][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.050927][ T28] audit: type=1400 audit(1785779613.350:333): avc: denied { connect } for pid=3903 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.120943][ T28] audit: type=1400 audit(1785779613.350:334): avc: denied { write } for pid=3903 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.697230][ T28] audit: type=1400 audit(1785779614.000:335): avc: denied { name_bind } for pid=3923 comm="syz.4.133" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 49.926275][ T3918] loop2: detected capacity change from 0 to 1024 [ 49.997593][ T3918] EXT4-fs: Ignoring removed bh option [ 50.033018][ T3918] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 50.126757][ T3918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.223196][ T3932] syzkaller0: entered promiscuous mode [ 50.239282][ T3932] syzkaller0: entered allmulticast mode [ 50.275640][ T3932] tipc: Started in network mode [ 50.296169][ T3932] tipc: Node identity 124db34d6b18, cluster identity 4711 [ 50.316074][ T3933] loop1: detected capacity change from 0 to 2048 [ 50.327625][ T3932] tipc: Enabled bearer , priority 0 [ 50.335614][ T28] audit: type=1400 audit(1785779614.630:336): avc: denied { write } for pid=3917 comm="syz.2.131" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.359325][ T3930] tipc: Resetting bearer [ 50.389132][ T3933] Alternate GPT is invalid, using primary GPT. [ 50.408290][ T3933] loop1: p2 p3 p7 [ 50.422026][ T3918] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.441204][ T3930] tipc: Disabling bearer [ 50.493942][ T3299] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /32/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 50.523054][ T2979] Alternate GPT is invalid, using primary GPT. [ 50.529761][ T3299] EXT4-fs (loop2): Remounting filesystem read-only [ 50.534946][ T2979] loop1: p2 p3 p7 [ 50.558955][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.568417][ T3945] loop4: detected capacity change from 0 to 2048 [ 50.587880][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 50.588698][ T3278] udevd[3278]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 50.609877][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 50.640509][ T3945] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 50.652649][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 50.655100][ T3278] udevd[3278]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 50.677438][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 51.673703][ T3967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.146'. [ 51.685464][ T3968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 51.690197][ T3958] process 'syz.4.144' launched './file0' with NULL argv: empty string added [ 51.714937][ T3967] netlink: 68 bytes leftover after parsing attributes in process `syz.3.146'. [ 51.733072][ T3967] netlink: 68 bytes leftover after parsing attributes in process `syz.3.146'. [ 51.750031][ T3967] bridge0: port 3(veth0) entered blocking state [ 51.765047][ T3967] bridge0: port 3(veth0) entered disabled state [ 51.782451][ T3967] veth0: entered allmulticast mode [ 51.789067][ T3967] veth0: entered promiscuous mode [ 51.794507][ T3967] bridge0: port 3(veth0) entered blocking state [ 51.801857][ T3967] bridge0: port 3(veth0) entered forwarding state [ 51.810363][ T3971] bridge0: port 4(veth1) entered blocking state [ 51.817690][ T3971] bridge0: port 4(veth1) entered disabled state [ 51.824512][ T3971] veth1: entered allmulticast mode [ 51.831095][ T3971] veth1: entered promiscuous mode [ 51.836435][ T3971] bridge0: port 4(veth1) entered blocking state [ 51.842966][ T3971] bridge0: port 4(veth1) entered forwarding state [ 52.060903][ T3984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 52.095178][ T3984] bond1: entered promiscuous mode [ 52.112159][ T3984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.219250][ T3984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.244163][ T3984] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 52.290215][ T3984] bond1: (slave sit1): Error -95 calling set_mac_address [ 53.608670][ T3995] loop4: detected capacity change from 0 to 512 [ 53.636131][ T3995] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.156: bg 0: block 5: invalid block bitmap [ 53.649686][ T3995] loop4: lost filesystem error report for type 5 error -117 [ 53.652201][ T3995] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 53.660026][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 53.660061][ C0] EXT4-fs (loop4): initial error at time 1785779617: ext4_validate_block_bitmap:432 [ 53.660082][ C0] EXT4-fs (loop4): last error at time 1785779617: ext4_validate_block_bitmap:432 [ 53.707601][ T3995] loop4: lost filesystem error report for type 5 error -117 [ 53.707796][ T3995] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.156: invalid indirect mapped block 3 (level 2) [ 53.750475][ T3995] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.750802][ T3995] EXT4-fs (loop4): 1 orphan inode deleted [ 53.782655][ T3995] EXT4-fs (loop4): 1 truncate cleaned up [ 53.796031][ T3995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.474764][ T3995] netlink: 'syz.4.156': attribute type 12 has an invalid length. [ 54.512398][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.602239][ T4012] netlink: 'syz.0.161': attribute type 4 has an invalid length. [ 54.661857][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 54.661907][ T28] audit: type=1400 audit(1785779618.970:358): avc: denied { create } for pid=4004 comm="syz.3.158" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.689382][ T4018] loop1: detected capacity change from 0 to 164 [ 54.703814][ T4019] netlink: 'syz.0.161': attribute type 4 has an invalid length. [ 54.707176][ T28] audit: type=1400 audit(1785779619.000:359): avc: denied { write } for pid=4004 comm="syz.3.158" name="file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.761144][ T4018] rock: directory entry would overflow storage [ 54.777753][ T28] audit: type=1400 audit(1785779619.000:360): avc: denied { open } for pid=4004 comm="syz.3.158" path="/31/file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.816140][ T4018] rock: sig=0x5252, size=5, remaining=3 [ 54.824135][ T28] audit: type=1400 audit(1785779619.000:361): avc: denied { create } for pid=4004 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.850971][ T4023] GUP no longer grows the stack in syz.3.163 (4023): 200000005000-200000008000 (200000004000) [ 54.869811][ T4023] CPU: 0 UID: 0 PID: 4023 Comm: syz.3.163 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.869952][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.869967][ T4023] Call Trace: [ 54.869974][ T4023] [ 54.869983][ T4023] __dump_stack+0x1d/0x30 [ 54.870013][ T4023] dump_stack_lvl+0x95/0xd0 [ 54.870064][ T4023] dump_stack+0x15/0x1b [ 54.870083][ T4023] fixup_user_fault+0x4fe/0x550 [ 54.870173][ T4023] fault_in_user_writeable+0x5c/0xc0 [ 54.870237][ T4023] futex_lock_pi+0x5f2/0x7c0 [ 54.870267][ T4023] ? __pfx_futex_wake_mark+0x10/0x10 [ 54.870352][ T4023] do_futex+0x2ea/0x460 [ 54.870387][ T4023] __se_sys_futex+0x2f6/0x370 [ 54.870440][ T4023] ? xfd_validate_state+0x45/0xf0 [ 54.870468][ T4023] __x64_sys_futex+0x78/0x90 [ 54.870497][ T4023] x64_sys_call+0x24ab/0x3020 [ 54.870527][ T4023] do_syscall_64+0x136/0x3c0 [ 54.870559][ T4023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.870587][ T4023] RIP: 0033:0x7f50f053e019 [ 54.870606][ T4023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.870679][ T4023] RSP: 002b:00007f50eef97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 54.870702][ T4023] RAX: ffffffffffffffda RBX: 00007f50f07c5fa0 RCX: 00007f50f053e019 [ 54.870720][ T4023] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 54.870736][ T4023] RBP: 00007f50f05d500c R08: 0000000000000000 R09: 0000000000000001 [ 54.870752][ T4023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.870767][ T4023] R13: 00007f50f07c6038 R14: 00007f50f07c5fa0 R15: 00007ffdf82ad768 [ 54.870848][ T4023] [ 54.874605][ T28] audit: type=1400 audit(1785779619.070:362): avc: denied { unlink } for pid=3294 comm="syz-executor" name="file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.094369][ T28] audit: type=1400 audit(1785779619.210:364): avc: denied { create } for pid=4022 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.115705][ T28] audit: type=1400 audit(1785779619.130:363): avc: denied { create } for pid=4002 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.139061][ T28] audit: type=1400 audit(1785779619.220:365): avc: denied { listen } for pid=4022 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.230973][ T28] audit: type=1400 audit(1785779619.240:366): avc: denied { mount } for pid=4002 comm="syz.1.157" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 55.299386][ T4032] syz.3.167 uses obsolete (PF_INET,SOCK_PACKET) [ 55.383826][ T4018] netlink: 'syz.1.157': attribute type 30 has an invalid length. [ 55.467951][ T4020] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.475413][ T4020] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.648548][ T4056] netlink: 332 bytes leftover after parsing attributes in process `syz.2.169'. [ 55.654252][ T4020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.671219][ T4020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.741059][ T4018] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 55.749645][ T3541] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.773099][ T28] audit: type=1400 audit(1785779620.080:367): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 55.816654][ T4041] veth1_macvtap: left promiscuous mode [ 55.858044][ T4041] macsec0: entered allmulticast mode [ 55.967846][ T4053] veth1_macvtap: entered promiscuous mode [ 55.994246][ T4053] veth1_macvtap: entered allmulticast mode [ 56.010520][ T4053] macsec0: entered promiscuous mode [ 56.020261][ T3541] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.032494][ T4068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.171'. [ 56.069701][ T310] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.081810][ T310] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.737938][ T4099] syzkaller0: entered promiscuous mode [ 56.762743][ T4099] syzkaller0: entered allmulticast mode [ 56.915459][ T4112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'. [ 56.957804][ T4112] veth3: entered allmulticast mode [ 56.969358][ T4112] bond1: (slave veth3): Enslaving as an active interface with an up link [ 56.988859][ T4115] loop0: detected capacity change from 0 to 512 [ 57.053077][ T4115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.079661][ T4115] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.147270][ T3465] nci: nci_rx_work: unknown MT 0x7 [ 57.190277][ T4125] netlink: 'syz.2.192': attribute type 13 has an invalid length. [ 57.242466][ T4125] bridge0: port 3(team0) entered disabled state [ 57.249936][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.257541][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.312491][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.323762][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.334103][ T4131] netlink: 'syz.4.194': attribute type 4 has an invalid length. [ 57.387367][ T4133] netlink: 'syz.4.194': attribute type 4 has an invalid length. [ 57.475473][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.486875][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.519713][ T4127] veth1_macvtap: left allmulticast mode [ 57.550526][ T2224] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.560297][ T2224] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.579619][ T2224] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.588913][ T2224] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.611016][ T2224] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.625982][ T2224] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.636380][ T2224] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.648032][ T2224] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.235583][ T4136] veth1_macvtap: left promiscuous mode [ 58.258353][ T4136] macsec0: entered allmulticast mode [ 58.362273][ T4140] veth1_macvtap: entered promiscuous mode [ 58.368164][ T4140] veth1_macvtap: entered allmulticast mode [ 58.380084][ T4140] macsec0: entered promiscuous mode [ 59.887477][ T4106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.009954][ T4159] netlink: 'syz.3.207': attribute type 4 has an invalid length. [ 60.051140][ T4159] netlink: 'syz.3.207': attribute type 