last executing test programs: 12m16.75566419s ago: executing program 32 (id=962): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 11m48.880791675s ago: executing program 33 (id=1874): setuid(0xee01) r0 = socket$inet(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @empty}, 0x10) 10m43.68769437s ago: executing program 34 (id=2888): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4) 10m33.127969359s ago: executing program 35 (id=3042): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x1c5e42, 0x100) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) write(r0, &(0x7f0000000100)="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", 0x200) 9m44.221397094s ago: executing program 36 (id=3629): r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x4, @mcast1}}]}, 0x38}}, 0x0) 9m1.547733817s ago: executing program 37 (id=4512): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x68}, 0x40000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) 8m50.059674371s ago: executing program 38 (id=4690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000001c0)={&(0x7f0000000200)={0x1d, 0x0, 0x2, {0x4, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f0000000240)={0x0, 0xfe}, 0x1, 0x0, 0x0, 0x40040}, 0x4044841) 8m11.896032637s ago: executing program 39 (id=5455): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000200)="0000000001000000", 0x8) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000380)=[@in={0x2, 0x0, @loopback}], 0x10) 7m39.964367242s ago: executing program 40 (id=6163): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000254000/0x1000)=nil) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000d2a000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 7m2.857650811s ago: executing program 41 (id=7063): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, 0x0, 0x0) 6m37.863477683s ago: executing program 42 (id=7173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffc002}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000500), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000001040)=@ccm_128={{0x303}, "52eb0cce5809f18c", "d6cf4779268f8ae54bd959e475f4410e", "87e4a46b", "91cb19d698658dd9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000f40)=@gcm_128={{0x304, 0x34}, '\x00', "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", '\x00\t\x00'}, 0x28) 6m26.633073051s ago: executing program 43 (id=7590): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000380)=0x3da, 0x4) sendto$packet(r2, &(0x7f0000000580)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000680)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m50.483337583s ago: executing program 44 (id=8150): syz_clone3(&(0x7f00000007c0)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000840)={0x77359400}, &(0x7f0000000880)) syz_clone3(&(0x7f00000008c0)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 5m13.363028054s ago: executing program 45 (id=8610): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x480, 0x10) fcntl$notify(r0, 0x402, 0x80000023) r1 = open(&(0x7f0000000040)='.\x00', 0x101000, 0x8a) fcntl$notify(r1, 0x402, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) 5m10.991962874s ago: executing program 46 (id=8651): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) flock(r0, 0x5) 5m9.200122825s ago: executing program 47 (id=8667): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1229, &(0x7f0000000440)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001680)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x208e24b) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) fdatasync(r0) 4m34.716284089s ago: executing program 48 (id=9360): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0xba01}, 0x0) 4m31.196956975s ago: executing program 49 (id=9429): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) close(0xffffffffffffffff) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) 4m8.903774434s ago: executing program 50 (id=9761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100", @ANYRES32], 0x50) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3m8.869896006s ago: executing program 51 (id=10788): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b80), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000bc0)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000c00)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000c40)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000c80)=0xa) 3m3.839547445s ago: executing program 52 (id=10855): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x8}) 2m54.928373198s ago: executing program 53 (id=10991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x303}, "04e7ff0dff0000ff", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000440)=[{&(0x7f00000004c0)="ec", 0xfdef}], 0x1000000000000154) 2m40.235658116s ago: executing program 9 (id=11242): ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x1) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000a80), 0x103902, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file2\x00', 0xc4042, 0x1ff) sendfile(r1, r0, 0x0, 0xfffa83) 2m39.31060476s ago: executing program 9 (id=11255): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000440), 0x3) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) 2m39.272728504s ago: executing program 9 (id=11257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x81010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) close(0x3) syz_emit_ethernet(0x76, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x1, 0x9, 0x0, 0x5, {[@exp_fastopen={0xfe, 0x5, 0xf989, "fa"}, @timestamp={0x8, 0xa, 0x800, 0x7f}, @md5sig={0x13, 0x12, "c8497a470a3d8d11651cedc09be42aa5"}, @mptcp=@capable={0x1e, 0x14, 0xa, 0x1, 0x0, 0x4, [0x9]}, @mss={0x2, 0x4, 0x1ff}, @sack={0x5, 0x2}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0) 2m39.228444218s ago: executing program 9 (id=11259): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x18d093, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0xb) 2m39.154201656s ago: executing program 9 (id=11260): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000100)="0000000001", 0x0, 0x7228, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0xfffffffd, {0xa, 0x8, 0x0, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m38.935031239s ago: executing program 9 (id=11263): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000740)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000780)={0xa, 0x7, 0x1051, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000007c0), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 2m38.934918648s ago: executing program 54 (id=11263): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000740)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000780)={0xa, 0x7, 0x1051, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000007c0), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 2m38.303534852s ago: executing program 0 (id=11270): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000340)={0x1d, r1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000580)=0x8000, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="10959e9532e962b76f", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) 2m36.494600955s ago: executing program 0 (id=11283): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c800) 2m34.669080401s ago: executing program 0 (id=11273): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000540)=0x6a, 0x4) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000700)="50fbdf12a30d7a4cb2c5c84948f3426077a9f0ca14972a603b3e78adff5905b22bae1b24430134d801251bcef8f165533a1edc5a0000d40000000000002944de604d849a1e83a8c86f66470ae2e4c639a50000000000", 0x56, 0x4008044, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='nv', 0x2) sendto$inet(r0, &(0x7f00000007c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 2m34.642856543s ago: executing program 0 (id=11276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x18d093, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0xb) 2m34.608130357s ago: executing program 0 (id=11278): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xa, 0x20520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffc, 0x4, @perf_config_ext={0x1, 0xf}, 0x10ecc8, 0xc, 0x3e, 0x8, 0x75682274, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x80000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) 2m34.403225127s ago: executing program 0 (id=11288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x34}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) 2m34.38327158s ago: executing program 55 (id=11288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x34}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) 2m13.609214014s ago: executing program 4 (id=11644): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000140)='9', 0x1) futex_waitv(&(0x7f0000000300)=[{0x0, &(0x7f0000000380), 0x2}, {0x3, 0x0, 0x2}, {0x40000000, 0x0, 0x82}], 0x3, 0x0, 0x0, 0x0) 2m13.402207435s ago: executing program 4 (id=11649): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101081, 0x20) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000180)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r1, 0x0, 0x20000000000002, 0xa) 2m12.491229837s ago: executing program 4 (id=11666): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000740)={0xc01b, 0x4cc, 0x963a, 0x7ff, 0x3}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x3, 0x3, 0x7ffe, 0x1e, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xff) 2m12.108566156s ago: executing program 4 (id=11674): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000001a80)='./bus\x00', 0x20081e, &(0x7f0000001d80)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000001dc0)="$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") symlink(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000003800)='./bus\x00', 0x0) mount(&(0x7f0000003840)=@loop={'/dev/loop', 0x0}, &(0x7f0000003880)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000038c0)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) 2m11.6786843s ago: executing program 4 (id=11681): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000880)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) setresuid(0xee01, 0x0, 0x0) 2m11.486363739s ago: executing program 4 (id=11686): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0xffffffffffffffff, 0x7, 0x4000, 0x0, 0xfffffffe, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4085}, 0x10) 2m11.388736029s ago: executing program 56 (id=11686): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0xffffffffffffffff, 0x7, 0x4000, 0x0, 0xfffffffe, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4085}, 0x10) 26.078750438s ago: executing program 5 (id=13068): perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000900), 0x2}, 0x9696a46c4adce67c, 0x10, 0x7, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x200000, &(0x7f00000007c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@noload}, {@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x580, &(0x7f0000000c00)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001180)='./file0/file0\x00', &(0x7f00000011c0), &(0x7f0000001200)=ANY=[], 0x835, 0x0) r0 = open(&(0x7f0000001240)='./bus\x00', 0x4c27e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) creat(&(0x7f0000001280)='./file0/file0\x00', 0x20) 25.344469482s ago: executing program 5 (id=13072): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x4, &(0x7f0000000cc0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000d00)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r2, 0x0, 0xe, 0x0, &(0x7f0000000dc0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.152470072s ago: executing program 5 (id=13078): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000040)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x800000b, 0x3, 0x4, 0x0, 0x0, 0x7cce8c743ee810df}) mount(0x0, 0x0, 0x0, 0x804, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/route/flush\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close_range(r0, r0, 0x0) 25.034492193s ago: executing program 5 (id=13080): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000224c0)='./file1\x00', 0x143041, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000022500)=[{&(0x7f0000022540)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) creat(&(0x7f00000225c0)='./bus\x00', 0x0) mount(&(0x7f0000022600)=@loop={'/dev/loop', 0x0}, &(0x7f0000022640)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000022680)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000226c0)={0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x1f, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737eb4b78c660e677df931905b9aafab4cfaaf755a3f68424978700", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x1000, 0xffffffffffffffff]}) 25.034224073s ago: executing program 8 (id=13081): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x804818, &(0x7f0000000100)={[{@map_off}, {@check_strict}, {@check_strict}, {@nojoliet}, {@unhide}, {}, {@hide}, {@nojoliet}, {@check_strict}]}, 0x2, 0x571, &(0x7f00000006c0)="$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") perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x1000}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffbffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000003c0)='./file0\x00', 0x2808080, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=cp865,rodir,uni_xlate=0,uni_xrrors=remount-ro,iocharset=cp850,shortname=mixed,rodir,nonumtail=0,nfs=stale_rw,iocharset=cp437,flush,nonumtail=0,\x00'], 0x81, 0x2b2, &(0x7f0000000c80)="$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") shutdown(0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001000)={0xc, {"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", 0x1000}}, 0x1006) 24.699558577s ago: executing program 5 (id=13086): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="b70200000af40000bfa3000000000000b704000000000000850000003f00000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@map=r1, r2, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r1, &(0x7f0000000980), &(0x7f00000009c0)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000a00)="0611", 0xffb4, 0x8005, 0x0, 0x0) 24.403423697s ago: executing program 8 (id=13091): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x168) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x80c200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/sys/fs\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000b80)=""/1026, 0x402) 24.323953775s ago: executing program 8 (id=13092): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000000540)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, 0x0, 0x4000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001100)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000001140)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x6, 0x5}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000001180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 24.245045693s ago: executing program 8 (id=13093): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000004c0)='./file2\x00', 0xa105c2, &(0x7f0000000500)=ANY=[], 0xfb, 0x11ff, &(0x7f0000000bc0)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 24.063685811s ago: executing program 8 (id=13095): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000140), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000001c0)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000200), 0x291962b, 0x45833af92e4b39ff, 0x0) 23.560232733s ago: executing program 5 (id=13101): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="80007e0a0a"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x1, 0xfffffffc, 0x2, 0x0, "810000cc2b000000000000facc1fff00ffffff"}) r2 = syz_open_pts(r0, 0x141601) write(r2, &(0x7f0000000140)="d5", 0xfffffedf) 23.560079422s ago: executing program 57 (id=13101): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="80007e0a0a"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x1, 0xfffffffc, 0x2, 0x0, "810000cc2b000000000000facc1fff00ffffff"}) r2 = syz_open_pts(r0, 0x141601) write(r2, &(0x7f0000000140)="d5", 0xfffffedf) 23.326398657s ago: executing program 8 (id=13106): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e20, @local}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000400), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000800)={r1, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000008c0)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0xf, &(0x7f0000000940)=[{&(0x7f0000000980)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="b75e5b", 0x3}], 0x1) 23.221665627s ago: executing program 58 (id=13106): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e20, @local}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000400), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000800)={r1, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000008c0)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0xf, &(0x7f0000000940)=[{&(0x7f0000000980)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="b75e5b", 0x3}], 0x1) 3.715412403s ago: executing program 1 (id=13287): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000900"], 0x50}, 0x1, 0x0, 0x0, 0x20000883}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 3.202618615s ago: executing program 3 (id=13293): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./tracing\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x141000, 0x24) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x5220, 0x0) 2.800156146s ago: executing program 1 (id=13296): socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0x9c1bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x12}, 0xf882, 0x8, 0x43a1bd76, 0x9, 0xb, 0xa, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x4b, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x7530, 0x7530, 0x29, 0x0, @gue={{0x2, 0x1, 0x3, 0x6d, 0x0, @val=0x80}, "67dbc1e74e37bc6a875d2cb05668394bc90ac4a0fe6f6efe26"}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) 2.516293894s ago: executing program 1 (id=13298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 2.414866475s ago: executing program 1 (id=13300): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000b40)='./proc\x00', &(0x7f0000000b80)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000c00)='7', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) 2.241283413s ago: executing program 1 (id=13301): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000640)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000006c0)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000700)=ANY=[], 0x8) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000740)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/176, 0xb0}, 0xd}], 0x1, 0x2, 0x0) 2.207207616s ago: executing program 3 (id=13302): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x60000526) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x20) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r1, 0x0, 0xfd9, 0xb) 2.143639522s ago: executing program 6 (id=13304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x200040c0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000080c00018006000100000000000c0004c0000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.114550475s ago: executing program 6 (id=13306): socket(0x80000000000000a, 0x2, 0x0) clock_gettime(0x1, &(0x7f0000000280)) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000a40)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000ac0)=0x1, 0x4) 2.043188862s ago: executing program 6 (id=13308): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000640)=[{0x6, &(0x7f0000000680)=0x6, 0x2}], 0x1, 0x0, &(0x7f00000006c0)={0x77359400}, 0x1) 1.354472052s ago: executing program 1 (id=13321): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000500)={0x2080, 0x0, 0x12}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 1.353656712s ago: executing program 7 (id=13331): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) close(r4) 1.186009349s ago: executing program 7 (id=13323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x10, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x1, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xd, 0xc}, {0x0, 0xfff1}, {0xffe0}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) 1.142207414s ago: executing program 3 (id=13324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.016754466s ago: executing program 7 (id=13326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='PU', 0x2}], 0x1}}], 0x1, 0x20004810) close(0x3) 1.016172117s ago: executing program 7 (id=13328): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000580)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000700)={0x6, 0x5, 0x0, 0x0, 0x11}) 1.015884797s ago: executing program 6 (id=13329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) 1.015782157s ago: executing program 7 (id=13330): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 912.776107ms ago: executing program 6 (id=13332): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000006c0)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000700)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x41}, @dev={0xac, 0x14, 0x14, 0x12}}, {0x1234, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "eb050033b955af4f22b77604731c89099a11f64f8500", "78077bb13c9fc3304cf3c5cd542ab66fee275d6644654e5b0e7123e822a71d27"}}}}, 0x66) 890.375599ms ago: executing program 2 (id=13333): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = fsopen(&(0x7f0000000880)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f00000008c0)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = getpid() process_vm_readv(r2, &(0x7f0000000940)=[{&(0x7f0000000980)=""/54, 0x7ffff000}, {&(0x7f00000009c0)=""/152, 0x98}], 0x2, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/95, 0x7ffff000}], 0x286, 0x0) 763.429962ms ago: executing program 6 (id=13334): r0 = syz_create_resource$futex(&(0x7f0000000880)=0x1) r1 = syz_create_resource$futex(&(0x7f00000008c0)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r1, 0xd, 0x2, 0x0, r1, 0x0) futex(r0, 0xc, 0x1, 0x0, r1, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x101001, 0x0) syz_clone3(&(0x7f00000007c0)={0x280000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) futex(r1, 0x7, 0x0, 0x0, 0x0, 0x0) 763.162012ms ago: executing program 2 (id=13335): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_newrule={0x38, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10002}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1d}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="00fff7", @ANYRES16=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) 540.867495ms ago: executing program 2 (id=13336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) r1 = fsopen(&(0x7f00000000c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r3, &(0x7f0000000500)=""/1024, 0x400) 481.11418ms ago: executing program 2 (id=13337): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r2) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xf}, {0xfff1, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 370.424592ms ago: executing program 2 (id=13338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000840)="c1df07000000d30a298ee688890687", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) 254.575564ms ago: executing program 3 (id=13339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 209.267368ms ago: executing program 3 (id=13340): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000006c0)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="034886dd120005120000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r0], 0xfdef) 118.077777ms ago: executing program 2 (id=13341): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000780)={[0xd]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000840)=0x0) io_submit(r3, 0x1, &(0x7f0000000880)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 117.850957ms ago: executing program 3 (id=13342): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000640)=[{0x6, &(0x7f0000000680)=0x6, 0x2}], 0x1, 0x0, &(0x7f00000006c0)={0x77359400}, 0x1) 0s ago: executing program 7 (id=13343): memfd_create(&(0x7f00000002c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="200000006800e978000000000000000002000200000000000800", @ANYRES64=r0], 0x20}}, 0x4000) kernel console output (not intermixed with test programs): 000000000000246 R12: 0000000000000000 [ 759.115531][ T8321] R13: 00007f759ce66038 R14: 00007fffa645e760 R15: 00007fffa645e848 [ 759.115634][ T8321] [ 759.726614][ T8315] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.12615: bg 0: block 465: padding at end of block bitmap is not set [ 759.727286][ T8315] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 759.727326][ T8315] EXT4-fs (loop5): This should not happen!! Data will be lost [ 759.727326][ T8315] [ 759.727352][ T8315] EXT4-fs (loop5): Total free blocks count 0 [ 759.727395][ T8315] EXT4-fs (loop5): Free/Dirty block details [ 759.727424][ T8315] EXT4-fs (loop5): free_blocks=0 [ 759.727443][ T8315] EXT4-fs (loop5): dirty_blocks=16380 [ 759.727462][ T8315] EXT4-fs (loop5): Block reservation details [ 759.727480][ T8315] EXT4-fs (loop5): i_reserved_data_blocks=16380 [ 759.913318][ T8327] loop8: detected capacity change from 0 to 8192 [ 759.976635][ T367] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 760.008435][ T4258] EXT4-fs warning (device loop5): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost [ 760.104633][ T8339] loop7: detected capacity change from 0 to 128 [ 760.115075][ T8339] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 760.116207][ T8339] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 760.152348][ T5604] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 760.243740][ T8348] loop7: detected capacity change from 0 to 256 [ 760.256098][ T8348] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 760.256167][ T8348] FAT-fs (loop7): bogus number of directory entries (1) [ 760.256188][ T8348] FAT-fs (loop7): Can't find a valid FAT filesystem [ 760.316796][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12631'. [ 760.348098][ T30] audit: type=1400 audit(1700005286.750:10943): avc: denied { mounton } for pid=8357 comm="syz.8.12633" path="/199/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 760.374184][ T30] audit: type=1400 audit(1700005286.770:10944): avc: denied { unmount } for pid=5492 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 760.401934][ T30] audit: type=1400 audit(1700005286.800:10945): avc: denied { attach_queue } for pid=8355 comm="syz.5.12632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 760.441291][ T8361] loop8: detected capacity change from 0 to 512 [ 760.443264][ T8361] EXT4-fs (loop8): 1 truncate cleaned up [ 760.459445][ T8361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.756485][ T8377] loop7: detected capacity change from 0 to 1024 [ 760.756906][ T8377] EXT4-fs: Ignoring removed nobh option [ 760.756998][ T8377] EXT4-fs: Ignoring removed bh option [ 760.757351][ T8377] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 760.767975][ T8377] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 760.768133][ T8377] System zones: 0-1, 3-12 [ 760.770538][ T8377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.784806][ T30] audit: type=1400 audit(1700005287.190:10946): avc: denied { write } for pid=8376 comm="syz.7.12642" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 760.784995][ T30] audit: type=1400 audit(1700005287.190:10947): avc: denied { add_name } for pid=8376 comm="syz.7.12642" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 760.790746][ T30] audit: type=1400 audit(1700005287.190:10948): avc: denied { write } for pid=8376 comm="syz.7.12642" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 760.860119][ T5604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.933878][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 761.112608][ T8394] SELinux: Context ¼OPcÕÇ™»žÅè?‰sÞ Uâ²Éì^tú”Q`wê& ò˜m [ 761.112608][ T8394] ¤ù¡ ×%ÓZÊó®Ç@L0õNïµr‘L²1X‹)Ù’i†jÏÉ’%Ø‘ÙfËíîYjwõÔLݘ»ã8ôÇݱá bV:±vÓiý is not valid (left unmapped). [ 761.113034][ T30] audit: type=1400 audit(1700005287.510:10949): avc: denied { relabelto } for pid=8393 comm="syz.7.12648" name="bus" dev="tmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 761.113095][ T30] audit: type=1400 audit(1700005287.510:10950): avc: denied { associate } for pid=8393 comm="syz.7.12648" name="bus" dev="tmpfs" ino=965 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 761.228838][ T30] audit: type=1400 audit(1700005287.630:10951): avc: denied { unlink } for pid=5604 comm="syz-executor" name="bus" dev="tmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 761.238189][ T8396] loop6: detected capacity change from 0 to 128 [ 761.325879][ T8396] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 761.326865][ T8402] loop7: detected capacity change from 0 to 512 [ 761.329193][ T8402] EXT4-fs: Invalid want_extra_isize 54 [ 761.338789][ T8396] ext4 filesystem being mounted at /772/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.490860][ T8361] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.12635: bg 0: block 465: padding at end of block bitmap is not set [ 761.493338][ T8361] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 761.493406][ T8361] EXT4-fs (loop8): This should not happen!! Data will be lost [ 761.493406][ T8361] [ 761.493424][ T8361] EXT4-fs (loop8): Total free blocks count 0 [ 761.493442][ T8361] EXT4-fs (loop8): Free/Dirty block details [ 761.493458][ T8361] EXT4-fs (loop8): free_blocks=0 [ 761.493550][ T8361] EXT4-fs (loop8): dirty_blocks=16380 [ 761.493716][ T8361] EXT4-fs (loop8): Block reservation details [ 761.493729][ T8361] EXT4-fs (loop8): i_reserved_data_blocks=16380 [ 761.562495][ T8368] loop5: detected capacity change from 0 to 8192 [ 761.607171][T27204] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 761.646946][ T367] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 761.684859][ T5492] EXT4-fs warning (device loop8): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost [ 761.802363][ T8415] FAULT_INJECTION: forcing a failure. [ 761.802363][ T8415] name fail_futex, interval 1, probability 0, space 0, times 0 [ 761.802403][ T8415] CPU: 1 UID: 0 PID: 8415 Comm: syz.8.12656 Not tainted syzkaller #0 PREEMPT(lazy) [ 761.802437][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 761.802515][ T8415] Call Trace: [ 761.802522][ T8415] [ 761.802529][ T8415] __dump_stack+0x1d/0x30 [ 761.802557][ T8415] dump_stack_lvl+0x95/0xd0 [ 761.802582][ T8415] dump_stack+0x15/0x1b [ 761.802631][ T8415] should_fail_ex+0x259/0x270 [ 761.802698][ T8415] should_fail+0xb/0x20 [ 761.802735][ T8415] get_futex_key+0x12c/0xc40 [ 761.802816][ T8415] ? btf_new_fd+0x3a6/0x6a0 [ 761.802866][ T8415] futex_wake+0x89/0x400 [ 761.802903][ T8415] ? __sys_bpf+0xbee/0xc50 [ 761.802932][ T8415] do_futex+0x3f8/0x460 [ 761.802976][ T8415] __se_sys_futex+0x2f6/0x370 [ 761.803073][ T8415] __x64_sys_futex+0x78/0x90 [ 761.803107][ T8415] x64_sys_call+0x22e2/0x2550 [ 761.803158][ T8415] do_syscall_64+0x116/0x380 [ 761.803237][ T8415] ? clear_bhb_loop+0x70/0xc0 [ 761.803384][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.803414][ T8415] RIP: 0033:0x7f995b79fb19 [ 761.803451][ T8415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.803476][ T8415] RSP: 002b:00007f995a1ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 761.803534][ T8415] RAX: ffffffffffffffda RBX: 00007f995ba25fa8 RCX: 00007f995b79fb19 [ 761.803554][ T8415] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f995ba25fac [ 761.803571][ T8415] RBP: 00007f995ba25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 761.803590][ T8415] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 761.803650][ T8415] R13: 00007f995ba26038 R14: 00007ffc2435df60 R15: 00007ffc2435e048 [ 761.803699][ T8415] [ 762.049446][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12663'. [ 762.165823][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12670'. [ 762.307557][ T8452] netlink: 'syz.6.12674': attribute type 1 has an invalid length. [ 762.326189][ T8452] bond10: entered promiscuous mode [ 762.326402][ T8452] 8021q: adding VLAN 0 to HW filter on device bond10 [ 762.379443][ T8452] gretap0: Device is already in use. [ 762.446401][ T8460] loop8: detected capacity change from 0 to 128 [ 762.597995][ T8460] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 762.603699][ T8460] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.709153][ T5492] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 763.138840][ T8486] netlink: 'syz.3.12688': attribute type 1 has an invalid length. [ 763.146290][ T8486] bond11: entered promiscuous mode [ 763.146822][ T8486] 8021q: adding VLAN 0 to HW filter on device bond11 [ 763.165114][ T8486] 0ªî{X¹¦: Device is already in use. [ 763.259404][ T4434] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 763.260038][ T4434] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 763.426418][ T8505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.426507][ T8505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.479461][ T8508] loop7: detected capacity change from 0 to 128 [ 763.524988][ T8508] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 763.525213][ T8508] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.565442][ T5604] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 763.933651][ T8521] netlink: 'syz.7.12699': attribute type 1 has an invalid