last executing test programs: 3m48.126334946s ago: executing program 32 (id=153): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000001380)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000001440)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m5.389582705s ago: executing program 33 (id=763): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xe761}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0xfffffffffffffe16, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}}, 0x8040) 1m54.096629802s ago: executing program 5 (id=2081): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x175e) 1m54.044894994s ago: executing program 5 (id=2086): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x9, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000d00, 0xe, 0xaf74d922fc9bf873, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0xfffffffd, 0x4000000, 0x0, 0x0, &(0x7f0000000780)="abe320678adbafb1c806b647bb74ed129e09672f9bf9dd3b0c687f16fa0ee9a2d8dfabbf7a048645f1c9a075e664cd0d0a8669869222b3763698301ceeb89c3a28dcfccdaf8a9706055013a2cb795809e5d41847408cec52979cc451bfa20cf318bc33bbcd2d5b13646bac791be31192afc6273924a6419b9fbf8543aa744c3822b320b927ef8946bc1514a23a794f0593af847970b9248d17ef1ab222787433188977be6a5873806bea7cdea600"/200, &(0x7f0000000000), 0x5, 0x0, 0x1002}, 0x28) 1m53.121577057s ago: executing program 5 (id=2102): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xe761}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)='h', 0x1}], 0x1}}], 0x1, 0xc8844) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) 1m52.929412662s ago: executing program 5 (id=2109): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m52.903783513s ago: executing program 5 (id=2111): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x175e) 1m52.696071938s ago: executing program 5 (id=2122): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x8b501a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x8614d7, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x1) 1m52.695934218s ago: executing program 34 (id=2122): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x8b501a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x8614d7, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x1) 1m44.77572677s ago: executing program 6 (id=2224): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265"], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newlink={0x5c, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1, 0x21840, 0x2000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_TTL={0x5, 0x8, 0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 1m44.730595761s ago: executing program 6 (id=2226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000005c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500050007"], 0x4a) 1m44.522033607s ago: executing program 6 (id=2238): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/mcfilter\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1, 0x5e, 0x0) 1m44.471665018s ago: executing program 6 (id=2240): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 1m44.437324578s ago: executing program 6 (id=2242): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m44.179763185s ago: executing program 6 (id=2251): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001640)='./mnt\x00', 0x0) mount(&(0x7f0000001680)=@filename='./dev/sda1\x00', &(0x7f00000016c0)='./mnt\x00', &(0x7f0000001700)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000019c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x801, 0x4, 0x8d, 0xfffffffffffffffb, 0x0, 0x5}, {0x801, 0x7, 0x8, 0x8, 0x0, 0x9}]}) 1m44.152103136s ago: executing program 35 (id=2251): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001640)='./mnt\x00', 0x0) mount(&(0x7f0000001680)=@filename='./dev/sda1\x00', &(0x7f00000016c0)='./mnt\x00', &(0x7f0000001700)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000019c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x801, 0x4, 0x8d, 0xfffffffffffffffb, 0x0, 0x5}, {0x801, 0x7, 0x8, 0x8, 0x0, 0x9}]}) 1m41.261214719s ago: executing program 0 (id=2293): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x40013, 0x0, 0x1}) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 1m41.205119111s ago: executing program 0 (id=2296): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x7d4}]}}, &(0x7f0000000040)=""/3, 0x26, 0x3, 0x1, 0x9}, 0x28) 1m41.138394022s ago: executing program 0 (id=2301): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m40.356908383s ago: executing program 0 (id=2313): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 1m40.312056884s ago: executing program 0 (id=2314): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002bc0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000002c00)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000002c40)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000002c80)={0x2, 0x0, @multicast1}, 0x10) 1m40.301128134s ago: executing program 0 (id=2316): mknodat(0xffffffffffffff9c, &(0x7f0000002380)='./file0\x00', 0x21c0, 0x103) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x401c2103, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000002480)='.\x00', 0xfffffe5c) fchownat(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', 0xee01, 0x0, 0x1000) r0 = syz_create_resource$binfmt(&(0x7f00000025c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) 1m40.262341855s ago: executing program 36 (id=2316): mknodat(0xffffffffffffff9c, &(0x7f0000002380)='./file0\x00', 0x21c0, 0x103) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x401c2103, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000002480)='.\x00', 0xfffffe5c) fchownat(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', 0xee01, 0x0, 0x1000) r0 = syz_create_resource$binfmt(&(0x7f00000025c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) 1m7.736164564s ago: executing program 8 (id=2972): socketpair(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r1, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)=r0}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4c, &(0x7f00000013c0), 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001380)={r3, &(0x7f00000013c0), 0x0}, 0x20) 1m7.735838854s ago: executing program 8 (id=2973): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='syscall\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m7.735634334s ago: executing program 8 (id=2974): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = dup2(r0, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) 1m7.728599644s ago: executing program 8 (id=2975): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./proc\x00', 0x2000410, &(0x7f0000000900)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0x7f6, &(0x7f0000001140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r0, &(0x7f00000000c0)=0x8, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) 1m7.692037895s ago: executing program 8 (id=2976): r0 = syz_clone(0x8200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) tgkill(r0, r0, 0x5) ptrace$getsig(0x4202, r0, 0x100000000, 0x0) 1m7.464584691s ago: executing program 8 (id=2980): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='X', 0x8030000}], 0x11) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001480)=""/247, 0xf7}], 0x1}, 0x8}], 0x1, 0x40000042, 0x0) 1m7.449464421s ago: executing program 37 (id=2980): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='X', 0x8030000}], 0x11) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001480)=""/247, 0xf7}], 0x1}, 0x8}], 0x1, 0x40000042, 0x0) 43.298437607s ago: executing program 4 (id=3412): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1000, 0x830d}, 0x1116c8, 0x8, 0xfffffffe, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 42.887268297s ago: executing program 4 (id=3418): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x80000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000140)={0x4, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x60002013}) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 42.795433189s ago: executing program 4 (id=3419): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="060000000400000099050000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.725667452s ago: executing program 4 (id=3420): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./proc\x00', 0x2000410, &(0x7f0000000900)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0x7f6, &(0x7f0000001140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r0, &(0x7f00000000c0)=0x8, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) 42.567523715s ago: executing program 4 (id=3421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 41.756315226s ago: executing program 4 (id=3435): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x43e0, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440), 0xd, 0x40002040, 0x0) 41.741942726s ago: executing program 38 (id=3435): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x43e0, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440), 0xd, 0x40002040, 0x0) 2.298093252s ago: executing program 7 (id=3960): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) perf_event_open(&(0x7f0000001400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001480), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f00000014c0), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000001500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000001540)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4096, 0x79c5}], 0x1) 2.135919396s ago: executing program 3 (id=3968): socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x9, 0xc, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x804000, &(0x7f0000000700), 0xff, 0x54a, &(0x7f0000000a40)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000804) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 2.135787976s ago: executing program 7 (id=3969): socket$packet(0x11, 0x2, 0x300) timer_create(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {0xe, 0x1}}}, 0x24}}, 0x4) 2.049734888s ago: executing program 7 (id=3974): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 1.940270731s ago: executing program 9 (id=3975): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) unlinkat(r0, 0x0, 0x200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], 'D'}]}}, &(0x7f0000000040)=""/5, 0x2a, 0x5, 0x1}, 0x28) 1.940041691s ago: executing program 9 (id=3976): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1.886089392s ago: executing program 1 (id=3977): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_config_ext={0x8ac, 0xffffffffffff60bb}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x4, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x0, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x20}, 0x0, 0x0, 0x20e, 0x2, 0x6, 0x8, 0x10001, 0x8, 0x4007, 0xfff7}) 1.869678772s ago: executing program 7 (id=3978): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x6020400) r0 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1.606941289s ago: executing program 2 (id=3979): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) perf_event_open(&(0x7f0000001400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001480), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f00000014c0), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000001500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000001540)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4096, 0x79c5}], 0x1) 1.605712759s ago: executing program 9 (id=3989): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={r2, @in={{0x2, 0x4e22, @local}}, 0x3, 0xfffffffe, 0x169, 0x9b, 0x5}, &(0x7f0000000100)=0x98) 1.605358309s ago: executing program 1 (id=3980): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x91000b03) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/1000, 0x3e8) openat(r1, &(0x7f0000000143), 0x800, 0x141) 1.516590492s ago: executing program 1 (id=3981): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x40000, &(0x7f0000000000)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x147, 0x40010022, 0x0) 1.484677553s ago: executing program 1 (id=3982): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) close_range(r1, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.440761594s ago: executing program 7 (id=3983): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000440)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x12, {0x2, 0x4e20, @rand_addr=0x64010101}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000380)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000400)=0x3f7, 0x4) recvmmsg(r0, &(0x7f0000000440), 0x400000000000354, 0x42, 0x0) 1.421099474s ago: executing program 7 (id=3984): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="2100082672e76eb36e87d36e469076ac4931e868415fab6c187979d9e4ef69dc19ef588c6684dcee363c4a1a8f756b0b2222c23e8d4b709372f9e7106da6e7308085b3ac2574d088", 0x48}], 0x1}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.404948005s ago: executing program 2 (id=3985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000100)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "0100"}, 0x10}, 0x1, 0x0, 0x0, 0xc1}, 0x40040) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002300)=""/96, 0x60}], 0x1}, 0x40}], 0x1, 0x40010043, 0x0) 1.315731707s ago: executing program 2 (id=3986): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x10}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="02100a091c00000025bd7000fddbdf250400040004008000050000000000000005000000000000000800000000000000080012000200030000000000070000000600000000000000000000ffff0a0101002001000000000000000000000000000007001900000000000a004e2000000008fe8000000000000000000000000000aa6f0a000002004e22000000000000000000000000000000000400000001000000fbff"], 0xe0}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x2102, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400845dcf000e1a80009f0001852900002f06e5ac141430e0faff00808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x10008882}, 0x44840) 1.315488167s ago: executing program 2 (id=3987): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000980)='&\x00\x12|\xd6hJ\x1e\xc6\xea\xc3\xe5\xa3\xf9\xb8Bmp\x9e\xdb \x86\x11NLd\xe8\x8b\xacg\xf4\xd9L+\x95.\xf8\x00\x16sS\xef\x15\x9eii%\x7f\xba}MO\xb3\x82\xb4\xe8d-P\x99!\x84<,\xc0\xc2\xf4\xe4\x81\x80\xe4Y\xa9l\xf3\x7ff\x96\xc0d\xd7x$\x83\xb8\x80Xh\xe4g\xcdA\x8c\x83`^De\'\xd8\x18\x99\xaf\x95\xcd+\xa6\xa7\xda\x9bmT\x96&\x93\\\x93\xca0\x88\xb5Iq\x91?\xda\xc9]>K\xf4G9\x00\x00\x00\x00\xc4\x0e\x9e\xd3\xb5\x9d]\xabe\xef%\xb9\xf6Q\xc2\xb1\"r\x1d\x11\x81\xf7\xa0\x87T\xb0\x86\xcaw\xdb\xfe8J\x86,\xaa\x0e\a\xc1ac\xf3\xddf\xa4\x05\v\xe9\xf0d\n\x00\a\xdc\xea\x87\x00\xfc^/\xbcdD\x87\xa7C\xef\x85\xdd\x95\xca\a\x87\x16\x90/\n\x14\xb9e\x15\xc4\x8f\xe7\xfd\xb6y,~\x1c\xf7\xb7\x84\x02\x82T!\xd2\x8eWL\xeb\xdd\xe4\r/\xb3M\x00\rd\xdc\x944\xdc\xb3\xbb:|\xd3\xc8\xfb<\x9c\xc3\t\xc6M\xf9\f\x8c.\xde\xf3\x16_\xc9\x15Ua)\xf2\xbe\t\xc3\xa9\xc7\xee5{\x8f\xa8Y>\b\xfco\xab\x9b\x9f\xae7\xa2\xe0\x95pVl\x914\x86\xe0\xc3\xc2\x90\x9e\x9f%\xf3^\x107\xe6\xbd}\xfazE\x85\x91Lk\xb5O\xffK\xc9\xc8\x8eo\xeb)I\xaf\xf5\xd9\xbe\xba\'\xdb{wQS\xb0&\x92W\xb0\x87\x93\xf2\n\xc8U\xe5O\x1a\xfc&\xe2\xe4g.\x00&Z:\xec\xacp\x9a1n\xa6\t\xd3uc\xad\x0f\xd2\xc7\x0e\xc13J\x9cZ\xff\xdf\x8b\xd9\x8b\xcb\xe9\x90Gc\xd4\x83\x9a@\x86_\b\x00\x00\x00\xfd\xce\xa9\xe6hjU\xb3Qt\xc5\xf4\xd0\xf3\xec\xf8\x14LH\xfa\x13\xb5\b\xbek\xd5\x04\x8f3xC\x0e\xd2\xfe\xd8\xa1\xdb\xd4\xdak3\x9a\xb1\xcfX3\xfc_\xae\xd8\xe7aRa/\xf5\xdc^\xfa\xf3\xdd\x1a\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00(\xdfJoa\x81\xaen\x88Z\x86\xc0\x05\xa8?