4 has an invalid length. [ 61.361812][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.374978][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.387645][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.400198][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.414524][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.427670][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.440479][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.453266][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.465913][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.477723][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.137072][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.372989][ T4159] bridge0: port 4(veth1) entered disabled state [ 62.379622][ T4159] bridge0: port 3(veth0) entered disabled state [ 62.385990][ T4159] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.394006][ T4159] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.450521][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 62.450539][ T28] audit: type=1400 audit(1785779626.750:391): avc: denied { mount } for pid=4169 comm="syz.1.218" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.527410][ T28] audit: type=1400 audit(1785779626.760:392): avc: denied { search } for pid=4169 comm="syz.1.218" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.550320][ T28] audit: type=1400 audit(1785779626.760:393): avc: denied { write } for pid=4169 comm="syz.1.218" name="dynamic_events" dev="tracefs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.593259][ T28] audit: type=1400 audit(1785779626.760:394): avc: denied { open } for pid=4169 comm="syz.1.218" path="/33/tracing/dynamic_events" dev="tracefs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.618663][ T28] audit: type=1400 audit(1785779626.790:395): avc: denied { search } for pid=4169 comm="syz.1.218" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.642444][ T28] audit: type=1400 audit(1785779626.790:396): avc: denied { search } for pid=4169 comm="syz.1.218" name="events" dev="tracefs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.666034][ T28] audit: type=1400 audit(1785779626.790:397): avc: denied { search } for pid=4169 comm="syz.1.218" name="msr" dev="tracefs" ino=6042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.723840][ T28] audit: type=1400 audit(1785779626.790:398): avc: denied { search } for pid=4169 comm="syz.1.218" name="read_msr" dev="tracefs" ino=6044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.751707][ T28] audit: type=1400 audit(1785779626.790:399): avc: denied { search } for pid=4169 comm="syz.1.218" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.780218][ T28] audit: type=1400 audit(1785779626.790:400): avc: denied { search } for pid=4169 comm="syz.1.218" name="events" dev="tracefs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.841322][ T4159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.860766][ T4159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.005938][ T4174] macsec0: entered allmulticast mode [ 63.029449][ T4179] veth1_macvtap: entered allmulticast mode [ 63.035845][ T4179] macsec0: entered promiscuous mode [ 63.102723][ T30] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.115553][ T30] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.126746][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.144250][ T30] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.601969][ T4218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.220'. [ 63.866869][ T4229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.223'. [ 63.993041][ T4235] netlink: 'syz.2.225': attribute type 4 has an invalid length. [ 64.013161][ T4236] macsec0: entered allmulticast mode [ 64.037142][ T4237] loop1: detected capacity change from 0 to 512 [ 64.038693][ T4235] netlink: 'syz.2.225': attribute type 4 has an invalid length. [ 64.048346][ T4236] veth1_macvtap: entered allmulticast mode [ 64.068200][ T4237] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.092252][ T4236] macsec0: entered promiscuous mode [ 64.096903][ T4237] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 64.097277][ T4237] EXT4-fs (loop1): 1 truncate cleaned up [ 64.097899][ T4237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.238711][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.336764][ T4245] syzkaller0: entered promiscuous mode [ 64.375974][ T4245] syzkaller0: entered allmulticast mode [ 64.455542][ T4258] netlink: 'syz.3.233': attribute type 1 has an invalid length. [ 64.500366][ T4258] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 64.516760][ T4258] bond3 (unregistering): Released all slaves [ 64.552494][ T4261] bridge1: entered promiscuous mode [ 64.577503][ T4261] bond2: (slave bridge1): making interface the new active one [ 64.612504][ T4261] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 64.728508][ T4265] loop1: detected capacity change from 0 to 2048 [ 64.803204][ T4265] loop1: p1 < > p3 [ 64.813004][ T4265] loop1: p3 size 134217728 extends beyond EOD, truncated [ 65.066410][ T4280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 65.123022][ T4278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 65.136592][ T4280] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 65.188155][ T4278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 65.249910][ T4284] netlink: 'syz.1.238': attribute type 4 has an invalid length. [ 65.249969][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.297392][ T4284] netlink: 152 bytes leftover after parsing attributes in process `syz.1.238'. [ 65.312853][ T4278] bond1: (slave bond0): making interface the new active one [ 65.352902][ T4278] bond1: (slave bond0): Enslaving as an active interface with an up link [ 65.394419][ T4283] veth1_macvtap: left allmulticast mode [ 65.414575][ T4283] macsec0: left promiscuous mode [ 65.473331][ T4284] .`: renamed from bond0 (while UP) [ 65.491692][ T4290] veth1_macvtap: entered allmulticast mode [ 65.504742][ T4290] macsec0: entered promiscuous mode [ 65.736767][ T4303] netlink: 'syz.1.246': attribute type 1 has an invalid length. [ 66.043626][ T4308] syzkaller0: entered promiscuous mode [ 66.103233][ T4308] syzkaller0: entered allmulticast mode [ 66.375633][ T4316] loop0: detected capacity change from 0 to 764 [ 66.405568][ T4316] rock: directory entry would overflow storage [ 66.415104][ T4316] rock: sig=0x5245, size=8, remaining=5 [ 66.434937][ T4318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.251'. [ 66.512879][ T4318] .`: (slave bond_slave_0): Releasing backup interface [ 66.615956][ T4318] bond_slave_0: entered promiscuous mode [ 66.634077][ T4318] bond_slave_0: entered allmulticast mode [ 67.474246][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 67.474264][ T28] audit: type=1400 audit(1785779631.730:531): avc: denied { read } for pid=3018 comm="dhcpcd" name="n25" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.501531][ T4336] loop3: detected capacity change from 0 to 512 [ 67.504370][ T28] audit: type=1400 audit(1785779631.730:532): avc: denied { open } for pid=3018 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.548023][ T28] audit: type=1400 audit(1785779631.730:533): avc: denied { getattr } for pid=3018 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.634718][ T4318] syz.1.251 (4318) used greatest stack depth: 9216 bytes left [ 67.701226][ T4340] veth1_macvtap: left allmulticast mode [ 67.724044][ T4340] macsec0: left promiscuous mode [ 67.733596][ T28] audit: type=1400 audit(1785779632.040:534): avc: denied { write } for pid=4337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.797385][ T4355] veth1_macvtap: entered allmulticast mode [ 67.802024][ T28] audit: type=1400 audit(1785779632.040:535): avc: denied { create } for pid=4337 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.834333][ T28] audit: type=1400 audit(1785779632.040:536): avc: denied { write } for pid=4337 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=1918 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.864723][ T4355] macsec0: entered promiscuous mode [ 67.874297][ T28] audit: type=1400 audit(1785779632.040:537): avc: denied { append } for pid=4337 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=1918 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.902671][ T4354] syzkaller0: entered promiscuous mode [ 67.908341][ T4354] syzkaller0: entered allmulticast mode [ 67.962972][ T28] audit: type=1400 audit(1785779632.080:538): avc: denied { write } for pid=4358 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.988109][ T28] audit: type=1400 audit(1785779632.080:539): avc: denied { unlink } for pid=4358 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=1918 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.018046][ T28] audit: type=1400 audit(1785779632.090:540): avc: denied { sqpoll } for pid=4353 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.172412][ T4377] macsec0: entered allmulticast mode [ 68.225274][ T4377] veth1_macvtap: entered allmulticast mode [ 68.244650][ T4377] macsec0: entered promiscuous mode [ 68.429849][ T4390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.266'. [ 69.523760][ T4421] veth1_macvtap: left allmulticast mode [ 69.541976][ T4421] veth1_macvtap: left promiscuous mode [ 69.550561][ T4421] macsec0: left promiscuous mode [ 69.705998][ T4424] veth1_macvtap: entered promiscuous mode [ 69.723620][ T4424] veth1_macvtap: entered allmulticast mode [ 69.733063][ T4424] macsec0: entered promiscuous mode [ 69.743616][ T4432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 70.024382][ T4439] syzkaller0: entered promiscuous mode [ 70.037403][ T4439] syzkaller0: entered allmulticast mode [ 70.791018][ T4466] veth1_macvtap: left allmulticast mode [ 70.811941][ T4466] macsec0: left promiscuous mode [ 70.862658][ T4470] veth1_macvtap: entered allmulticast mode [ 70.889621][ T4470] macsec0: entered promiscuous mode [ 71.338557][ T4480] veth1_macvtap: left allmulticast mode [ 71.371051][ T4480] macsec0: left promiscuous mode [ 71.408946][ T4489] loop2: detected capacity change from 0 to 512 [ 71.429722][ T4484] veth1_macvtap: entered allmulticast mode [ 71.438121][ T4484] macsec0: entered promiscuous mode [ 71.455955][ T4482] loop3: detected capacity change from 0 to 764 [ 71.475256][ T4489] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.300: iget: bad i_size value: 38620345925642 [ 71.488448][ T4489] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.489522][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 71.505617][ C0] EXT4-fs (loop2): initial error at time 1785779635: ext4_orphan_get:1399: inode 15 [ 71.510751][ T4489] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.300: couldn't read orphan inode 15 (err -117) [ 71.516436][ C0] EXT4-fs (loop2): last error at time 1785779635: ext4_orphan_get:1399: inode 15 [ 71.546213][ T4489] loop2: lost filesystem error report for type 5 error -117 [ 71.551611][ T4489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.230203][ T4530] netlink: 'syz.1.310': attribute type 3 has an invalid length. [ 72.295774][ T4530] netlink: 'syz.1.310': attribute type 3 has an invalid length. [ 72.983584][ T4493] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 74.015030][ T4552] macsec0: left promiscuous mode [ 74.087280][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 74.105591][ T4555] veth1_macvtap: entered allmulticast mode [ 74.135012][ T30] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.135012][ T30] [ 74.147158][ T4555] macsec0: entered promiscuous mode [ 74.184211][ T30] EXT4-fs (loop2): Total free blocks count 0 [ 74.214146][ T30] EXT4-fs (loop2): Free/Dirty block details [ 74.244675][ T30] EXT4-fs (loop2): free_blocks=0 [ 74.280229][ T30] EXT4-fs (loop2): dirty_blocks=4656 [ 74.299007][ T30] EXT4-fs (loop2): Block reservation details [ 74.316620][ T30] EXT4-fs (loop2): i_reserved_data_blocks=4656 [ 74.375044][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 74.453498][ T3299] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 74.650673][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.319'. [ 74.678796][ T4563] netlink: 7 bytes leftover after parsing attributes in process `syz.4.319'. [ 74.876754][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 74.876769][ T28] audit: type=1400 audit(1785779639.180:559): avc: denied { allowed } for pid=4569 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.948690][ T4575] netlink: 'syz.4.323': attribute type 3 has an invalid length. [ 74.961715][ T4575] netlink: 'syz.4.323': attribute type 3 has an invalid length. [ 75.056820][ T28] audit: type=1400 audit(1785779639.360:560): avc: denied { ioctl } for pid=4576 comm="syz.3.325" path="socket:[7664]" dev="sockfs" ino=7664 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.688556][ T4605] bridge_slave_0: left allmulticast mode [ 75.701411][ T4605] bridge_slave_0: left promiscuous mode [ 75.715847][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.055897][ T4605] bridge_slave_1: left allmulticast mode [ 76.073323][ T4605] bridge_slave_1: left promiscuous mode [ 76.099260][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.121294][ T4605] bond1: (slave veth0_to_bond): Releasing active interface [ 76.152495][ T4605] veth0_to_bond: left promiscuous mode [ 76.167476][ T4605] veth0_to_bond: left allmulticast mode [ 76.186535][ T4605] bond0: (slave bond_slave_0): Releasing backup interface [ 76.206410][ T4605] bond0: (slave bond_slave_1): Releasing backup interface [ 76.226964][ T4605] team0: Failed to send options change via netlink (err -105) [ 76.239150][ T4605] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 76.259722][ T4605] team0: Port device team_slave_0 removed [ 76.266586][ T4605] team0: Failed to send options change via netlink (err -105) [ 76.279588][ T4605] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 76.302490][ T4605] team0: Port device team_slave_1 removed [ 76.316143][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.336823][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.353600][ T4605] net_ratelimit: 2899 callbacks suppressed [ 76.353617][ T4605] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.384246][ T4607] team0: Failed to send options change via netlink (err -105) [ 76.392308][ T4607] team0: Mode changed to "activebackup" [ 76.403805][ T4618] syzkaller0: entered promiscuous mode [ 76.409572][ T4618] syzkaller0: entered allmulticast mode [ 76.449746][ T28] audit: type=1400 audit(1785779640.750:561): avc: denied { bind } for pid=4628 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.477266][ T28] audit: type=1400 audit(1785779640.780:562): avc: denied { create } for pid=4628 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.504335][ T4629] loop3: detected capacity change from 0 to 1024 [ 76.536790][ T4629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.582286][ T4629] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.614246][ T28] audit: type=1400 audit(1785779640.920:563): avc: denied { mounton } for pid=4628 comm="syz.3.338" path="/68/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.642259][ T4629] EXT4-fs (loop3): re-mounted 00000000-0500-0000-0000-000000000000. [ 76.652694][ T4629] tipc: Failed to remove unknown binding: 66,1,1/0:1607067329/1607067331 [ 76.658955][ T28] audit: type=1400 audit(1785779640.920:564): avc: denied { remount } for pid=4628 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.680121][ T4629] tipc: Failed to remove unknown binding: 66,1,1/0:1607067329/1607067331 [ 76.716877][ T3294] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /68/file1: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 76.762486][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 76.763111][ T28] audit: type=1400 audit(1785779641.060:565): avc: denied { write } for pid=3294 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.818808][ T28] audit: type=1400 audit(1785779641.060:566): avc: denied { remove_name } for pid=3294 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.873168][ T28] audit: type=1400 audit(1785779641.060:567): avc: denied { rmdir } for pid=3294 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.935712][ T28] audit: type=1400 audit(1785779641.070:568): avc: denied { write } for pid=3294 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.010686][ T4643] loop0: detected capacity change from 0 to 164 [ 77.277962][ T4650] loop3: detected capacity change from 0 to 1024 [ 77.301162][ T4650] EXT4-fs: Ignoring removed bh option [ 77.358982][ T4650] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 77.459791][ T4650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.862989][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.897932][ T4668] netlink: 'syz.4.351': attribute type 1 has an invalid length. [ 78.207085][ T4680] loop2: detected capacity change from 0 to 4096 [ 78.228121][ T4680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.282741][ T4680] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.355: corrupted inode contents [ 78.304389][ T4680] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.355: mark_inode_dirty error [ 78.319112][ T4680] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.355: corrupted inode contents [ 78.333865][ T4680] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.355: mark_inode_dirty error [ 78.347552][ T4680] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.355: corrupted inode contents [ 78.361104][ T4680] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.355: mark_inode_dirty error [ 78.375098][ T4680] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.355: corrupted inode contents [ 78.389353][ T4680] EXT4-fs error (device loop2): ext4_truncate:4691: inode #15: comm syz.2.355: mark_inode_dirty error [ 78.402777][ T4680] EXT4-fs error (device loop2) in ext4_setattr:6172: Corrupt filesystem [ 78.413447][ T4688] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.355: corrupted inode contents [ 78.661711][ T3299] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.662287][ T3299] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.687560][ T3299] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 78.721449][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.406279][ T4706] smc: net device dummy0 applied user defined pnetid SYZ0 [ 79.522124][ T4725] syzkaller0: entered promiscuous mode [ 79.565017][ T4725] syzkaller0: entered allmulticast mode [ 79.607533][ T4730] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 79.754835][ T4730] bond2: entered promiscuous mode [ 79.775692][ T4730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.819076][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 79.857570][ T4741] syzkaller0: entered promiscuous mode [ 79.869866][ T4741] syzkaller0: entered allmulticast mode [ 79.920700][ T4752] netlink: 'syz.0.370': attribute type 3 has an invalid length. [ 79.929026][ T4752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'. [ 79.948285][ T4752] netlink: 'syz.0.370': attribute type 3 has an invalid length. [ 79.962927][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 79.962943][ T28] audit: type=1400 audit(1785779644.270:593): avc: denied { write } for pid=4739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.964754][ T4752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'. [ 80.011728][ T28] audit: type=1400 audit(1785779644.310:594): avc: denied { write } for pid=4758 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.019639][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 80.222565][ T4770] syzkaller0: entered promiscuous mode [ 80.228451][ T4770] syzkaller0: entered allmulticast mode [ 80.452730][ T4781] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 80.916188][ T4786] loop1: detected capacity change from 0 to 1024 [ 80.970977][ T4786] EXT4-fs: Ignoring removed bh option [ 80.999371][ T4786] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 81.030150][ T28] audit: type=1400 audit(1785779645.330:595): avc: denied { name_bind } for pid=4790 comm="syz.3.383" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 81.051884][ T4194] IPVS: starting estimator thread 0... [ 81.075236][ T4793] syz_tun: entered allmulticast mode [ 81.180213][ T4786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.259622][ T4796] IPVS: using max 2352 ests per chain, 117600 per kthread [ 81.514463][ T28] audit: type=1400 audit(1785779645.810:596): avc: denied { write } for pid=4785 comm="syz.1.380" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.679042][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.755381][ T28] audit: type=1400 audit(1785779646.060:597): avc: denied { execute } for pid=4808 comm="syz.3.388" name="file0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.821224][ T28] audit: type=1400 audit(1785779646.060:598): avc: denied { execute_no_trans } for pid=4808 comm="syz.3.388" path="/80/file0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.873159][ T4815] syzkaller0: entered promiscuous mode [ 81.879040][ T4815] syzkaller0: entered allmulticast mode [ 82.134148][ T4823] loop1: detected capacity change from 0 to 1024 [ 82.167008][ T4823] netlink: 'syz.1.392': attribute type 12 has an invalid length. [ 82.193200][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 82.241257][ T310] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.259604][ T310] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.272834][ T4823] netlink: 'syz.1.392': attribute type 12 has an invalid length. [ 82.280723][ T28] audit: type=1400 audit(1785779646.570:599): avc: denied { view } for pid=4820 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.306530][ T310] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.315982][ T310] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.325146][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 82.455369][ T28] audit: type=1400 audit(1785779646.760:600): avc: denied { write } for pid=4833 comm="syz.0.397" path="socket:[8568]" dev="sockfs" ino=8568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 82.465297][ T4840] FAULT_INJECTION: forcing a failure. [ 82.465297][ T4840] name failslab, interval 1, probability 100, space 0, times 10 [ 82.480763][ T4831] FAULT_INJECTION: forcing a failure. [ 82.480763][ T4831] name failslab, interval 1, probability 100, space 0, times 9 [ 82.493074][ C1] FAULT_INJECTION: forcing a failure. [ 82.493074][ C1] name failslab, interval 1, probability 100, space 0, times 9 [ 82.493127][ C1] CPU: 1 UID: 0 PID: 4840 Comm: syz.1.399 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.493155][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.493184][ C1] Call Trace: [ 82.493192][ C1] [ 82.493200][ C1] __dump_stack+0x1d/0x30 [ 82.493227][ C1] dump_stack_lvl+0x95/0xd0 [ 82.493260][ C1] dump_stack+0x15/0x1b [ 82.493281][ C1] should_fail_ex+0x25e/0x270 [ 82.493343][ C1] should_failslab+0x8c/0xb0 [ 82.493370][ C1] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 82.493394][ C1] ? __alloc_skb+0x2db/0x6f0 [ 82.493442][ C1] ? __alloc_skb+0x2db/0x6f0 [ 82.493474][ C1] __alloc_skb+0x2db/0x6f0 [ 82.493504][ C1] ? __rcu_read_unlock+0x4e/0x70 [ 82.493536][ C1] ? __alloc_skb+0x205/0x6f0 [ 82.493568][ C1] ndisc_alloc_skb+0x69/0x180 [ 82.493625][ C1] ndisc_send_rs+0x18a/0x360 [ 82.493666][ C1] addrconf_rs_timer+0x1e3/0x310 [ 82.493698][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 82.493733][ C1] call_timer_fn+0x3b/0x240 [ 82.493763][ C1] __run_timer_base+0x40c/0x5f0 [ 82.493799][ C1] run_timer_softirq+0x31/0x70 [ 82.493826][ C1] handle_softirqs+0xb9/0x280 [ 82.493849][ C1] __irq_exit_rcu+0x42/0xd0 [ 82.493872][ C1] sysvec_apic_timer_interrupt+0x74/0x80 [ 82.493911][ C1] [ 82.493919][ C1] [ 82.493927][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 82.493951][ C1] RIP: 0010:console_flush_all+0x513/0x6b0 [ 82.493983][ C1] Code: 89 de 48 81 e6 00 02 00 00 31 ff e8 87 5d 13 00 48 81 e3 00 02 00 00 75 07 e8 99 58 13 00 eb 06 e8 92 58 13 00 fb 4d 8d 67 58 <4c> 89 e7 e8 95 3e 32 00 4d 8b 34 24 48 8b 5c 24 10 48 89 df e8 54 [ 82.494003][ C1] RSP: 0018:ffffc900125e7b38 EFLAGS: 00000287 [ 82.494048][ C1] RAX: ffffffff8145ff9e RBX: 0000000000000200 RCX: 0000000000080000 [ 82.494064][ C1] RDX: ffffc900030b9000 RSI: 00000000000524fe RDI: 00000000000524ff [ 82.494080][ C1] RBP: 0000000000000001 R08: 0001ffff86c6429f R09: 0000000000000000 [ 82.494095][ C1] R10: 0001c900125e7b0c R11: 0001c900125e7b0f R12: ffffffff86e36b48 [ 82.494111][ C1] R13: ffffffff86e36b50 R14: 0000000000000001 R15: ffffffff86e36af0 [ 82.494130][ C1] ? console_flush_all+0x50e/0x6b0 [ 82.494177][ C1] ? console_flush_all+0x50e/0x6b0 [ 82.494209][ C1] console_unlock+0xa1/0x280 [ 82.494237][ C1] vprintk_emit+0x3e4/0x600 [ 82.494271][ C1] vprintk_default+0x26/0x30 [ 82.494295][ C1] vprintk+0x1d/0x30 [ 82.494354][ C1] _printk+0x79/0xa0 [ 82.494378][ C1] should_fail_ex+0x246/0x270 [ 82.494407][ C1] ? __pfx_sock_alloc_inode+0x10/0x10 [ 82.494440][ C1] should_failslab+0x8c/0xb0 [ 82.494481][ C1] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 82.494506][ C1] ? sock_alloc_inode+0x36/0xf0 [ 82.494542][ C1] ? sock_alloc_inode+0x36/0xf0 [ 82.494572][ C1] ? selinux_socket_create+0xfd/0x180 [ 82.494600][ C1] ? __pfx_sock_alloc_inode+0x10/0x10 [ 82.494637][ C1] sock_alloc_inode+0x36/0xf0 [ 82.494663][ C1] alloc_inode+0x40/0x170 [ 82.494691][ C1] __sock_create+0x121/0x580 [ 82.494720][ C1] ? __se_sys_futex+0x2f6/0x370 [ 82.494743][ C1] ? xfd_validate_state+0x45/0xf0 [ 82.494787][ C1] __sys_socket+0xaf/0x180 [ 82.494824][ C1] __x64_sys_socket+0x3f/0x50 [ 82.494860][ C1] x64_sys_call+0x11fc/0x3020 [ 82.494887][ C1] do_syscall_64+0x136/0x3c0 [ 82.494935][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.494960][ C1] RIP: 0033:0x7fb3dc29e019 [ 82.494979][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.494998][ C1] RSP: 002b:00007fb3dacf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 82.495021][ C1] RAX: ffffffffffffffda RBX: 00007fb3dc525fa0 RCX: 00007fb3dc29e019 [ 82.495038][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 82.495052][ C1] RBP: 00007fb3dc33500c R08: 0000000000000000 R09: 0000000000000000 [ 82.495066][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.495083][ C1] R13: 00007fb3dc526038 R14: 00007fb3dc525fa0 R15: 00007ffccd93a528 [ 82.495103][ C1] [ 82.495126][ C1] FAULT_INJECTION: forcing a failure. [ 82.495126][ C1] name failslab, interval 1, probability 100, space 0, times 8 [ 82.495152][ C1] CPU: 1 UID: 0 PID: 4840 Comm: syz.1.399 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.495178][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.495201][ C1] Call Trace: [ 82.495207][ C1] [ 82.495215][ C1] __dump_stack+0x1d/0x30 [ 82.495237][ C1] dump_stack_lvl+0x95/0xd0 [ 82.495267][ C1] dump_stack+0x15/0x1b [ 82.495289][ C1] should_fail_ex+0x25e/0x270 [ 82.495339][ C1] should_failslab+0x8c/0xb0 [ 82.495363][ C1] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 82.495420][ C1] ? __alloc_skb+0x2db/0x6f0 [ 82.495450][ C1] ? __alloc_skb+0x2db/0x6f0 [ 82.495482][ C1] __alloc_skb+0x2db/0x6f0 [ 82.495548][ C1] ? __rcu_read_unlock+0x4e/0x70 [ 82.495573][ C1] ? __alloc_skb+0x205/0x6f0 [ 82.495609][ C1] ndisc_alloc_skb+0x69/0x180 [ 82.495648][ C1] ndisc_send_rs+0x18a/0x360 [ 82.495680][ C1] addrconf_rs_timer+0x1e3/0x310 [ 82.495725][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 82.495761][ C1] call_timer_fn+0x3b/0x240 [ 82.495789][ C1] __run_timer_base+0x40c/0x5f0 [ 82.495821][ C1] run_timer_softirq+0x31/0x70 [ 82.495848][ C1] handle_softirqs+0xb9/0x280 [ 82.495872][ C1] __irq_exit_rcu+0x42/0xd0 [ 82.495894][ C1] sysvec_apic_timer_interrupt+0x74/0x80 [ 82.495930][ C1] [ 82.495938][ C1] [ 82.495946][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 82.495969][ C1] RIP: 0010:console_flush_all+0x513/0x6b0 [ 82.496001][ C1] Code: 89 de 48 81 e6 00 02 00 00 31 ff e8 87 5d 13 00 48 81 e3 00 02 00 00 75 07 e8 99 58 13 00 eb 06 e8 92 58 13 00 fb 4d 8d 67 58 <4c> 89 e7 e8 95 3e 32 00 4d 8b 34 24 48 8b 5c 24 10 48 89 df e8 54 [ 82.496020][ C1] RSP: 0018:ffffc900125e7b38 EFLAGS: 00000287 [ 82.496038][ C1] RAX: ffffffff8145ff9e RBX: 0000000000000200 RCX: 0000000000080000 [ 82.496054][ C1] RDX: ffffc900030b9000 RSI: 00000000000524fe RDI: 00000000000524ff [ 82.496069][ C1] RBP: 0000000000000001 R08: 0001ffff86c6429f R09: 0000000000000000 [ 82.496089][ C1] R10: 0001c900125e7b0c R11: 0001c900125e7b0f R12: ffffffff86e36b48 [ 82.496105][ C1] R13: ffffffff86e36b50 R14: 0000000000000001 R15: ffffffff86e36af0 [ 82.496123][ C1] ? console_flush_all+0x50e/0x6b0 [ 82.496174][ C1] ? console_flush_all+0x50e/0x6b0 [ 82.496205][ C1] console_unlock+0xa1/0x280 [ 82.496232][ C1] vprintk_emit+0x3e4/0x600 [ 82.496277][ C1] vprintk_default+0x26/0x30 [ 82.496303][ C1] vprintk+0x1d/0x30 [ 82.496335][ C1] _printk+0x79/0xa0 [ 82.496358][ C1] should_fail_ex+0x246/0x270 [ 82.496400][ C1] ? __pfx_sock_alloc_inode+0x10/0x10 [ 82.496427][ C1] should_failslab+0x8c/0xb0 [ 82.496465][ C1] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 82.496491][ C1] ? sock_alloc_inode+0x36/0xf0 [ 82.496537][ C1] ? sock_alloc_inode+0x36/0xf0 [ 82.496563][ C1] ? selinux_socket_create+0xfd/0x180 [ 82.496593][ C1] ? __pfx_sock_alloc_inode+0x10/0x10 [ 82.496626][ C1] sock_alloc_inode+0x36/0xf0 [ 82.496672][ C1] alloc_inode+0x40/0x170 [ 82.496698][ C1] __sock_create+0x121/0x580 [ 82.496724][ C1] ? __se_sys_futex+0x2f6/0x370 [ 82.496748][ C1] ? xfd_validate_state+0x45/0xf0 [ 82.496782][ C1] __sys_socket+0xaf/0x180 [ 82.496812][ C1] __x64_sys_socket+0x3f/0x50 [ 82.496842][ C1] x64_sys_call+0x11fc/0x3020 [ 82.496876][ C1] do_syscall_64+0x136/0x3c0 [ 82.496904][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.496929][ C1] RIP: 0033:0x7fb3dc29e019 [ 82.496946][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.496965][ C1] RSP: 002b:00007fb3dacf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 82.496997][ C1] RAX: ffffffffffffffda RBX: 00007fb3dc525fa0 RCX: 00007fb3dc29e019 [ 82.497013][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 82.497028][ C1] RBP: 00007fb3dc33500c R08: 0000000000000000 R09: 0000000000000000 [ 82.497042][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.497055][ C1] R13: 00007fb3dc526038 R14: 00007fb3dc525fa0 R15: 00007ffccd93a528 [ 82.497073][ C1] [ 82.497266][ T4836] FAULT_INJECTION: forcing a failure. [ 82.497266][ T4836] name failslab, interval 1, probability 100, space 0, times 7 [ 82.497294][ T4836] CPU: 1 UID: 0 PID: 4836 Comm: syz.4.398 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.497320][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.497333][ T4836] Call Trace: [ 82.497340][ T4836] [ 82.497348][ T4836] __dump_stack+0x1d/0x30 [ 82.497372][ T4836] dump_stack_lvl+0x95/0xd0 [ 82.497394][ T4836] dump_stack+0x15/0x1b [ 82.497415][ T4836] should_fail_ex+0x25e/0x270 [ 82.497445][ T4836] should_failslab+0x8c/0xb0 [ 82.497469][ T4836] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 82.497493][ T4836] ? vm_area_dup+0x33/0x2c0 [ 82.497517][ T4836] ? vm_area_dup+0x33/0x2c0 [ 82.497542][ T4836] vm_area_dup+0x33/0x2c0 [ 82.497567][ T4836] __split_vma+0xe9/0x640 [ 82.497591][ T4836] vma_modify+0xb29/0xc80 [ 82.497625][ T4836] vma_modify_flags+0x182/0x210 [ 82.497663][ T4836] mprotect_fixup+0x3a2/0x680 [ 82.497687][ T4836] do_mprotect_pkey+0x69e/0x950 [ 82.497709][ T4836] ? do_mmap+0x9f1/0xbc0 [ 82.497745][ T4836] __x64_sys_mprotect+0x48/0x60 [ 82.497763][ T4836] x64_sys_call+0x2768/0x3020 [ 82.497785][ T4836] do_syscall_64+0x136/0x3c0 [ 82.497810][ T4836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.497834][ T4836] RIP: 0033:0x7faec4a0de17 [ 82.497852][ T4836] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.497871][ T4836] RSP: 002b:00007fff3b6c75e8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 82.497900][ T4836] RAX: ffffffffffffffda RBX: 00007faec34466c0 RCX: 00007faec4a0de17 [ 82.497914][ T4836] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007faec3427000 [ 82.497928][ T4836] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 82.497942][ T4836] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff3b6c7740 [ 82.497956][ T4836] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 82.497976][ T4836] [ 82.497993][ T4836] FAULT_INJECTION: forcing a failure. [ 82.497993][ T4836] name failslab, interval 1, probability 100, space 0, times 6 [ 82.498018][ T4836] CPU: 1 UID: 0 PID: 4836 Comm: syz.4.398 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.498044][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.498057][ T4836] Call Trace: [ 82.498062][ T4836] [ 82.498070][ T4836] __dump_stack+0x1d/0x30 [ 82.498092][ T4836] dump_stack_lvl+0x95/0xd0 [ 82.498113][ T4836] dump_stack+0x15/0x1b [ 82.498134][ T4836] should_fail_ex+0x25e/0x270 [ 82.498164][ T4836] should_failslab+0x8c/0xb0 [ 82.498189][ T4836] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 82.498213][ T4836] ? vm_area_dup+0x33/0x2c0 [ 82.498237][ T4836] ? vm_area_dup+0x33/0x2c0 [ 82.498269][ T4836] vm_area_dup+0x33/0x2c0 [ 82.498292][ T4836] __split_vma+0xe9/0x640 [ 82.498317][ T4836] vms_gather_munmap_vmas+0x265/0x7f0 [ 82.498354][ T4836] do_vmi_align_munmap+0x1e1/0x400 [ 82.498395][ T4836] do_vmi_munmap+0x1da/0x220 [ 82.498429][ T4836] __vm_munmap+0x192/0x270 [ 82.498454][ T4836] __x64_sys_munmap+0x36/0x50 [ 82.498484][ T4836] x64_sys_call+0x9c0/0x3020 [ 82.498513][ T4836] do_syscall_64+0x136/0x3c0 [ 82.498537][ T4836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.498556][ T4836] RIP: 0033:0x7faec4a0de47 [ 82.498571][ T4836] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.498590][ T4836] RSP: 002b:00007fff3b6c75e8 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 82.498609][ T4836] RAX: ffffffffffffffda RBX: 00007faec34466c0 RCX: 00007faec4a0de47 [ 82.498623][ T4836] RDX: 000000000000000c RSI: 0000000000021000 RDI: 00007faec3426000 [ 82.498638][ T4836] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 82.498651][ T4836] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff3b6c7740 [ 82.498666][ T4836] R13: ffffffffffffffe8 R14: 0000000000001000 R15: 0000000000000000 [ 82.498685][ T4836] [ 82.498757][ T4836] FAULT_INJECTION: forcing a failure. [ 82.498757][ T4836] name failslab, interval 1, probability 100, space 0, times 5 [ 82.534025][ T28] audit: type=1400 audit(1785779646.770:601): avc: denied { create } for pid=4830 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.555396][ T4840] CPU: 1 UID: 0 PID: 4840 Comm: syz.1.399 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.555425][ T4840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.555437][ T4840] Call Trace: [ 82.555445][ T4840] [ 82.555454][ T4840] __dump_stack+0x1d/0x30 [ 82.555480][ T4840] dump_stack_lvl+0x95/0xd0 [ 82.555516][ T4840] dump_stack+0x15/0x1b [ 82.555537][ T4840] should_fail_ex+0x25e/0x270 [ 82.555567][ T4840] ? __pfx_sock_alloc_inode+0x10/0x10 [ 82.555594][ T4840] should_failslab+0x8c/0xb0 [ 82.555639][ T4840] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 82.555663][ T4840] ? sock_alloc_inode+0x36/0xf0 [ 82.555730][ T4840] ? sock_alloc_inode+0x36/0xf0 [ 82.555755][ T4840] ? selinux_socket_create+0xfd/0x180 [ 82.555839][ T4840] ? __pfx_sock_alloc_inode+0x10/0x10 [ 82.555865][ T4840] sock_alloc_inode+0x36/0xf0 [ 82.555928][ T4840] alloc_inode+0x40/0x170 [ 82.555952][ T4840] __sock_create+0x121/0x580 [ 82.555979][ T4840] ? __se_sys_futex+0x2f6/0x370 [ 82.556014][ T4840] ? xfd_validate_state+0x45/0xf0 [ 82.556043][ T4840] __sys_socket+0xaf/0x180 [ 82.556070][ T4840] __x64_sys_socket+0x3f/0x50 [ 82.556098][ T4840] x64_sys_call+0x11fc/0x3020 [ 82.556141][ T4840] do_syscall_64+0x136/0x3c0 [ 82.556168][ T4840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.556192][ T4840] RIP: 0033:0x7fb3dc29e019 [ 82.556210][ T4840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.556228][ T4840] RSP: 002b:00007fb3dacf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 82.556291][ T4840] RAX: ffffffffffffffda RBX: 00007fb3dc525fa0 RCX: 00007fb3dc29e019 [ 82.556307][ T4840] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 82.556351][ T4840] RBP: 00007fb3dc33500c R08: 0000000000000000 R09: 0000000000000000 [ 82.556365][ T4840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.556414][ T4840] R13: 00007fb3dc526038 R14: 00007fb3dc525fa0 R15: 00007ffccd93a528 [ 82.556435][ T4840] [ 82.556480][ T4840] socket: no more sockets [ 82.573349][ T4831] CPU: 0 UID: 0 PID: 4831 Comm: syz.3.394 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.573405][ T4831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.573431][ T4831] Call Trace: [ 82.573439][ T4831] [ 82.573448][ T4831] __dump_stack+0x1d/0x30 [ 82.573554][ T4831] dump_stack_lvl+0x95/0xd0 [ 82.573598][ T4831] dump_stack+0x15/0x1b [ 82.573617][ T4831] should_fail_ex+0x25e/0x270 [ 82.573722][ T4831] should_failslab+0x8c/0xb0 [ 82.573746][ T4831] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 82.573770][ T4831] ? security_file_alloc+0x32/0xf0 [ 82.573851][ T4831] ? security_file_alloc+0x32/0xf0 [ 82.573883][ T4831] security_file_alloc+0x32/0xf0 [ 82.573914][ T4831] init_file+0x5b/0x1b0 [ 82.574004][ T4831] alloc_empty_file+0x85/0x1e0 [ 82.574033][ T4831] alloc_file_pseudo+0x92/0x120 [ 82.574132][ T4831] sock_alloc_file+0x9c/0x1e0 [ 82.574158][ T4831] __sys_socket+0x118/0x180 [ 82.574190][ T4831] __x64_sys_socket+0x3f/0x50 [ 82.574259][ T4831] x64_sys_call+0x11fc/0x3020 [ 82.574283][ T4831] do_syscall_64+0x136/0x3c0 [ 82.574311][ T4831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.574356][ T4831] RIP: 0033:0x7f50f053e019 [ 82.574374][ T4831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.574393][ T4831] RSP: 002b:00007f50eef97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 