length. [ 763.939028][ T8521] bond4: entered promiscuous mode [ 763.939210][ T8521] 8021q: adding VLAN 0 to HW filter on device bond4 [ 763.965623][ T8521] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 763.965711][ T8521] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 763.965734][ T8521] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 764.037145][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12702'. [ 764.096564][ T8533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842c018, mo2=0003] [ 764.097232][ T8533] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.102642][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 764.102679][ T30] audit: type=1400 audit(1700005290.500:10953): avc: denied { execute } for pid=8532 comm="syz.6.12704" path="/785/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 764.135448][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 764.186256][ T8540] EXT4-fs: Invalid want_extra_isize 54 [ 764.200076][ T8540] siw: device registration error -23 [ 764.226900][T27204] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.347330][T23823] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 764.347878][T23823] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 764.452311][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12716'. [ 764.514294][ T8567] netlink: 'syz.8.12718': attribute type 1 has an invalid length. [ 764.532377][ T8567] bond1: entered promiscuous mode [ 764.532565][ T8567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 764.551267][ T8574] ip_tables: iptables: counters copy to user failed while replacing table [ 764.584051][ T8567] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 764.584150][ T8567] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 764.584166][ T8567] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 764.735208][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.735310][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.452594][ T8609] netlink: 'syz.5.12735': attribute type 1 has an invalid length. [ 765.472128][ T8609] bond1: entered promiscuous mode [ 765.472309][ T8609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 765.519668][ T8609] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 765.519699][ T8609] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 765.519724][ T8609] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 769.390714][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12768'. [ 769.412108][ T8668] team1: entered promiscuous mode [ 769.412133][ T8668] team1: entered allmulticast mode [ 769.412338][ T8668] 8021q: adding VLAN 0 to HW filter on device team1 [ 769.611453][ T8683] netlink: 'syz.8.12765': attribute type 10 has an invalid length. [ 769.619237][ T8683] team0: Port device dummy0 added [ 769.659057][ T8687] set_capacity_and_notify: 3 callbacks suppressed [ 769.659081][ T8687] loop6: detected capacity change from 0 to 1024 [ 769.659852][ T8687] EXT4-fs: Ignoring removed oldalloc option [ 769.659872][ T8687] EXT4-fs: Ignoring removed oldalloc option [ 769.662271][ T8687] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 769.703021][ T8687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.735968][ T8692] ip_tables: iptables: counters copy to user failed while replacing table [ 769.782896][T27204] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.877112][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12773'. [ 769.897678][ T8702] team1: entered promiscuous mode [ 769.897704][ T8702] team1: entered allmulticast mode [ 769.897819][ T8702] 8021q: adding VLAN 0 to HW filter on device team1 [ 771.211168][ T8736] loop8: detected capacity change from 0 to 1024 [ 771.211767][ T8736] EXT4-fs: Ignoring removed oldalloc option [ 771.211791][ T8736] EXT4-fs: Ignoring removed oldalloc option [ 771.212147][ T8736] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 771.244181][ T8736] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.548546][ T8638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 773.461661][ T5492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.254631][ T8793] : renamed from bond0 (while UP) [ 774.775361][ T8829] : renamed from bond0 (while UP) [ 775.444627][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.444777][ T8831] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.492903][ T8831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.506082][ T8831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.608911][ T8831] bond1: left promiscuous mode [ 775.613952][T22673] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.614246][T22673] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.614380][T22673] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.614628][T22673] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.973269][ T8867] loop6: detected capacity change from 0 to 512 [ 775.984037][ T8867] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 775.984054][ T8867] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 776.007779][ T8867] EXT4-fs (loop6): 1 truncate cleaned up [ 776.008333][ T8867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.292049][T27204] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.479494][ T8883] 9pnet_fd: p9_fd_create_unix (8883): problem connecting socket: ./proc: -111 [ 776.624520][ T8893] bridge0: port 3(vlan2) entered disabled state [ 776.624593][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.624769][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.681291][ T8893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.692739][ T8893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.818492][ T8893] geneve3: left allmulticast mode [ 776.850547][ T8893] bond10: left promiscuous mode [ 776.851016][ T8893] team1: left promiscuous mode [ 776.851034][ T8893] team1: left allmulticast mode [ 776.876063][ T3494] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.876110][ T3494] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 776.876194][ T3494] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 776.876251][ T3494] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.876293][ T3494] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 776.876322][ T3494] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 776.876364][ T3494] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.876448][ T3494] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 776.876478][ T3494] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 776.876570][ T3494] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.876600][ T3494] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 776.876709][ T3494] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 777.045386][ T8904] tipc: Started in network mode [ 777.045422][ T8904] tipc: Node identity fab293f8f636, cluster identity 4711 [ 777.045467][ T8904] tipc: Enabled bearer , priority 0 [ 777.045754][ T8904] syzkaller0: entered promiscuous mode [ 777.045774][ T8904] syzkaller0: entered allmulticast mode [ 777.092782][ T30] audit: type=1326 audit(1700005303.490:10954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8905 comm="syz.6.12849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa267c1fb19 code=0x0 [ 777.862417][ T8903] tipc: Resetting bearer [ 777.876595][ T8903] tipc: Disabling bearer [ 777.992115][ T8927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.993021][ T8927] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.009743][ T8927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.029816][ T8927] veth0_to_team: left promiscuous mode [ 778.033465][ T8927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.036737][ T8927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.044424][ T8927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 778.044495][ T8927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 778.049310][ T8927] veth1_vlan: left promiscuous mode [ 778.050862][ T8927] veth0_vlan: left promiscuous mode [ 778.056825][ T8927] veth0_vlan: entered promiscuous mode [ 778.062899][ T8927] veth1_vlan: entered promiscuous mode [ 778.090271][ T8927] veth1_macvtap: left promiscuous mode [ 778.093752][ T8927] veth0_macvtap: left promiscuous mode [ 778.097306][ T8927] veth0_macvtap: entered promiscuous mode [ 778.101046][ T8927] veth1_macvtap: entered promiscuous mode [ 778.123455][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 778.129918][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 778.140217][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 778.142501][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.176593][ T8939] loop7: detected capacity change from 0 to 512 [ 778.179094][ T8939] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 778.180634][ T8939] EXT4-fs (loop7): 1 truncate cleaned up [ 778.196059][ T8927] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 778.212524][ T8939] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.263515][ T8927] hsr2: Slave A (netdevsim1) is not up; please bring it up to get a fully working HSR network [ 778.274312][ T8927] hsr2: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 778.274552][ T8927] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 778.296368][ T8927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 778.299205][ T8927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 778.301414][ T8927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 778.325843][ T8927] 8021q: adding VLAN 0 to HW filter on device bond4 [ 778.328130][ T8927] 8021q: adding VLAN 0 to HW filter on device bond5 [ 778.330320][ T8927] 8021q: adding VLAN 0 to HW filter on device bond6 [ 778.332429][ T8927] 8021q: adding VLAN 0 to HW filter on device bond7 [ 778.342810][ T8927] veth0_to_team: entered promiscuous mode [ 778.347141][ T8927] 8021q: adding VLAN 0 to HW filter on device bond8 [ 778.357474][ T8927] 8021q: adding VLAN 0 to HW filter on device bond9 [ 778.395368][ T5604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.425972][ T8927] 8021q: adding VLAN 0 to HW filter on device bond10 [ 778.426878][ T8927] 8021q: adding VLAN 0 to HW filter on device team1 [ 778.438601][T22706] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.438743][T22706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.442840][T22706] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.442938][T22706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.555854][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.556012][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.609854][ T8941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.615317][ T8941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.666316][ T8941] ip6gre1: left allmulticast mode [ 778.683342][ T8941] bond1: left promiscuous mode [ 778.688597][ T8941] team1: left promiscuous mode [ 778.688628][ T8941] team1: left allmulticast mode [ 778.694010][T22673] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.694051][T22673] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.694088][T22673] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 778.694700][T22695] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.694739][T22695] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.694776][T22695] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 778.695093][T22695] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 778.698595][T22706] bridge0: port 3(vlan2) entered blocking state [ 778.698649][T22706] bridge0: port 3(vlan2) entered forwarding state [ 778.784152][T22695] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.784197][T22695] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.784258][T22695] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 778.785440][T22695] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.785542][T22695] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.785636][T22695] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 778.786208][T22695] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.786863][ T3494] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.863738][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 778.895915][ T8955] loop7: detected capacity change from 0 to 512 [ 778.896597][ T8955] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 778.896616][ T8955] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 778.897944][ T8955] EXT4-fs (loop7): 1 truncate cleaned up [ 778.898259][ T8955] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.904456][ T3494] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.904601][ T3494] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.035101][ T8959] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 779.035119][ T8959] block device autoloading is deprecated and will be removed. [ 779.063680][ T8959] md: could not open device unknown-block(1,6). [ 779.063768][ T8959] md: md_import_device returned -6 [ 779.104151][ T8959] md: could not open device unknown-block(1,7). [ 779.104211][ T8959] md: md_import_device returned -6 [ 779.150411][ T5604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.462127][ T8983] 8021q: adding VLAN 0 to HW filter on device .` [ 780.476362][ T8983] veth0_to_team: left promiscuous mode [ 780.499386][ T8983] veth1_vlan: left promiscuous mode [ 780.499946][ T8983] veth0_vlan: left promiscuous mode [ 780.501239][ T8983] veth0_vlan: entered promiscuous mode [ 780.502355][ T8983] veth1_vlan: entered promiscuous mode [ 780.506373][ T8983] veth1_macvtap: left promiscuous mode [ 780.507719][ T8983] veth0_macvtap: left promiscuous mode [ 780.509692][ T8983] veth0_macvtap: entered promiscuous mode [ 780.511439][ T8983] veth1_macvtap: entered promiscuous mode [ 780.521150][ T8983] 8021q: adding VLAN 0 to HW filter on device eth0 [ 780.523125][ T8983] 8021q: adding VLAN 0 to HW filter on device eth1 [ 780.526703][ T8983] 8021q: adding VLAN 0 to HW filter on device eth2 [ 780.527546][ T8983] 8021q: adding VLAN 0 to HW filter on device eth3 [ 780.530765][ T8983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 780.619951][ T8983] 8021q: adding VLAN 0 to HW filter on device  [ 780.624591][ T8983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 780.645514][ T4426] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.720828][ T8983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 780.765672][ T8983] 8021q: adding VLAN 0 to HW filter on device bond4 [ 780.769200][ T8983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 780.772814][ T8983] 8021q: adding VLAN 0 to HW filter on device bond6 [ 780.790367][ T8983] 8021q: adding VLAN 0 to HW filter on device bond7 [ 780.795072][ T8983] veth0_to_team: entered promiscuous mode [ 780.799221][ T8983] 8021q: adding VLAN 0 to HW filter on device bond8 [ 780.804977][ T4426] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.811157][ T8983] 8021q: adding VLAN 0 to HW filter on device bond9 [ 780.817427][ T8983] 8021q: adding VLAN 0 to HW filter on device bond10 [ 780.859905][ T8983] bond11: left promiscuous mode [ 780.860018][ T8983] 8021q: adding VLAN 0 to HW filter on device bond11 [ 780.920784][T22706] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.920915][T22706] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.960279][ T8928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 781.122578][ T8992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.128644][ T8992] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.138194][ T8992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.158878][ T9001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 781.158900][ T9001] block device autoloading is deprecated and will be removed. [ 781.198838][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.200359][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.205994][ T9001] md: could not open device unknown-block(1,14). [ 781.206196][ T9001] md: md_import_device returned -6 [ 781.211266][ T8992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 781.211358][ T8992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 781.222305][ T8992] veth1_vlan: left promiscuous mode [ 781.226247][ T8992] veth0_vlan: left promiscuous mode [ 781.229569][ T8992] veth0_vlan: entered promiscuous mode [ 781.233322][ T8992] veth1_vlan: entered promiscuous mode [ 781.241082][ T8992] veth1_macvtap: left promiscuous mode [ 781.242224][ T8992] veth0_macvtap: left promiscuous mode [ 781.244177][ T9001] md: could not open device unknown-block(1,15). [ 781.244367][ T9001] md: md_import_device returned -6 [ 781.264207][ T8992] veth0_macvtap: entered promiscuous mode [ 781.265766][ T8992] veth1_macvtap: entered promiscuous mode [ 781.271846][ T8992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 781.290335][ T8992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 781.292497][ T8992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 781.332339][ T8992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 781.363208][ T8992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.370988][ T8992] 8021q: adding VLAN 0 to HW filter on device team1 [ 781.388420][T22706] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.388454][T22706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.391718][T22706] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.391830][T22706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.496120][T22673] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 781.556064][T22673] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.561355][ T9016] No source specified [ 781.577288][ T367] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.577398][ T367] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.577488][ T367] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.649188][ T9024] loop7: detected capacity change from 0 to 512 [ 781.663488][ T9024] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.12895: Directory hole found for htree index block 0 [ 781.663527][ T9024] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 781.676403][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 781.676425][ C1] EXT4-fs (loop7): initial error at time 1700005308: dx_probe:791: inode 2 [ 781.676450][ C1] EXT4-fs (loop7): last error at time 1700005308: dx_probe:791: inode 2 [ 781.709648][ T9024] EXT4-fs (loop7): Remounting filesystem read-only [ 781.709712][ T9024] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 781.710170][ T9024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.749066][ T9024] EXT4-fs (loop7): shut down requested (2) [ 781.754326][ T3356] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.829518][ T9028] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 781.829547][ T9028] block device autoloading is deprecated and will be removed. [ 781.960118][ T5604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.984467][ T9028] md: could not open device unknown-block(1,16). [ 781.984536][ T9028] md: md_import_device returned -6 [ 782.008876][ T30] audit: type=1326 audit(1700005308.410:10955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.7.12898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f759cbdfb19 code=0x0 [ 782.013855][ T9029] md: could not open device unknown-block(1,17). [ 782.013913][ T9029] md: md_import_device returned -6 [ 782.120153][ T9035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12899'. [ 782.120293][ T9035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12899'. [ 782.137228][ T9035] ifb1: entered promiscuous mode [ 782.138635][ T9035] ifb0: entered promiscuous mode [ 782.504388][ T9054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.506985][ T9054] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.511643][ T9054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.540254][ T30] audit: type=1400 audit(1700005308.940:10956): avc: denied { write } for pid=9045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.613991][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 782.616875][ T30] audit: type=1400 audit(1700005309.020:10957): avc: denied { write } for pid=9065 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.622129][ T9054] veth0_to_team: left promiscuous mode [ 782.675005][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.678145][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.687810][ T9054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 782.687885][ T9054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 782.718344][ T9054] veth1_vlan: left promiscuous mode [ 782.727183][ T9054] veth0_vlan: left promiscuous mode [ 782.728441][ T9054] veth0_vlan: entered promiscuous mode [ 782.729943][ T9054] veth1_vlan: entered promiscuous mode [ 782.742354][ T9054] veth1_macvtap: left promiscuous mode [ 782.750447][ T9054] veth0_macvtap: left promiscuous mode [ 782.769734][ T9054] veth0_macvtap: entered promiscuous mode [ 782.770434][ T9054] veth1_macvtap: entered promiscuous mode [ 782.789691][ T9054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 782.790725][ T9054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 782.791505][ T9054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 782.792281][ T9054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 782.793488][ T9054] veth0_to_team: entered promiscuous mode [ 782.848393][ T9054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 782.860817][T22706] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.860932][T22706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.878424][T22706] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.878457][T22706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.964845][T22673] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 782.976762][T22706] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.976917][T22706] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.977080][T22706] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.977191][T22706] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.042917][ T9063] rxe_eth0 speed is unknown, defaulting to 1000 [ 783.097911][ T9085] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 783.097930][ T9085] block device autoloading is deprecated and will be removed. [ 783.144452][ T9085] md: could not open device unknown-block(1,10). [ 783.144518][ T9085] md: md_import_device returned -6 [ 783.175109][ T9085] md: could not open device unknown-block(1,11). [ 783.175178][ T9085] md: md_import_device returned -6 [ 783.499322][ T9110] loop6: detected capacity change from 0 to 512 [ 783.517231][ T9110] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.12920: Directory hole found for htree index block 0 [ 783.517290][ T9110] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 783.517512][ T9110] EXT4-fs (loop6): Remounting filesystem read-only [ 783.517529][ T9110] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 783.517906][ T9110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.534868][ T9110] EXT4-fs (loop6): shut down requested (2) [ 783.595778][T27204] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.632906][ T9115] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12922'. [ 783.633019][ T9115] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12922'. [ 783.857804][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.857954][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.929318][ T9121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.936773][ T9121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.055805][ T9124] 8021q: adding VLAN 0 to HW filter on device  [ 784.058037][ T9124] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.086598][ T9124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.136998][ T9124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.151268][ T9124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.161263][ T9124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 784.161291][ T9124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 784.200248][ T9124] veth1_vlan: left promiscuous mode [ 784.200912][ T9124] veth0_vlan: left promiscuous mode [ 784.202109][ T9124] veth0_vlan: entered promiscuous mode [ 784.203508][ T9124] veth1_vlan: entered promiscuous mode [ 784.234919][ T9124] veth1_macvtap: left promiscuous mode [ 784.235697][ T9124] veth0_macvtap: left promiscuous mode [ 784.236220][ T9124] veth0_macvtap: entered promiscuous mode [ 784.237377][ T9124] veth1_macvtap: entered promiscuous mode [ 784.240419][ T9124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 784.241352][ T9124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.275552][ T9124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 784.289956][ T9124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 784.291424][ T9124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 784.309548][ T9124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 784.342415][ T9124] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 784.343526][ T9124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 784.361789][ T9124] bond4: left promiscuous mode [ 784.362073][ T9124] 8021q: adding VLAN 0 to HW filter on device bond4 [ 784.413844][T27134] bond_slave_0: entered promiscuous mode [ 784.413875][T27134] bond_slave_1: entered promiscuous mode [ 784.417734][T22706] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.417783][T22706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.420168][T22706] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.420212][T22706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.481422][ T9162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12935'. [ 784.481575][ T9162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12935'. [ 784.585390][T22695] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 784.667141][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.667288][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.671385][ T9170] bond_slave_0: left promiscuous mode [ 784.671419][ T9170] bond_slave_1: left promiscuous mode [ 784.737087][ T9170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.739772][ T9170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.853863][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 784.998757][ T9175] 8021q: adding VLAN 0 to HW filter on device  [ 785.011448][ T9175] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.030805][ T9175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.062771][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.062827][ T9175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.080953][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.081035][ T9175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.106904][ T9175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.108763][ T9175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.133445][ T9175] veth1_vlan: left promiscuous mode [ 785.140499][ T9175] veth0_vlan: left promiscuous mode [ 785.142085][ T9175] veth0_vlan: entered promiscuous mode [ 785.156350][ T9175] veth1_vlan: entered promiscuous mode [ 785.160035][ T9175] veth1_macvtap: left promiscuous mode [ 785.160642][ T9175] veth0_macvtap: left promiscuous mode [ 785.161808][ T9175] veth0_macvtap: entered promiscuous mode [ 785.163061][ T9175] veth1_macvtap: entered promiscuous mode [ 785.196260][ T9175] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 785.197053][ T9175] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 785.197777][ T9175] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.198689][ T9175] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 785.199799][ T9175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 785.240482][ T9175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 785.274224][ T9175] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 785.275236][ T9175] 8021q: adding VLAN 0 to HW filter on device bond3 [ 785.278734][ T9175] 8021q: adding VLAN 0 to HW filter on device bond4 [ 785.305791][ T3384] bond_slave_0: entered promiscuous mode [ 785.305817][ T3384] bond_slave_1: entered promiscuous mode [ 785.333929][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 785.968003][ T9202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12951'. [ 785.968164][ T9202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12951'. [ 786.049350][ T3494] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 786.136314][ T9207] rxe_eth0 speed is unknown, defaulting to 1000 [ 786.426823][ T9221] bridge0: port 3(vlan2) entered disabled state [ 786.426956][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.427098][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.532846][ T9221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.545768][ T9221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.753910][ T9223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.754909][ T9223] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.757761][ T9223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.766982][ T9223] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.767124][ T9223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.772131][ T9223] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.772223][ T9223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.781745][ T9223] veth0_to_team: left promiscuous mode [ 786.784552][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 786.798540][ T9223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.801782][ T9223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.822497][ T9223] veth1_vlan: left promiscuous mode [ 786.824500][ T9223] veth0_vlan: left promiscuous mode [ 786.827790][ T9223] veth0_vlan: entered promiscuous mode [ 786.835103][ T9223] veth1_vlan: entered promiscuous mode [ 786.845143][ T9223] veth1_macvtap: left promiscuous mode [ 786.846570][ T9223] veth0_macvtap: left promiscuous mode [ 786.850374][ T9223] veth0_macvtap: entered promiscuous mode [ 786.853071][ T9223] veth1_macvtap: entered promiscuous mode [ 786.881140][ T9223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 786.889499][ T9223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 786.895443][ T9223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 786.898423][ T9223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 786.902050][ T9223] bridge0: port 3(vlan2) entered blocking state [ 786.902157][ T9223] bridge0: port 3(vlan2) entered forwarding state [ 786.970982][ T9223] hsr2: Slave A (netdevsim1) is not up; please bring it up to get a fully working HSR network [ 786.971008][ T9223] hsr2: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 786.971217][ T9223] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 786.979721][ T9223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 786.988519][ T9223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 786.996417][ T9223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 787.007831][ T9223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 787.018920][ T9223] 8021q: adding VLAN 0 to HW filter on device bond5 [ 787.031480][ T9223] 8021q: adding VLAN 0 to HW filter on device bond6 [ 787.045263][ T9223] 8021q: adding VLAN 0 to HW filter on device bond7 [ 787.046835][ T9223] veth0_to_team: entered promiscuous mode [ 787.048187][ T9223] 8021q: adding VLAN 0 to HW filter on device bond8 [ 787.051891][ T9223] 8021q: adding VLAN 0 to HW filter on device bond9 [ 787.122302][ T9223] 8021q: adding VLAN 0 to HW filter on device bond10 [ 787.123379][ T9223] 8021q: adding VLAN 0 to HW filter on device team1 [ 787.178921][ T3494] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 787.251906][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12965'. [ 787.252020][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12965'. [ 787.447631][ T9253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12983'. [ 787.447728][ T9253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12983'. [ 787.479224][ T9255] rxe_eth0 speed is unknown, defaulting to 1000 [ 787.574902][ T9260] loop6: detected capacity change from 0 to 164 [ 787.615357][ T9258] macvlan0: entered promiscuous mode [ 787.904868][ T9270] FAULT_INJECTION: forcing a failure. [ 787.904868][ T9270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.904953][ T9270] CPU: 1 UID: 0 PID: 9270 Comm: syz.5.12978 Not tainted syzkaller #0 PREEMPT(lazy) [ 787.904982][ T9270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 787.905073][ T9270] Call Trace: [ 787.905080][ T9270] [ 787.905088][ T9270] __dump_stack+0x1d/0x30 [ 787.905119][ T9270] dump_stack_lvl+0x95/0xd0 [ 787.905148][ T9270] dump_stack+0x15/0x1b [ 787.905232][ T9270] should_fail_ex+0x259/0x270 [ 787.905337][ T9270] should_fail+0xb/0x20 [ 787.905364][ T9270] should_fail_usercopy+0x1a/0x20 [ 787.905473][ T9270] _copy_to_user+0x20/0xa0 [ 787.905505][ T9270] inotify_read+0x278/0x6b0 [ 787.905564][ T9270] ? __pfx_woken_wake_function+0x10/0x10 [ 787.905652][ T9270] ? __pfx_inotify_read+0x10/0x10 [ 787.905699][ T9270] vfs_readv+0x417/0x6d0 [ 787.905778][ T9270] do_readv+0xe9/0x210 [ 787.905834][ T9270] __x64_sys_readv+0x45/0x50 [ 787.905861][ T9270] x64_sys_call+0x1b4b/0x2550 [ 787.905897][ T9270] do_syscall_64+0x116/0x380 [ 787.905925][ T9270] ? clear_bhb_loop+0x70/0xc0 [ 787.905957][ T9270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.906018][ T9270] RIP: 0033:0x7fd48502fb19 [ 787.906047][ T9270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.906078][ T9270] RSP: 002b:00007fd483a87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 787.906107][ T9270] RAX: ffffffffffffffda RBX: 00007fd4852b5fa0 RCX: 00007fd48502fb19 [ 787.906202][ T9270] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000003 [ 787.906220][ T9270] RBP: 00007fd4850c7b70 R08: 0000000000000000 R09: 0000000000000000 [ 787.906238][ T9270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.906255][ T9270] R13: 00007fd4852b6038 R14: 00007fd4852b5fa0 R15: 00007ffe671bef68 [ 787.906286][ T9270] [ 789.107247][ T9291] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12986'. [ 789.107427][ T9291] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12986'. [ 789.411629][ T9295] macvlan0: entered promiscuous mode [ 789.479594][ T9308] loop5: detected capacity change from 0 to 164 [ 789.622975][ T30] audit: type=1326 audit(1700005316.020:10958): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.7.12996" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f759cbdfb19 code=0x0 [ 789.742012][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 790.252649][ T9321] FAULT_INJECTION: forcing a failure. [ 790.252649][ T9321] name fail_futex, interval 1, probability 0, space 0, times 0 [ 790.252687][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.8.12999 Not tainted syzkaller #0 PREEMPT(lazy) [ 790.252722][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 790.252749][ T9321] Call Trace: [ 790.252810][ T9321] [ 790.252820][ T9321] __dump_stack+0x1d/0x30 [ 790.252849][ T9321] dump_stack_lvl+0x95/0xd0 [ 790.252872][ T9321] dump_stack+0x15/0x1b [ 790.252900][ T9321] should_fail_ex+0x259/0x270 [ 790.252983][ T9321] should_fail+0xb/0x20 [ 790.253021][ T9321] get_futex_key+0x12c/0xc40 [ 790.253057][ T9321] futex_wait_setup+0x49/0x3e0 [ 790.253161][ T9321] ? __rb_insert_augmented+0x76/0x2c0 [ 790.253190][ T9321] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 790.253217][ T9321] ? hrtimer_active+0xe7/0x110 [ 790.253266][ T9321] __futex_wait+0xb2/0x2a0 [ 790.253337][ T9321] ? __pfx_futex_wake_mark+0x10/0x10 [ 790.253478][ T9321] futex_wait+0x98/0x1c0 [ 790.253527][ T9321] do_futex+0x391/0x460 [ 790.253564][ T9321] __se_sys_futex+0x2f6/0x370 [ 790.253653][ T9321] ? xfd_validate_state+0x45/0xf0 [ 790.253699][ T9321] __x64_sys_futex+0x78/0x90 [ 790.253741][ T9321] x64_sys_call+0x22e2/0x2550 [ 790.253776][ T9321] do_syscall_64+0x116/0x380 [ 790.253803][ T9321] ? clear_bhb_loop+0x70/0xc0 [ 790.253833][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.253873][ T9321] RIP: 0033:0x7f995b79fb19 [ 790.253889][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.253910][ T9321] RSP: 002b:00007f995a1ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 790.253934][ T9321] RAX: ffffffffffffffda RBX: 00007f995ba25fa8 RCX: 00007f995b79fb19 [ 790.253955][ T9321] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f995ba25fa8 [ 790.253974][ T9321] RBP: 00007f995ba25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 790.253993][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.254141][ T9321] R13: 00007f995ba26038 R14: 00007ffc2435df60 R15: 00007ffc2435e048 [ 790.254221][ T9321] [ 790.563522][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13002'. [ 790.563564][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13002'. [ 790.595867][ T9330] macvlan0: entered promiscuous mode [ 790.687957][ T9339] ip_tables: iptables: counters copy to user failed while replacing table [ 791.014425][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 791.588683][ T9354] loop7: detected capacity change from 0 to 164 [ 791.695035][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.695203][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.760446][ T30] audit: type=1326 audit(1700005318.160:10959): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.8.13014" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f995b79fb19 code=0x0 [ 791.783796][ T9352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.788284][ T9352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.891244][ T9355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.898320][ T9355] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.910652][ T9355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.942238][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.942283][ T9355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.946299][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.946518][ T9355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.957434][ T9355] veth0_to_team: left promiscuous mode [ 791.972624][ T9355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.977376][ T9355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.998273][ T9355] veth1_vlan: left promiscuous mode [ 791.999070][ T9355] veth0_vlan: left promiscuous mode [ 792.000877][ T9355] veth0_vlan: entered promiscuous mode [ 792.006463][ T9355] veth1_vlan: entered promiscuous mode [ 792.006874][ T9355] macvlan0: left promiscuous mode [ 792.016887][ T9355] veth1_macvtap: left promiscuous mode [ 792.018893][ T9355] veth0_macvtap: left promiscuous mode [ 792.021462][ T9355] veth0_macvtap: entered promiscuous mode [ 792.025002][ T9355] veth1_macvtap: entered promiscuous mode [ 792.032074][ T9355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 792.042580][ T9355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 792.045313][ T9355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 792.047775][ T9355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 792.051358][ T9355] veth0_to_team: entered promiscuous mode [ 792.101067][ T9355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 792.227623][T22706] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 792.349121][ T9366] nr0: port 1(veth1_virt_wifi) entered blocking state [ 792.349160][ T9366] nr0: port 1(veth1_virt_wifi) entered disabled state [ 792.349336][ T9366] veth1_virt_wifi: entered allmulticast mode [ 792.350049][ T9366] veth1_virt_wifi: entered promiscuous mode [ 792.616100][ T30] audit: type=1400 audit(1700005319.010:10960): avc: denied { write } for pid=9370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.629447][ T9382] macvlan0: entered promiscuous mode [ 792.670405][ T30] audit: type=1400 audit(1700005319.070:10961): avc: denied { write } for pid=9383 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.933688][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 793.321895][ T30] audit: type=1400 audit(1700005319.720:10962): avc: denied { write } for pid=9386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 793.356495][ T30] audit: type=1400 audit(1700005319.760:10963): avc: denied { write } for pid=9397 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 793.575108][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 796.213973][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 797.195210][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13027'. [ 797.322671][ T9426] loop8: detected capacity change from 0 to 164 [ 797.423699][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 797.595591][ T9431] bridge0: port 3(vlan2) entered disabled state [ 797.595668][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.595784][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.808590][ T9431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.811290][ T9431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.038236][ T9432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.039157][ T9432] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.061422][ T9432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.100597][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.100645][ T9432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.118696][ T30] audit: type=1326 audit(1700005324.520:10964): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.3.13035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257dcafb19 code=0x0 [ 798.150602][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.150669][ T9432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.179104][ T9432] veth0_to_team: left promiscuous mode [ 798.199336][ T9432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.211655][ T9432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.226498][ T9432] veth1_vlan: left promiscuous mode [ 798.227042][ T9432] veth0_vlan: left promiscuous mode [ 798.228460][ T9432] veth0_vlan: entered promiscuous mode [ 798.230706][ T9432] veth1_vlan: entered promiscuous mode [ 798.256796][ T9432] veth1_macvtap: left promiscuous mode [ 798.257576][ T9432] veth0_macvtap: left promiscuous mode [ 798.258582][ T9432] veth0_macvtap: entered promiscuous mode [ 798.259616][ T9432] veth1_macvtap: entered promiscuous mode [ 798.288661][ T9432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.292068][ T9432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 798.295613][ T9432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 798.297213][ T30] audit: type=1400 audit(1700005324.690:10965): avc: denied { mounton } for pid=9447 comm="syz.8.13039" path="/file0" dev="autofs" ino=126438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 798.297286][ T9432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 798.297384][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13040'. [ 798.312203][ T9432] bridge0: port 3(vlan2) entered blocking state [ 798.312381][ T9432] bridge0: port 3(vlan2) entered forwarding state [ 798.429185][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13043'. [ 798.445255][ T9432] hsr2: Slave A (netdevsim1) is not up; please bring it up to get a fully working HSR network [ 798.445277][ T9432] hsr2: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 798.445417][ T9432] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 798.448528][ T9432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 798.450896][ T9432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 798.458520][ T9432] 8021q: adding VLAN 0 to HW filter on device bond3 [ 798.468227][ T9432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 798.482326][ T9432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 798.492176][ T9432] 8021q: adding VLAN 0 to HW filter on device bond6 [ 798.506368][ T9432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 798.510537][ T9432] veth0_to_team: entered promiscuous mode [ 798.514314][ T9432] 8021q: adding VLAN 0 to HW filter on device bond8 [ 798.522700][ T9432] 8021q: adding VLAN 0 to HW filter on device bond9 [ 798.586648][ T9432] 8021q: adding VLAN 0 to HW filter on device bond10 [ 798.587621][ T9432] 8021q: adding VLAN 0 to HW filter on device team1 [ 798.640736][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13043'. [ 798.661425][T22713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 798.714863][ T9468] loop5: detected capacity change from 0 to 164 [ 798.787664][ T9466] bridge0: port 3(vlan2) entered disabled state [ 798.787769][ T9466] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.787878][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.954344][ T9466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.956904][ T9466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.304330][ T9482] FAULT_INJECTION: forcing a failure. [ 799.304330][ T9482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.304453][ T9482] CPU: 0 UID: 0 PID: 9482 Comm: syz.8.13050 Not tainted syzkaller #0 PREEMPT(lazy) [ 799.304487][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 799.304513][ T9482] Call Trace: [ 799.304523][ T9482] [ 799.304535][ T9482] __dump_stack+0x1d/0x30 [ 799.304578][ T9482] dump_stack_lvl+0x95/0xd0 [ 799.304608][ T9482] dump_stack+0x15/0x1b [ 799.304637][ T9482] should_fail_ex+0x259/0x270 [ 799.304678][ T9482] should_fail+0xb/0x20 [ 799.304753][ T9482] should_fail_usercopy+0x1a/0x20 [ 799.304861][ T9482] _copy_from_iter+0xcc/0xe80 [ 799.305021][ T9482] ? __sk_mem_schedule+0x80/0xc0 [ 799.305055][ T9482] ? skb_page_frag_refill+0x155/0x240 [ 799.305105][ T9482] tcp_sendmsg_locked+0x16bc/0x2b00 [ 799.305198][ T9482] ? __pfx_tcp_sendmsg+0x10/0x10 [ 799.305234][ T9482] ? __pfx_inet_sendmsg+0x10/0x10 [ 799.305309][ T9482] tcp_sendmsg+0x2f/0x50 [ 799.305343][ T9482] inet_sendmsg+0x76/0xd0 [ 799.305451][ T9482] __sys_sendto+0x3c3/0x480 [ 799.305536][ T9482] __x64_sys_sendto+0x76/0x90 [ 799.305583][ T9482] x64_sys_call+0x200c/0x2550 [ 799.305691][ T9482] do_syscall_64+0x116/0x380 [ 799.305719][ T9482] ? clear_bhb_loop+0x70/0xc0 [ 799.305751][ T9482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.305816][ T9482] RIP: 0033:0x7f995b79fb19 [ 799.305836][ T9482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.305877][ T9482] RSP: 002b:00007f995a1ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 799.305906][ T9482] RAX: ffffffffffffffda RBX: 00007f995ba25fa0 RCX: 00007f995b79fb19 [ 799.305977][ T9482] RDX: ffffffffffffff94 RSI: 0000200000000500 RDI: 0000000000000004 [ 799.305997][ T9482] RBP: 00007f995b837b70 R08: 0000000000000000 R09: 0000000000000000 [ 799.306014][ T9482] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 799.306030][ T9482] R13: 00007f995ba26038 R14: 00007f995ba25fa0 R15: 00007ffc2435e048 [ 799.306059][ T9482] [ 799.533829][ T9469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.534958][ T9469] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.537729][ T9469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.566615][ T9469] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.566651][ T9469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.568487][ T9469] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.568527][ T9469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.571624][ T9469] veth0_to_team: left promiscuous mode [ 799.622680][ T9469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.647840][ T9469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.667826][ T9469] veth1_vlan: left promiscuous mode [ 799.668717][ T9469] veth0_vlan: left promiscuous mode [ 799.672313][ T9469] veth0_vlan: entered promiscuous mode [ 799.682747][ T9469] veth1_vlan: entered promiscuous mode [ 799.702773][ T9469] veth1_macvtap: left promiscuous mode [ 799.703464][ T9469] veth0_macvtap: left promiscuous mode [ 799.707296][ T9469] veth0_macvtap: entered promiscuous mode [ 799.709267][ T9469] veth1_macvtap: entered promiscuous mode [ 799.717550][ T9469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 799.719712][ T9469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 799.721783][ T9469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 799.726926][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13057'. [ 799.729604][ T9469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 799.732930][ T9469] bridge0: port 3(vlan2) entered blocking state [ 799.733033][ T9469] bridge0: port 3(vlan2) entered forwarding state [ 799.780614][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13055'. [ 799.816735][ T9469] hsr2: Slave A (netdevsim1) is not up; please bring it up to get a fully working HSR network [ 799.816762][ T9469] hsr2: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 799.816939][ T9469] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 799.819936][ T9469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 799.822725][ T9469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 799.828995][ T9469] 8021q: adding VLAN 0 to HW filter on device bond3 [ 799.843746][ T9469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 799.856321][ T9469] 8021q: adding VLAN 0 to HW filter on device bond5 [ 799.868948][ T9469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 799.878229][ T9469] 8021q: adding VLAN 0 to HW filter on device bond7 [ 799.881893][ T9469] veth0_to_team: entered promiscuous mode [ 799.889668][ T9469] 8021q: adding VLAN 0 to HW filter on device bond8 [ 799.899738][ T9469] 8021q: adding VLAN 0 to HW filter on device bond9 [ 799.957252][ T9469] 8021q: adding VLAN 0 to HW filter on device bond10 [ 799.958188][ T9469] 8021q: adding VLAN 0 to HW filter on device team1 [ 800.008709][T22706] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.009233][T22706] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.028137][T22706] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 800.054221][T22706] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.133971][ T9504] bridge0: port 3(vlan2) entered disabled state [ 800.134047][ T9504] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.134127][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.185741][ T9512] loop8: detected capacity change from 0 to 128 [ 800.207118][ T9512] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 800.208103][ T9512] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 800.245656][ T5492] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 800.279388][ T9504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.282340][ T9504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.335240][ T9520] loop8: detected capacity change from 0 to 164 [ 