\x86\xe9\xd2\xb43eA\x14\x01\x0f\x85Y5\xe5\xfb2\xa6\xbd{\x1d|P\x14\x82M\n\xcf\xa3\bfk\v\xb1Y\xa3\x16AE\xc6\x11>\x93\x05w\x87\xed\xb9\xd2\xb6\xa4\xfaT\xfa\xda\x91\x11\xb1*B\x17\x03\\{\xa0\xc8\xf3\xf7\xefYOs\xf7\xdc>\xd9,\xbe\x9dL\xdf\x0f\xd9\x8a~D\vU\\5\xee\xb8:\xf7\x01\xb7\xd1y\x83\x8c\xe6\xb4\xa3KY\xf1\xc5\xaf\xf2\x8dW\xaf\xf2\xae\xed\x01\xa0\x00\x87)A\x05\xdae\x9c;/\xf4/\xe4\xe9\xec\xb1ga4\xf9f\x1d*\x9aX\xff\xb7\x96t$\x05\x11y\xef\xb4+\x88db\x1a\x1e\x1f\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x124, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) mq_notify(r0, 0x0) 1.208673599s ago: executing program 3 (id=3988): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000372000/0x2000)=nil, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 638.997144ms ago: executing program 1 (id=3990): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x6) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000a80)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1, &(0x7f0000001b40)=""/17, 0x11, 0x1000000}, 0x20000}], 0x1, 0x102, 0x0) write$binfmt_misc(r0, &(0x7f0000001b80), 0x2000011a) 638.807484ms ago: executing program 3 (id=3991): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x3000) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xe) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) 638.126084ms ago: executing program 9 (id=4000): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffffffff}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x400}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 566.297426ms ago: executing program 9 (id=3992): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x1, 0x6, 0xa, 0x7fff, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x1}}}, {}, {0x8, 0x6558, 0x4000000}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 486.777558ms ago: executing program 3 (id=3993): capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e24, 0xfffffffc, @empty, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000244e0000", 0x58}], 0x1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) 486.594648ms ago: executing program 3 (id=3994): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7ff, 0x1}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000400000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 460.539068ms ago: executing program 2 (id=3995): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_config_ext={0x8ac, 0xffffffffffff60bb}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x4, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r0, &(0x7f00000008c0)='0 0 0', 0x5) 50.754939ms ago: executing program 3 (id=3996): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f0000000280)="$eJzs281OE18Yx/EfL/8/CMJUURSM8YludDOBegUNgcTYRIPU+JKYDDLVpkNLOg2mxgg7t14HcenOxHgDbLwCF+7YuGRhHMNMLS2UqAuZaL+fzXnI4deck+dMcxadnXuvV8vF0C16dfX3mQalTe1KGfVrQIm+5tgf1/+r3aauTeQ/Xbxz/8HNXD4/v2i2kFu6njWz8Uvvn714c/lDffTu2/F3Q9rOPNr5kv28Pbk9tfNt6WkptFJolWrdPFuuVuvecuDbSiksu2a3A98LfStVQr/WMV8MqmtrDfMqK2MjazU/DM2rNKzsN6xetXqtYd4Tr1Qx13VtbET4mcLW4qKXS3sV+LNqtZw3J2n60ExhK5UFAQCAVHH/72Xc/3vB3v3/YfP57cT9HwAAAAAAAAAAAAAAAAAAAACAv8FuFDlRFDk/xv+k+A2fqPn3CUkjkkYlnZQ0JmlckiMpI+mUpNOSJiSdkXRW0qSkc5LOS5pq+6y094rDjur/AP3vCTz/vY3+97a2F3eHpdVX64X1QjIm87miSgrka0aOvsa9bErqhRv5+RmLZXRhdaOZ31gvDHTmZ+XsHZhu+dkkb535ofjctfJZOXsHrFs+2zU/rKtX2vKuHH18rKoCrcRncj//ctZs7lb+QH46/r9/nWstXfvnukfNJ/lfOB/RTNf+DGp6MN29Qwobz8teEPg1CgoKilaR9jcTjsN+09NeCQAAAAAAAAAAAAAAAADgdxzHzwnT3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9DwAA//+TC2AL") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000580)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) 8.79251ms ago: executing program 9 (id=3997): r0 = getpid() setpriority(0x0, r0, 0x5) r1 = socket$kcm(0xa, 0x3, 0x3a) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001e80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000002340)='ext4\x00', &(0x7f0000002380)='./file0\x00', 0x0, &(0x7f00000023c0)={[{@usrquota}, {@min_batch_time}, {@nombcache}]}, 0x1, 0x4c0, &(0x7f0000002400)="$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") sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 870.52µs ago: executing program 1 (id=4008): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x708a, &(0x7f0000000ac0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESDEC=0x0], 0x0, 0x356, &(0x7f0000000140)="$eJzs3b1vW1UUAPDjPsd2K5VkQKoYkB5sSBC1QQwwJapSqcILIAvBgLBoCigOlWJhkQ5xw4LYWZBggokBBobOCAnEyj9AkVCBCbpVouIh+z1/1c7H4pSov99gnZx7j++9eVfxy4dv3lyNzSsLcfXOndtRq5WivHpxNe6WYimSyCURN2JKZToFAJwQd7Ms/s5yRywpzXlKAMCc9V//3z47lvnwh4P6Z179AeDEK77/P71/j+r+TdfmMiUAYM6mfv7/5ERzZfJX/eXhXwUAACfXK6+9/uJaPeLlNK1FbH3UaXQa8cKofe1qvBut2IjzsRj3IvIbhd5Dqf946XJ9/Xyapt34fSkavYpOI2Kr22nkdwprSb++GhdiMZaK+uJuI8uy5NK39fULaV9E3Oj2x4+tUqexEGeK8X85ExuxEmk8OlUfcbm+vpIWT9DYGtR3I/aiNlhEb/7LsRg/vxXXohVXolc7uK2pr+9eSNOLWX2ivtOo9vvlasd3QQAAAAAAAAAAAAAAAAAAAAAAeCgsp0NLw/NvstH5PcvLM9r75+Pk9cX5QHv5+UBZNYss++uDZxofJzFxPtD95/N0GuU49WCXDgAAAAAAAAAAAAAAAAAAAP8b7Z1KNFutje32zvXN8aC73d45FRG9zHs/ff396ZjuMyv48tMYPGG5GGOsT1qkrm82s2RQlSUTfYog6Q0+yHx1czjj8T7V4SpmzWdp/6Zmq3X2id8+G2UeTwbP/O+oTxKzV5r0pzGYUN5UK8q3Hsmzh36iZgUrh/S5lWXZfuW7b0xXRSmifMQLd+Qg6wU/3n7nsWfb557rZ77Lck89vfjqrU+++HOz2eqNHP0rWNlu38s2m8XHszfb/kEytn9KkQel8Z1QPqh8bzLTXBttv8NHz8Yz78/ok+TL+eb+pkoelIZ7Y9h0etZYCzM2/xyCc5+vNm/u/vrHUavGvkg4qAMAAAAAAAAAAAAAAAAAAI7F2HvFC8WbfRcOqnr+pfnPDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOz+j//48Fe1OZowT/dGO6qbqx3Y6oPOhlAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwkPsvAAD//6BBZYY=") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 0s ago: executing program 2 (id=4009): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) kernel console output (not intermixed with test programs): - 0 [ 213.325757][ T8013] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 213.325793][ T8013] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 213.685921][T12953] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.805562][T12959] netlink: 'syz.1.3185': attribute type 1 has an invalid length. [ 213.868427][T12959] bond8: (slave geneve2): making interface the new active one [ 213.868689][T12959] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 213.868874][ T7980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 213.868938][ T7980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 213.868980][ T7980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 213.869020][ T7980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 214.141633][T12992] loop1: detected capacity change from 0 to 512 [ 214.158522][T12992] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 214.158543][T12992] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 214.192318][T12992] EXT4-fs (loop1): 1 truncate cleaned up [ 214.192808][T12992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.260024][ T29] audit: type=1400 audit(2000000031.960:8731): avc: denied { write } for pid=12991 comm="syz.1.3198" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.371075][T13008] netlink: 'syz.9.3201': attribute type 1 has an invalid length. [ 214.380269][ T29] audit: type=1400 audit(2000000032.030:8732): avc: denied { create } for pid=12991 comm="syz.1.3198" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 214.402954][T13008] bond2: (slave geneve3): making interface the new active one [ 214.412759][T13008] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 214.425711][ T7980] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.425892][ T7980] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.426000][ T7980] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.426037][ T7980] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.753986][ T29] audit: type=1400 audit(2000000032.450:8733): avc: denied { create } for pid=13043 comm="syz.7.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 214.831043][T13055] ip_tables: iptables: counters copy to user failed while replacing table [ 215.110989][ T3287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.343741][T13127] netlink: 'syz.7.3213': attribute type 1 has an invalid length. [ 215.375458][T13127] bond1: (slave geneve2): making interface the new active one [ 215.376584][T13127] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 215.404427][ T3428] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.404526][ T3428] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.404629][ T3428] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.404667][ T3428] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.454943][T13138] netlink: 'syz.4.3215': attribute type 10 has an invalid length. [ 215.539740][T13138] team0: Port device vlan1 added [ 215.546775][T13151] netlink: 'syz.7.3226': attribute type 1 has an invalid length. [ 215.563419][T13151] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.581049][T13151] bond2: (slave erspan1): making interface the new active one [ 215.582191][T13151] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 215.796236][ T29] audit: type=1400 audit(2000000033.500:8734): avc: denied { bind } for pid=13171 comm="syz.3.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 215.801674][T13174] FAULT_INJECTION: forcing a failure. [ 215.801674][T13174] name failslab, interval 1, probability 0, space 0, times 0 [ 215.801706][T13174] CPU: 0 UID: 0 PID: 13174 Comm: syz.4.3234 Not tainted syzkaller #0 PREEMPT(lazy) [ 215.801733][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 215.801812][T13174] Call Trace: [ 215.801820][T13174] [ 215.801830][T13174] __dump_stack+0x1d/0x30 [ 215.801856][T13174] dump_stack_lvl+0x95/0xd0 [ 215.801877][T13174] dump_stack+0x15/0x1b [ 215.801941][T13174] should_fail_ex+0x262/0x280 [ 215.801968][T13174] should_failslab+0x8c/0xb0 [ 215.801993][T13174] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 215.802099][T13174] ? security_file_alloc+0x32/0xf0 [ 215.802125][T13174] ? __d_alloc+0x34/0x320 [ 215.802143][T13174] ? __d_alloc+0x34/0x320 [ 215.802163][T13174] ? kmem_cache_alloc_noprof+0x179/0x3d0 [ 215.802212][T13174] __d_alloc+0x34/0x320 [ 215.802274][T13174] ? d_alloc_pseudo+0x13/0x80 [ 215.802327][T13174] d_alloc_pseudo+0x1e/0x80 [ 215.802350][T13174] alloc_path_pseudo+0xa4/0x140 [ 215.802388][T13174] alloc_file_pseudo+0x55/0x120 [ 215.802422][T13174] sock_alloc_file+0x9c/0x1e0 [ 215.802492][T13174] __sys_socketpair+0x2c0/0x430 [ 215.802532][T13174] __x64_sys_socketpair+0x52/0x60 [ 215.802572][T13174] x64_sys_call+0x1bf7/0x2550 [ 215.802678][T13174] do_syscall_64+0x112/0x360 [ 215.802704][T13174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.802730][T13174] RIP: 0033:0x7f0684cff559 [ 215.802812][T13174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.802906][T13174] RSP: 002b:00007f0683757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 215.802930][T13174] RAX: ffffffffffffffda RBX: 00007f0684f85fa0 RCX: 00007f0684cff559 [ 215.802977][T13174] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 215.802990][T13174] RBP: 00007f0684d96b20 R08: 0000000000000000 R09: 0000000000000000 [ 215.803006][T13174] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.803023][T13174] R13: 00007f0684f86038 R14: 00007f0684f85fa0 R15: 00007ffeb523f578 [ 215.803048][T13174] [ 215.918489][T13181] loop7: detected capacity change from 0 to 128 [ 215.998527][T13186] netlink: 'syz.1.3239': attribute type 10 has an invalid length. [ 216.191825][T13195] netlink: 'syz.3.3244': attribute type 5 has an invalid length. [ 216.195580][T13195] netlink: 'syz.3.3244': attribute type 1 has an invalid length. [ 216.195853][T13195] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 216.448158][T13216] FAULT_INJECTION: forcing a failure. [ 216.448158][T13216] name failslab, interval 1, probability 0, space 0, times 0 [ 216.448193][T13216] CPU: 1 UID: 0 PID: 13216 Comm: syz.7.3252 Not tainted syzkaller #0 PREEMPT(lazy) [ 216.448291][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 216.448307][T13216] Call Trace: [ 216.448315][T13216] [ 216.448325][T13216] __dump_stack+0x1d/0x30 [ 216.448371][T13216] dump_stack_lvl+0x95/0xd0 [ 216.448397][T13216] dump_stack+0x15/0x1b [ 216.448421][T13216] should_fail_ex+0x262/0x280 [ 216.448449][T13216] ? x509_key_preparse+0x21e/0x420 [ 216.448535][T13216] should_failslab+0x8c/0xb0 [ 216.448563][T13216] __kmalloc_cache_noprof+0x5d/0x3e0 [ 216.448593][T13216] ? x509_key_preparse+0x21e/0x420 [ 216.448676][T13216] x509_key_preparse+0x21e/0x420 [ 216.448712][T13216] asymmetric_key_preparse+0x68/0xb0 [ 216.448741][T13216] __key_create_or_update+0x29e/0x820 [ 216.448863][T13216] ? ktime_get_real_seconds+0x15/0x30 [ 216.448914][T13216] key_create_or_update+0x42/0x60 [ 216.448941][T13216] __se_sys_add_key+0x2a5/0x360 [ 216.448975][T13216] __x64_sys_add_key+0x67/0x80 [ 216.449007][T13216] x64_sys_call+0x1fa9/0x2550 [ 216.449056][T13216] do_syscall_64+0x112/0x360 [ 216.449082][T13216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.449143][T13216] RIP: 0033:0x7f4858d4f559 [ 216.449162][T13216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.449184][T13216] RSP: 002b:00007f48577a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 216.449209][T13216] RAX: ffffffffffffffda RBX: 00007f4858fd5fa0 RCX: 00007f4858d4f559 [ 216.449226][T13216] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 216.449243][T13216] RBP: 00007f4858de6b20 R08: ffffffffffffffff R09: 0000000000000000 [ 216.449307][T13216] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 216.449366][T13216] R13: 00007f4858fd6038 R14: 00007f4858fd5fa0 R15: 00007ffc1f963838 [ 216.449388][T13216] [ 216.508740][T13218] PKCS7: Unknown OID: [4] (bad) [ 216.508756][T13218] PKCS7: Only support pkcs7_signedData type [ 216.712986][T13224] loop9: detected capacity change from 0 to 1024 [ 216.724526][T13224] EXT4-fs: Ignoring removed bh option [ 216.749826][T13224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 216.749902][T13224] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.758739][ T29] audit: type=1400 audit(2000000034.460:8735): avc: denied { write } for pid=13222 comm="syz.9.3256" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.791658][T13224] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.3256: bg 0: block 112: padding at end of block bitmap is not set [ 216.791971][T13224] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 51 with error 28 [ 216.791998][T13224] EXT4-fs (loop9): This should not happen!! Data will be lost [ 216.791998][T13224] [ 216.792013][T13224] EXT4-fs (loop9): Total free blocks count 0 [ 216.792098][T13224] EXT4-fs (loop9): Free/Dirty block details [ 216.792110][T13224] EXT4-fs (loop9): free_blocks=0 [ 216.792123][T13224] EXT4-fs (loop9): dirty_blocks=64 [ 216.792223][T13224] EXT4-fs (loop9): Block reservation details [ 216.792235][T13224] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 216.841086][T10139] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 217.212034][T13249] loop1: detected capacity change from 0 to 1024 [ 217.235394][T13249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.443663][T13225] team0: Port device vlan1 added [ 217.554176][T13225] syz.7.3255 (13225) used greatest stack depth: 9224 bytes left [ 217.627981][ T29] audit: type=1400 audit(2000000035.330:8736): avc: denied { write } for pid=13263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.660074][ T3287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.720376][ T29] audit: type=1400 audit(2000000035.420:8737): avc: denied { write } for pid=13282 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.098468][ T29] audit: type=1400 audit(2000000035.800:8738): avc: denied { write } for pid=13291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.128873][ T29] audit: type=1400 audit(2000000035.830:8739): avc: denied { write } for pid=13302 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.358930][T13324] FAULT_INJECTION: forcing a failure. [ 218.358930][T13324] name failslab, interval 1, probability 0, space 0, times 0 [ 218.358960][T13324] CPU: 0 UID: 0 PID: 13324 Comm: syz.3.3277 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.359043][T13324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 218.359057][T13324] Call Trace: [ 218.359066][T13324] [ 218.359102][T13324] __dump_stack+0x1d/0x30 [ 218.359131][T13324] dump_stack_lvl+0x95/0xd0 [ 218.359208][T13324] dump_stack+0x15/0x1b [ 218.359233][T13324] should_fail_ex+0x262/0x280 [ 218.359260][T13324] ? debugfs_create_symlink+0x26/0x150 [ 218.359323][T13324] should_failslab+0x8c/0xb0 [ 218.359379][T13324] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 218.359414][T13324] ? format_decode+0xaf/0x560 [ 218.359460][T13324] ? debugfs_create_symlink+0x26/0x150 [ 218.359506][T13324] kstrdup+0x3e/0xd0 [ 218.359538][T13324] debugfs_create_symlink+0x26/0x150 [ 218.359563][T13324] ref_tracker_dir_symlink+0x1ae/0x290 [ 218.359744][T13324] net_ns_net_init+0x8f/0xa0 [ 218.359777][T13324] ops_init+0x22a/0x2e0 [ 218.359874][T13324] setup_net+0x9f/0x230 [ 218.359907][T13324] copy_net_ns+0x333/0x490 [ 218.359940][T13324] create_new_namespaces+0x1f6/0x420 [ 218.360047][T13324] unshare_nsproxy_namespaces+0x115/0x150 [ 218.360074][T13324] ksys_unshare+0x3a3/0x690 [ 218.360109][T13324] __x64_sys_unshare+0x1f/0x30 [ 218.360140][T13324] x64_sys_call+0x1e33/0x2550 [ 218.360210][T13324] do_syscall_64+0x112/0x360 [ 218.360239][T13324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.360311][T13324] RIP: 0033:0x7f92e6e4f559 [ 218.360333][T13324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.360358][T13324] RSP: 002b:00007f92e58a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 218.360387][T13324] RAX: ffffffffffffffda RBX: 00007f92e70d5fa0 RCX: 00007f92e6e4f559 [ 218.360407][T13324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 218.360474][T13324] RBP: 00007f92e6ee6b20 R08: 0000000000000000 R09: 0000000000000000 [ 218.360492][T13324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.360509][T13324] R13: 00007f92e70d6038 R14: 00007f92e70d5fa0 R15: 00007fff963c7098 [ 218.360531][T13324] [ 218.390695][ T29] audit: type=1400 audit(2000000036.090:8740): avc: denied { write } for pid=13313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.427641][ T29] audit: type=1400 audit(2000000036.130:8741): avc: denied { write } for pid=13330 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.570066][T13324] dummy0 speed is unknown, defaulting to 1000 [ 218.570470][T13324] rxe_eth0 speed is unknown, defaulting to 1000 [ 218.674303][ T29] audit: type=1400 audit(2000000036.370:8742): avc: denied { create } for pid=13337 comm="syz.9.