82.574415][ T4831] RAX: ffffffffffffffda RBX: 00007f50f07c5fa0 RCX: 00007f50f053e019 [ 82.574468][ T4831] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 82.574482][ T4831] RBP: 00007f50f05d500c R08: 0000000000000000 R09: 0000000000000000 [ 82.574495][ T4831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.574509][ T4831] R13: 00007f50f07c6038 R14: 00007f50f07c5fa0 R15: 00007ffdf82ad768 [ 82.574528][ T4831] [ 82.604757][ T28] audit: type=1400 audit(1785779646.770:602): avc: denied { write } for pid=4830 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.750353][ T4836] CPU: 1 UID: 0 PID: 4836 Comm: syz.4.398 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.750384][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.750396][ T4836] Call Trace: [ 82.750403][ T4836] [ 82.750431][ T4836] __dump_stack+0x1d/0x30 [ 82.750457][ T4836] dump_stack_lvl+0x95/0xd0 [ 82.750480][ T4836] dump_stack+0x15/0x1b [ 82.750502][ T4836] should_fail_ex+0x25e/0x270 [ 82.750532][ T4836] should_failslab+0x8c/0xb0 [ 82.750604][ T4836] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 82.750627][ T4836] ? taskstats_exit+0xf9/0x810 [ 82.750716][ T4836] ? taskstats_exit+0xf9/0x810 [ 82.750744][ T4836] taskstats_exit+0xf9/0x810 [ 82.750770][ T4836] ? acct_update_integrals+0x1b0/0x1e0 [ 82.750817][ T4836] do_exit+0x415/0x1500 [ 82.750844][ T4836] ? zap_other_threads+0x2a6/0x300 [ 82.750872][ T4836] do_group_exit+0x138/0x140 [ 82.750924][ T4836] __x64_sys_exit_group+0x1f/0x20 [ 82.750953][ T4836] x64_sys_call+0x3008/0x3020 [ 82.750978][ T4836] do_syscall_64+0x136/0x3c0 [ 82.751028][ T4836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.751050][ T4836] RIP: 0033:0x7faec4a0e019 [ 82.751068][ T4836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.751087][ T4836] RSP: 002b:00007fff3b6c7618 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 82.751109][ T4836] RAX: ffffffffffffffda RBX: 00007faec4aa50e4 RCX: 00007faec4a0e019 [ 82.751177][ T4836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 82.751190][ T4836] RBP: 000000000000000c R08: 0000000000000000 R09: 00007faec48d43a0 [ 82.751203][ T4836] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3b6c7740 [ 82.751217][ T4836] R13: 00007faec48d43a0 R14: 00007fff3b6c7738 R15: 00007faec4c95fa0 [ 82.751237][ T4836] [ 84.553280][ T4852] loop0: detected capacity change from 0 to 1024 [ 84.560302][ T4852] EXT4-fs: Ignoring removed bh option [ 84.577843][ T4852] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 84.630124][ T4852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.565121][ T4872] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 85.588634][ T4872] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.660195][ T4874] bond3: (slave veth5): Enslaving as an active interface with a down link [ 85.681474][ T4872] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 85.701545][ T4872] bond3: (slave batadv1): making interface the new active one [ 85.719182][ T4872] batadv1: entered promiscuous mode [ 85.731601][ T4872] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 85.757318][ T3300] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /79/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 85.780038][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 85.780056][ T28] audit: type=1400 audit(1785779650.060:605): avc: denied { write } for pid=3300 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.808599][ T3300] EXT4-fs (loop0): Remounting filesystem read-only [ 85.821904][ T28] audit: type=1400 audit(1785779650.130:606): avc: denied { write } for pid=3300 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.846812][ T28] audit: type=1400 audit(1785779650.130:607): avc: denied { write } for pid=3300 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.869564][ T28] audit: type=1400 audit(1785779650.130:608): avc: denied { write } for pid=3300 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.892559][ T4872] bond3 (unregistering): (slave veth5): Releasing active interface [ 85.901299][ T28] audit: type=1400 audit(1785779650.130:609): avc: denied { write } for pid=3300 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.924310][ T28] audit: type=1400 audit(1785779650.130:610): avc: denied { write } for pid=3300 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.947143][ T28] audit: type=1400 audit(1785779650.130:611): avc: denied { write } for pid=3300 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.977207][ T4872] bond3 (unregistering): (slave batadv1): Releasing active interface [ 85.987103][ T4872] bond3 (unregistering): Released all slaves [ 86.005152][ T4875] syz_tun (unregistering): left allmulticast mode [ 86.100652][ T4875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.465452][ T4881] »»»»»»: renamed from vlan0 (while UP) [ 86.528780][ T4885] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.545289][ T4885] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.560567][ T4885] bridge_slave_0: entered allmulticast mode [ 86.574043][ T4885] bridge_slave_0: entered promiscuous mode [ 86.588596][ T4885] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.606032][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.615179][ T4885] bridge_slave_1: entered allmulticast mode [ 86.622230][ T4885] bridge_slave_1: entered promiscuous mode [ 86.640477][ T4885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.651725][ T4885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.672686][ T4885] team0: Port device team_slave_0 added [ 86.679872][ T4885] team0: Port device team_slave_1 added [ 86.698044][ T4885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.705531][ T4885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.733281][ T4885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.746512][ T4885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.754160][ T4885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.781382][ T4885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.811365][ T4885] hsr_slave_0: entered promiscuous mode [ 86.817664][ T4885] hsr_slave_1: entered promiscuous mode [ 86.823939][ T4885] debugfs: 'hsr0' already exists in 'hsr' [ 86.829963][ T4885] Cannot create hsr debugfs directory [ 86.911793][ T4885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.939871][ T4885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.947686][ T4885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.958498][ T4885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.971322][ T4885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.980462][ T4885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.988340][ T4885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.997739][ T4885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.038080][ T4885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.050497][ T4885] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.065531][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.072816][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.082111][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.089282][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.302165][ T4885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.413162][ T28] audit: type=1400 audit(1785779651.720:612): avc: denied { block_suspend } for pid=4935 comm="syz.3.420" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.573104][ T4885] veth0_vlan: entered promiscuous mode [ 87.596972][ T4885] veth1_vlan: entered promiscuous mode [ 87.635879][ T4885] veth0_macvtap: entered promiscuous mode [ 87.654395][ T4885] veth1_macvtap: entered promiscuous mode [ 87.686469][ T4885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.716539][ T4885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.760096][ T310] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.787323][ T310] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.829686][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.845508][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.878414][ T28] audit: type=1400 audit(1785779652.180:613): avc: denied { mounton } for pid=4885 comm="syz-executor" path="/root/syzkaller.0v1YPk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 87.914214][ T28] audit: type=1400 audit(1785779652.220:614): avc: denied { mounton } for pid=4885 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 90.230081][ T4982] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 90.287092][ T4982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.316923][ T4986] bond0: entered allmulticast mode [ 90.377974][ T4982] bond0: (slave ip6gretap1): making interface the new active one [ 90.401809][ T4982] ip6gretap1: entered allmulticast mode [ 90.415030][ T4982] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 90.502608][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 90.533454][ T4998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.435'. [ 90.727453][ T5007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 90.769387][ T5007] bond2: entered promiscuous mode [ 90.784925][ T5007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.809866][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 90.809885][ T28] audit: type=1326 audit(1785779655.110:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.5.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e070ce019 code=0x7ffc0000 [ 90.856213][ T5007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.876539][ T5007] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 90.884958][ T28] audit: type=1326 audit(1785779655.110:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.5.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e070ce019 code=0x7ffc0000 [ 90.914926][ T28] audit: type=1326 audit(1785779655.110:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.5.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e070ce019 code=0x7ffc0000 [ 90.928816][ T5007] bond2: (slave sit1): Error -95 calling set_mac_address [ 90.941260][ T28] audit: type=1326 audit(1785779655.110:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.5.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7e070ce019 code=0x7ffc0000 [ 90.975717][ T28] audit: type=1400 audit(1785779655.110:621): avc: denied { read } for pid=5001 comm="syz.5.436" path="socket:[9776]" dev="sockfs" ino=9776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.999179][ T28] audit: type=1326 audit(1785779655.160:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.5.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e070ce019 code=0x7ffc0000 [ 91.053456][ T28] audit: type=1326 audit(1785779655.160:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.5.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e070ce019 code=0x7ffc0000 [ 91.101239][ T28] audit: type=1326 audit(1785779655.180:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.5.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7e070ce019 code=0x7ffc0000 [ 91.137015][ T28] audit: type=1326 audit(1785779655.180:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.5.