last executing test programs: 5m20.401838055s ago: executing program 32 (id=798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x401, 0x3ffe, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x20, 0x7}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x80}}, 0x0) write(r0, &(0x7f00000003c0)="ffffffffffffc011223344554305", 0xe) 4m8.907821752s ago: executing program 33 (id=2458): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x8001}, 0x1c) sendmsg$nl_route(r0, 0x0, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='_\b'], &(0x7f00000001c0)=""/92, 0x5c) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000280)={0x2005}) r6 = openat2(r4, &(0x7f0000000340)='./file0\x00', &(0x7f0000000ac0)={0x200a80, 0x90, 0x2e}, 0x18) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pivot_root(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) unshare(0x48000080) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000480)={0x0, 0x1001, 0x22cc, {0x0, 0x1}, {0x36, 0x3}, @ramp={0x4, 0x6, {0x4c, 0x10, 0xc, 0x83}}}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400000000ffdbdf250000", @ANYRES32=0x0, @ANYBLOB="4336650000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x20, 0x8, 0x40, 0x4, {{0xa, 0x4, 0x1, 0x9, 0x28, 0x67, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @remote, {[@cipso={0x86, 0x6, 0x1}, @ssrr={0x89, 0xb, 0xbb, [@dev={0xac, 0x14, 0x14, 0x24}, @multicast2]}, @noop]}}}}}) 3m55.242377212s ago: executing program 34 (id=2701): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0xd, 0x400, 0x9, 0xa}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0xc6, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x8004}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x2, 0x48, 0x4, 0x8000, 0x5}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000"], 0xfdef) 3m4.84474924s ago: executing program 6 (id=3504): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000100)={[{}, {@overriderock}, {@cruft}, {@overriderock}, {@showassoc}, {@hide}]}, 0x1, 0x3f3, &(0x7f0000000340)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x2000, 0x28) 3m4.705386504s ago: executing program 6 (id=3507): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m4.608473904s ago: executing program 6 (id=3511): r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000b40)=""/132, 0x84, 0x81) 3m4.499439375s ago: executing program 6 (id=3512): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@bloom_filter={0x1e, 0x0, 0x3, 0xfffffffb, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xd}, 0x50) 3m3.282291948s ago: executing program 6 (id=3522): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) add_key$keyring(&(0x7f0000000400), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount(0x0, &(0x7f0000000a80)='./debug\x00', &(0x7f0000000ac0)='debugfs\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000b40)=""/132, 0x84, 0x81) 3m1.019441457s ago: executing program 6 (id=3529): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000100)=0x100000001, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x6}, @sack_perm, @timestamp, @window={0x3, 0xf4, 0xf}, @window={0x3, 0x5b, 0xff}, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280), 0x4) sendto$inet(r1, &(0x7f00000002c0), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x2000048, &(0x7f00000003c0)={[{@oldalloc}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@noinit_itable}]}, 0xff, 0x4be, &(0x7f0000000400)="$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") recvmsg(r0, &(0x7f0000002980)={0x0, 0x2, &(0x7f00000029c0)=[{&(0x7f0000002a00)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3m0.823033296s ago: executing program 35 (id=3529): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000100)=0x100000001, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x6}, @sack_perm, @timestamp, @window={0x3, 0xf4, 0xf}, @window={0x3, 0x5b, 0xff}, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280), 0x4) sendto$inet(r1, &(0x7f00000002c0), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x2000048, &(0x7f00000003c0)={[{@oldalloc}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@noinit_itable}]}, 0xff, 0x4be, &(0x7f0000000400)="$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") recvmsg(r0, &(0x7f0000002980)={0x0, 0x2, &(0x7f00000029c0)=[{&(0x7f0000002a00)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2m36.968949044s ago: executing program 8 (id=3817): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000018c0)="90cb8c693dc85bf6422208a587fceb969024deee39f9828d22f6d688724429fd43b6c4561039fc8f5bb75fe94d4969e0ee9fe0e2334ae0fb2ebcf3408611ee16022b24ec96d71c67a3154e5d188aee290fe4558ea1478ca5fb7c171a046fdd82684dc0dd5cc25412c568d507d26672607edc82b946219fdee1b10490086e5d650138984fc271417264fcc865d7667b1ce555dc2117c8559f36f77735c8bb88c0f8dd233f8bab999b8d5a5bd9d9d3eecd42ad06318d04bb19c075e5ad6e9a9a139bc7138750", 0xc5}], 0x1}, 0x240c4855) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/229, 