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.678092][ T29] audit: type=1400 audit(2000000036.380:8743): avc: denied { connect } for pid=13337 comm="syz.9.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.832597][T13347] sit0: entered promiscuous mode [ 218.840245][T13347] validate_nla: 3 callbacks suppressed [ 218.846090][T13347] netlink: 'syz.7.3280': attribute type 1 has an invalid length. [ 218.846117][T13347] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3280'. [ 218.885686][T13356] netlink: 'syz.9.3282': attribute type 4 has an invalid length. [ 218.911610][T13356] netlink: 'syz.9.3282': attribute type 4 has an invalid length. [ 219.034560][T13363] dummy0 speed is unknown, defaulting to 1000 [ 219.037983][T13363] rxe_eth0 speed is unknown, defaulting to 1000 [ 219.383077][T13383] loop1: detected capacity change from 0 to 256 [ 219.474440][T13385] ref_ctr_offset mismatch. inode: 0x143 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x900000080 [ 219.520397][T13390] sit0: entered promiscuous mode [ 219.531573][T13390] netlink: 'syz.9.3297': attribute type 1 has an invalid length. [ 219.531653][T13390] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3297'. [ 219.612857][T13395] loop1: detected capacity change from 0 to 512 [ 219.628653][T13395] EXT4-fs (loop1): orphan cleanup on readonly fs [ 219.629125][T13395] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.3298: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 219.629155][T13395] loop1: lost filesystem error report for type 5 error -117 [ 219.629332][T13395] EXT4-fs (loop1): 1 orphan inode deleted [ 219.629787][T13395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.647000][T13397] FAULT_INJECTION: forcing a failure. [ 219.647000][T13397] name failslab, interval 1, probability 0, space 0, times 0 [ 219.647032][T13397] CPU: 1 UID: 0 PID: 13397 Comm: syz.9.3301 Not tainted syzkaller #0 PREEMPT(lazy) [ 219.647058][T13397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.647072][T13397] Call Trace: [ 219.647080][T13397] [ 219.647089][T13397] __dump_stack+0x1d/0x30 [ 219.647178][T13397] dump_stack_lvl+0x95/0xd0 [ 219.647200][T13397] dump_stack+0x15/0x1b [ 219.647222][T13397] should_fail_ex+0x262/0x280 [ 219.647251][T13397] ? security_inode_alloc+0x37/0x100 [ 219.647274][T13397] should_failslab+0x8c/0xb0 [ 219.647353][T13397] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 219.647377][T13397] ? security_inode_alloc+0x37/0x100 [ 219.647405][T13397] security_inode_alloc+0x37/0x100 [ 219.647427][T13397] inode_init_always_gfp+0x495/0x4e0 [ 219.647459][T13397] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 219.647482][T13397] alloc_inode+0x58/0x170 [ 219.647573][T13397] new_inode+0x1d/0xe0 [ 219.647602][T13397] debugfs_create_symlink+0x7c/0x150 [ 219.647687][T13397] ref_tracker_dir_symlink+0x1ae/0x290 [ 219.647734][T13397] net_ns_net_init+0x8f/0xa0 [ 219.647768][T13397] ops_init+0x22a/0x2e0 [ 219.647800][T13397] setup_net+0x9f/0x230 [ 219.647898][T13397] copy_net_ns+0x333/0x490 [ 219.647951][T13397] create_new_namespaces+0x1f6/0x420 [ 219.647975][T13397] unshare_nsproxy_namespaces+0x115/0x150 [ 219.648000][T13397] ksys_unshare+0x3a3/0x690 [ 219.648051][T13397] __x64_sys_unshare+0x1f/0x30 [ 219.648079][T13397] x64_sys_call+0x1e33/0x2550 [ 219.648126][T13397] do_syscall_64+0x112/0x360 [ 219.648150][T13397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.648174][T13397] RIP: 0033:0x7f244a7bf559 [ 219.648192][T13397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.648292][T13397] RSP: 002b:00007f244920f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 219.648347][T13397] RAX: ffffffffffffffda RBX: 00007f244aa45fa0 RCX: 00007f244a7bf559 [ 219.648363][T13397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 219.648378][T13397] RBP: 00007f244a856b20 R08: 0000000000000000 R09: 0000000000000000 [ 219.648392][T13397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.648406][T13397] R13: 00007f244aa46038 R14: 00007f244aa45fa0 R15: 00007fff6a264788 [ 219.648470][T13397] [ 219.648595][T13397] debugfs: out of free dentries, can not create symlink 'netns-1d3-4026532934-notrefcnt' [ 219.671927][T13397] dummy0 speed is unknown, defaulting to 1000 [ 219.672212][T13397] rxe_eth0 speed is unknown, defaulting to 1000 [ 219.961715][T13413] batadv_slave_1: entered promiscuous mode [ 219.996221][T13408] batadv_slave_1: left promiscuous mode [ 220.012042][ T3287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.051052][T13415] syzkaller1: entered promiscuous mode [ 220.051076][T13415] syzkaller1: entered allmulticast mode [ 220.091371][T13425] sit0: entered promiscuous mode [ 220.091497][T13425] netlink: 'syz.3.3313': attribute type 1 has an invalid length. [ 220.091512][T13425] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3313'. [ 220.133959][T13429] dummy0 speed is unknown, defaulting to 1000 [ 220.134281][T13429] rxe_eth0 speed is unknown, defaulting to 1000 [ 220.386409][T13451] loop4: detected capacity change from 0 to 512 [ 220.410616][T13451] EXT4-fs (loop4): orphan cleanup on readonly fs [ 220.410847][T13451] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.3320: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 220.410883][T13451] loop4: lost filesystem error report for type 5 error -117 [ 220.412519][T13451] EXT4-fs (loop4): 1 orphan inode deleted [ 220.413018][T13451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.437140][T12134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.512416][T13458] FAULT_INJECTION: forcing a failure. [ 220.512416][T13458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 220.512486][T13458] CPU: 0 UID: 0 PID: 13458 Comm: syz.3.3327 Not tainted syzkaller #0 PREEMPT(lazy) [ 220.512515][T13458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 220.512530][T13458] Call Trace: [ 220.512538][T13458] [ 220.512547][T13458] __dump_stack+0x1d/0x30 [ 220.512575][T13458] dump_stack_lvl+0x95/0xd0 [ 220.512679][T13458] dump_stack+0x15/0x1b [ 220.512702][T13458] should_fail_ex+0x262/0x280 [ 220.512729][T13458] should_fail_alloc_page+0xf2/0x100 [ 220.512820][T13458] __alloc_frozen_pages_noprof+0x132/0x3d0 [ 220.512855][T13458] alloc_pages_mpol+0xaf/0x1d0 [ 220.512964][T13458] vma_alloc_folio_noprof+0x1b3/0x300 [ 220.513002][T13458] handle_mm_fault+0x1385/0x3c60 [ 220.513054][T13458] __get_user_pages+0x12e4/0x1ea0 [ 220.513099][T13458] __gup_longterm_locked+0x963/0xed0 [ 220.513136][T13458] ? should_fail_ex+0xdb/0x280 [ 220.513167][T13458] ? process_vm_rw+0x29c/0x9c0 [ 220.513189][T13458] ? should_failslab+0x8c/0xb0 [ 220.513225][T13458] pin_user_pages_remote+0x7e/0xb0 [ 220.513281][T13458] process_vm_rw+0x49b/0x9c0 [ 220.513370][T13458] ? restore_fpregs_from_fpstate+0x61/0x110 [ 220.513403][T13458] __x64_sys_process_vm_writev+0x78/0x90 [ 220.513430][T13458] x64_sys_call+0x128f/0x2550 [ 220.513459][T13458] do_syscall_64+0x112/0x360 [ 220.513484][T13458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.513575][T13458] RIP: 0033:0x7f92e6e4f559 [ 220.513595][T13458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.513618][T13458] RSP: 002b:00007f92e58a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 220.513643][T13458] RAX: ffffffffffffffda RBX: 00007f92e70d5fa0 RCX: 00007f92e6e4f559 [ 220.513724][T13458] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000067d [ 220.513740][T13458] RBP: 00007f92e6ee6b20 R08: 000000000000023a R09: 0000000000000000 [ 220.513799][T13458] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000000 [ 220.513840][T13458] R13: 00007f92e70d6038 R14: 00007f92e70d5fa0 R15: 00007fff963c7098 [ 220.513887][T13458] [ 220.518361][T13456] dummy0 speed is unknown, defaulting to 1000 [ 220.546500][T13456] rxe_eth0 speed is unknown, defaulting to 1000 [ 220.591729][T13460] netlink: 'syz.9.3328': attribute type 10 has an invalid length. [ 220.780680][T13460] team0: Port device vlan1 added [ 220.810487][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 220.810506][ T29] audit: type=1326 audit(2000000038.510:9086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.7.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4858d0fd8e code=0x7ffc0000 [ 220.813775][ T29] audit: type=1326 audit(2000000038.510:9087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.7.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4858d0fd8e code=0x7ffc0000 [ 220.815533][ T29] audit: type=1326 audit(2000000038.520:9088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.7.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4858d0fd8e code=0x7ffc0000 [ 220.816737][ T29] audit: type=1326 audit(2000000038.520:9089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.7.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4858d0fd8e code=0x7ffc0000 [ 220.819632][ T29] audit: type=1326 audit(2000000038.520:9090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.7.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4858d0fd8e code=0x7ffc0000 [ 220.822618][ T29] audit: type=1326 audit(2000000038.520:9091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.7.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4858d0fd8e code=0x7ffc0000 [ 220.824259][ T29] audit: type=1326 audit(2000000038.520:9092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.7.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4858d0fd8e code=0x7ffc0000 [ 220.826276][ T29] audit: type=1326 audit(2000000038.520:9093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.7.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4858d0fd8e code=0x7ffc0000 [ 220.829211][ T29] audit: type=1326 audit(2000000038.520:9094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.7.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4858d0fd8e code=0x7ffc0000 [ 220.830844][ T29] audit: type=1326 audit(2000000038.520:9095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.7.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4858d0fd8e code=0x7ffc0000 [ 221.213646][T13481] sctp: [Deprecated]: syz.3.3333 (pid 13481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.213646][T13481] Use struct sctp_sack_info instead [ 221.390195][T13489] loop9: detected capacity change from 0 to 512 [ 221.411829][T13489] EXT4-fs (loop9): orphan cleanup on readonly fs [ 221.412341][T13489] EXT4-fs error (device loop9): ext4_xattr_inode_iget:473: comm syz.9.3337: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 221.412365][T13489] loop9: lost filesystem error report for type 5 error -117 [ 221.412846][T13489] EXT4-fs (loop9): 1 orphan inode deleted [ 221.451940][T13489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.476948][T10139] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.625382][T13492] loop7: detected capacity change from 0 to 512 [ 221.662526][T13492] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.663046][T13492] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.708355][ T9504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.813052][T13507] FAULT_INJECTION: forcing a failure. [ 221.813052][T13507] name failslab, interval 1, probability 0, space 0, times 0 [ 221.813084][T13507] CPU: 1 UID: 0 PID: 13507 Comm: syz.1.3344 Not tainted syzkaller #0 PREEMPT(lazy) [ 221.813146][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 221.813160][T13507] Call Trace: [ 221.813169][T13507] [ 221.813178][T13507] __dump_stack+0x1d/0x30 [ 221.813254][T13507] dump_stack_lvl+0x95/0xd0 [ 221.813279][T13507] dump_stack+0x15/0x1b [ 221.813301][T13507] should_fail_ex+0x262/0x280 [ 221.813326][T13507] ? security_inode_alloc+0x37/0x100 [ 221.813351][T13507] should_failslab+0x8c/0xb0 [ 221.813421][T13507] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 221.813446][T13507] ? security_inode_alloc+0x37/0x100 [ 221.813484][T13507] security_inode_alloc+0x37/0x100 [ 221.813508][T13507] inode_init_always_gfp+0x495/0x4e0 [ 221.813618][T13507] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 221.813713][T13507] alloc_inode+0x58/0x170 [ 221.813780][T13507] new_inode+0x1d/0xe0 [ 221.813812][T13507] debugfs_create_symlink+0x7c/0x150 [ 221.813837][T13507] ref_tracker_dir_symlink+0x1ae/0x290 [ 221.813909][T13507] net_ns_net_init+0x8f/0xa0 [ 221.813946][T13507] ops_init+0x22a/0x2e0 [ 221.813983][T13507] setup_net+0x9f/0x230 [ 221.814100][T13507] copy_net_ns+0x333/0x490 [ 221.814164][T13507] create_new_namespaces+0x1f6/0x420 [ 221.814190][T13507] unshare_nsproxy_namespaces+0x115/0x150 [ 221.814288][T13507] ksys_unshare+0x3a3/0x690 [ 221.814347][T13507] __x64_sys_unshare+0x1f/0x30 [ 221.814379][T13507] x64_sys_call+0x1e33/0x2550 [ 221.814408][T13507] do_syscall_64+0x112/0x360 [ 221.814434][T13507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.814497][T13507] RIP: 0033:0x7f019436f559 [ 221.814517][T13507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.814538][T13507] RSP: 002b:00007f0192dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 221.814565][T13507] RAX: ffffffffffffffda RBX: 00007f01945f5fa0 RCX: 00007f019436f559 [ 221.814619][T13507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 221.814635][T13507] RBP: 00007f0194406b20 R08: 0000000000000000 R09: 0000000000000000 [ 221.814653][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.814668][T13507] R13: 00007f01945f6038 R14: 00007f01945f5fa0 R15: 00007fff4584d008 [ 221.814709][T13507] [ 221.822053][T13507] debugfs: out of free dentries, can not create symlink 'netns-1da-4026532811-notrefcnt' [ 221.849084][T13507] dummy0 speed is unknown, defaulting to 1000 [ 221.850995][T13507] rxe_eth0 speed is unknown, defaulting to 1000 [ 222.065047][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3349'. [ 222.082782][T13513] team1: entered promiscuous mode [ 222.082805][T13513] team1: entered allmulticast mode [ 222.082941][T13513] 8021q: adding VLAN 0 to HW filter on device team1 [ 222.247364][T13519] netlink: 'syz.3.3352': attribute type 10 has an invalid length. [ 222.397023][T13530] loop7: detected capacity change from 0 to 512 [ 222.409180][T13530] EXT4-fs (loop7): orphan cleanup on readonly fs [ 222.409550][T13530] EXT4-fs error (device loop7): ext4_xattr_inode_iget:473: comm syz.7.3353: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 222.409584][T13530] loop7: lost filesystem error report for type 5 error -117 [ 222.414042][T13530] EXT4-fs (loop7): 1 orphan inode deleted [ 222.414568][T13530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.536968][ T9504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.584400][T13529] loop1: detected capacity change from 0 to 512 [ 222.612333][T13529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.612564][T13529] ext4 