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7e070ce019 code=0x7ffc0000 [ 91.261153][ T28] audit: type=1326 audit(1785779655.570:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.5.444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e070ce019 code=0x7ffc0000 [ 93.102774][ T5044] loop1: detected capacity change from 0 to 128 [ 93.203898][ T5044] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 93.649058][ T5052] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.656455][ T5052] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.666018][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.673178][ T5052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.680606][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.687803][ T5052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.703184][ T5052] team0: Failed to send options change via netlink (err -105) [ 93.710899][ T5052] team0: Port device bridge0 added [ 93.730404][ T5055] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 93.762925][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.779353][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.793282][ T5055] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 93.806591][ T5055] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 94.170378][ T5070] netlink: 'syz.5.458': attribute type 1 has an invalid length. [ 94.786402][ T5085] netlink: 'syz.5.471': attribute type 1 has an invalid length. [ 94.959415][ T5095] loop5: detected capacity change from 0 to 164 [ 95.025813][ T5095] rock: directory entry would overflow storage [ 95.047853][ T5095] rock: sig=0x5252, size=5, remaining=3 [ 95.204879][ T5092] netlink: 'syz.5.460': attribute type 30 has an invalid length. [ 96.283832][ T5121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 96.796237][ T5123] veth3: entered allmulticast mode [ 96.819459][ T5123] bond3: (slave veth3): Enslaving as an active interface with an up link [ 96.837078][ T5128] netlink: 72 bytes leftover after parsing attributes in process `syz.4.474'. [ 96.884602][ T5128] netlink: 72 bytes leftover after parsing attributes in process `syz.4.474'. [ 96.897187][ T28] kauditd_printk_skb: 328 callbacks suppressed [ 96.897204][ T28] audit: type=1326 audit(1785779661.210:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 96.957157][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 96.969123][ T28] audit: type=1326 audit(1785779661.210:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 97.004317][ T28] audit: type=1326 audit(1785779661.210:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 97.036601][ T28] audit: type=1326 audit(1785779661.210:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 97.071205][ T5141] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 97.082205][ T28] audit: type=1326 audit(1785779661.210:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 97.082749][ T5141] bond2 (unregistering): Released all slaves [ 97.107709][ T28] audit: type=1326 audit(1785779661.210:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 97.107745][ T28] audit: type=1326 audit(1785779661.210:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 97.107775][ T28] audit: type=1326 audit(1785779661.210:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 97.107803][ T28] audit: type=1326 audit(1785779661.210:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 97.201761][ T5145] audit: audit_backlog=66 > audit_backlog_limit=64 [ 97.266879][ T5149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=5149 comm=syz.4.480 [ 98.704512][ T5169] macsec0: left promiscuous mode [ 98.950378][ T5183] netlink: 'syz.1.494': attribute type 1 has an invalid length. [ 98.995865][ T5183] 8021q: adding VLAN 0 to HW filter on device bond4 [ 99.039323][ T5187] bond4: (slave veth5): Enslaving as an active interface with a down link [ 99.066651][ T5183] bond4: (slave dummy0): making interface the new active one [ 99.095560][ T5183] dummy0: entered promiscuous mode [ 99.101307][ T5183] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 99.110403][ T5187] netlink: 'syz.1.494': attribute type 10 has an invalid length. [ 99.118555][ T5187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.494'. [ 99.141516][ T5187] bond4: (slave dummy0): Releasing active interface [ 99.312503][ T5201] loop1: detected capacity change from 0 to 128 [ 99.360288][ T5201] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.374379][ T5201] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.434286][ T5206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.460233][ T3293] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.475502][ T5206] bridge0: port 3(syz_tun) entered blocking state [ 99.509612][ T5206] bridge0: port 3(syz_tun) entered disabled state [ 99.531615][ T5206] syz_tun: entered allmulticast mode [ 99.541671][ T5206] syz_tun: entered promiscuous mode [ 99.622999][ T5212] syzkaller0: entered allmulticast mode [ 99.742957][ T5219] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 99.959628][ T5234] loop1: detected capacity change from 0 to 128 [ 99.994136][ T5234] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.038501][ T5234] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.190212][ T3293] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.246241][ T5243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 100.294666][ T5236] loop2: detected capacity change from 0 to 512 [ 100.457737][ T5249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.516'. [ 100.518971][ T5249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5249 comm=syz.1.516 [ 100.540236][ T5236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.587278][ T5236] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.727432][ T5254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.734805][ T5254] IPv6: NLM_F_CREATE should be set when creating new route [ 100.779849][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.820010][ T5257] netlink: 'syz.4.520': attribute type 1 has an invalid length. [ 100.891567][ T5263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.925469][ T5263] bond1: (slave bond2): making interface the new active one [ 100.951000][ T5263] bond1: (slave bond2): Enslaving as an active interface with an up link [ 100.976170][ T5257] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 101.376942][ T5284] loop1: detected capacity change from 0 to 512 [ 101.835169][ T5294] syz.4.534: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 101.952966][ T5294] CPU: 0 UID: 0 PID: 5294 Comm: syz.4.534 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.953003][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.953017][ T5294] Call Trace: [ 101.953025][ T5294] [ 101.953033][ T5294] __dump_stack+0x1d/0x30 [ 101.953059][ T5294] dump_stack_lvl+0x95/0xd0 [ 101.953137][ T5294] dump_stack+0x15/0x1b [ 101.953156][ T5294] warn_alloc+0x145/0x1c0 [ 101.953190][ T5294] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 101.953239][ T5294] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 101.953273][ T5294] ? avc_has_perm_noaudit+0x30/0x120 [ 101.953323][ T5294] ? __rcu_read_lock+0x15/0x50 [ 101.953348][ T5294] ? should_fail_ex+0x87/0x270 [ 101.953375][ T5294] ? xskq_create+0x36/0xe0 [ 101.953450][ T5294] ? should_failslab+0x8c/0xb0 [ 101.953491][ T5294] vmalloc_user_noprof+0x7d/0xb0 [ 101.953517][ T5294] ? xskq_create+0x80/0xe0 [ 101.953632][ T5294] xskq_create+0x80/0xe0 [ 101.953664][ T5294] xsk_init_queue+0x70/0xb0 [ 101.953738][ T5294] xsk_setsockopt+0x471/0x640 [ 101.953770][ T5294] ? __pfx_xsk_setsockopt+0x10/0x10 [ 101.953795][ T5294] __sys_setsockopt+0x184/0x200 [ 101.953904][ T5294] __x64_sys_setsockopt+0x64/0x80 [ 101.954004][ T5294] x64_sys_call+0x2327/0x3020 [ 101.954040][ T5294] do_syscall_64+0x136/0x3c0 [ 101.954123][ T5294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.954150][ T5294] RIP: 0033:0x7faec4a0e019 [ 101.954170][ T5294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.954193][ T5294] RSP: 002b:00007faec3467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.954219][ T5294] RAX: ffffffffffffffda RBX: 00007faec4c95fa0 RCX: 00007faec4a0e019 [ 101.954300][ T5294] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 101.954361][ T5294] RBP: 00007faec4aa500c R08: 0000000000000004 R09: 0000000000000000 [ 101.954375][ T5294] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 101.954392][ T5294] R13: 00007faec4c96038 R14: 00007faec4c95fa0 R15: 00007fff3b6c7648 [ 101.954415][ T5294] [ 102.194743][ T5294] Mem-Info: [ 102.249464][ T5294] active_anon:28104 inactive_anon:1 isolated_anon:2 [ 102.249464][ T5294] active_file:2432 inactive_file:27493 isolated_file:0 [ 102.249464][ T5294] unevictable:0 dirty:303 writeback:2 [ 102.249464][ T5294] slab_reclaimable:3408 slab_unreclaimable:52656 [ 102.249464][ T5294] mapped:31207 shmem:20401 pagetables:1239 [ 102.249464][ T5294] sec_pagetables:0 bounce:0 [ 102.249464][ T5294] kernel_misc_reclaimable:0 [ 102.249464][ T5294] free:1818248 free_pcp:7204 free_cma:0 [ 102.523630][ T5303] veth1_macvtap: left allmulticast mode [ 102.562577][ T5303] macsec0: left promiscuous mode [ 102.575323][ T5294] Node 0 active_anon:112532kB inactive_anon:4kB active_file:9728kB inactive_file:109972kB unevictable:0kB isolated(anon):8kB isolated(file):0kB mapped:124712kB dirty:1212kB writeback:8kB shmem:78936kB kernel_stack:4384kB pagetables:5072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 102.607227][ T5303] macsec0: left allmulticast mode [ 102.614367][ T5294] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.715531][ T5294] lowmem_reserve[]: 0 2878 7857 7857 [ 102.736515][ T5294] Node 0 DMA32 free:2944108kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947632kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 102.801350][ T5294] lowmem_reserve[]: 0 0 4978 4978 [ 102.811288][ T5294] Node 0 Normal free:4313744kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108496kB inactive_anon:4kB active_file:9728kB inactive_file:109972kB unevictable:0kB writepending:1220kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:27696kB local_pcp:12504kB free_cma:0kB [ 102.888264][ T5294] lowmem_reserve[]: 0 0 0 0 [ 102.901325][ T5294] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 102.940598][ T5294] Node 0 DMA32: 1*4kB (M) 3*8kB (M) 5*16kB (M) 6*32kB (M) 3*64kB (M) 3*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944108kB [ 102.992387][ T5294] Node 0 Normal: 479*4kB (UME) 426*8kB (UME) 213*16kB (UME) 98*32kB (UME) 106*64kB (UME) 131*128kB (UME) 143*256kB (UM) 63*512kB (UM) 35*1024kB (UM) 8*2048kB (UME) 1019*4096kB (UM) = 4330332kB [ 103.048670][ T5294] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 103.081574][ T5294] 49630 total pagecache pages [ 103.086812][ T28] kauditd_printk_skb: 351 callbacks suppressed [ 103.086830][ T28] audit: type=1400 audit(1785779667.389:1313): avc: denied { getopt } for pid=5314 comm="syz.5.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.121585][ T5294] 2 pages in swap cache [ 103.132526][ T5294] Free swap = 122012kB [ 103.145449][ T5294] Total swap = 124996kB [ 103.158155][ T5294] 2097051 pages RAM [ 103.170008][ T5294] 0 pages HighMem/MovableOnly [ 103.181863][ T5294] 81744 pages reserved [ 103.399535][ T5317] netlink: 20 bytes leftover after parsing attributes in process `syz.4.541'. [ 103.499523][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 103.543049][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 103.546424][ T5323] loop3: detected capacity change from 0 to 1024 [ 103.557958][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 103.592740][ T28] audit: type=1400 audit(1785779667.889:1314): avc: denied { connect } for pid=5321 comm="syz.2.543" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.625044][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 103.629983][ T5320] netlink: 'syz.3.542': attribute type 12 has an invalid length. [ 103.630004][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 103.714023][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 103.747717][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 103.769072][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 103.784613][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 103.971115][ T5326] loop2: detected capacity change from 0 to 512 [ 104.127995][ T5328] loop1: detected capacity change from 0 to 164 [ 104.198552][ T5328] iso9660: Unknown parameter 'crufƒ' [ 104.282871][ T3541] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.293833][ T3541] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.303089][ T3541] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.312336][ T3541] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.736854][ T5368] syzkaller0: entered promiscuous mode [ 104.746095][ T5368] syzkaller0: entered allmulticast mode [ 104.860855][ T5373] loop5: detected capacity change from 0 to 1024 [ 104.894685][ T5373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.922752][ T28] audit: type=1400 audit(1785779669.229:1315): avc: denied { write } for pid=5372 comm="syz.5.557" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.934234][ T5353] netlink: 'syz.4.549': attribute type 30 has an invalid length. [ 104.994329][ T28] audit: type=1400 audit(1785779669.259:1316): avc: denied { append } for pid=5372 comm="syz.5.557" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.191603][ T28] audit: type=1400 audit(1785779669.449:1317): avc: denied { map } for pid=5372 comm="syz.5.557" path="/21/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.245722][ T28] audit: type=1400 audit(1785779669.489:1318): avc: denied { execute } for pid=5372 comm="syz.5.557" path="/21/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.332109][ T4885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.388866][ T5385] loop5: detected capacity change from 0 to 512 [ 106.192313][ T5399] loop5: detected capacity change from 0 to 128 [ 106.282129][ T5399] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.287790][ T5401] netlink: 'syz.2.565': attribute type 2 has an