0xe5, 0x0, 0x0}, &(0x7f00000002c0)=0x40) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="c1edb2f6f3d06fee4460f65fc8e26576b11bc0b78872d5d68e9a54df8a63c5ed823568f1fe22d00e900985", 0x2b}, {&(0x7f00000003c0)="66b56e88fe628cd1e65896c72f1d8df28dae90e1021cd594b7bf68717b232b2444268adf076090a506bf1e38f971bd297eb827ae71c9b500bc6f2cba4ad6518daf4051d3959261cf26def41cbcd01c11bd47091fc3cab36ab3f68d6f86d282857068d2ffc2c7519d79ac2dc803b8e9834e6829df563b947971947ed04c9a75", 0x7f}, {&(0x7f0000000480)="013f6b8605e72b3bbec253a733bd2d0aa6ed8b953b85bea869464d", 0x1b}], 0x3, 0x0, 0x0, 0x20000044}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)='f', 0x1}], 0x1}}], 0x1, 0x0) 2m36.801601041s ago: executing program 8 (id=3818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac35000200000000", 0x9a}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xbe8}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000440)=0x40) 2m36.740025948s ago: executing program 8 (id=3820): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x63, 0x52, 0x38, 0x32]}, &(0x7f0000000300)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000440)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x34, 0x36]}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000740)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @auto=[0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @desc2}, &(0x7f0000000940)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x61]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000b40), &(0x7f0000000b80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62]}, &(0x7f0000000bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000c40), &(0x7f0000000c80)={'fscrypt:', @desc3}, &(0x7f0000000cc0)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000d40), &(0x7f0000000d80)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @auto=[0x62, 0x30, 0x32, 0x30, 0x30, 0x31, 0x65, 0x30, 0x35, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x64]}, &(0x7f0000000f40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000fc0), &(0x7f0000001000)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000001040)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000001140)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r1) add_key$keyring(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$link(0x8, r0, r1) 2m36.692145292s ago: executing program 8 (id=3822): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000240)=ANY=[], 0x3, 0x5be, &(0x7f0000001ec0)="$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") syz_clone(0x200a000, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000ec0)=""/4096, 0x1000) 2m36.61708818s ago: executing program 8 (id=3825): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='7', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000380)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) 2m36.410816491s ago: executing program 8 (id=3830): r0 = openat(0xffffffffffffff9c, &(0x7f0000002180)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000021c0)=""/44, 0x2c) 2m36.063270916s ago: executing program 36 (id=3830): r0 = openat(0xffffffffffffff9c, &(0x7f0000002180)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000021c0)=""/44, 0x2c) 2m27.021113289s ago: executing program 9 (id=4130): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0xc010) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x4000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x2f, 0x0, @empty, @empty}}}}) 2m26.951343906s ago: executing program 9 (id=4132): gettid() syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m26.864849045s ago: executing program 5 (id=4140): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file1\x00', 0x1a10c10, &(0x7f0000000400)=ANY=[], 0xfc, 0x2b6, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0xd2942, 0x4) io_setup(0x20ff, &(0x7f0000000740)=0x0) io_submit(r1, 0x3, &(0x7f0000000780)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000800)='p', 0x8200, 0x600}]) 2m26.864483045s ago: executing program 7 (id=4141): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000cc0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xfa}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000e80)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000f80)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001080)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 2m26.762175235s ago: executing program 9 (id=4144): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x2, 0x3, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e27, @private=0xa010101}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x0, 0xd, 0x60000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x50}, 0x1, 0x7}, 0x0) 2m26.688689182s ago: executing program 9 (id=4147): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000240)=ANY=[], 0x3, 0x5be, &(0x7f0000001ec0)="$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") syz_clone(0x200a000, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000) 