filesystem being mounted at /679/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.655589][ T3287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.757932][T13547] FAULT_INJECTION: forcing a failure. [ 222.757932][T13547] name failslab, interval 1, probability 0, space 0, times 0 [ 222.757967][T13547] CPU: 1 UID: 0 PID: 13547 Comm: syz.4.3363 Not tainted syzkaller #0 PREEMPT(lazy) [ 222.758071][T13547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 222.758085][T13547] Call Trace: [ 222.758094][T13547] [ 222.758104][T13547] __dump_stack+0x1d/0x30 [ 222.758134][T13547] dump_stack_lvl+0x95/0xd0 [ 222.758160][T13547] dump_stack+0x15/0x1b [ 222.758200][T13547] should_fail_ex+0x262/0x280 [ 222.758267][T13547] ? crypto_create_tfm_node+0x5b/0x230 [ 222.758305][T13547] should_failslab+0x8c/0xb0 [ 222.758333][T13547] __kmalloc_node_noprof+0xb8/0x4d0 [ 222.758389][T13547] ? crypto_create_tfm_node+0x5b/0x230 [ 222.758522][T13547] crypto_create_tfm_node+0x5b/0x230 [ 222.758591][T13547] ? crypto_alg_mod_lookup+0x2f9/0x490 [ 222.758628][T13547] crypto_alloc_tfm_node+0xb8/0x280 [ 222.758665][T13547] crypto_alloc_sig+0x2d/0x40 [ 222.758736][T13547] public_key_verify_signature+0x142/0x4e0 [ 222.758771][T13547] ? should_fail_ex+0xdb/0x280 [ 222.758870][T13547] x509_check_for_self_signed+0x1c4/0x250 [ 222.758909][T13547] x509_cert_parse+0x3bf/0x450 [ 222.758951][T13547] x509_key_preparse+0x3c/0x420 [ 222.759017][T13547] asymmetric_key_preparse+0x68/0xb0 [ 222.759049][T13547] __key_create_or_update+0x29e/0x820 [ 222.759129][T13547] ? ktime_get_real_seconds+0x15/0x30 [ 222.759163][T13547] key_create_or_update+0x42/0x60 [ 222.759191][T13547] __se_sys_add_key+0x2a5/0x360 [ 222.759228][T13547] __x64_sys_add_key+0x67/0x80 [ 222.759334][T13547] x64_sys_call+0x1fa9/0x2550 [ 222.759380][T13547] do_syscall_64+0x112/0x360 [ 222.759407][T13547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.759435][T13547] RIP: 0033:0x7f0684cff559 [ 222.759455][T13547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.759478][T13547] RSP: 002b:00007f0683757028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 222.759524][T13547] RAX: ffffffffffffffda RBX: 00007f0684f85fa0 RCX: 00007f0684cff559 [ 222.759542][T13547] RDX: 0000200000003c00 RSI: 0000000000000000 RDI: 0000200000003bc0 [ 222.759558][T13547] RBP: 00007f0684d96b20 R08: ffffffffffffffff R09: 0000000000000000 [ 222.759586][T13547] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 222.759603][T13547] R13: 00007f0684f86038 R14: 00007f0684f85fa0 R15: 00007ffeb523f578 [ 222.759686][T13547] [ 222.989615][ T8013] Bluetooth: hci0: Frame reassembly failed (-84) [ 223.002993][T13555] cgroup: Setting release_agent not allowed [ 223.053434][T13562] sctp: [Deprecated]: syz.1.3365 (pid 13562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.053434][T13562] Use struct sctp_sack_info instead [ 223.318995][T13561] loop3: detected capacity change from 0 to 512 [ 223.582607][T13561] EXT4-fs (loop3): orphan cleanup on readonly fs [ 223.642995][T13561] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.3368: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 223.643046][T13561] loop3: lost filesystem error report for type 5 error -117 [ 223.664326][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 223.664353][ C1] EXT4-fs (loop3): initial error at time 2000000041: ext4_xattr_inode_iget:473 [ 223.664379][ C1] EXT4-fs (loop3): last error at time 2000000041: ext4_xattr_inode_iget:473 [ 223.671731][T13561] EXT4-fs (loop3): 1 orphan inode deleted [ 223.791855][T13568] loop9: detected capacity change from 0 to 512 [ 223.811068][T13561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.052056][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.347154][T13596] hub 1-0:1.0: USB hub found [ 224.348765][T13596] hub 1-0:1.0: 8 ports detected [ 224.493909][T13568] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.494298][T13568] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.651941][T10139] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.818779][T13616] loop1: detected capacity change from 0 to 512 [ 224.843931][T13616] EXT4-fs (loop1): orphan cleanup on readonly fs [ 224.855178][T13616] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.3389: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 224.855296][T13616] loop1: lost filesystem error report for type 5 error -117 [ 224.857543][T13616] EXT4-fs (loop1): 1 orphan inode deleted [ 224.857966][T13616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.948157][ T3287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.972422][T13622] loop1: detected capacity change from 0 to 128 [ 224.998022][T13622] syz.1.3391: attempt to access beyond end of device [ 224.998022][T13622] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 225.055688][ T3531] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 225.090739][T13628] loop3: detected capacity change from 0 to 256 [ 225.119048][T13628] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.139262][T13628] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 8) [ 225.139295][T13628] FAT-fs (loop3): Filesystem has been set read-only [ 225.139316][T13628] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2056) [ 225.481114][T13662] FAULT_INJECTION: forcing a failure. [ 225.481114][T13662] name failslab, interval 1, probability 0, space 0, times 0 [ 225.481149][T13662] CPU: 0 UID: 0 PID: 13662 Comm: syz.7.3403 Not tainted syzkaller #0 PREEMPT(lazy) [ 225.481258][T13662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 225.481272][T13662] Call Trace: [ 225.481281][T13662] [ 225.481291][T13662] __dump_stack+0x1d/0x30 [ 225.481358][T13662] dump_stack_lvl+0x95/0xd0 [ 225.481386][T13662] dump_stack+0x15/0x1b [ 225.481411][T13662] should_fail_ex+0x262/0x280 [ 225.481512][T13662] ? kasprintf+0x83/0xb0 [ 225.481541][T13662] should_failslab+0x8c/0xb0 [ 225.481568][T13662] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 225.481600][T13662] ? kasprintf+0x83/0xb0 [ 225.481678][T13662] kvasprintf+0x8a/0x110 [ 225.481711][T13662] kasprintf+0x83/0xb0 [ 225.481742][T13662] logfc+0xd7/0x2d0 [ 225.481772][T13662] ? __fs_parse+0x40d/0x430 [ 225.481853][T13662] vfs_parse_fs_param+0x1e0/0x2a0 [ 225.481888][T13662] vfs_fsconfig_locked+0x1be/0x210 [ 225.481913][T13662] __se_sys_fsconfig+0x671/0x7e0 [ 225.481938][T13662] __x64_sys_fsconfig+0x67/0x80 [ 225.482011][T13662] x64_sys_call+0xaa0/0x2550 [ 225.482039][T13662] do_syscall_64+0x112/0x360 [ 225.482116][T13662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.482187][T13662] RIP: 0033:0x7f4858d4f559 [ 225.482211][T13662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.482308][T13662] RSP: 002b:00007f48577a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 225.482335][T13662] RAX: ffffffffffffffda RBX: 00007f4858fd5fa0 RCX: 00007f4858d4f559 [ 225.482353][T13662] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 0000000000000003 [ 225.482370][T13662] RBP: 00007f4858de6b20 R08: 0000000000000002 R09: 0000000000000000 [ 225.482386][T13662] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 225.482450][T13662] R13: 00007f4858fd6038 R14: 00007f4858fd5fa0 R15: 00007ffc1f963838 [ 225.482510][T13662] [ 225.894403][T13686] netlink: 'syz.9.3408': attribute type 10 has an invalid length. [ 225.898926][T13689] cgroup: Setting release_agent not allowed [ 226.009979][T13641] loop3: detected capacity change from 0 to 512 [ 226.172561][T13703] hub 1-0:1.0: USB hub found [ 226.172842][T13703] hub 1-0:1.0: 8 ports detected [ 226.206561][ T29] kauditd_printk_skb: 911 callbacks suppressed [ 226.206581][ T29] audit: type=1326 audit(2000000043.910:10007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.9.3413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244a7bf559 code=0x7fc00000 [ 226.207757][ T29] audit: type=1326 audit(2000000043.910:10008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.9.3413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f244a7bf559 code=0x7fc00000 [ 226.209123][ T29] audit: type=1326 audit(2000000043.910:10009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.9.3413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244a7bf559 code=0x7fc00000 [ 226.418518][ T7983] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6d [ 226.644394][T13641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.654290][T13641] ext4 filesystem being mounted at /731/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.728392][T13726] loop4: detected capacity change from 0 to 2048 [ 226.755508][T13726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 226.758518][ T29] audit: type=1400 audit(2000000044.460:10010): avc: denied { write } for pid=13725 comm="syz.4.3420" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.760553][T13726] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:168: inode #12: comm syz.4.3420: inline data xattr refers to an external xattr inode [ 226.760587][T13726] forcing mempool usage for fserror_report+0x1b1/0x500 [ 226.793346][T12134] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 226.794346][T12134] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 226.914975][ T8006] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.915011][ T8006] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 226.957123][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.985596][ T8006] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.985634][ T8006] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 227.002273][ T29] audit: type=1326 audit(2000000044.710:10011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13734 comm="syz.3.3425" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92e6e4f559 code=0x0 [ 227.069600][ T8006] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.069644][ T8006] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 227.104991][T13740] FAULT_INJECTION: forcing a failure. [ 227.104991][T13740] name failslab, interval 1, probability 0, space 0, times 0 [ 227.105057][T13740] CPU: 1 UID: 0 PID: 13740 Comm: syz.7.3428 Not tainted syzkaller #0 PREEMPT(lazy) [ 227.105091][T13740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 227.105104][T13740] Call Trace: [ 227.105112][T13740] [ 227.105120][T13740] __dump_stack+0x1d/0x30 [ 227.105219][T13740] dump_stack_lvl+0x95/0xd0 [ 227.105291][T13740] dump_stack+0x15/0x1b [ 227.105316][T13740] should_fail_ex+0x262/0x280 [ 227.105345][T13740] ? kset_create_and_add+0x3e/0x1b0 [ 227.105376][T13740] should_failslab+0x8c/0xb0 [ 227.105437][T13740] __kmalloc_cache_noprof+0x5d/0x3e0 [ 227.105464][T13740] ? _raw_spin_lock+0x53/0xa0 [ 227.105561][T13740] ? kset_create_and_add+0x3e/0x1b0 [ 227.105591][T13740] kset_create_and_add+0x3e/0x1b0 [ 227.105630][T13740] netdev_register_kobject+0x151/0x240 [ 227.105677][T13740] register_netdevice+0xaf2/0x11a0 [ 227.105707][T13740] ipip6_tunnel_create+0x113/0x2b0 [ 227.105736][T13740] ipip6_tunnel_locate+0x356/0x4c0 [ 227.105812][T13740] ? selinux_capable+0x31/0x40 [ 227.105915][T13740] ipip6_tunnel_ctl+0x889/0xc60 [ 227.105943][T13740] ? ip_tunnel_siocdevprivate+0x62/0xe0 [ 227.105975][T13740] ip_tunnel_siocdevprivate+0x77/0xe0 [ 227.106057][T13740] ipip6_tunnel_siocdevprivate+0x1da/0xe20 [ 227.106102][T13740] ? full_name_hash+0x92/0xe0 [ 227.106176][T13740] ? strcmp+0x22/0x50 [ 227.106200][T13740] dev_ifsioc+0x8f5/0xfc0 [ 227.106307][T13740] dev_ioctl+0x78c/0x960 [ 227.106361][T13740] sock_ioctl+0x58f/0x610 [ 227.106397][T13740] ? __pfx_sock_ioctl+0x10/0x10 [ 227.106455][T13740] __se_sys_ioctl+0xce/0x140 [ 227.106478][T13740] __x64_sys_ioctl+0x43/0x50 [ 227.106501][T13740] x64_sys_call+0x239d/0x2550 [ 227.106563][T13740] do_syscall_64+0x112/0x360 [ 227.106585][T13740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.106607][T13740] RIP: 0033:0x7f4858d4f559 [ 227.106627][T13740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.106705][T13740] RSP: 002b:00007f48577a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.106728][T13740] RAX: ffffffffffffffda RBX: 00007f4858fd5fa0 RCX: 00007f4858d4f559 [ 227.106744][T13740] RDX: 0000200000000100 RSI: 00000000000089f1 RDI: 0000000000000004 [ 227.106758][T13740] RBP: 00007f4858de6b20 R08: 0000000000000000 R09: 0000000000000000 [ 227.106833][T13740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.106852][T13740] R13: 00007f4858fd6038 R14: 00007f4858fd5fa0 R15: 00007ffc1f963838 [ 227.106877][T13740] [ 227.168901][ T8006] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.169012][ T8006] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 227.278186][ T8006] bridge_slave_1: left allmulticast mode [ 227.278269][ T8006] bridge_slave_1: left promiscuous mode [ 227.278404][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.292426][ T8006] bridge_slave_0: left allmulticast mode [ 227.292448][ T8006] bridge_slave_0: left promiscuous mode [ 227.292562][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.505582][T12795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 227.583052][ T8006] bond1 (unregistering): (slave geneve2): Releasing active interface [ 227.640197][ T8006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.686482][ T8006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.689003][ T8006] bond0 (unregistering): Released all slaves [ 227.691004][ T8006] bond1 (unregistering): Released all slaves [ 227.844081][ T8006] hsr_slave_0: left promiscuous mode [ 227.858794][ T8006] hsr_slave_1: left promiscuous mode [ 227.859378][ T8006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.859397][ T8006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.872440][ T8006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.872460][ T8006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.893594][ T8006] veth1_macvtap: left promiscuous mode [ 227.893624][ T8006] veth0_macvtap: left promiscuous mode [ 227.893670][ T8006] veth1_vlan: left promiscuous mode [ 227.895173][ T8006] veth0_vlan: left promiscuous mode [ 227.962098][ T29] audit: type=1400 audit(2000000045.660:10012): avc: denied { write } for pid=13768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.007752][ T29] audit: type=1400 audit(2000000045.710:10013): avc: denied { write } for pid=13788 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.098781][ T8006] team0 (unregistering): Port device vlan1 removed [ 228.138691][ T8006] team0 (unregistering): Port device team_slave_1 removed [ 228.141795][ T8006] team0 (unregistering): Port device team_slave_0 removed [ 228.187498][ T3012] 8021q: adding VLAN 0 to HW filter on device eth1 [ 228.249643][T13758] dummy0 speed is unknown, defaulting to 1000 [ 228.249948][T13758] rxe_eth0 speed is unknown, defaulting to 1000 [ 228.385107][ T29] audit: type=1400 audit(2000000046.090:10014): avc: denied { write } for pid=13800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.437586][ T29] audit: type=1400 audit(2000000046.140:10015): avc: denied { write } for pid=13816 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.490743][ T3012] 8021q: adding VLAN 0 to HW filter on device eth18 [ 228.617179][T13758] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.621642][T13758] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.621730][T13758] bridge_slave_0: entered allmulticast mode [ 228.622228][T13758] bridge_slave_0: entered promiscuous mode [ 228.653488][T13758] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.653529][T13758] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.653642][T13758] bridge_slave_1: entered allmulticast mode [ 228.654297][T13758] bridge_slave_1: entered promiscuous mode [ 228.713423][T13758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.718284][T13758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.730772][T13758] team0: Port device team_slave_0 added [ 228.731856][T13758] team0: Port device team_slave_1 added [ 228.750109][T13758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.750126][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.750159][T13758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.750720][T13758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.750732][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.750766][T13758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.816152][T13838] FAULT_INJECTION: forcing a failure. [ 228.816152][T13838] name failslab, interval 1, probability 0, space 0, times 0 [ 228.816184][T13838] CPU: 1 UID: 0 PID: 13838 Comm: syz.9.3445 Not tainted syzkaller #0 PREEMPT(lazy) [ 228.816275][T13838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 228.816289][T13838] Call Trace: [ 228.816297][T13838] [ 228.816305][T13838] __dump_stack+0x1d/0x30 [ 228.816337][T13838] dump_stack_lvl+0x95/0xd0 [ 228.816380][T13838] dump_stack+0x15/0x1b [ 228.816403][T13838] should_fail_ex+0x262/0x280 [ 228.816427][T13838] ? __kernfs_new_node+0x70/0x440 [ 228.816458][T13838] should_failslab+0x8c/0xb0 [ 228.816596][T13838] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 228.816622][T13838] ? __kernfs_new_node+0x70/0x440 [ 228.816692][T13838] __kernfs_new_node+0x70/0x440 [ 228.816750][T13838] ? __rcu_read_unlock+0x4e/0x70 [ 228.816774][T13838] ? up_write+0x19/0x60 [ 228.816797][T13838] ? kernfs_link_sibling+0x2f5/0x320 [ 228.816894][T13838] ? __rcu_read_unlock+0x4e/0x70 [ 228.816919][T13838] kernfs_new_node+0x107/0x140 [ 228.816973][T13838] __kernfs_create_file+0x4b/0x180 [ 228.817056][T13838] ? __pfx_dev_attr_show+0x10/0x10 [ 228.817088][T13838] ? __pfx_dev_attr_store+0x10/0x10 [ 228.817118][T13838] sysfs_add_file_mode_ns+0x132/0x1b0 [ 228.817164][T13838] sysfs_merge_group+0xed/0x1c0 [ 228.817194][T13838] dpm_sysfs_add+0xaf/0x1e0 [ 228.817224][T13838] device_add+0x3bc/0x790 [ 228.817248][T13838] netdev_register_kobject+0x127/0x240 [ 228.817285][T13838] register_netdevice+0xaf2/0x11a0 [ 228.817357][T13838] ipip6_tunnel_create+0x113/0x2b0 [ 228.817381][T13838] ipip6_tunnel_locate+0x356/0x4c0 [ 228.817402][T13838] ? selinux_capable+0x31/0x40 [ 228.817430][T13838] ipip6_tunnel_ctl+0x889/0xc60 [ 228.817529][T13838] ip_tunnel_siocdevprivate+0x77/0xe0 [ 228.817556][T13838] ipip6_tunnel_siocdevprivate+0x1da/0xe20 [ 228.817593][T13838] ? full_name_hash+0x92/0xe0 [ 228.817653][T13838] ? strcmp+0x22/0x50 [ 228.817711][T13838] dev_ifsioc+0x8f5/0xfc0 [ 228.817741][T13838] dev_ioctl+0x78c/0x960 [ 228.817769][T13838] sock_ioctl+0x58f/0x610 [ 228.817799][T13838] ? __pfx_sock_ioctl+0x10/0x10 [ 228.817898][T13838] __se_sys_ioctl+0xce/0x140 [ 228.817986][T13838] __x64_sys_ioctl+0x43/0x50 [ 228.818030][T13838] x64_sys_call+0x239d/0x2550 [ 228.818057][T13838] do_syscall_64+0x112/0x360 [ 228.818081][T13838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.818130][T13838] RIP: 0033:0x7f244a7bf559 [ 228.818180][T13838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.818222][T13838] RSP: 002b:00007f244920f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.818246][T13838] RAX: ffffffffffffffda RBX: 00007f244aa45fa0 RCX: 00007f244a7bf559 [ 228.818263][T13838] RDX: 0000200000000100 RSI: 00000000000089f1 RDI: 0000000000000004 [ 228.818337][T13838] RBP: 00007f244a856b20 R08: 0000000000000000 R09: 0000000000000000 [ 228.818352][T13838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.818367][T13838] R13: 00007f244aa46038 R14: 00007f244aa45fa0 R15: 00007fff6a264788 [ 228.818388][T13838] [ 228.829269][T13758] hsr_slave_0: entered promiscuous mode [ 228.829712][T13758] hsr_slave_1: entered promiscuous mode [ 228.835146][T13758] debugfs: 'hsr0' already exists in 'hsr' [ 228.835164][T13758] Cannot create hsr debugfs directory [ 228.884365][ T29] audit: type=1400 audit(2000000046.580:10016): avc: denied { write } for pid=13828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.926052][T13840] FAULT_INJECTION: forcing a failure. [ 228.926052][T13840] name failslab, interval 1, probability 0, space 0, times 0 [ 228.926084][T13840] CPU: 1 UID: 0 PID: 13840 Comm: syz.7.3447 Not tainted syzkaller #0 PREEMPT(lazy) [ 228.926156][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 228.926170][T13840] Call Trace: [ 228.926178][T13840] [ 228.926187][T13840] __dump_stack+0x1d/0x30 [ 228.926215][T13840] dump_stack_lvl+0x95/0xd0 [ 228.926275][T13840] dump_stack+0x15/0x1b [ 228.926297][T13840] should_fail_ex+0x262/0x280 [ 228.926323][T13840] ? selinux_genfs_get_sid+0x49/0x190 [ 228.926349][T13840] should_failslab+0x8c/0xb0 [ 228.926375][T13840] __kmalloc_cache_noprof+0x5d/0x3e0 [ 228.926474][T13840] ? selinux_genfs_get_sid+0x49/0x190 [ 228.926513][T13840] selinux_genfs_get_sid+0x49/0x190 [ 228.926546][T13840] inode_doinit_with_dentry+0x606/0x7b0 [ 228.926610][T13840] selinux_d_instantiate+0x27/0x40 [ 228.926634][T13840] security_d_instantiate+0x76/0x90 [ 228.926658][T13840] d_make_persistent+0x49/0x110 [ 228.926685][T13840] __debugfs_create_file+0x14e/0x2b0 [ 228.926779][T13840] debugfs_create_file_full+0x3f/0x60 [ 228.926816][T13840] blk_trace_setup_prepare+0x201/0x300 [ 228.926854][T13840] blk_trace_setup+0x25f/0x3f0 [ 228.926908][T13840] ? __pfx_blkdev_ioctl+0x10/0x10 [ 228.926937][T13840] blk_trace_ioctl+0x20f/0x710 [ 228.927021][T13840] ? ioctl_has_perm+0x26d/0x2c0 [ 228.927055][T13840] ? do_vfs_ioctl+0x848/0xe50 [ 228.927081][T13840] ? selinux_file_ioctl+0x333/0x3b0 [ 228.927187][T13840] ? __pfx_blkdev_ioctl+0x10/0x10 [ 228.927215][T13840] blkdev_ioctl+0x2ac/0x460 [ 228.927243][T13840] ? __pfx_blkdev_ioctl+0x10/0x10 [ 228.927342][T13840] __se_sys_ioctl+0xce/0x140 [ 228.927368][T13840] __x64_sys_ioctl+0x43/0x50 [ 228.927393][T13840] x64_sys_call+0x239d/0x2550 [ 228.927497][T13840] do_syscall_64+0x112/0x360 [ 228.927530][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.927590][T13840] RIP: 0033:0x7f4858d4f559 [ 228.927609][T13840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.927629][T13840] RSP: 002b:00007f48577a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.927653][T13840] RAX: ffffffffffffffda RBX: 00007f4858fd5fa0 RCX: 00007f4858d4f559 [ 228.927670][T13840] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 228.927695][T13840] RBP: 00007f4858de6b20 R08: 0000000000000000 R09: 0000000000000000 [ 228.927710][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.927724][T13840] R13: 00007f4858fd6038 R14: 00007f4858fd5fa0 R15: 00007ffc1f963838 [ 228.927745][T13840] [ 229.290908][ T3012] 8021q: adding VLAN 0 to HW filter on device eth19 [ 229.408988][T13862] loop3: detected capacity change from 0 to 512 [ 229.467797][T13862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.467928][T13862] ext4 filesystem being mounted at /737/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.545242][T13758] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.551359][T13758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 229.553772][T13758] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.578447][T13758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 229.582210][T13758] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.584252][T13758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 229.587791][T13758] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.588581][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.610918][T13758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.672842][T13758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.686210][T13758] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.689275][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.689313][ T7983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.693708][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.693749][ T7981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.742368][ T3012] 8021q: adding VLAN 0 to HW filter on device eth20 [ 229.913611][T13758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.973665][T13921] FAULT_INJECTION: forcing a failure. [ 229.973665][T13921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.973769][T13921] CPU: 1 UID: 0 PID: 13921 Comm: syz.3.3458 Not tainted syzkaller #0 PREEMPT(lazy) [ 229.973799][T13921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.973814][T13921] Call Trace: [ 229.973828][T13921] [ 229.973838][T13921] __dump_stack+0x1d/0x30 [ 229.973864][T13921] dump_stack_lvl+0x95/0xd0 [ 229.973888][T13921] dump_stack+0x15/0x1b [ 229.973951][T13921] should_fail_ex+0x262/0x280 [ 229.973979][T13921] should_fail+0xb/0x20 [ 229.973998][T13921] should_fail_usercopy+0x1a/0x20 [ 229.974023][T13921] strncpy_from_user+0x27/0x250 [ 229.974119][T13921] strncpy_from_user_nofault+0x67/0xf0 [ 229.974146][T13921] bpf_probe_read_user_str+0x2a/0x70 [ 229.974172][T13921] ? 0xffffffffa0402424 [ 229.974200][T13921] bpf_prog_8f682f9b13dc690e+0x46/0x4c [ 229.974223][T13921] bpf_dispatcher_xdp_func+0x25/0x30 [ 229.974257][T13921] bpf_test_run+0x231/0x620 [ 229.974289][T13921] ? bpf_test_run+0x198/0x620 [ 229.974410][T13921] bpf_prog_test_run_xdp+0x587/0x9e0 [ 229.974456][T13921] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 229.974536][T13921] bpf_prog_test_run+0x208/0x340 [ 229.974564][T13921] __sys_bpf+0x8da/0xc30 [ 229.974611][T13921] ? do_futex+0x310/0x460 [ 229.974638][T13921] __x64_sys_bpf+0x69/0x80 [ 229.974668][T13921] x64_sys_call+0xf26/0x2550 [ 229.974716][T13921] do_syscall_64+0x112/0x360 [ 229.974744][T13921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.974773][T13921] RIP: 0033:0x7f92e6e4f559 [ 229.974829][T13921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.974854][T13921] RSP: 002b:00007f92e58a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.974883][T13921] RAX: ffffffffffffffda RBX: 00007f92e70d5fa0 RCX: 00007f92e6e4f559 [ 229.974902][T13921] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 229.974919][T13921] RBP: 00007f92e6ee6b20 R08: 0000000000000000 R09: 0000000000000000 [ 229.974936][T13921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.974952][T13921] R13: 00007f92e70d6038 R14: 00007f92e70d5fa0 R15: 00007fff963c7098 [ 229.975025][T13921] [ 230.253245][T13758] veth0_vlan: entered promiscuous mode [ 230.261523][T13758] veth1_vlan: entered promiscuous mode [ 230.285153][T13758] veth0_macvtap: entered promiscuous mode [ 230.292513][T13758] veth1_macvtap: entered promiscuous mode [ 230.306601][T13758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.313963][T13758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.375323][ T7981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.375916][ T7981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.376032][ T7981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.376071][ T7981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.493652][T13953] usb usb1: usbfs: process 13953 (syz.3.3469) did not claim interface 4 before use [ 230.558801][T13952] cgroup: Setting release_agent not allowed [ 231.379130][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 231.379163][ T29] audit: type=1400 audit(2000000049.080:10031): avc: denied { write } for pid=14015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.439628][ T29] audit: type=1400 audit(2000000049.140:10032): avc: denied { write } for pid=14029 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.573602][T13967] loop2: detected capacity change from 0 to 512 [ 231.634679][ T29] audit: type=1400 audit(2000000049.330:10033): avc: denied { write } for pid=14032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.683280][ T29] audit: type=1400 audit(2000000049.380:10034): avc: denied { write } for pid=14043 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.841594][ T29] audit: type=1400 audit(2000000049.540:10035): avc: denied { write } for pid=14045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.919425][ T29] audit: type=1400 audit(2000000049.620:10036): avc: denied { write } for pid=14062 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.979297][T14067] loop7: detected capacity change from 0 to 164 [ 232.114387][T13967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.116994][T13967] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.182792][ T29] audit: type=1400 audit(2000000049.880:10037): avc: denied { write } for pid=14064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.242620][ T29] audit: type=1400 audit(2000000049.940:10038): avc: denied { write } for pid=14087 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.420621][ T29] audit: type=1400 audit(2000000050.120:10039): avc: denied { write } for pid=14089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.470870][ T29] audit: type=1400 audit(2000000050.170:10040): avc: denied { write } for pid=14117 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.531542][T13758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.729467][T14141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3488'. [ 232.871747][T14162] hub 1-0:1.0: USB hub found [ 232.871928][T14162] hub 1-0:1.0: 8 ports detected [ 233.391411][T14200] loop3: detected capacity change from 0 to 128 [ 233.420262][T14200] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 233.420598][T14200] ext4 filesystem being mounted at /754/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.497013][ T3292] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.563441][T14204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3506'. [ 233.631229][T14197] loop9: detected capacity change from 0 to 32768 [ 233.667551][T14197] loop9: p1 p3 < > [ 233.817355][T14185] loop7: detected capacity change from 0 to 512 [ 233.951788][T14185] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.952098][T14185] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.992120][ T9504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.564749][T14230] hub 1-0:1.0: USB hub found [ 234.566057][T14230] hub 1-0:1.0: 8 ports detected [ 235.599401][T14258] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3520'. [ 235.781007][T14270] hub 1-0:1.0: USB hub found [ 235.782283][T14270] hub 1-0:1.0: 8 ports detected [ 236.928813][T14308] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 236.957941][T14301] No such timeout policy "syz0" [ 237.156166][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3553'. [ 237.320073][T14310] loop3: detected capacity change from 0 to 512 [ 237.503358][T14342] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 237.742163][T14354] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 237.768303][T14310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.777642][T14310] ext4 filesystem being mounted at /763/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.167378][T14366] usb usb1: usbfs: process 14366 (syz.2.3571) did not claim interface 4 before use [ 238.208410][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.325529][T14373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3572'. [ 238.451541][T14378] loop9: detected capacity change from 0 to 128 [ 238.465032][T14378] syz.9.3576: attempt to access beyond end of device [ 238.465032][T14378] loop9: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 238.469232][T14378] syz.9.3576: attempt to access beyond end of device [ 238.469232][T14378] loop9: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 238.470126][T14378] syz.9.3576: attempt to access beyond end of device [ 238.470126][T14378] loop9: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 238.470153][T14378] buffer_io_error: 3 callbacks suppressed [ 238.470164][T14378] Buffer I/O error on dev loop9, logical block 76, lost async page write [ 238.470448][T14378] syz.9.3576: attempt to access beyond end of device [ 238.470448][T14378] loop9: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 238.470824][T14378] syz.9.3576: attempt to access beyond end of device [ 238.470824][T14378] loop9: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 238.470850][T14378] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 238.471115][T14378] syz.9.3576: attempt to access beyond end of device [ 238.471115][T14378] loop9: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 238.471723][T14378] syz.9.3576: attempt to access beyond end of device [ 238.471723][T14378] loop9: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 238.471812][T14378] Buffer I/O error on dev loop9, logical block 84, lost async page write [ 238.472010][T14378] syz.9.3576: attempt to access beyond end of device [ 238.472010][T14378] loop9: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 238.472342][T14378] syz.9.3576: attempt to access beyond end of device [ 238.472342][T14378] loop9: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 