invalid length. [ 106.314281][ T28] audit: type=1400 audit(1785779670.609:1319): avc: denied { connect } for pid=5400 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.364705][ T5407] syzkaller0: entered promiscuous mode [ 106.371743][ T5407] syzkaller0: entered allmulticast mode [ 106.407075][ T28] audit: type=1400 audit(1785779670.709:1320): avc: denied { write } for pid=5400 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.506767][ T28] audit: type=1400 audit(1785779670.809:1321): avc: denied { map } for pid=5415 comm="syz.4.570" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.533336][ T28] audit: type=1400 audit(1785779670.809:1322): avc: denied { read write } for pid=5415 comm="syz.4.570" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.702512][ T5420] loop3: detected capacity change from 0 to 164 [ 106.714087][ T5420] rock: directory entry would overflow storage [ 106.729524][ T5420] rock: sig=0x5252, size=5, remaining=3 [ 106.819396][ T5422] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 106.840820][ T5419] netlink: 'syz.3.571': attribute type 30 has an invalid length. [ 106.861094][ T5422] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 106.874124][ T5422] bond6 (unregistering): Released all slaves [ 106.893210][ T30] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.979077][ T5422] bridge1: entered promiscuous mode [ 106.994042][ T5422] bond5: (slave bridge1): making interface the new active one [ 107.004054][ T5422] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 107.162369][ T5430] xt_hl: Unknown Hop Limit match mode: 221 [ 107.667958][ T5448] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 107.765205][ T5446] loop2: detected capacity change from 0 to 164 [ 107.967824][ T5453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.989942][ T5453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.539084][ T5461] loop2: detected capacity change from 0 to 512 [ 108.599618][ T5461] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.585: corrupted inode contents [ 108.725854][ T5461] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.726513][ T5461] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 108.736177][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 108.736199][ C1] EXT4-fs (loop2): initial error at time 1785779673: ext4_do_update_inode:5742: inode 15 [ 108.736245][ C1] EXT4-fs (loop2): last error at time 1785779673: ext4_do_update_inode:5742: inode 15 [ 108.879417][ T5461] loop2: lost filesystem error report for type 5 error -117 [ 108.881115][ T5461] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.585: corrupted inode contents [ 108.921681][ T5461] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.921954][ T5461] EXT4-fs error (device loop2): ext4_evict_inode:315: inode #15: comm syz.2.585: mark_inode_dirty error [ 109.005430][ T5461] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.005626][ T5461] EXT4-fs (loop2): 1 orphan inode deleted [ 109.051036][ T5461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.086066][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 109.086084][ T28] audit: type=1400 audit(1785779673.389:1329): avc: denied { write } for pid=5460 comm="syz.2.585" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.141500][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.316916][ T5484] loop2: detected capacity change from 0 to 1024 [ 109.404090][ T5484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.433082][ T5492] mmap: syz.3.596 (5492) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.456243][ T5495] netlink: 'syz.4.598': attribute type 12 has an invalid length. [ 109.468795][ T5495] netlink: 'syz.4.598': attribute type 4 has an invalid length. [ 109.531811][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.665473][ T5514] __nla_validate_parse: 67 callbacks suppressed [ 110.665493][ T5514] netlink: 32 bytes leftover after parsing attributes in process `syz.5.610'. [ 110.681010][ T5514] netlink: 56 bytes leftover after parsing attributes in process `syz.5.610'. [ 110.737286][ T28] audit: type=1400 audit(1785779675.039:1330): avc: denied { append } for pid=5505 comm="syz.3.601" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.817245][ T5514] team0: Port device bridge0 removed [ 110.838075][ T5520] netlink: 'syz.5.610': attribute type 10 has an invalid length. [ 110.889805][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.610'. [ 110.955257][ T5523] loop2: detected capacity change from 0 to 164 [ 110.989302][ T28] audit: type=1400 audit(1785779675.289:1331): avc: denied { listen } for pid=5525 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.031978][ T5514] bridge_slave_0: left allmulticast mode [ 111.047761][ T5523] rock: directory entry would overflow storage [ 111.055603][ T5514] bridge_slave_0: left promiscuous mode [ 111.081352][ T5523] rock: sig=0x5252, size=5, remaining=3 [ 111.100899][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.137810][ T5514] bridge_slave_1: left allmulticast mode [ 111.147353][ T5514] bridge_slave_1: left promiscuous mode [ 111.164762][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.184396][ T5514] bond0: (slave bond_slave_0): Releasing backup interface [ 111.197383][ T5514] bond0: (slave bond_slave_1): Releasing backup interface [ 111.217345][ T5514] team0: Port device team_slave_0 removed [ 111.229346][ T5514] team0: Port device team_slave_1 removed [ 111.239908][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.247778][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.257068][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.265118][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.280330][ T5514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.298639][ T5529] netlink: 'syz.2.600': attribute type 30 has an invalid length. [ 111.308467][ T5520] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 111.337255][ T5522] bond0: (slave bridge0): Releasing backup interface [ 111.993422][ T28] audit: type=1400 audit(1785779676.299:1332): avc: denied { write } for pid=5547 comm="syz.5.614" name="dynamic_events" dev="tracefs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 112.019163][ T5549] Line length is too long: Should be less than 4094 [ 112.031130][ T28] audit: type=1400 audit(1785779676.299:1333): avc: denied { open } for pid=5547 comm="syz.5.614" path="/30/tracing/dynamic_events" dev="tracefs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 112.210989][ T5545] loop2: detected capacity change from 0 to 512 [ 112.258147][ T5545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.368629][ T5545] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.634132][ T28] audit: type=1326 audit(1785779676.939:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 112.682493][ T28] audit: type=1326 audit(1785779676.939:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 112.740825][ T28] audit: type=1326 audit(1785779676.939:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 112.771844][ T28] audit: type=1326 audit(1785779676.939:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 112.805897][ T28] audit: type=1326 audit(1785779676.939:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dc29e019 code=0x7ffc0000 [ 112.837788][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.917910][ T5568] hsr0 speed is unknown, defaulting to 1000 [ 112.932950][ T5568] hsr0 speed is unknown, defaulting to 1000 [ 112.945565][ T5568] hsr0 speed is unknown, defaulting to 1000 [ 112.961391][ T5568] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.982163][ T5568] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 113.035501][ T5568] hsr0 speed is unknown, defaulting to 1000 [ 113.663526][ T5568] hsr0 speed is unknown, defaulting to 1000 [ 113.682398][ T5568] hsr0 speed is unknown, defaulting to 1000 [ 113.702255][ T5568] hsr0 speed is unknown, defaulting to 1000 [ 113.737810][ T5568] hsr0 speed is unknown, defaulting to 1000 [ 113.884472][ T5568] hsr0 speed is unknown, defaulting to 1000 [ 114.034946][ T5588] loop2: detected capacity change from 0 to 128 [ 114.068590][ T5588] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.212952][ T5599] netlink: 'syz.4.632': attribute type 1 has an invalid length. [ 114.275404][ T5599] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 114.324237][ T5599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.632'. [ 114.345491][ T5606] loop3: detected capacity change from 0 to 1024 [ 114.354386][ T5606] ext4: Unknown parameter 'fowner' [ 114.360090][ T30] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 114.370009][ T28] kauditd_printk_skb: 151 callbacks suppressed [ 114.370027][ T28] audit: type=1400 audit(1785779678.669:1490): avc: denied { write } for pid=5605 comm="syz.3.634" path="socket:[10834]" dev="sockfs" ino=10834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.407423][ T5599] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.530441][ T30] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 114.760211][ T5618] loop3: detected capacity change from 0 to 164 [ 114.828461][ T310] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.972818][ T5623] syzkaller0: entered promiscuous mode [ 114.978837][ T5623] syzkaller0: entered allmulticast mode [ 115.634486][ T5618] iso9660: Unknown parameter 'crufƒ' [ 115.686038][ T5639] netlink: 'syz.2.646': attribute type 12 has an invalid length. [ 115.703858][ T5639] netlink: 'syz.2.646': attribute type 29 has an invalid length. [ 115.721606][ T5639] netlink: 148 bytes leftover after parsing attributes in process `syz.2.646'. [ 115.745576][ T5639] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 115.789543][ T5641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.648'. [ 115.810175][ T5641] vlan0: entered allmulticast mode [ 115.815413][ T5641] bridge1: entered allmulticast mode [ 115.822362][ T5641] bridge1: port 1(erspan0) entered blocking state [ 115.869671][ T5641] bridge1: port 1(erspan0) entered disabled state [ 115.899939][ T5641] erspan0: entered allmulticast mode [ 115.906571][ T5641] erspan0: entered promiscuous mode [ 116.219014][ T5659] loop3: detected capacity change from 0 to 128 [ 116.277673][ T5659] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.292052][ T5660] loop1: detected capacity change from 0 to 512 [ 116.385664][ T5660] EXT4-fs: Ignoring removed i_version option [ 116.436573][ T5660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.490878][ T5660] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.663: invalid block [ 116.552334][ T5660] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.552644][ T5660] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.663: invalid indirect mapped block 4294967295 (level 1) [ 116.561874][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 116.561892][ C1] EXT4-fs (loop1): initial error at time 1785779680: ext4_get_branch:178: inode 11: block 4294967295 [ 116.561926][ C1] EXT4-fs (loop1): last error at time 1785779680: ext4_get_branch:178: inode 11: block 4294967295 [ 116.719766][ T5660] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.724845][ T5660] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.663: invalid indirect mapped block 4294967295 (level 1) [ 116.748508][ T5660] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.749848][ T5660] EXT4-fs (loop1): 2 truncates cleaned up [ 116.765593][ T5660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.911697][ T28] audit: type=1400 audit(1785779681.199:1491): avc: denied { setattr } for pid=5651 comm="syz.1.663" path="/137/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.934802][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.951040][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.976075][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.996677][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.019593][ T310] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.035302][ T5675] netlink: 'syz.2.658': attribute type 12 has an invalid length. [ 117.045169][ T5675] netlink: 'syz.2.658': attribute type 4 has an invalid length. [ 117.080174][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 117.089340][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 117.143229][ T4192] IPVS: starting estimator thread 0... [ 117.375210][ T5682] IPVS: using max 2640 ests per chain, 132000 per kthread [ 117.463090][ T5689] loop2: detected capacity change from 0 to 164 [ 117.746321][ T5689] rock: directory entry would overflow storage [ 117.799782][ T5689] rock: sig=0x5252, size=5, remaining=3 [ 118.079903][ T5689] netlink: 