2m26.664479705s ago: executing program 5 (id=4150): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x20, 0x1f, 0x9, 0xfffff00c}, {0x20, 0x8, 0xff, 0xfffff038}, {0x6, 0x80, 0x2}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0xed60e250ba39e68f, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x30, 0x8, 0xff, 0x1, 0x0, 0x1, 0x5120}}, 0x1c}}, 0x2) 2m26.663980045s ago: executing program 7 (id=4151): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000400)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0xad, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000440)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000980)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a8", 0x569, 0x0, &(0x7f0000000f40)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000f80)=0x498, 0x4) readv(r0, &(0x7f0000000fc0)=[{&(0x7f0000001000)=""/63, 0x3f}], 0x1) 2m26.600627811s ago: executing program 5 (id=4155): syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m26.594873082s ago: executing program 9 (id=4156): mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x20400, 0x7b) getdents64(r0, &(0x7f0000000100)=""/1000, 0x3e8) openat(r0, &(0x7f0000000143), 0x0, 0x0) 2m26.4100577s ago: executing program 5 (id=4166): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000240)=ANY=[], 0x3, 0x5be, &(0x7f0000001ec0)="$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") syz_clone(0x200a000, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000) 2m26.390476432s ago: executing program 9 (id=4168): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 2m26.356157546s ago: executing program 37 (id=4168): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 2m26.257445076s ago: executing program 5 (id=4171): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x1010004, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f776173736f632c6d61703d61636f726e006d61703d61636f726e2c6e6f636f6d70726573732c6d61703d876f726d616c2c6d6f64653d3078376666666666666666666666666666664173686f776173736f632c6d61703d6e6f726d616c2c00"], 0xfd, 0x645, &(0x7f0000000200)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) 2m25.983456683s ago: executing program 5 (id=4175): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='.\x00', 0xa880, 0x97) getdents64(r0, &(0x7f0000000980)=""/163, 0xba974ed140df4995) 2m25.971290685s ago: executing program 38 (id=4175): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='.\x00', 0xa880, 0x97) getdents64(r0, &(0x7f0000000980)=""/163, 0xba974ed140df4995) 2m25.774639334s ago: executing program 7 (id=4179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x0, 0x0, 0x3f, 0x0, "c1a834c61b0af1e9ae83bcb1f3ae2f38e0288ddd1c60e436230b3c5d9bf8ad8259e2c431879dfe90207f482a58220034ada9adf44d8a87a26fb872e037f8fe34434ffd8a16d2861c45208b90b200"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @mss={0x2, 0xb7c}, @sack_perm, @sack_perm, @mss={0x2, 0x2}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2m25.697721252s ago: executing program 7 (id=4180): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000240)=ANY=[], 0x3, 0x5be, &(0x7f0000001ec0)="$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") syz_clone(0x200a000, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000) 2m25.596140693s ago: executing program 7 (id=4182): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0xf9, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={r1, 0x7}, 0x8) 2m25.303470732s ago: executing program 7 (id=4187): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) setreuid(0xee01, 0xee01) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x47) listen(r0, 0x7) 2m25.300840882s ago: executing program 39 (id=4187): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) setreuid(0xee01, 0xee01) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x47) listen(r0, 0x7) 3.902512997s ago: executing program 0 (id=8512): socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000580), 0xb7c8, 0xa8182) r2 = memfd_create(&(0x7f00000005c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0xc, 0x30c9}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x5, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x0) 2.258704953s ago: executing program 4 (id=8556): socket(0x10, 0x803, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x7f6aab9c, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) getpeername$unix(r2, 0x0, &(0x7f0000000200)) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ef) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1\x00') symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') 2.237826805s ago: executing program 4 (id=8557): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x26, &(0x7f00000015c0)=ANY=[@ANYRES16=r0], 0x20) 2.174868301s ago: executing program 0 (id=8558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000d00)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4894}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 