238.472368][T14378] Buffer I/O error on dev loop9, logical block 88, lost async page write [ 238.472629][T14378] syz.9.3576: attempt to access beyond end of device [ 238.472629][T14378] loop9: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 238.473227][T14378] Buffer I/O error on dev loop9, logical block 92, lost async page write [ 238.473738][T14378] Buffer I/O error on dev loop9, logical block 96, lost async page write [ 238.478131][T14378] Buffer I/O error on dev loop9, logical block 100, lost async page write [ 238.478773][T14378] Buffer I/O error on dev loop9, logical block 104, lost async page write [ 238.479638][T14378] Buffer I/O error on dev loop9, logical block 108, lost async page write [ 238.480424][T14378] Buffer I/O error on dev loop9, logical block 112, lost async page write [ 238.708256][T14388] ip_tables: iptables: counters copy to user failed while replacing table [ 239.063525][T14386] loop2: detected capacity change from 0 to 512 [ 239.665897][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 239.665914][ T29] audit: type=1400 audit(2000000057.360:10047): avc: denied { write } for pid=14410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.685600][T14386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.712434][T14386] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.750387][ T29] audit: type=1400 audit(2000000057.450:10048): avc: denied { write } for pid=14421 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.836729][T14374] loop7: detected capacity change from 0 to 512 [ 239.934106][T14374] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.986262][T13758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.000624][T14374] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 240.001159][T14374] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.3574: bg 0: block 248: padding at end of block bitmap is not set [ 240.001200][T14374] loop7: lost filesystem error report for type 5 error -117 [ 240.001995][T14374] Quota error (device loop7): write_blk: dquota write failed [ 240.002035][T14374] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 240.002135][T14374] EXT4-fs error (device loop7): ext4_acquire_dquot:7079: comm syz.7.3574: Failed to acquire dquot type 1 [ 240.002172][T14374] loop7: lost filesystem error report for type 5 error -28 [ 240.003942][T14374] EXT4-fs (loop7): 1 truncate cleaned up [ 240.045491][T14374] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 240.122642][ T9504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 240.594392][ T29] audit: type=1400 audit(2000000058.290:10049): avc: denied { write } for pid=14448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.648376][ T29] audit: type=1400 audit(2000000058.350:10050): avc: denied { write } for pid=14459 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.798693][T14467] FAULT_INJECTION: forcing a failure. [ 240.798693][T14467] name failslab, interval 1, probability 0, space 0, times 0 [ 240.798728][T14467] CPU: 0 UID: 0 PID: 14467 Comm: syz.2.3594 Not tainted syzkaller #0 PREEMPT(lazy) [ 240.798799][T14467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.798815][T14467] Call Trace: [ 240.798825][T14467] [ 240.798836][T14467] __dump_stack+0x1d/0x30 [ 240.798865][T14467] dump_stack_lvl+0x95/0xd0 [ 240.798907][T14467] dump_stack+0x15/0x1b [ 240.798932][T14467] should_fail_ex+0x262/0x280 [ 240.799012][T14467] ? assoc_array_insert+0x75/0x19a0 [ 240.799046][T14467] should_failslab+0x8c/0xb0 [ 240.799075][T14467] __kmalloc_cache_noprof+0x5d/0x3e0 [ 240.799102][T14467] ? assoc_array_insert+0x75/0x19a0 [ 240.799230][T14467] assoc_array_insert+0x75/0x19a0 [ 240.799266][T14467] ? avc_has_perm+0x101/0x190 [ 240.799289][T14467] ? __siphash_unaligned+0x158/0x2d0 [ 240.799394][T14467] ? siphash_3u64+0x35/0x2f0 [ 240.799475][T14467] __key_link_begin+0x84/0x130 [ 240.799543][T14467] __key_create_or_update+0x345/0x820 [ 240.799572][T14467] ? ktime_get_real_seconds+0x15/0x30 [ 240.799645][T14467] key_create_or_update+0x42/0x60 [ 240.799677][T14467] __se_sys_add_key+0x2a5/0x360 [ 240.799713][T14467] __x64_sys_add_key+0x67/0x80 [ 240.799761][T14467] x64_sys_call+0x1fa9/0x2550 [ 240.799792][T14467] do_syscall_64+0x112/0x360 [ 240.799856][T14467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.799889][T14467] RIP: 0033:0x7f1a732af559 [ 240.799985][T14467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.800007][T14467] RSP: 002b:00007f1a71d07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 240.800034][T14467] RAX: ffffffffffffffda RBX: 00007f1a73535fa0 RCX: 00007f1a732af559 [ 240.800085][T14467] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000400 [ 240.800102][T14467] RBP: 00007f1a73346b20 R08: ffffffffffffffff R09: 0000000000000000 [ 240.800126][T14467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.800142][T14467] R13: 00007f1a73536038 R14: 00007f1a73535fa0 R15: 00007ffc4d5c2598 [ 240.800165][T14467] [ 241.060124][T14432] loop3: detected capacity change from 0 to 512 [ 241.062814][T14470] tipc: Started in network mode [ 241.062848][T14470] tipc: Node identity ac1414aa, cluster identity 4711 [ 241.062998][T14470] tipc: New replicast peer: 172.20.20.187 [ 241.063188][T14470] tipc: Enabled bearer , priority 10 [ 241.100925][ T3336] kernel read not supported for file /per_cpu/cpu0/trace_pipe_raw (pid: 3336 comm: kworker/1:2) [ 241.175143][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3596'. [ 241.345956][T14492] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3617'. [ 241.680031][T14432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.690412][T14432] ext4 filesystem being mounted at /772/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.057279][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.116795][ T5323] tipc: Node number set to 2886997162 [ 242.355942][T14531] FAULT_INJECTION: forcing a failure. [ 242.355942][T14531] name failslab, interval 1, probability 0, space 0, times 0 [ 242.355992][T14531] CPU: 0 UID: 0 PID: 14531 Comm: syz.1.3620 Not tainted syzkaller #0 PREEMPT(lazy) [ 242.356207][T14531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.356222][T14531] Call Trace: [ 242.356231][T14531] [ 242.356242][T14531] __dump_stack+0x1d/0x30 [ 242.356273][T14531] dump_stack_lvl+0x95/0xd0 [ 242.356301][T14531] dump_stack+0x15/0x1b [ 242.356330][T14531] should_fail_ex+0x262/0x280 [ 242.356387][T14531] ? kstrdup_const+0x3e/0x50 [ 242.356425][T14531] should_failslab+0x8c/0xb0 [ 242.356449][T14531] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 242.356549][T14531] ? kstrdup_const+0x3e/0x50 [ 242.356660][T14531] kstrdup+0x3e/0xd0 [ 242.356693][T14531] kstrdup_const+0x3e/0x50 [ 242.356728][T14531] kvasprintf_const+0x98/0x130 [ 242.356753][T14531] kobject_set_name_vargs+0x44/0xe0 [ 242.356817][T14531] dev_set_name+0x83/0xb0 [ 242.356859][T14531] ? hrtimer_setup+0x33/0xe0 [ 242.356891][T14531] ? netdev_register_kobject+0x62/0x240 [ 242.356959][T14531] ? device_initialize+0x20e/0x220 [ 242.356987][T14531] netdev_register_kobject+0x7f/0x240 [ 242.357016][T14531] register_netdevice+0xaf2/0x11a0 [ 242.357105][T14531] ppp_dev_configure+0x580/0x630 [ 242.357142][T14531] ppp_ioctl+0x82e/0x12d0 [ 242.357174][T14531] ? __pfx_ppp_ioctl+0x10/0x10 [ 242.357249][T14531] __se_sys_ioctl+0xce/0x140 [ 242.357277][T14531] __x64_sys_ioctl+0x43/0x50 [ 242.357303][T14531] x64_sys_call+0x239d/0x2550 [ 242.357332][T14531] do_syscall_64+0x112/0x360 [ 242.357359][T14531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.357433][T14531] RIP: 0033:0x7f019436f559 [ 242.357454][T14531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.357478][T14531] RSP: 002b:00007f0192dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.357504][T14531] RAX: ffffffffffffffda RBX: 00007f01945f5fa0 RCX: 00007f019436f559 [ 242.357522][T14531] RDX: 0000200000000840 RSI: 00000000c004743e RDI: 0000000000000004 [ 242.357576][T14531] RBP: 00007f0194406b20 R08: 0000000000000000 R09: 0000000000000000 [ 242.357593][T14531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.357684][T14531] R13: 00007f01945f6038 R14: 00007f01945f5fa0 R15: 00007fff4584d008 [ 242.357708][T14531] [ 242.367560][T14532] cgroup: Setting release_agent not allowed [ 242.439116][T14537] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 5 (only 8 groups) [ 242.655590][T14516] loop2: detected capacity change from 0 to 512 [ 242.703635][T14547] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.707664][T14547] bond9: (slave lo): Enslaving as an active interface with an up link [ 242.707909][T14547] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 242.786557][T14516] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.047649][T14516] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 243.135985][T14516] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.3616: bg 0: block 248: padding at end of block bitmap is not set [ 243.136174][T14516] loop2: lost filesystem error report for type 5 error -117 [ 243.152528][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 243.152555][ C0] EXT4-fs (loop2): last error at time 2000000060: ext4_validate_block_bitmap:445 [ 243.199138][T14516] Quota error (device loop2): write_blk: dquota write failed [ 243.200331][T14516] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 243.228362][T14516] EXT4-fs error (device loop2): ext4_acquire_dquot:7079: comm syz.2.3616: Failed to acquire dquot type 1 [ 243.242302][T14516] loop2: lost filesystem error report for type 5 error -28 [ 243.381116][T14571] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 5 (only 8 groups) [ 243.461439][T14516] EXT4-fs (loop2): 1 truncate cleaned up [ 243.668949][T14582] loop3: detected capacity change from 0 to 512 [ 243.669647][T14582] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.690171][T14582] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.3641: bad orphan inode 13 [ 243.690206][T14582] loop3: lost filesystem error report for type 5 error -117 [ 243.690413][T14582] ext4_test_bit(bit=12, block=18) = 1 [ 243.690481][T14582] is_bad_inode(inode)=0 [ 243.690491][T14582] NEXT_ORPHAN(inode)=0 [ 243.690500][T14582] max_ino=32 [ 243.690509][T14582] i_nlink=1 [ 243.691846][T14582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 243.793032][T14516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 243.927646][T14516] syz.2.3616 (14516) used greatest stack depth: 9032 bytes left [ 243.933848][T13758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 244.047100][T14552] loop7: detected capacity change from 0 to 512 [ 244.050260][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 244.268734][T14613] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 5 (only 8 groups) [ 244.323572][T14552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.358353][T14552] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.477352][T14624] FAULT_INJECTION: forcing a failure. [ 244.477352][T14624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.477451][T14624] CPU: 1 UID: 0 PID: 14624 Comm: syz.3.3654 Not tainted syzkaller #0 PREEMPT(lazy) [ 244.477490][T14624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 244.477506][T14624] Call Trace: [ 244.477515][T14624] [ 244.477527][T14624] __dump_stack+0x1d/0x30 [ 244.477558][T14624] dump_stack_lvl+0x95/0xd0 [ 244.477595][T14624] dump_stack+0x15/0x1b [ 244.477616][T14624] should_fail_ex+0x262/0x280 [ 244.477669][T14624] should_fail+0xb/0x20 [ 244.477692][T14624] should_fail_usercopy+0x1a/0x20 [ 244.477722][T14624] _copy_to_user+0x20/0xa0 [ 244.477750][T14624] bpf_verifier_vlog+0x36e/0x5a0 [ 244.477820][T14624] btf_verifier_log+0xb2/0xf0 [ 244.477849][T14624] btf_parse_str_sec+0x15c/0x1b0 [ 244.477885][T14624] btf_new_fd+0x2ac/0x6a0 [ 244.477980][T14624] bpf_btf_load+0x116/0x130 [ 244.478006][T14624] __sys_bpf+0xbce/0xc30 [ 244.478094][T14624] ? do_futex+0x310/0x460 [ 244.478125][T14624] __x64_sys_bpf+0x69/0x80 [ 244.478162][T14624] x64_sys_call+0xf26/0x2550 [ 244.478193][T14624] do_syscall_64+0x112/0x360 [ 244.478365][T14624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.478393][T14624] RIP: 0033:0x7f92e6e4f559 [ 244.478427][T14624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.478535][T14624] RSP: 002b:00007f92e58a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.478563][T14624] RAX: ffffffffffffffda RBX: 00007f92e70d5fa0 RCX: 00007f92e6e4f559 [ 244.478582][T14624] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 244.478599][T14624] RBP: 00007f92e6ee6b20 R08: 0000000000000000 R09: 0000000000000000 [ 244.478613][T14624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.478667][T14624] R13: 00007f92e70d6038 R14: 00007f92e70d5fa0 R15: 00007fff963c7098 [ 244.478691][T14624] [ 244.580361][ T9504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.815180][ T29] audit: type=1400 audit(2000000062.510:10051): avc: denied { write } for pid=14633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.874045][ T29] audit: type=1400 audit(2000000062.570:10052): avc: denied { write } for pid=14653 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.116202][ T29] audit: type=1400 audit(2000000062.820:10053): avc: denied { write } for pid=14662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.190050][ T29] audit: type=1400 audit(2000000062.890:10054): avc: denied { write } for pid=14677 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.402933][T14688] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 245.419008][T14688] bond3: (slave lo): Enslaving as an active interface with an up link [ 245.424118][T14688] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 245.657315][T14691] loop3: detected capacity change from 0 to 512 [ 246.110375][T14691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.117765][T14691] ext4 filesystem being mounted at /792/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.306617][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.480713][T14741] loop9: detected capacity change from 0 to 512 [ 246.510732][T14741] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 246.554044][T14741] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.3686: bad orphan inode 13 [ 246.554078][T14741] loop9: lost filesystem error report for type 5 error -117 [ 246.555391][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 246.557440][ C0] EXT4-fs (loop9): last error at time 2000000064: ext4_orphan_get:1429 [ 246.568530][T14741] ext4_test_bit(bit=12, block=18) = 1 [ 246.568552][T14741] is_bad_inode(inode)=0 [ 246.568560][T14741] NEXT_ORPHAN(inode)=0 [ 246.568568][T14741] max_ino=32 [ 246.568576][T14741] i_nlink=1 [ 246.569033][T14741] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 246.634981][T14746] FAULT_INJECTION: forcing a failure. [ 246.634981][T14746] name failslab, interval 1, probability 0, space 0, times 0 [ 246.635019][T14746] CPU: 1 UID: 0 PID: 14746 Comm: syz.3.3688 Not tainted syzkaller #0 PREEMPT(lazy) [ 246.635050][T14746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 246.635110][T14746] Call Trace: [ 246.635120][T14746] [ 246.635129][T14746] __dump_stack+0x1d/0x30 [ 246.635161][T14746] dump_stack_lvl+0x95/0xd0 [ 246.635214][T14746] dump_stack+0x15/0x1b [ 246.635296][T14746] should_fail_ex+0x262/0x280 [ 246.635324][T14746] ? do_getname+0x2e/0x1c0 [ 246.635412][T14746] should_failslab+0x8c/0xb0 [ 246.635442][T14746] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 246.635469][T14746] ? __kmalloc_node_track_caller_noprof+0x2bc/0x4d0 [ 246.635553][T14746] ? do_getname+0x2e/0x1c0 [ 246.635639][T14746] do_getname+0x2e/0x1c0 [ 246.635673][T14746] getname_flags+0x1d/0x30 [ 246.635704][T14746] __se_sys_fsconfig+0x5b9/0x7e0 [ 246.635797][T14746] __x64_sys_fsconfig+0x67/0x80 [ 246.635819][T14746] x64_sys_call+0xaa0/0x2550 [ 246.635845][T14746] do_syscall_64+0x112/0x360 [ 246.635869][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.635974][T14746] RIP: 0033:0x7f92e6e4f559 [ 246.635996][T14746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.636019][T14746] RSP: 002b:00007f92e58a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 246.636096][T14746] RAX: ffffffffffffffda RBX: 00007f92e70d5fa0 RCX: 00007f92e6e4f559 [ 246.636197][T14746] RDX: 0000200000000240 RSI: 0000000000000004 RDI: 0000000000000003 [ 246.636216][T14746] RBP: 