800.410314][ T9522] FAULT_INJECTION: forcing a failure. [ 800.410314][ T9522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.410352][ T9522] CPU: 0 UID: 0 PID: 9522 Comm: syz.5.13065 Not tainted syzkaller #0 PREEMPT(lazy) [ 800.410447][ T9522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 800.410465][ T9522] Call Trace: [ 800.410474][ T9522] [ 800.410486][ T9522] __dump_stack+0x1d/0x30 [ 800.410521][ T9522] dump_stack_lvl+0x95/0xd0 [ 800.410602][ T9522] dump_stack+0x15/0x1b [ 800.410700][ T9522] should_fail_ex+0x259/0x270 [ 800.410742][ T9522] should_fail+0xb/0x20 [ 800.410824][ T9522] should_fail_usercopy+0x1a/0x20 [ 800.410872][ T9522] _copy_from_iter+0xcc/0xe80 [ 800.410907][ T9522] ? __pfx_tcp_leave_memory_pressure+0x10/0x10 [ 800.410945][ T9522] ? __sk_mem_raise_allocated+0x20a/0x960 [ 800.411078][ T9522] ? __sk_mem_schedule+0x80/0xc0 [ 800.411113][ T9522] tcp_sendmsg_locked+0x16bc/0x2b00 [ 800.411163][ T9522] ? __pfx_tcp_sendmsg+0x10/0x10 [ 800.411208][ T9522] ? __pfx_inet_sendmsg+0x10/0x10 [ 800.411312][ T9522] tcp_sendmsg+0x2f/0x50 [ 800.411348][ T9522] inet_sendmsg+0x76/0xd0 [ 800.411451][ T9522] __sys_sendto+0x3c3/0x480 [ 800.411529][ T9522] __x64_sys_sendto+0x76/0x90 [ 800.411621][ T9522] x64_sys_call+0x200c/0x2550 [ 800.411657][ T9522] do_syscall_64+0x116/0x380 [ 800.411683][ T9522] ? clear_bhb_loop+0x70/0xc0 [ 800.411716][ T9522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.411819][ T9522] RIP: 0033:0x7fd48502fb19 [ 800.411840][ T9522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.411870][ T9522] RSP: 002b:00007fd483a87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 800.411915][ T9522] RAX: ffffffffffffffda RBX: 00007fd4852b5fa0 RCX: 00007fd48502fb19 [ 800.411935][ T9522] RDX: ffffffffffffff94 RSI: 0000200000000500 RDI: 0000000000000004 [ 800.411954][ T9522] RBP: 00007fd4850c7b70 R08: 0000000000000000 R09: 0000000000000000 [ 800.411972][ T9522] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 800.411998][ T9522] R13: 00007fd4852b6038 R14: 00007fd4852b5fa0 R15: 00007ffe671bef68 [ 800.412023][ T9522] [ 800.654234][ T9524] loop5: detected capacity change from 0 to 1024 [ 800.692958][ T9524] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 800.744481][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.748122][ T9509] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.752509][ T9509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.785136][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.785180][ T9509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.803577][ T9524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.806098][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.806205][ T9509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.836465][ T9509] veth0_to_team: left promiscuous mode [ 800.841805][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.843496][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.849538][ T30] audit: type=1400 audit(1700005327.250:10966): avc: denied { accept } for pid=9527 comm="syz.8.13069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 800.891430][ T9509] veth1_vlan: left promiscuous mode [ 800.892157][ T9509] veth0_vlan: left promiscuous mode [ 800.904591][ T9509] veth0_vlan: entered promiscuous mode [ 800.907009][ T9509] veth1_vlan: entered promiscuous mode [ 800.910808][ T9509] veth1_macvtap: left promiscuous mode [ 800.911591][ T9509] veth0_macvtap: left promiscuous mode [ 800.912903][ T9509] veth0_macvtap: entered promiscuous mode [ 800.942840][ T9509] veth1_macvtap: entered promiscuous mode [ 800.952655][ T9509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 800.961036][ T9509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 800.961923][ T9509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 800.962732][ T9509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 800.978509][ T9509] bridge0: port 3(vlan2) entered blocking state [ 800.978552][ T9509] bridge0: port 3(vlan2) entered forwarding state [ 800.996695][ T4258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.077863][ T9509] hsr2: Slave A (netdevsim1) is not up; please bring it up to get a fully working HSR network [ 801.077935][ T9509] hsr2: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 801.078129][ T9509] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 801.082304][ T9509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 801.089120][ T9528] loop8: detected capacity change from 0 to 4096 [ 801.127791][ T9509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 801.130885][ T9509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 801.139687][ T9528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.161347][ T9509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 801.170558][ T9509] 8021q: adding VLAN 0 to HW filter on device bond5 [ 801.172217][ T5492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.173190][ T9509] 8021q: adding VLAN 0 to HW filter on device bond6 [ 801.201472][ T9509] 8021q: adding VLAN 0 to HW filter on device bond7 [ 801.202967][ T9509] veth0_to_team: entered promiscuous mode [ 801.207674][ T9509] 8021q: adding VLAN 0 to HW filter on device bond8 [ 801.216217][ T9509] 8021q: adding VLAN 0 to HW filter on device bond9 [ 801.276038][ T9509] 8021q: adding VLAN 0 to HW filter on device bond10 [ 801.276899][ T9509] 8021q: adding VLAN 0 to HW filter on device team1 [ 801.280890][ T9499] rxe_eth0 speed is unknown, defaulting to 1000 [ 801.343810][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13071'. [ 801.420735][ T9541] loop6: detected capacity change from 0 to 128 [ 801.468670][ T3494] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 801.533336][ T9546] loop6: detected capacity change from 0 to 256 [ 801.654665][T22713] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.659228][ T9556] loop8: detected capacity change from 0 to 164 [ 801.701680][ T9558] loop5: detected capacity change from 0 to 8192 [ 801.870419][ T9558] FAT-fs (loop5): FAT read failed (blocknr 1) [ 801.873419][ T9558] FAT-fs (loop5): unable to read inode block for updating (i_pos 1044) [ 801.895408][ T9558] FAT-fs (loop5): unable to read inode block for updating (i_pos 1044) [ 801.918073][ T4258] FAT-fs (loop5): Directory bread(block 65) failed [ 801.918110][ T4258] FAT-fs (loop5): Directory bread(block 66) failed [ 801.918135][ T4258] FAT-fs (loop5): Directory bread(block 67) failed [ 801.918160][ T4258] FAT-fs (loop5): Directory bread(block 68) failed [ 801.918185][ T4258] FAT-fs (loop5): Directory bread(block 69) failed [ 801.918210][ T4258] FAT-fs (loop5): Directory bread(block 70) failed [ 801.918267][ T4258] FAT-fs (loop5): Directory bread(block 71) failed [ 802.040990][ T9570] bridge0: port 3(vlan2) entered disabled state [ 802.041062][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.041228][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.129439][ T9575] IPVS: wlc: TCP 172.20.20.170:20000 - no destination available [ 802.204342][ T9570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.206967][ T9570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.351872][ T9580] set_capacity_and_notify: 1 callbacks suppressed [ 802.360475][ T9580] loop8: detected capacity change from 0 to 4096 [ 802.379343][ T9580] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.381824][ T9580] EXT4-fs (loop8): shut down requested (0) [ 802.421040][ T5492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.487060][ T9584] loop8: detected capacity change from 0 to 8192 [ 802.555184][ T5492] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 802.555293][ T5492] FAT-fs (loop8): Filesystem has been set read-only [ 802.559361][ T9571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.560444][ T9571] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.563517][ T9571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.625852][ T9571] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.625905][ T9571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.627875][ T9571] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.627905][ T9571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.631343][ T9571] veth0_to_team: left promiscuous mode [ 802.671428][ T9571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.673115][ T9571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.697885][ T9571] veth1_vlan: left promiscuous mode [ 802.698621][ T9571] veth0_vlan: left promiscuous mode [ 802.700301][ T9571] veth0_vlan: entered promiscuous mode [ 802.702639][ T9571] veth1_vlan: entered promiscuous mode [ 802.728274][ T9571] veth1_macvtap: left promiscuous mode [ 802.729118][ T9571] veth0_macvtap: left promiscuous mode [ 802.730337][ T9571] veth0_macvtap: entered promiscuous mode [ 802.731822][ T9571] veth1_macvtap: entered promiscuous mode [ 802.755855][ T9571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 802.762308][ T9571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 802.773006][ T9571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 802.777727][ T9571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 802.789693][ T9571] bridge0: port 3(vlan2) entered blocking state [ 802.789776][ T9571] bridge0: port 3(vlan2) entered forwarding state [ 802.861858][ T9571] hsr2: Slave A (netdevsim1) is not up; please bring it up to get a fully working HSR network [ 802.861943][ T9571] hsr2: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 802.862129][ T9571] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 802.871216][ T9571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 802.878088][ T9571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 802.885512][ T9571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 802.898104][ T9571] 8021q: adding VLAN 0 to HW filter on device bond4 [ 802.911778][ T9571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 802.922964][ T9571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 802.934209][ T9571] 8021q: adding VLAN 0 to HW filter on device bond7 [ 802.935695][ T9571] veth0_to_team: entered promiscuous mode [ 802.937134][ T9571] 8021q: adding VLAN 0 to HW filter on device bond8 [ 802.940187][ T9571] 8021q: adding VLAN 0 to HW filter on device bond9 [ 803.011124][ T9571] 8021q: adding VLAN 0 to HW filter on device bond10 [ 803.012101][ T9571] 8021q: adding VLAN 0 to HW filter on device team1 [ 803.035103][ T6509] FAT-fs (loop5): unable to read boot sector to mark fs as dirty [ 803.121980][T22713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 803.127690][ T9593] FAULT_INJECTION: forcing a failure. [ 803.127690][ T9593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.127727][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.7.13098 Not tainted syzkaller #0 PREEMPT(lazy) [ 803.127821][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 803.127919][ T9593] Call Trace: [ 803.127928][ T9593] [ 803.127940][ T9593] __dump_stack+0x1d/0x30 [ 803.127981][ T9593] dump_stack_lvl+0x95/0xd0 [ 803.128042][ T9593] dump_stack+0x15/0x1b [ 803.128137][ T9593] should_fail_ex+0x259/0x270 [ 803.128256][ T9593] should_fail+0xb/0x20 [ 803.128288][ T9593] should_fail_usercopy+0x1a/0x20 [ 803.128330][ T9593] _copy_to_user+0x20/0xa0 [ 803.128474][ T9593] bpf_mprog_query+0x1c6/0x560 [ 803.128529][ T9593] tcx_prog_query+0xc4/0x110 [ 803.128587][ T9593] bpf_prog_query+0x14e/0x160 [ 803.128620][ T9593] __sys_bpf+0x7b2/0xc50 [ 803.128652][ T9593] ? do_futex+0x300/0x460 [ 803.128699][ T9593] __x64_sys_bpf+0x69/0x80 [ 803.128726][ T9593] x64_sys_call+0xf26/0x2550 [ 803.128900][ T9593] do_syscall_64+0x116/0x380 [ 803.128984][ T9593] ? clear_bhb_loop+0x70/0xc0 [ 803.129128][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.129204][ T9593] RIP: 0033:0x7f759cbdfb19 [ 803.129258][ T9593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.129329][ T9593] RSP: 002b:00007f759b62f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 803.129395][ T9593] RAX: ffffffffffffffda RBX: 00007f759ce65fa0 RCX: 00007f759cbdfb19 [ 803.129480][ T9593] RDX: 0000000000000040 RSI: 0000200000001f80 RDI: 0000000000000010 [ 803.129531][ T9593] RBP: 00007f759cc77b70 R08: 0000000000000000 R09: 0000000000000000 [ 803.129573][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.129625][ T9593] R13: 00007f759ce66038 R14: 00007f759ce65fa0 R15: 00007fffa645e848 [ 803.129761][ T9593] [ 803.206578][ T367] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.206759][ T367] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.364308][ T367] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.364412][ T367] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.406626][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13107'. [ 803.446742][ T367] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.446791][ T367] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.498659][T22676] Bluetooth: hci0: Frame reassembly failed (-84) [ 803.518511][ T367] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.518634][ T367] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.531077][ T9609] rxe_eth0 speed is unknown, defaulting to 1000 [ 803.654872][ T367] bridge_slave_1: left allmulticast mode [ 803.654899][ T367] bridge_slave_1: left promiscuous mode [ 803.655000][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.655664][ T367] bridge_slave_0: left allmulticast mode [ 803.655684][ T367] bridge_slave_0: left promiscuous mode [ 803.655819][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.716459][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13112'. [ 803.822644][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.834087][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.835153][ T367] bond0 (unregistering): Released all slaves [ 803.837084][ T367] bond1 (unregistering): Released all slaves [ 803.850818][ T9617] rxe_eth0 speed is unknown, defaulting to 1000 [ 803.881579][ T367] tipc: Left network mode [ 803.893019][ T367] IPVS: stopping master sync thread 6792 ... [ 804.019918][ T367] hsr_slave_0: left promiscuous mode [ 804.020303][ T367] hsr_slave_1: left promiscuous mode [ 804.020681][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.020700][ T367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.021180][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.021198][ T367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.030910][ T367] veth1_macvtap: left promiscuous mode [ 804.030985][ T367] veth0_macvtap: left promiscuous mode [ 804.031356][ T367] veth1_vlan: left promiscuous mode [ 804.031488][ T367] veth0_vlan: left promiscuous mode [ 804.173427][ T30] audit: type=1400 audit(1700005330.570:10967): avc: denied { write } for pid=9629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.204178][ T367] team0 (unregistering): Port device team_slave_1 removed [ 804.207210][ T367] team0 (unregistering): Port device team_slave_0 removed [ 804.247084][ T30] audit: type=1400 audit(1700005330.650:10968): avc: denied { write } for pid=9641 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.276533][ T367] team0 (unregistering): Port device dummy0 removed [ 804.305709][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 804.456797][ T9609] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.456849][ T9609] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.456963][ T9609] bridge_slave_0: entered allmulticast mode [ 804.457459][ T9609] bridge_slave_0: entered promiscuous mode [ 804.495180][ T9609] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.495215][ T9609] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.495297][ T9609] bridge_slave_1: entered allmulticast mode [ 804.495900][ T9609] bridge_slave_1: entered promiscuous mode [ 804.524700][ T30] audit: type=1400 audit(1700005330.920:10969): avc: denied { write } for pid=9644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.559987][ T30] audit: type=1400 audit(1700005330.960:10970): avc: denied { write } for pid=9662 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.589200][ T9617] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.589233][ T9617] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.589352][ T9617] bridge_slave_0: entered allmulticast mode [ 804.589909][ T9617] bridge_slave_0: entered promiscuous mode [ 804.617868][ T9617] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.617911][ T9617] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.618142][ T9617] bridge_slave_1: entered allmulticast mode [ 804.618759][ T9617] bridge_slave_1: entered promiscuous mode [ 804.621593][ T3018] 8021q: adding VLAN 0 to HW filter on device eth13 [ 804.636365][ T367] IPVS: stop unused estimator thread 0... [ 804.672506][ T9609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.683194][ T9609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.715688][ T9609] team0: Port device team_slave_0 added [ 804.717671][ T9617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.718370][ T9609] team0: Port device team_slave_1 added [ 804.746906][ T9617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.772407][ T9609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.772427][ T9609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.772466][ T9609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.773064][ T9609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.773151][ T9609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.773181][ T9609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.777521][ T9617] team0: Port device team_slave_0 added [ 804.781227][ T9617] team0: Port device team_slave_1 added [ 804.861972][ T9617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.862019][ T9617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.862199][ T9617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.866993][ T9617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.867051][ T9617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.867164][ T9617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.962626][ T9617] hsr_slave_0: entered promiscuous mode [ 804.964089][ T9617] hsr_slave_1: entered promiscuous mode [ 804.964491][ T9617] debugfs: 'hsr0' already exists in 'hsr' [ 804.964543][ T9617] Cannot create hsr debugfs directory [ 804.970746][ T9609] hsr_slave_0: entered promiscuous mode [ 804.972346][ T9609] hsr_slave_1: entered promiscuous mode [ 804.972955][ T9609] debugfs: 'hsr0' already exists in 'hsr' [ 804.973004][ T9609] Cannot create hsr debugfs directory [ 805.031753][ T30] audit: type=1400 audit(1700005331.430:10971): avc: denied { write } for pid=9665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.074739][ T30] audit: type=1400 audit(1700005331.480:10972): avc: denied { write } for pid=9676 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.114405][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 805.116836][ T3018] 8021q: adding VLAN 0 to HW filter on device eth14 [ 805.220692][ T30] audit: type=1400 audit(1700005331.620:10973): avc: denied { write } for pid=9679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.257855][ T30] audit: type=1400 audit(1700005331.660:10974): avc: denied { write } for pid=9690 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.290575][ T3018] 8021q: adding VLAN 0 to HW filter on device eth15 [ 805.364144][ T9609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 805.367632][ T9609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 805.371394][ T9617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.371448][ T9617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.372976][ T9609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 805.389069][ T9609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 805.389609][ T9609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 805.413109][ T30] audit: type=1400 audit(1700005331.810:10975): avc: denied { write } for pid=9693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.456817][ T9609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.457651][ T9609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 805.459613][ T9609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.461421][ T30] audit: type=1400 audit(1700005331.860:10976): avc: denied { write } for pid=9704 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.515833][ T9617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.516018][ T9617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.555227][ T9609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.558569][ T9617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.558689][ T9617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.581840][ T8180] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 805.602896][ T9609] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.614075][ T9617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.614125][ T9617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.617640][T22713] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.617702][T22713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.621441][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.621476][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.718122][ T9617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 805.721295][ T9617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 805.742743][ T9617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 805.752915][ T9617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 805.766525][ T9609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.766874][ T9617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 805.769850][ T9617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.770281][ T9617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 805.772891][ T9617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.841658][ T9609] veth0_vlan: entered promiscuous mode [ 805.849296][ T9609] veth1_vlan: entered promiscuous mode [ 805.890374][ T9609] veth0_macvtap: entered promiscuous mode [ 805.898615][ T9617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.902188][ T9609] veth1_macvtap: entered promiscuous mode [ 805.924651][ T9609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.926178][ T9609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.952055][ T9617] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.962756][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.962797][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.981972][T22713] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.982075][T22713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.984428][ T367] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.015332][ T367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.071377][ T9757] netlink: 'syz.7.13122': attribute type 1 has an invalid length. [ 806.074302][ T367] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.079000][ T367] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.089272][ T9761] loop2: detected capacity change from 0 to 164 [ 806.107493][ T9757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.168568][ T9617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.217606][ T9617] veth0_vlan: entered promiscuous mode [ 806.223389][ T9617] veth1_vlan: entered promiscuous mode [ 806.261432][ T9617] veth0_macvtap: entered promiscuous mode [ 806.264983][ T9617] veth1_macvtap: entered promiscuous mode [ 806.277006][ T9617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.282036][ T9617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.304285][ T367] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.304682][ T367] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.304976][ T367] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.305222][ T367] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.398593][ T9773] ./dev/sda1: Can't lookup blockdev [ 806.568801][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.568971][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.644819][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.646639][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.648875][ T9806] ref_ctr increment failed for inode: 0x3d09 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888123816540 [ 806.732782][ T9816] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 806.845935][ T9798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.847109][ T9798] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.850259][ T9798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.853784][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 806.900623][ T9798] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.900671][ T9798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.924170][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.924215][ T9798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.933277][ T9798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.958775][ T9798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.974671][ T9798] veth1_vlan: left promiscuous mode [ 806.975427][ T9798] veth0_vlan: left promiscuous mode [ 806.977090][ T9798] veth0_vlan: entered promiscuous mode [ 806.981232][ T9798] veth1_vlan: entered promiscuous mode [ 806.998082][ T9798] veth1_macvtap: left promiscuous mode [ 806.999812][ T9798] veth0_macvtap: left promiscuous mode [ 807.002606][ T9798] veth0_macvtap: entered promiscuous mode [ 807.006431][ T9798] veth1_macvtap: entered promiscuous mode [ 807.016124][ T9798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 807.018469][ T9798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 807.020642][ T9798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 807.022649][ T9798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 807.083839][ T9809] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13118'. [ 807.148057][ T9839] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 807.702793][ T9916] netlink: 'syz.2.13141': attribute type 5 has an invalid length. [ 808.401954][ T9968] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 809.715108][ T9987] loop6: detected capacity change from 0 to 128 [ 809.717444][ T9987] syz.6.13161: attempt to access beyond end of device [ 809.717444][ T9987] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 809.717732][ T9987] syz.6.13161: attempt to access beyond end of device [ 809.717732][ T9987] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 809.717800][ T9987] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 809.717817][ T9987] syz.6.13161: attempt to access beyond end of device [ 809.717817][ T9987] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 809.717839][ T9987] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 809.718231][ T9987] syz.6.13161: attempt to access beyond end of device [ 809.718231][ T9987] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 809.719242][ T9987] syz.6.13161: attempt to access beyond end of device [ 809.719242][ T9987] loop6: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 809.719338][ T9987] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 809.719387][ T9987] syz.6.13161: attempt to access beyond end of device [ 809.719387][ T9987] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 809.719459][ T9987] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 809.720107][ T9987] syz.6.13161: attempt to access beyond end of device [ 809.720107][ T9987] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 809.720874][ T9987] syz.6.13161: attempt to access beyond end of device [ 809.720874][ T9987] loop6: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 809.720957][ T9987] Buffer I/O error on dev loop6, logical block 95, lost async page write [ 809.721016][ T9987] syz.6.13161: attempt to access beyond end of device [ 809.721016][ T9987] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 809.721091][ T9987] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 809.721379][ T9987] syz.6.13161: attempt to access beyond end of device [ 809.721379][ T9987] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 809.722210][ T9987] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 809.722273][ T9987] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 809.726389][ T9987] Buffer I/O error on dev loop6, logical block 111, lost async page write [ 809.726499][ T9987] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 809.977218][ T9995] rxe_eth0 speed is unknown, defaulting to 1000 [ 810.002091][T10000] loop6: detected capacity change from 0 to 164 [ 810.213625][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 810.221803][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13164'. [ 810.619400][T10041] ip_tables: iptables: counters copy to user failed while replacing table [ 810.713064][T10054] netlink: 'syz.2.13189': attribute type 1 has an invalid length. [ 810.713104][T10054] netlink: 'syz.2.13189': attribute type 4 has an invalid length. [ 810.713120][T10054] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.13189'. [ 810.713461][T10054] netlink: 'syz.2.13189': attribute type 1 has an invalid length. [ 810.713479][T10054] netlink: 'syz.2.13189': attribute type 4 has an invalid length. [ 810.713494][T10054] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.13189'. [ 811.154250][T10075] FAULT_INJECTION: forcing a failure. [ 811.154250][T10075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.154290][T10075] CPU: 1 UID: 0 PID: 10075 Comm: syz.7.13196 Not tainted syzkaller #0 PREEMPT(lazy) [ 811.154359][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 811.154378][T10075] Call Trace: [ 811.154459][T10075] [ 811.154470][T10075] __dump_stack+0x1d/0x30 [ 811.154504][T10075] dump_stack_lvl+0x95/0xd0 [ 811.154554][T10075] dump_stack+0x15/0x1b [ 811.154592][T10075] should_fail_ex+0x259/0x270 [ 811.154634][T10075] should_fail+0xb/0x20 [ 811.154662][T10075] should_fail_usercopy+0x1a/0x20 [ 811.154738][T10075] _copy_to_user+0x20/0xa0 [ 811.154782][T10075] pagemap_read+0x3af/0x610 [ 811.154889][T10075] ? __pfx_pagemap_read+0x10/0x10 [ 811.154924][T10075] vfs_read+0x18e/0x7c0 [ 811.154966][T10075] ? __rcu_read_unlock+0x4e/0x70 [ 811.155033][T10075] ? __fget_files+0x184/0x1c0 [ 811.155074][T10075] __x64_sys_pread64+0x12d/0x180 [ 811.155104][T10075] x64_sys_call+0xd2e/0x2550 [ 811.155141][T10075] do_syscall_64+0x116/0x380 [ 811.155190][T10075] ? clear_bhb_loop+0x70/0xc0 [ 811.155214][T10075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.155240][T10075] RIP: 0033:0x7f759cbdfb19 [ 811.155257][T10075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.155306][T10075] RSP: 002b:00007f759b62f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 811.155336][T10075] RAX: ffffffffffffffda RBX: 00007f759ce65fa0 RCX: 00007f759cbdfb19 [ 811.155357][T10075] RDX: 0000000000019000 RSI: 0000200000001380 RDI: 0000000000000003 [ 811.155375][T10075] RBP: 00007f759cc77b70 R08: 0000000000000000 R09: 0000000000000000 [ 811.155391][T10075] R10: 0000001000000300 R11: 0000000000000246 R12: 0000000000000000 [ 811.155460][T10075] R13: 00007f759ce66038 R14: 00007f759ce65fa0 R15: 00007fffa645e848 [ 811.155490][T10075] [ 811.390043][T10077] loop6: detected capacity change from 0 to 512 [ 811.414987][T10077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.415149][T10077] ext4 filesystem being mounted at /879/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.510530][T27204] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.717628][T10096] ip_tables: iptables: counters copy to user failed while replacing table [ 811.721717][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13201'. [ 811.809440][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 811.809461][ T30] audit: type=1400 audit(1700005338.210:11001): avc: denied { write } for pid=10101 comm="rm" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.851481][ T30] audit: type=1400 audit(1700005338.250:11002): avc: denied { write } for pid=10100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.930914][ T30] audit: type=1400 audit(1700005338.330:11003): avc: denied { write } for pid=10108 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.976232][ T30] audit: type=1326 audit(1700005338.380:11004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.3.13205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257dcafb19 code=0x7ffc0000 [ 811.976271][ T30] audit: type=1326 audit(1700005338.380:11005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.3.13205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257dcafb19 code=0x7ffc0000 [ 811.976308][ T30] audit: type=1326 audit(1700005338.380:11006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.3.13205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257dcafb19 code=0x7ffc0000 [ 811.976522][ T30] audit: type=1326 audit(1700005338.380:11007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.3.13205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f257dcafb19 code=0x7ffc0000 [ 811.976839][ T30] audit: type=1326 audit(1700005338.380:11008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.3.13205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257dcafb19 code=0x7ffc0000 [ 811.976881][ T30] audit: type=1326 audit(1700005338.380:11009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.3.13205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257dcafb19 code=0x7ffc0000 [ 811.976918][ T30] audit: type=1326 audit(1700005338.380:11010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.3.13205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257dcafb19 code=0x7ffc0000 [ 812.140597][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 