2.164626212s ago: executing program 1 (id=8560): getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) unshare(0x24020400) socket(0x10, 0x803, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f0000000780)=ANY=[], 0xff2e) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 2.121932237s ago: executing program 4 (id=8561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x2, 0x5, 0xfc000000, 0x4, 0xc, 0x7}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x89, 0x5}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000780)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.053989734s ago: executing program 0 (id=8564): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000003c40), 0x0, 0x0) read$msr(r3, &(0x7f0000003c80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') write$binfmt_format(r4, &(0x7f0000000400)='1\x00', 0x2) sched_setaffinity(r2, 0x47, &(0x7f000001cc80)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f0000000340)=[{}], 0x1, 0xe, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) 1.750895284s ago: executing program 4 (id=8567): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000003140)=0x2, 0x4) bind$inet(r0, &(0x7f0000003180)={0x2, 0x5e21, @empty}, 0x10) close(0x3) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000580), 0xb7c8, 0xa8182) r4 = memfd_create(&(0x7f00000005c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000f40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "cbda627192ec30"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001f40)={{r5, 0x3, 0x51b, 0x800, 0x223f, 0x3, 0x4, 0x82a, 0x10, 0x2, 0x0, 0x3, 0x4, 0x3, 0xffffffffffffff7f}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000002000)={r5, 0x4}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0x0, 0x428, 0x0, 0x428, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffff00], [0xff, 0xff, 0x0, 0xffffffff], 'dvmrp1\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x29, 0x2, 0x3, 0x21}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xc}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0x0, 0xff], [0xff000000, 0x0, 0xff000000, 0xff], 'vlan0\x00', 'wlan0\x00', {}, {}, 0x87, 0x8, 0x4, 0x256acd25efdb589}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00', [0xffffff00, 0x80ffff00, 0xff000000, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xff], 'veth1_macvtap\x00', 'nicvf0\x00', {}, {0xff}, 0x16, 0xce, 0x4, 0x71}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x80}, @private0, [0xff, 0xffffffff, 0xffffff00, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xffffff00], 'geneve1\x00', 'bridge_slave_0\x00', {0xff}, {}, 0xff, 0x2e, 0x4, 0xc}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x37}, @ipv6=@mcast2, 0x11, 0x2b, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff, 0xff, 0xffffff00], [0xff000000, 0xff000000, 0xff, 0xff], 'bond_slave_0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x32, 0xf8, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7, 0xf9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000003080)=ANY=[@ANYBLOB="2400000018000904e0000000000000000a000000000000000000000008001e80"], 0x24}}, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e20}, 0x6e) waitid(0x2, 0x0, &(0x7f00000030c0), 0xe, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r9 = socket$unix(0x1, 0x3, 0x0) bind$unix(r9, &(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.211257048s ago: executing program 1 (id=8568): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0xc, 0x30c9}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x5, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)}], 0x1}, 0x0) 932.875077ms ago: executing program 0 (id=8572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) sendmsg(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000140)="1f", 0x1}], 0x1}, 0x40) writev(r0, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="ec", 0xfdef}], 0x1) 753.679365ms ago: executing program 2 (id=8575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x188, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x15c, 0x4, 0x0, 0x1, [{0x158, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x148, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x12f, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1b0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 739.071476ms ago: executing program 4 (id=8576): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0xe, &(0x7f00000000c0), 0x1, 0x457, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x149) unlinkat(0xffffffffffffff9c, &(0x7f0000002100)='./file1\x00', 0x0) pwritev2(r0, &(0x7f0000001480)=[{&(0x7f00000014c0)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 665.670804ms ago: executing program 2 (id=8578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newtfilter={0x68, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1003, 