'syz.2.660': attribute type 30 has an invalid length. [ 118.793448][ T28] audit: type=1400 audit(1785779683.099:1492): avc: denied { write } for pid=5713 comm="syz.2.670" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 118.856131][ T5714] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 119.015853][ T5714] Process accounting resumed [ 119.144219][ T3541] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.153519][ T3541] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.171448][ T3541] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.219554][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.294699][ T5735] loop5: detected capacity change from 0 to 512 [ 119.319854][ T5735] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.676: iget: bad i_size value: 38620345925642 [ 119.353498][ T5735] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.353695][ T5735] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.676: couldn't read orphan inode 15 (err -117) [ 119.363066][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 119.363090][ C0] EXT4-fs (loop5): initial error at time 1785779683: ext4_orphan_get:1399: inode 15 [ 119.363125][ C0] EXT4-fs (loop5): last error at time 1785779683: ext4_orphan_get:1399: inode 15 [ 119.402068][ T5735] loop5: lost filesystem error report for type 5 error -117 [ 119.402678][ T5735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.493914][ T5742] loop2: detected capacity change from 0 to 164 [ 119.513427][ T5743] netlink: 'syz.4.679': attribute type 30 has an invalid length. [ 119.540729][ T5742] iso9660: Unknown parameter 'crufƒ' [ 119.636865][ T5748] macsec0: entered promiscuous mode [ 119.648046][ T28] audit: type=1400 audit(1785779683.939:1493): avc: denied { write } for pid=5732 comm="syz.5.676" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.718933][ T5747] macsec0: left promiscuous mode [ 119.845707][ T5761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.689'. [ 119.883859][ T5761] ip6gre1: entered promiscuous mode [ 119.898110][ T5763] tmpfs: Cannot disable swap on remount [ 119.898494][ T28] audit: type=1326 audit(1785779684.199:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.3.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f053e019 code=0x7ffc0000 [ 119.946566][ T5761] ip6gre1: entered allmulticast mode [ 119.964432][ T5763] netlink: 'syz.2.689': attribute type 6 has an invalid length. [ 119.986690][ T28] audit: type=1326 audit(1785779684.199:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.3.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f053e019 code=0x7ffc0000 [ 119.998997][ T5763] netlink: 72 bytes leftover after parsing attributes in process `syz.2.689'. [ 120.037557][ T28] audit: type=1326 audit(1785779684.219:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.3.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f50f053e019 code=0x7ffc0000 [ 120.107130][ T28] audit: type=1326 audit(1785779684.339:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.3.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f053e019 code=0x7ffc0000 [ 120.152307][ T28] audit: type=1326 audit(1785779684.339:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.3.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f053e019 code=0x7ffc0000 [ 120.193691][ T5767] loop1: detected capacity change from 0 to 164 [ 120.310168][ T5767] rock: directory entry would overflow storage [ 120.328803][ T5767] rock: sig=0x5252, size=5, remaining=3 [ 120.337441][ T5773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5773 comm=syz.3.693 [ 120.485801][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 120.622448][ T5786] macsec0: entered promiscuous mode [ 120.665476][ T68] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 120.684716][ T5785] macsec0: left promiscuous mode [ 120.698379][ T28] audit: type=1326 audit(1785779684.999:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.4.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec4a0e019 code=0x7ffc0000 [ 120.724539][ T68] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 120.749125][ T5789] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 120.751709][ T68] EXT4-fs (loop5): This should not happen!! Data will be lost [ 120.751709][ T68] [ 120.780646][ T28] audit: type=1326 audit(1785779684.999:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.4.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec4a0e019 code=0x7ffc0000 [ 120.810747][ T68] EXT4-fs (loop5): Total free blocks count 0 [ 120.823548][ T68] EXT4-fs (loop5): Free/Dirty block details [ 120.832677][ T5791] loop2: detected capacity change from 0 to 128 [ 120.838027][ T68] EXT4-fs (loop5): free_blocks=0 [ 120.856333][ T68] EXT4-fs (loop5): dirty_blocks=16016 [ 120.866556][ T28] audit: type=1326 audit(1785779684.999:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.4.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec4a0e019 code=0x7ffc0000 [ 120.881731][ T5791] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.896932][ T68] EXT4-fs (loop5): Block reservation details [ 120.934581][ T68] EXT4-fs (loop5): i_reserved_data_blocks=16016 [ 120.965096][ T28] audit: type=1326 audit(1785779685.039:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.4.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faec4a0e019 code=0x7ffc0000 [ 121.033450][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 121.746659][ T68] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.815116][ T5807] syzkaller0: entered promiscuous mode [ 121.949151][ T4885] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 122.039465][ T5808] loop2: detected capacity change from 0 to 512 [ 122.200888][ T5808] EXT4-fs: Ignoring removed nobh option [ 122.665289][ T5808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.725552][ T5808] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.512595][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.859540][ T5831] loop3: detected capacity change from 0 to 128 [ 123.936230][ T5831] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.192620][ T310] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.213860][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 124.728879][ T5845] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 124.731917][ T5849] netlink: 32 bytes leftover after parsing attributes in process `syz.4.720'. [ 124.769750][ T5849] netlink: 56 bytes leftover after parsing attributes in process `syz.4.720'. [ 124.800997][ T5851] syz_tun: left allmulticast mode [ 124.810742][ T5851] syz_tun: left promiscuous mode [ 124.834183][ T5851] bridge0: port 3(syz_tun) entered disabled state [ 124.869953][ T5849] netlink: 'syz.4.720': attribute type 10 has an invalid length. [ 124.885246][ T5851] team0: Port device bridge0 removed [ 124.927793][ T5851] bridge_slave_0: left allmulticast mode [ 124.951120][ T5845] Process accounting resumed [ 124.971361][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 124.987396][ T5851] bridge_slave_0: left promiscuous mode [ 125.015079][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.041545][ T5851] bridge_slave_1: left allmulticast mode [ 125.047515][ T5851] bridge_slave_1: left promiscuous mode [ 125.062321][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.658004][ T5851] bond0: (slave bond_slave_0): Releasing backup interface [ 125.696690][ T5851] bond0: (slave bond_slave_1): Releasing backup interface [ 125.728678][ T5851] team0: Port device team_slave_0 removed [ 125.774473][ T5851] team0: Port device team_slave_1 removed [ 125.786018][ T5876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.795207][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.796958][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.806232][ T5876] tmpfs: Bad value for 'nr_inodes' [ 125.820503][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.829673][ T5851] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.878848][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 125.892093][ T5880] netlink: 'syz.5.725': attribute type 11 has an invalid length. [ 125.900478][ T5880] netlink: 36 bytes leftover after parsing attributes in process `syz.5.725'. [ 125.929672][ T5849] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 125.955115][ T5856] bond0: (slave bridge0): Releasing backup interface [ 125.979204][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.212473][ T5892] siw: device registration error -23 [ 126.418315][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 126.418333][ T28] audit: type=1400 audit(1785779690.719:1554): avc: denied { mounton } for pid=5894 comm="syz.3.731" path="/140/bus" dev="tmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.511127][ T5900] Line length is too long: Should be less than 4094 [ 127.139459][ T5920] syzkaller0: entered promiscuous mode [ 127.159848][ T5920] syzkaller0: entered allmulticast mode [ 127.213079][ T5924] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 127.245629][ T5924] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 127.272749][ T5924] macvlan2: entered promiscuous mode [ 127.292832][ T5924] macvlan2: entered allmulticast mode [ 127.321651][ T5924] bond4: entered promiscuous mode [ 127.342814][ T5929] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.360506][ T5924] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 127.392483][ T28] audit: type=1400 audit(1785779691.699:1555): avc: denied { read } for pid=5928 comm="syz.3.745" name="trace_pipe" dev="tracefs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 127.392501][ T5924] bond4: left promiscuous mode [ 127.392628][ T28] ================================================================== [ 127.392665][ T28] BUG: KCSAN: data-race in data_push_tail / string [ 127.392700][ T28] [ 127.392707][ T28] write to 0xffffffff893970a0 of 1 bytes by task 5924 on cpu 0: [ 127.392728][ T28] string+0x165/0x220 [ 127.392760][ T28] vsnprintf+0x543/0x8c0 [ 127.392795][ T28] vscnprintf+0x41/0x90 [ 127.392830][ T28] printk_sprint+0x30/0x2b0 [ 127.392857][ T28] vprintk_store+0x57b/0x910 [ 127.392883][ T28] vprintk_emit+0x1a4/0x600 [ 127.392908][ T28] vprintk_default+0x26/0x30 [ 127.392934][ T28] vprintk+0x1d/0x30 [ 127.392967][ T28] _printk+0x79/0xa0 [ 127.392987][ T28] __netdev_printk+0x310/0x370 [ 127.393010][ T28] netdev_info+0xa6/0xd0 [ 127.393041][ T28] __dev_set_promiscuity+0x1e5/0x3c0 [ 127.393071][ T28] netif_set_promiscuity+0x39/0x90 [ 127.393103][ T28] dev_set_promiscuity+0xb9/0x170 [ 127.393134][ T28] macvlan_stop+0x142/0x260 [ 127.393166][ T28] __dev_close_many+0x24d/0x460 [ 127.393192][ T28] netif_close_many+0x101/0x2d0 [ 127.393216][ T28] netif_close+0xe3/0x160 [ 127.393242][ T28] dev_close+0xb5/0x160 [ 127.393268][ T28] bond_enslave+0x1c35/0x2050 [ 127.393303][ T28] do_set_master+0x37b/0x450 [ 127.393333][ T28] rtnl_newlink_create+0x435/0x650 [ 127.393364][ T28] rtnl_newlink+0x1181/0x1400 [ 127.393391][ T28] rtnetlink_rcv_msg+0x64b/0x720 [ 127.393417][ T28] netlink_rcv_skb+0x11e/0x220 [ 127.393449][ T28] rtnetlink_rcv+0x1c/0x30 [ 127.393471][ T28] netlink_unicast+0x5a7/0x680 [ 127.393496][ T28] netlink_sendmsg+0x5be/0x6f0 [ 127.393524][ T28] ____sys_sendmsg+0x532/0x580 [ 127.393544][ T28] ___sys_sendmsg+0x195/0x1e0 [ 127.393563][ T28] __x64_sys_sendmsg+0xd4/0x160 [ 127.393585][ T28] x64_sys_call+0x194c/0x3020 [ 127.393612][ T28] do_syscall_64+0x136/0x3c0 [ 127.393637][ T28] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.393662][ T28] [ 127.393670][ T28] read to 0xffffffff893970a0 of 8 bytes by task 28 on cpu 1: [ 127.393690][ T28] data_push_tail+0x104/0x440 [ 127.393715][ T28] data_alloc+0x111/0x380 [ 127.393737][ T28] prb_reserve+0x8e3/0xaf0 [ 127.393759][ T28] vprintk_store+0x54a/0x910 [ 127.393783][ T28] vprintk_emit+0x1a4/0x600 [ 127.393807][ T28] vprintk_default+0x26/0x30 [ 127.393833][ T28] vprintk+0x1d/0x30 [ 127.393867][ T28] _printk+0x79/0xa0 [ 127.393887][ T28] kauditd_hold_skb+0x1b1/0x1c0 [ 127.393908][ T28] kauditd_send_queue+0x275/0x2d0 [ 127.393926][ T28] kauditd_thread+0x439/0x660 [ 127.393956][ T28] kthread+0x221/0x270 [ 127.393977][ T28] ret_from_fork+0x146/0x330 [ 127.394007][ T28] ret_from_fork_asm+0x1a/0x30 [ 127.394035][ T28] [ 127.394041][ T28] value changed: 0x3fffffffffffe06f -> 0x6c203a34646e6f62 [ 127.394058][ T28] [ 127.394064][ T28] Reported by Kernel Concurrency Sanitizer on: [ 127.394079][ T28] CPU: 1 UID: 0 PID: 28 Comm: kauditd Not tainted syzkaller #0 PREEMPT(lazy) [ 127.394109][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.394125][ T28] ==================================================================