812.234690][T10123] ip_tables: iptables: counters copy to user failed while replacing table [ 812.252893][T10125] syzkaller1: entered promiscuous mode [ 812.252913][T10125] syzkaller1: entered allmulticast mode [ 812.307302][T10127] loop2: detected capacity change from 0 to 512 [ 812.315254][T10130] loop7: detected capacity change from 0 to 164 [ 812.343064][T10127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.343136][T10127] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.388475][T10127] FAULT_INJECTION: forcing a failure. [ 812.388475][T10127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.388515][T10127] CPU: 0 UID: 0 PID: 10127 Comm: syz.2.13210 Not tainted syzkaller #0 PREEMPT(lazy) [ 812.388549][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 812.388565][T10127] Call Trace: [ 812.388573][T10127] [ 812.388581][T10127] __dump_stack+0x1d/0x30 [ 812.388636][T10127] dump_stack_lvl+0x95/0xd0 [ 812.388668][T10127] dump_stack+0x15/0x1b [ 812.388691][T10127] should_fail_ex+0x259/0x270 [ 812.388722][T10127] should_fail+0xb/0x20 [ 812.388790][T10127] should_fail_usercopy+0x1a/0x20 [ 812.388851][T10127] copy_folio_from_iter_atomic+0x24b/0x10b0 [ 812.388924][T10127] generic_perform_write+0x2c4/0x490 [ 812.389033][T10127] ext4_buffered_write_iter+0x313/0x580 [ 812.389082][T10127] ext4_file_write_iter+0x36e/0x1020 [ 812.389168][T10127] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 812.389205][T10127] ? hrtimer_active+0xe7/0x110 [ 812.389279][T10127] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 812.389458][T10127] ? do_iter_readv_writev+0x213/0x5a0 [ 812.389501][T10127] do_iter_readv_writev+0x4f6/0x5a0 [ 812.389545][T10127] vfs_writev+0x2ce/0x8b0 [ 812.389648][T10127] ? _raw_spin_unlock+0x9/0x30 [ 812.389739][T10127] do_pwritev+0x110/0x1d0 [ 812.389772][T10127] __x64_sys_pwritev2+0x8f/0xc0 [ 812.389823][T10127] x64_sys_call+0x899/0x2550 [ 812.389860][T10127] do_syscall_64+0x116/0x380 [ 812.389888][T10127] ? clear_bhb_loop+0x70/0xc0 [ 812.389921][T10127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.389979][T10127] RIP: 0033:0x7f8a7f8efb19 [ 812.389997][T10127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.390018][T10127] RSP: 002b:00007f8a7e33f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 812.390045][T10127] RAX: ffffffffffffffda RBX: 00007f8a7fb75fa0 RCX: 00007f8a7f8efb19 [ 812.390073][T10127] RDX: 0000000000000001 RSI: 0000200000000f00 RDI: 0000000000000004 [ 812.390085][T10127] RBP: 00007f8a7f987b70 R08: 0000000000000000 R09: 0000000000000086 [ 812.390141][T10127] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 812.390157][T10127] R13: 00007f8a7fb76038 R14: 00007f8a7fb75fa0 R15: 00007ffe87d0bd38 [ 812.390187][T10127] [ 812.610639][ T9609] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 812.620316][ T9609] EXT4-fs (loop2): Remounting filesystem read-only [ 812.630321][ T9609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.631013][T22695] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 814.694266][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 817.016407][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 817.016425][ T30] audit: type=1400 audit(1700005343.420:11057): avc: denied { write } for pid=10143 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.085557][ T30] audit: type=1400 audit(1700005343.490:11058): avc: denied { write } for pid=10143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.127368][ T30] audit: type=1400 audit(1700005343.530:11059): avc: denied { write } for pid=10157 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.835085][ T30] audit: type=1400 audit(1700005344.240:11060): avc: denied { write } for pid=10161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.876076][ T30] audit: type=1400 audit(1700005344.280:11061): avc: denied { write } for pid=10172 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.794097][T10202] loop6: detected capacity change from 0 to 128 [ 818.803083][T10202] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 818.803348][T10202] ext4 filesystem being mounted at /887/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.853032][T10211] loop2: detected capacity change from 0 to 164 [ 818.936144][T10217] netlink: 'syz.3.13226': attribute type 4 has an invalid length. [ 818.963200][T10217] netlink: 'syz.3.13226': attribute type 4 has an invalid length. [ 819.010423][ T30] audit: type=1400 audit(1700005345.410:11062): avc: denied { write } for pid=10193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.078267][T27204] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 819.133215][ T30] audit: type=1400 audit(1700005345.530:11063): avc: denied { write } for pid=10227 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.262572][ T30] audit: type=1400 audit(1700005345.660:11064): avc: denied { watch watch_reads } for pid=10232 comm="syz.3.13230" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 819.519532][T10236] xt_hashlimit: size too large, truncated to 1048576 [ 819.907853][T10244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13234'. [ 820.136599][ T30] audit: type=1400 audit(1700005346.540:11065): avc: denied { write } for pid=10245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.199837][ T30] audit: type=1400 audit(1700005346.600:11066): avc: denied { write } for pid=10270 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.610530][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13247'. [ 820.830589][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13251'. [ 820.981357][T10307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13256'. [ 821.322107][T10315] bond8: entered allmulticast mode [ 821.322180][T10315] ip6gre2: entered allmulticast mode [ 821.337177][T10314] bond8: left allmulticast mode [ 821.337285][T10314] ip6gre2: left allmulticast mode [ 821.426076][T10319] ./dev/sda1: Can't lookup blockdev [ 821.459071][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13261'. [ 821.635036][T10340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 821.635055][T10340] block device autoloading is deprecated and will be removed. [ 822.383666][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 822.508535][T10357] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 822.582178][T10362] FAULT_INJECTION: forcing a failure. [ 822.582178][T10362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.582209][T10362] CPU: 0 UID: 0 PID: 10362 Comm: syz.6.13280 Not tainted syzkaller #0 PREEMPT(lazy) [ 822.582261][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 822.582279][T10362] Call Trace: [ 822.582288][T10362] [ 822.582297][T10362] __dump_stack+0x1d/0x30 [ 822.582323][T10362] dump_stack_lvl+0x95/0xd0 [ 822.582399][T10362] dump_stack+0x15/0x1b [ 822.582427][T10362] should_fail_ex+0x259/0x270 [ 822.582468][T10362] should_fail+0xb/0x20 [ 822.582523][T10362] should_fail_usercopy+0x1a/0x20 [ 822.582612][T10362] _copy_to_user+0x20/0xa0 [ 822.582650][T10362] __se_sys_prlimit64+0x4c1/0x5a0 [ 822.582740][T10362] __x64_sys_prlimit64+0x55/0x70 [ 822.582809][T10362] x64_sys_call+0x1fd5/0x2550 [ 822.582837][T10362] do_syscall_64+0x116/0x380 [ 822.582859][T10362] ? clear_bhb_loop+0x70/0xc0 [ 822.582886][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.582915][T10362] RIP: 0033:0x7fa267c1fb19 [ 822.582987][T10362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.583006][T10362] RSP: 002b:00007fa266677028 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 822.583090][T10362] RAX: ffffffffffffffda RBX: 00007fa267ea5fa0 RCX: 00007fa267c1fb19 [ 822.583110][T10362] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 822.583126][T10362] RBP: 00007fa267cb7b70 R08: 0000000000000000 R09: 0000000000000000 [ 822.583212][T10362] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 822.583225][T10362] R13: 00007fa267ea6038 R14: 00007fa267ea5fa0 R15: 00007ffe84360948 [ 822.583255][T10362] [ 822.828368][T10371] rxe_eth0 speed is unknown, defaulting to 1000 [ 822.976265][T10380] netlink: 'syz.6.13295': attribute type 4 has an invalid length. [ 823.848693][ T30] audit: type=1326 audit(1700005350.250:11067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.13296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf100fb19 code=0x7ffc0000 [ 823.849043][ T30] audit: type=1326 audit(1700005350.250:11068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.13296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf100fb19 code=0x7ffc0000 [ 823.849161][ T30] audit: type=1326 audit(1700005350.250:11069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.13296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf100fb19 code=0x7ffc0000 [ 823.853677][ T30] audit: type=1326 audit(1700005350.250:11070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.13296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1cf1011387 code=0x7ffc0000 [ 823.853719][ T30] audit: type=1326 audit(1700005350.250:11071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.13296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1cf0fd034e code=0x7ffc0000 [ 823.853813][ T30] audit: type=1326 audit(1700005350.250:11072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.13296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1cf0fd034e code=0x7ffc0000 [ 823.854005][ T30] audit: type=1326 audit(1700005350.250:11073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.13296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1cf0fd034e code=0x7ffc0000 [ 823.854137][ T30] audit: type=1326 audit(1700005350.250:11074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.13296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1cf0fd034e code=0x7ffc0000 [ 823.860789][ T30] audit: type=1326 audit(1700005350.260:11075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.13296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf100fb19 code=0x7ffc0000 [ 823.860895][ T30] audit: type=1326 audit(1700005350.260:11076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.13296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf100fb19 code=0x7ffc0000 [ 824.157450][T10402] sctp: [Deprecated]: syz.7.13297 (pid 10402) Use of int in max_burst socket option. [ 824.157450][T10402] Use struct sctp_assoc_value instead [ 824.234673][T10408] FAULT_INJECTION: forcing a failure. [ 824.234673][T10408] name fail_futex, interval 1, probability 0, space 0, times 0 [ 824.234725][T10408] CPU: 1 UID: 0 PID: 10408 Comm: syz.1.13300 Not tainted syzkaller #0 PREEMPT(lazy) [ 824.234760][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 824.234790][T10408] Call Trace: [ 824.234800][T10408] [ 824.234812][T10408] __dump_stack+0x1d/0x30 [ 824.234861][T10408] dump_stack_lvl+0x95/0xd0 [ 824.234894][T10408] dump_stack+0x15/0x1b [ 824.234925][T10408] should_fail_ex+0x259/0x270 [ 824.235038][T10408] should_fail+0xb/0x20 [ 824.235156][T10408] get_futex_key+0x12c/0xc40 [ 824.235188][T10408] futex_wait_setup+0x49/0x3e0 [ 824.235228][T10408] ? __cgroup_account_cputime+0x83/0xa0 [ 824.235327][T10408] ? update_se+0xc1/0x3b0 [ 824.235359][T10408] __futex_wait+0xb2/0x2a0 [ 824.235395][T10408] ? __pfx_futex_wake_mark+0x10/0x10 [ 824.235483][T10408] futex_wait+0x98/0x1c0 [ 824.235531][T10408] do_futex+0x391/0x460 [ 824.235567][T10408] __se_sys_futex+0x2f6/0x370 [ 824.235636][T10408] __x64_sys_futex+0x78/0x90 [ 824.235669][T10408] x64_sys_call+0x22e2/0x2550 [ 824.235707][T10408] do_syscall_64+0x116/0x380 [ 824.235816][T10408] ? clear_bhb_loop+0x70/0xc0 [ 824.235922][T10408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.235956][T10408] RIP: 0033:0x7f1cf100fb19 [ 824.235979][T10408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.236007][T10408] RSP: 002b:00007f1cefa5f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 824.236032][T10408] RAX: ffffffffffffffda RBX: 00007f1cf1295fa8 RCX: 00007f1cf100fb19 [ 824.236048][T10408] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1cf1295fa8 [ 824.236106][T10408] RBP: 00007f1cf1295fa0 R08: 0000000000000000 R09: 0000000000000000 [ 824.236119][T10408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.236131][T10408] R13: 00007f1cf1296038 R14: 00007ffc321d8ac0 R15: 00007ffc321d8ba8 [ 824.236154][T10408] [ 824.486087][ T9102] hid-generic 0003:0008:0043.0011: item fetching failed at offset 0/1 [ 824.486272][ T9102] hid-generic 0003:0008:0043.0011: probe with driver hid-generic failed with error -22 [ 824.566469][T10422] netlink: 'syz.6.13306': attribute type 4 has an invalid length. [ 824.634549][T22695] IPVS: starting estimator thread 0... [ 824.723906][T10431] IPVS: using max 2208 ests per chain, 110400 per kthread [ 824.775315][T10441] loop7: detected capacity change from 0 to 512 [ 824.775728][T10441] EXT4-fs: Ignoring removed oldalloc option [ 824.796972][T10441] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.134170][ T5604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.331623][T10460] FAULT_INJECTION: forcing a failure. [ 825.331623][T10460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.331716][T10460] CPU: 1 UID: 0 PID: 10460 Comm: syz.2.13322 Not tainted syzkaller #0 PREEMPT(lazy) [ 825.331853][T10460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 825.331879][T10460] Call Trace: [ 825.331894][T10460] [ 825.331905][T10460] __dump_stack+0x1d/0x30 [ 825.331978][T10460] dump_stack_lvl+0x95/0xd0 [ 825.332002][T10460] dump_stack+0x15/0x1b [ 825.332031][T10460] should_fail_ex+0x259/0x270 [ 825.332102][T10460] should_fail+0xb/0x20 [ 825.332140][T10460] should_fail_usercopy+0x1a/0x20 [ 825.332177][T10460] _copy_from_user+0x1c/0xb0 [ 825.332211][T10460] bpf_vlog_reverse_ubuf+0xed/0x360 [ 825.332250][T10460] bpf_vlog_finalize+0xf2/0x200 [ 825.332283][T10460] bpf_log_attr_finalize+0x33/0x100 [ 825.332324][T10460] btf_new_fd+0x34a/0x6a0 [ 825.332415][T10460] bpf_btf_load+0x116/0x130 [ 825.332453][T10460] __sys_bpf+0xbee/0xc50 [ 825.332564][T10460] __x64_sys_bpf+0x69/0x80 [ 825.332592][T10460] x64_sys_call+0xf26/0x2550 [ 825.332629][T10460] do_syscall_64+0x116/0x380 [ 825.332657][T10460] ? clear_bhb_loop+0x70/0xc0 [ 825.332708][T10460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.332736][T10460] RIP: 0033:0x7f8a7f8efb19 [ 825.332758][T10460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.332777][T10460] RSP: 002b:00007f8a7e33f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 825.332799][T10460] RAX: ffffffffffffffda RBX: 00007f8a7fb75fa0 RCX: 00007f8a7f8efb19 [ 825.332819][T10460] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 825.332914][T10460] RBP: 00007f8a7f987b70 R08: 0000000000000000 R09: 0000000000000000 [ 825.332933][T10460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.332951][T10460] R13: 00007f8a7fb76038 R14: 00007f8a7fb75fa0 R15: 00007ffe87d0bd38 [ 825.333083][T10460] [ 826.202230][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13337'. [ 826.635586][T10471] ================================================================== [ 826.635620][T10471] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 826.635651][T10471] [ 826.635658][T10471] read-write to 0xffff88810f8f6864 of 4 bytes by task 10461 on cpu 1: [ 826.635677][T10471] fifo_open+0x89/0x5b0 [ 826.635699][T10471] do_dentry_open+0x496/0xa40 [ 826.635727][T10471] vfs_open_consume+0x46/0x1f0 [ 826.635754][T10471] path_openat+0xc16/0x11c0 [ 826.635788][T10471] do_file_open+0x16c/0x290 [ 826.635821][T10471] do_sys_openat2+0xa1/0x140 [ 826.635849][T10471] __se_sys_openat2+0x193/0x1f0 [ 826.635878][T10471] __x64_sys_openat2+0x55/0x70 [ 826.635907][T10471] x64_sys_call+0x196c/0x2550 [ 826.635937][T10471] do_syscall_64+0x116/0x380 [ 826.635957][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.635980][T10471] [ 826.635986][T10471] read to 0xffff88810f8f6864 of 4 bytes by task 10471 on cpu 0: [ 826.636004][T10471] wait_for_partner+0xd9/0x210 [ 826.636028][T10471] fifo_open+0x443/0x5b0 [ 826.636048][T10471] do_dentry_open+0x496/0xa40 [ 826.636077][T10471] vfs_open_consume+0x46/0x1f0 [ 826.636104][T10471] path_openat+0xc16/0x11c0 [ 826.636138][T10471] do_file_open+0x16c/0x290 [ 826.636171][T10471] do_sys_openat2+0xa1/0x140 [ 826.636229][T10471] __x64_sys_openat+0xf2/0x120 [ 826.636258][T10471] x64_sys_call+0x1f72/0x2550 [ 826.636287][T10471] do_syscall_64+0x116/0x380 [ 826.636307][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.636330][T10471] [ 826.636334][T10471] value changed: 0x00000001 -> 0x00000002 [ 826.636346][T10471] [ 826.636351][T10471] Reported by Kernel Concurrency Sanitizer on: [ 826.636363][T10471] CPU: 0 UID: 0 PID: 10471 Comm: syz.1.13321 Not tainted syzkaller #0 PREEMPT(lazy) [ 826.636391][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 826.636406][T10471] ================================================================== [ 830.053751][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!