00007f92e6ee6b20 R08: ffffffffffffff9c R09: 0000000000000000 [ 246.636240][T14746] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 246.636257][T14746] R13: 00007f92e70d6038 R14: 00007f92e70d5fa0 R15: 00007fff963c7098 [ 246.636280][T14746] [ 246.852830][T10139] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 247.233258][ T29] audit: type=1400 audit(2000000064.930:10055): avc: denied { map } for pid=14779 comm="syz.1.3699" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 247.233312][ T29] audit: type=1400 audit(2000000064.930:10056): avc: denied { read write } for pid=14779 comm="syz.1.3699" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 247.258806][T14784] loop2: detected capacity change from 0 to 512 [ 247.297786][T14784] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.306993][T14785] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 247.309117][T14784] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.3703: bad orphan inode 13 [ 247.309146][T14784] loop2: lost filesystem error report for type 5 error -117 [ 247.309283][T14784] ext4_test_bit(bit=12, block=18) = 1 [ 247.309299][T14784] is_bad_inode(inode)=0 [ 247.309355][T14784] NEXT_ORPHAN(inode)=0 [ 247.309364][T14784] max_ino=32 [ 247.309371][T14784] i_nlink=1 [ 247.368978][T14784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 247.371460][T14785] bond3: (slave lo): Enslaving as an active interface with an up link [ 247.383887][T14785] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 247.421187][T14756] loop3: detected capacity change from 0 to 512 [ 247.593659][T13758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 247.617455][T14756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.620285][T14756] ext4 filesystem being mounted at /796/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.670221][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.864047][T14803] No such timeout policy "syz0" [ 247.871072][T14813] netlink: 'syz.2.3710': attribute type 4 has an invalid length. [ 248.202974][T14835] loop1: detected capacity change from 0 to 512 [ 248.236439][T14835] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.247442][T14835] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.3717: bad orphan inode 13 [ 248.247527][T14835] loop1: lost filesystem error report for type 5 error -117 [ 248.247631][T14835] ext4_test_bit(bit=12, block=18) = 1 [ 248.247725][T14835] is_bad_inode(inode)=0 [ 248.247733][T14835] NEXT_ORPHAN(inode)=0 [ 248.247741][T14835] max_ino=32 [ 248.247748][T14835] i_nlink=1 [ 248.248219][T14835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 248.446030][T14831] loop9: detected capacity change from 0 to 512 [ 248.534469][T14831] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.694052][ T3287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 248.776106][T14831] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 248.779675][T14831] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.3728: bg 0: block 248: padding at end of block bitmap is not set [ 248.780806][T14831] loop9: lost filesystem error report for type 5 error -117 [ 248.785059][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 248.785271][ C0] EXT4-fs (loop9): last error at time 2000000066: ext4_validate_block_bitmap:445 [ 248.849438][T14831] Quota error (device loop9): write_blk: dquota write failed [ 248.849470][T14831] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 248.849501][T14831] EXT4-fs error (device loop9): ext4_acquire_dquot:7079: comm syz.9.3728: Failed to acquire dquot type 1 [ 248.850031][T14831] loop9: lost filesystem error report for type 5 error -28 [ 248.939659][T14831] EXT4-fs (loop9): 1 truncate cleaned up [ 249.048697][T14831] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 249.177646][T14831] syz.9.3728 (14831) used greatest stack depth: 8976 bytes left [ 249.180832][T10139] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 249.188417][T14883] ip_tables: iptables: counters copy to user failed while replacing table [ 253.629730][T14946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.897760][T14963] netlink: 'syz.9.3768': attribute type 4 has an invalid length. [ 253.897812][T14963] netlink: 'syz.9.3768': attribute type 17 has an invalid length. [ 253.998445][T14979] netlink: 'syz.7.3775': attribute type 1 has an invalid length. [ 254.574488][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.741046][ T29] audit: type=1400 audit(2000000072.440:10057): avc: denied { write } for pid=15007 comm="syz.2.3785" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 254.875236][T15015] loop9: detected capacity change from 0 to 128 [ 255.878471][T15031] ip6erspan0: entered allmulticast mode [ 256.011632][T15042] caller generic_access_phys+0x153/0x310 mapping multiple BARs [ 256.185734][ T29] audit: type=1400 audit(2000000073.890:10058): avc: denied { write } for pid=15045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.220851][ T29] audit: type=1400 audit(2000000073.930:10059): avc: denied { write } for pid=15070 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.394350][ T29] audit: type=1400 audit(2000000074.090:10060): avc: denied { write } for pid=15076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.417746][T15092] ip6erspan0: entered allmulticast mode [ 256.447877][ T29] audit: type=1400 audit(2000000074.150:10061): avc: denied { write } for pid=15093 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.571250][ T29] audit: type=1400 audit(2000000074.270:10062): avc: denied { write } for pid=15097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.631332][ T29] audit: type=1400 audit(2000000074.330:10063): avc: denied { write } for pid=15109 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.780470][ T29] audit: type=1400 audit(2000000074.480:10064): avc: denied { unmount } for pid=10139 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 256.814164][T15120] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 256.868574][ T29] audit: type=1400 audit(2000000074.570:10065): avc: denied { write } for pid=15111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.926910][ T29] audit: type=1400 audit(2000000074.630:10066): avc: denied { write } for pid=15130 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.014194][T15137] ip_tables: iptables: counters copy to user failed while replacing table [ 257.913037][T15150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 257.965374][T15153] loop9: detected capacity change from 0 to 1024 [ 258.002834][T15153] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.585624][T15176] batadv_slave_0: entered promiscuous mode [ 258.585963][T15176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3824'. [ 258.615009][T10139] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.632875][T15176] batadv_slave_0 (unregistering): left promiscuous mode [ 258.632916][T15176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.706330][T15183] loop7: detected capacity change from 0 to 512 [ 258.727831][T15183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.727953][T15183] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.732878][T15183] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 258.732941][T15183] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 258.733088][T15183] EXT4-fs (loop7): This should not happen!! Data will be lost [ 258.733088][T15183] [ 258.733119][T15183] EXT4-fs (loop7): Total free blocks count 0 [ 258.733135][T15183] EXT4-fs (loop7): Free/Dirty block details [ 258.733146][T15183] EXT4-fs (loop7): free_blocks=65280 [ 258.733160][T15183] EXT4-fs (loop7): dirty_blocks=33 [ 258.733172][T15183] EXT4-fs (loop7): Block reservation details [ 258.733210][T15183] EXT4-fs (loop7): i_reserved_data_blocks=33 [ 258.737568][T15183] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 258.935612][T15202] netlink: 'syz.9.3835': attribute type 1 has an invalid length. [ 258.956207][T15202] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.971741][T15202] bond4: (slave syz_tun): making interface the new active one [ 258.973242][T15202] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 259.002098][T15207] ip_tables: iptables: counters copy to user failed while replacing table [ 259.007577][T15207] raw_sendmsg: syz.9.3846 forgot to set AF_INET. Fix it! [ 259.037837][T15209] loop2: detected capacity change from 0 to 1024 [ 259.058124][T15209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.085013][T15215] FAULT_INJECTION: forcing a failure. [ 259.085013][T15215] name failslab, interval 1, probability 0, space 0, times 0 [ 259.085046][T15215] CPU: 1 UID: 60928 PID: 15215 Comm: syz.7.3839 Not tainted syzkaller #0 PREEMPT(lazy) [ 259.085125][T15215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 259.085140][T15215] Call Trace: [ 259.085149][T15215] [ 259.085160][T15215] __dump_stack+0x1d/0x30 [ 259.085192][T15215] dump_stack_lvl+0x95/0xd0 [ 259.085240][T15215] dump_stack+0x15/0x1b [ 259.085268][T15215] should_fail_ex+0x262/0x280 [ 259.085297][T15215] ? setup_mq_sysctls+0x49/0x3e0 [ 259.085324][T15215] should_failslab+0x8c/0xb0 [ 259.085350][T15215] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 259.085456][T15215] ? put_fs_context+0x4d6/0x530 [ 259.085485][T15215] ? setup_mq_sysctls+0x49/0x3e0 [ 259.085510][T15215] kmemdup_noprof+0x2b/0x70 [ 259.085612][T15215] setup_mq_sysctls+0x49/0x3e0 [ 259.085634][T15215] copy_ipcs+0x28b/0x460 [ 259.085718][T15215] create_new_namespaces+0x121/0x420 [ 259.085754][T15215] unshare_nsproxy_namespaces+0x115/0x150 [ 259.085799][T15215] ksys_unshare+0x3a3/0x690 [ 259.085860][T15215] __x64_sys_unshare+0x1f/0x30 [ 259.085951][T15215] x64_sys_call+0x1e33/0x2550 [ 259.085979][T15215] do_syscall_64+0x112/0x360 [ 259.086007][T15215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.086050][T15215] RIP: 0033:0x7f4858d4f559 [ 259.086067][T15215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.086098][T15215] RSP: 002b:00007f48577a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 259.086200][T15215] RAX: ffffffffffffffda RBX: 00007f4858fd5fa0 RCX: 00007f4858d4f559 [ 259.086216][T15215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 259.086231][T15215] RBP: 00007f4858de6b20 R08: 0000000000000000 R09: 0000000000000000 [ 259.086245][T15215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.086261][T15215] R13: 00007f4858fd6038 R14: 00007f4858fd5fa0 R15: 00007ffc1f963838 [ 259.086285][T15215] [ 259.317562][T13758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.662756][T15228] loop7: detected capacity change from 0 to 512 [ 259.806100][T15228] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 259.811967][T15228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.812379][T15228] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.865786][ T9504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.509308][T15264] caller generic_access_phys+0x153/0x310 mapping multiple BARs [ 260.523220][T15267] loop7: detected capacity change from 0 to 1024 [ 260.557779][T15267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.692411][T15280] netlink: 'syz.2.3862': attribute type 4 has an invalid length. [ 260.692436][T15280] netlink: 'syz.2.3862': attribute type 17 has an invalid length. [ 260.788663][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 260.788700][ T29] audit: type=1326 audit(2000000078.490:10071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15288 comm="syz.2.3865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a732af559 code=0x7ffc0000 [ 260.789055][ T29] audit: type=1326 audit(2000000078.490:10072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15288 comm="syz.2.3865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a732af559 code=0x7ffc0000 [ 260.789087][ T29] audit: type=1326 audit(2000000078.490:10073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15288 comm="syz.2.3865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a732af559 code=0x7ffc0000 [ 260.789284][ T29] audit: type=1326 audit(2000000078.490:10074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15288 comm="syz.2.3865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1a732af559 code=0x7ffc0000 [ 260.789386][ T29] audit: type=1326 audit(2000000078.490:10075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15288 comm="syz.2.3865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a732af559 code=0x7ffc0000 [ 260.789716][ T29] audit: type=1326 audit(2000000078.490:10076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15288 comm="syz.2.3865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a732af559 code=0x7ffc0000 [ 260.789945][ T29] audit: type=1326 audit(2000000078.490:10077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15288 comm="syz.2.3865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a732af559 code=0x7ffc0000 [ 260.790673][ T29] audit: type=1326 audit(2000000078.490:10078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15288 comm="syz.2.3865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1a732af559 code=0x7ffc0000 [ 260.798431][ T29] audit: type=1326 audit(2000000078.500:10079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15288 comm="syz.2.3865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a732af559 code=0x7ffc0000 [ 260.800010][ T29] audit: type=1326 audit(2000000078.500:10080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15288 comm="syz.2.3865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a732af559 code=0x7ffc0000 [ 260.961121][T15295] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 261.004025][T15297] loop3: detected capacity change from 0 to 512 [ 261.057405][T15297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.057474][T15297] ext4 filesystem being mounted at /824/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.072483][ T9504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.073663][T15297] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 261.073770][T15297] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 261.073797][T15297] EXT4-fs (loop3): This should not happen!! Data will be lost [ 261.073797][T15297] [ 261.073811][T15297] EXT4-fs (loop3): Total free blocks count 0 [ 261.073825][T15297] EXT4-fs (loop3): Free/Dirty block details [ 261.073866][T15297] EXT4-fs (loop3): free_blocks=65280 [ 261.073880][T15297] EXT4-fs (loop3): dirty_blocks=33 [ 261.073894][T15297] EXT4-fs (loop3): Block reservation details [ 261.073906][T15297] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 261.082236][T15297] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 261.225283][T15305] caller generic_access_phys+0x153/0x310 mapping multiple BARs [ 261.721806][T15314] loop1: detected capacity change from 0 to 512 [ 261.746512][T15314] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3876: invalid indirect mapped block 256 (level 2) [ 261.746631][T15314] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 261.748601][T15314] EXT4-fs (loop1): 2 truncates cleaned up [ 261.780886][T15314] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.799459][T15314] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.3876: bg 0: block 5: invalid block bitmap [ 261.818714][ T3287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 261.930168][T15333] ip_tables: iptables: counters copy to user failed while replacing table [ 262.180366][T15340] loop3: detected capacity change from 0 to 1024 [ 262.209330][T15340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.461189][T15347] caller generic_access_phys+0x153/0x310 mapping multiple BARs [ 262.506148][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.624865][T15362] ip_tables: iptables: counters copy to user failed while replacing table [ 262.858818][T15369] ip_tables: iptables: counters copy to user failed while replacing table [ 263.285990][T15390] loop3: detected capacity change from 0 to 1024 [ 263.356059][T15390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.629574][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.657353][T15405] caller generic_access_phys+0x153/0x310 mapping multiple BARs [ 263.779017][T15413] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 264.512961][T15435] loop1: detected capacity change from 0 to 1024 [ 264.543171][T15435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.640539][T15442] batadv_slave_0: entered promiscuous mode [ 264.640887][T15442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3915'. [ 264.641008][T15442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.710840][T15442] batadv_slave_0 (unregistering): left promiscuous mode [ 264.710882][T15442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.796363][ T3287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.017029][T15467] loop2: detected capacity change from 0 to 256 [ 265.032425][T15467] FAT-fs (loop2): codepage cp864 not found [ 265.118999][T15474] loop9: detected capacity change from 0 to 256 [ 265.180769][T15478] loop7: detected capacity change from 0 to 1024 [ 265.228640][T15478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.569505][ T9504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.588946][T15486] FAULT_INJECTION: forcing a failure. [ 265.588946][T15486] name failslab, interval 1, probability 0, space 0, times 0 [ 265.588982][T15486] CPU: 1 UID: 60928 PID: 15486 Comm: syz.9.3943 Not tainted syzkaller #0 PREEMPT(lazy) [ 265.589014][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 265.589028][T15486] Call Trace: [ 265.589036][T15486] [ 265.589044][T15486] __dump_stack+0x1d/0x30 [ 265.589076][T15486] dump_stack_lvl+0x95/0xd0 [ 265.589171][T15486] dump_stack+0x15/0x1b [ 265.589195][T15486] should_fail_ex+0x262/0x280 [ 265.589300][T15486] ? __register_sysctl_table+0x52/0xbe0 [ 265.589381][T15486] should_failslab+0x8c/0xb0 [ 265.589410][T15486] __kmalloc_noprof+0xb6/0x4b0 [ 265.589438][T15486] ? __register_sysctl_table+0x52/0xbe0 [ 265.589476][T15486] __register_sysctl_table+0x52/0xbe0 [ 265.589591][T15486] setup_mq_sysctls+0x398/0x3e0 [ 265.589623][T15486] copy_ipcs+0x28b/0x460 [ 265.589650][T15486] create_new_namespaces+0x121/0x420 [ 265.589678][T15486] unshare_nsproxy_namespaces+0x115/0x150 [ 265.589783][T15486] ksys_unshare+0x3a3/0x690 [ 265.589818][T15486] __x64_sys_unshare+0x1f/0x30 [ 265.589851][T15486] x64_sys_call+0x1e33/0x2550 [ 265.589881][T15486] do_syscall_64+0x112/0x360 [ 265.589943][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.590002][T15486] RIP: 0033:0x7f244a7bf559 [ 265.590022][T15486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.590108][T15486] RSP: 002b:00007f244920f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 265.590135][T15486] RAX: ffffffffffffffda RBX: 00007f244aa45fa0 RCX: 00007f244a7bf559 [ 265.590154][T15486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 265.590171][T15486] RBP: 00007f244a856b20 R08: 0000000000000000 R09: 0000000000000000 [ 265.590187][T15486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.590204][T15486] R13: 00007f244aa46038 R14: 00007f244aa45fa0 R15: 00007fff6a264788 [ 265.590288][T15486] [ 265.649272][T15485] FAULT_INJECTION: forcing a failure. [ 265.649272][T15485] name failslab, interval 1, probability 0, space 0, times 0 [ 265.649304][T15485] CPU: 1 UID: 0 PID: 15485 Comm: syz.3.3934 Not tainted syzkaller #0 PREEMPT(lazy) [ 265.649395][T15485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 265.649418][T15485] Call Trace: [ 265.649427][T15485] [ 265.649435][T15485] __dump_stack+0x1d/0x30 [ 265.649460][T15485] dump_stack_lvl+0x95/0xd0 [ 265.649481][T15485] dump_stack+0x15/0x1b [ 265.649548][T15485] should_fail_ex+0x262/0x280 [ 265.649580][T15485] ? __kernfs_new_node+0x70/0x440 [ 265.649693][T15485] should_failslab+0x8c/0xb0 [ 265.649796][T15485] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 265.649821][T15485] ? __kernfs_new_node+0x70/0x440 [ 265.649850][T15485] __kernfs_new_node+0x70/0x440 [ 265.649881][T15485] ? __kernfs_create_file+0x16b/0x180 [ 265.649921][T15485] ? __pfx_dev_attr_show+0x10/0x10 [ 265.649978][T15485] ? __pfx_dev_attr_store+0x10/0x10 [ 265.650014][T15485] ? sysfs_add_file_mode_ns+0x132/0x1b0 [ 265.650099][T15485] ? kernfs_put+0x25e/0x2c0 [ 265.650182][T15485] ? sysfs_add_file_mode_ns+0x153/0x1b0 [ 265.650217][T15485] kernfs_create_dir_ns+0x10b/0x1c0 [ 265.650256][T15485] internal_create_group+0x2b4/0x9e0 [ 265.650288][T15485] ? is_acpi_device_node+0x26/0x50 [ 265.650396][T15485] ? dev_add_physical_location+0x87/0x1e0 [ 265.650437][T15485] sysfs_create_group+0x1f/0x30 [ 265.650470][T15485] dpm_sysfs_add+0x53/0x1e0 [ 265.650501][T15485] device_add+0x3bc/0x790 [ 265.650524][T15485] rfkill_register+0x136/0x5c0 [ 265.650593][T15485] nfc_register_device+0x103/0x1a0 [ 265.650630][T15485] nci_register_device+0x480/0x510 [ 265.650653][T15485] virtual_ncidev_open+0xca/0x130 [ 265.650735][T15485] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 265.650866][T15485] misc_open+0x1df/0x220 [ 265.650894][T15485] chrdev_open+0x2eb/0x3a0 [ 265.650924][T15485] do_dentry_open+0x496/0xa40 [ 265.650955][T15485] ? __pfx_chrdev_open+0x10/0x10 [ 265.651050][T15485] vfs_open_consume+0x46/0x1f0 [ 265.651138][T15485] path_openat+0xc16/0x11c0 [ 265.651165][T15485] do_file_open+0x16c/0x290 [ 265.651197][T15485] do_sys_openat2+0xa1/0x140 [ 265.651230][T15485] __x64_sys_openat+0xf2/0x120 [ 265.651277][T15485] x64_sys_call+0x1f72/0x2550 [ 265.651339][T15485] do_syscall_64+0x112/0x360 [ 265.651363][T15485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.651387][T15485] RIP: 0033:0x7f92e6e4f559 [ 265.651407][T15485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.651428][T15485] RSP: 002b:00007f92e58a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 265.651526][T15485] RAX: ffffffffffffffda RBX: 00007f92e70d5fa0 RCX: 00007f92e6e4f559 [ 265.651606][T15485] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 265.651622][T15485] RBP: 00007f92e6ee6b20 R08: 0000000000000000 R09: 0000000000000000 [ 265.651636][T15485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.651651][T15485] R13: 00007f92e70d6038 R14: 00007f92e70d5fa0 R15: 00007fff963c7098 [ 265.651671][T15485] [ 265.717312][T15494] loop9: detected capacity change from 0 to 1024 [ 265.770046][T15494] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.143805][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 266.143823][ T29] audit: type=1400 audit(2000000083.840:10157): avc: denied { nlmsg_write } for pid=15504 comm="syz.7.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 266.240897][T10139] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.414239][T15523] ip_tables: iptables: counters copy to user failed while replacing table [ 266.694401][T15541] batadv_slave_0: entered promiscuous mode [ 266.694818][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3954'. [ 266.700019][T15541] batadv_slave_0 (unregistering): left promiscuous mode [ 266.700060][T15541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.766408][T15545] FAULT_INJECTION: forcing a failure. [ 266.766408][T15545] name failslab, interval 1, probability 0, space 0, times 0 [ 266.766452][T15545] CPU: 0 UID: 0 PID: 15545 Comm: syz.9.3966 Not tainted syzkaller #0 PREEMPT(lazy) [ 266.766482][T15545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 266.766501][T15545] Call Trace: [ 266.766511][T15545] [ 266.766521][T15545] __dump_stack+0x1d/0x30 [ 266.766619][T15545] dump_stack_lvl+0x95/0xd0 [ 266.766645][T15545] dump_stack+0x15/0x1b [ 266.766670][T15545] should_fail_ex+0x262/0x280 [ 266.766698][T15545] ? tty_alloc_file+0x31/0x70 [ 266.766795][T15545] should_failslab+0x8c/0xb0 [ 266.766825][T15545] __kmalloc_cache_noprof+0x5d/0x3e0 [ 266.766856][T15545] ? tty_alloc_file+0x31/0x70 [ 266.766888][T15545] tty_alloc_file+0x31/0x70 [ 266.766982][T15545] ptmx_open+0x46/0x240 [ 266.767007][T15545] chrdev_open+0x2eb/0x3a0 [ 266.767036][T15545] do_dentry_open+0x496/0xa40 [ 266.767070][T15545] ? __pfx_chrdev_open+0x10/0x10 [ 266.767116][T15545] vfs_open_consume+0x46/0x1f0 [ 266.767195][T15545] path_openat+0xc16/0x11c0 [ 266.767225][T15545] do_file_open+0x16c/0x290 [ 266.767319][T15545] do_sys_openat2+0xa1/0x140 [ 266.767359][T15545] __x64_sys_openat+0xf2/0x120 [ 266.767397][T15545] x64_sys_call+0x1f72/0x2550 [ 266.767486][T15545] do_syscall_64+0x112/0x360 [ 266.767512][T15545] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 266.767557][T15545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.767653][T15545] RIP: 0033:0x7f244a7bf559 [ 266.767673][T15545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.767763][T15545] RSP: 002b:00007f244920f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 266.767792][T15545] RAX: ffffffffffffffda RBX: 00007f244aa45fa0 RCX: 00007f244a7bf559 [ 266.767810][T15545] RDX: 0000000000008482 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 266.767827][T15545] RBP: 00007f244a856b20 R08: 0000000000000000 R09: 0000000000000000 [ 266.767843][T15545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.767859][T15545] R13: 00007f244aa46038 R14: 00007f244aa45fa0 R15: 00007fff6a264788 [ 266.767942][T15545] [ 267.004430][T15553] netlink: 'syz.3.3959': attribute type 1 has an invalid length. [ 267.010466][T15553] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.022247][T15553] bond6: (slave syz_tun): making interface the new active one [ 267.036961][T15553] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 267.136580][T15564] ip_tables: iptables: counters copy to user failed while replacing table [ 267.142303][T15567] syzkaller1: entered promiscuous mode [ 267.142330][T15567] syzkaller1: entered allmulticast mode [ 267.220753][T15571] batadv_slave_0: entered promiscuous mode [ 267.221064][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3969'. [ 267.221170][T15571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.240810][T15571] batadv_slave_0 (unregistering): left promiscuous mode [ 267.240859][T15571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.307626][ T29] audit: type=1400 audit(2000000085.010:10158): avc: denied { name_bind } for pid=15580 comm="syz.9.3973" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 267.322698][T15584] netlink: 'syz.7.3974': attribute type 1 has an invalid length. [ 267.350569][T15584] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.371005][T15587] FAULT_INJECTION: forcing a failure. [ 267.371005][T15587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.371037][T15587] CPU: 1 UID: 0 PID: 15587 Comm: syz.9.3975 Not tainted syzkaller #0 PREEMPT(lazy) [ 267.371066][T15587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 267.371140][T15587] Call Trace: [ 267.371204][T15587] [ 267.371212][T15587] __dump_stack+0x1d/0x30 [ 267.371242][T15587] dump_stack_lvl+0x95/0xd0 [ 267.371270][T15587] dump_stack+0x15/0x1b [ 267.371294][T15587] should_fail_ex+0x262/0x280 [ 267.371389][T15587] should_fail+0xb/0x20 [ 267.371481][T15587] should_fail_usercopy+0x1a/0x20 [ 267.371512][T15587] _copy_to_user+0x20/0xa0 [ 267.371538][T15587] bpf_verifier_vlog+0x455/0x5a0 [ 267.371621][T15587] btf_verifier_log+0xb2/0xf0 [ 267.371646][T15587] btf_check_sec_info+0x1d7/0x380 [ 267.371732][T15587] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 267.371760][T15587] btf_parse_hdr+0x43a/0x440 [ 267.371793][T15587] btf_new_fd+0x258/0x6a0 [ 267.371824][T15587] bpf_btf_load+0x116/0x130 [ 267.371879][T15587] __sys_bpf+0xbce/0xc30 [ 267.371921][T15587] ? do_futex+0x310/0x460 [ 267.371948][T15587] __x64_sys_bpf+0x69/0x80 [ 267.372054][T15587] x64_sys_call+0xf26/0x2550 [ 267.372141][T15587] do_syscall_64+0x112/0x360 [ 267.372206][T15587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.372236][T15587] RIP: 0033:0x7f244a7bf559 [ 267.372253][T15587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.372273][T15587] RSP: 002b:00007f244920f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.372301][T15587] RAX: ffffffffffffffda RBX: 00007f244aa45fa0 RCX: 00007f244a7bf559 [ 267.372319][T15587] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 267.372336][T15587] RBP: 00007f244a856b20 R08: 0000000000000000 R09: 0000000000000000 [ 267.372353][T15587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.372369][T15587] R13: 00007f244aa46038 R14: 00007f244aa45fa0 R15: 00007fff6a264788 [ 267.372469][T15587] [ 267.397866][T15584] bond4: (slave syz_tun): making interface the new active one [ 267.442087][T15584] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 267.578116][T15592] netlink: 'syz.9.3976': attribute type 5 has an invalid length. [ 267.759796][T15573] loop3: detected capacity change from 0 to 512 [ 267.844351][ T29] audit: type=1400 audit(2000000085.540:10159): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 267.852136][T15573] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 268.018594][T15573] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 268.019539][T15573] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.3968: bg 0: block 248: padding at end of block bitmap is not set [ 268.019630][T15573] loop3: lost filesystem error report for type 5 error -117 [ 268.020284][T15573] Quota error (device loop3): write_blk: dquota write failed [ 268.020331][T15573] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 268.020402][T15573] EXT4-fs error (device loop3): ext4_acquire_dquot:7079: comm syz.3.3968: Failed to acquire dquot type 1 [ 268.020472][T15573] loop3: lost filesystem error report for type 5 error -28 [ 268.022322][T15573] EXT4-fs (loop3): 1 truncate cleaned up [ 268.024112][T15573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 268.153449][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 268.803859][T15635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 268.814050][T15635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 268.814118][T15635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 268.814255][T15635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 268.814496][T15635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 268.814858][T15635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 268.815105][T15635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 268.815216][T15635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 268.815283][T15635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 268.815499][T15635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 269.318373][T15645] loop3: detected capacity change from 0 to 128 [ 269.359162][T15649] loop1: detected capacity change from 0 to 256 [ 269.484081][T15647] loop9: detected capacity change from 0 to 512 [ 269.520981][T15647] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 269.542243][T15647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.570147][T15647] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.688998][T10139] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.712420][T15652] ================================================================== [ 269.712476][T15652] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 269.712520][T15652] [ 269.712527][T15652] write to 0xffff888134d10160 of 8 bytes by task 15645 on cpu 1: [ 269.712545][T15652] filemap_splice_read+0x504/0x750 [ 269.712584][T15652] splice_direct_to_actor+0x25d/0x680 [ 269.712620][T15652] do_splice_direct+0x119/0x1a0 [ 269.712662][T15652] do_sendfile+0x37d/0x640 [ 269.712697][T15652] __x64_sys_sendfile64+0x105/0x150 [ 269.712728][T15652] x64_sys_call+0x1015/0x2550 [ 269.712753][T15652] do_syscall_64+0x112/0x360 [ 269.712771][T15652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.712792][T15652] [ 269.712799][T15652] write to 0xffff888134d10160 of 8 bytes by task 15652 on cpu 0: [ 269.712820][T15652] filemap_splice_read+0x504/0x750 [ 269.712858][T15652] splice_direct_to_actor+0x25d/0x680 [ 269.712893][T15652] do_splice_direct+0x119/0x1a0 [ 269.712926][T15652] do_sendfile+0x37d/0x640 [ 269.712956][T15652] __x64_sys_sendfile64+0x105/0x150 [ 269.712988][T15652] x64_sys_call+0x1015/0x2550 [ 269.713019][T15652] do_syscall_64+0x112/0x360 [ 269.713043][T15652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.713069][T15652] [ 269.713075][T15652] value changed: 0x0000000000000363 -> 0x0000000000000364 [ 269.713087][T15652] [ 269.713091][T15652] Reported by Kernel Concurrency Sanitizer on: [ 269.713103][T15652] CPU: 0 UID: 0 PID: 15652 Comm: syz.3.3996 Not tainted syzkaller #0 PREEMPT(lazy) [ 269.713127][T15652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 269.713139][T15652] ==================================================================