0x8}}}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ec770012d565d6"]}]}}]}]}]}}]}, 0x68}}, 0x880) write(r1, &(0x7f00000009c0)="443e4cd0", 0x4) 616.391629ms ago: executing program 4 (id=8580): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='X', 0xfee4, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000003c0)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad3154026", 0x38d}, {0x0}, {&(0x7f0000000880)="e17cff", 0x3}, {0x0}], 0x4}}], 0x2, 0x0) close(0x3) 572.475623ms ago: executing program 2 (id=8582): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000000500)) 522.867068ms ago: executing program 2 (id=8583): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x8c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7}, [@CTA_EXPECT_NAT={0x78, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000006c0)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa8", 0x23}], 0x1) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x3b9aca00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 522.043498ms ago: executing program 2 (id=8584): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000240)=0x120008c) pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="002145000b2cfe0b0000400600000a0000010a00000200500050000000020000ffff601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 486.666651ms ago: executing program 2 (id=8586): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000003140)=0x2, 0x4) bind$inet(r0, &(0x7f0000003180)={0x2, 0x5e21, @empty}, 0x10) close(0x3) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000580), 0xb7c8, 0xa8182) r4 = memfd_create(&(0x7f00000005c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000f40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "cbda627192ec30"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001f40)={{r5, 0x3, 0x51b, 0x800, 0x223f, 0x3, 0x4, 0x82a, 0x10, 0x2, 0x0, 0x3, 0x4, 0x3, 0xffffffffffffff7f}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000002000)={r5, 0x4}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0x0, 0x428, 0x0, 0x428, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffff00], [0xff, 0xff, 0x0, 0xffffffff], 'dvmrp1\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x29, 0x2, 0x3, 0x21}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xc}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0x0, 0xff], [0xff000000, 0x0, 0xff000000, 0xff], 'vlan0\x00', 'wlan0\x00', {}, {}, 0x87, 0x8, 0x4, 0x256acd25efdb589}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00', [0xffffff00, 0x80ffff00, 0xff000000, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xff], 'veth1_macvtap\x00', 'nicvf0\x00', {}, {0xff}, 0x16, 0xce, 0x4, 0x71}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x80}, @private0, [0xff, 0xffffffff, 0xffffff00, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xffffff00], 'geneve1\x00', 'bridge_slave_0\x00', {0xff}, {}, 0xff, 0x2e, 0x4, 0xc}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x37}, @ipv6=@mcast2, 0x11, 0x2b, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff, 0xff, 0xffffff00], [0xff000000, 0xff000000, 0xff, 0xff], 'bond_slave_0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x32, 0xf8, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7, 0xf9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000003080)=ANY=[@ANYBLOB="2400000018000904e0000000000000000a000000000000000000000008001e80"], 0x24}}, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e20}, 0x6e) waitid(0x2, 0x0, &(0x7f00000030c0), 0xe, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r9 = socket$unix(0x1, 0x3, 0x0) bind$unix(r9, &(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 343.461356ms ago: executing program 1 (id=8590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x42001, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000001140)={&(0x7f0000001180)=@xdp={0x2c, 0x7, r9, 0x3c}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001240)='\'', 0x1}], 0x1}, 0x804) 342.886856ms ago: executing program 3 (id=8591): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0xe, &(0x7f00000000c0), 0x1, 0x457, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file1\x00', 0x143041, 0x149) unlinkat(0xffffffffffffff9c, 0x0, 0x0) pwritev2(r0, &(0x7f0000001480)=[{&(0x7f00000014c0)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 219.542939ms ago: executing program 3 (id=8592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}}, 0x0) 189.172221ms ago: executing program 1 (id=8593): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newtfilter={0x68, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1003, 0x8}}}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ec770012d565d6"]}]}}]}]}]}}]}, 0x68}}, 0x880) write(r1, &(0x7f00000009c0)="443e4cd0", 0x4) 171.351763ms ago: executing program 3 (id=8594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000000500)) 95.209821ms ago: executing program 3 (id=8595): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x8c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7}, [@CTA_EXPECT_NAT={0x78, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000006c0)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa8", 0x23}], 0x1) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x3b9aca00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 90.708832ms ago: executing program 1 (id=8596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x40}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 72.360413ms ago: executing program 3 (id=8597): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000240)=0x120008c) pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="002145000b2cfe0b0000400600000a0000010a00000200500050000000020000ffff601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 574.02µs ago: executing program 3 (id=8598): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1fffffff, 0x0, 0x1, 0x1}}], 0x8) bind$can_raw(r0, &(0x7f0000000040), 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r2 = openat(r1, &(0x7f00000000c0)='can/rcvlist_eff\x00', 0x0, 0x0) read(r2, &(0x7f0000000100), 0x1000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x5b, 0xfb0f}, 0x90) 0s ago: executing program 1 (id=8599): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x26, &(0x7f00000015c0)=ANY=[@ANYRES16=r0], 0x20) kernel console output (not intermixed with test programs): : type=1326 audit(1792959066.174:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.1.6534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f638ae0f559 code=0x7ffc0000 [ 321.562131][ T29] audit: type=1326 audit(1792959066.174:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.1.6534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638ae0f559 code=0x7ffc0000 [ 321.595584][ T72] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 321.701407][T20668] team0: entered allmulticast mode [ 321.701472][T20668] team_slave_0: entered allmulticast mode [ 321.701525][T20668] team_slave_1: entered allmulticast mode [ 321.708342][T20668] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.833384][T20672] netlink: 'syz.1.6537': attribute type 1 has an invalid length. [ 321.851455][T20672] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.864413][T20672] bond2: (slave batadv0): Removing an active aggregator [ 321.864644][T20672] bond2: (slave batadv0): Releasing backup interface [ 321.866293][T20672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.867329][T20672] bond3: (slave batadv0): Enslaving as a backup interface with an up link [ 321.876645][T20679] syzkaller0: entered promiscuous mode [ 321.876791][T20679] syzkaller0: entered allmulticast mode [ 321.935710][T20684] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 321.936646][T20680] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 321.944488][ T38] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 322.019639][T20692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6546'. [ 322.341265][T20731] team0: entered allmulticast mode [ 322.341294][T20731] team_slave_0: entered allmulticast mode [ 322.341334][T20731] team_slave_1: entered allmulticast mode [ 322.704952][T20766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6578'. [ 322.755951][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6578'. [ 322.797766][ T38] IPVS: starting estimator thread 0... [ 322.893276][T20781] IPVS: using max 2160 ests per chain, 108000 per kthread [ 322.986799][T20798] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 323.726311][T20835] netlink: 'syz.2.6604': attribute type 1 has an invalid length. [ 323.732154][T20835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.740491][T20835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.743480][T20835] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 323.872744][T20848] syzkaller0: entered promiscuous mode [ 323.872830][T20848] syzkaller0: entered allmulticast mode [ 323.884720][T20848] tipc: Enabled bearer , priority 0 [ 323.892929][T20847] tipc: Resetting bearer [ 323.899895][T20847] tipc: Disabling bearer [ 323.987473][T20854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6613'. [ 324.013935][T20856] team0: entered allmulticast mode [ 324.013958][T20856] team_slave_0: entered allmulticast mode [ 324.014034][T20856] team_slave_1: entered allmulticast mode [ 324.058688][T20862] syzkaller0: entered promiscuous mode [ 324.058714][T20862] syzkaller0: entered allmulticast mode [ 324.091788][T20867] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 324.091917][T20867] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 324.207897][T20879] syzkaller0: entered promiscuous mode [ 324.207916][T20879] syzkaller0: entered allmulticast mode [ 324.210253][T20879] tipc: Enabled bearer , priority 0 [ 324.210659][T20878] tipc: Resetting bearer [ 324.239268][T20878] tipc: Disabling bearer [ 324.962472][T20960] syzkaller1: entered promiscuous mode [ 324.962541][T20960] syzkaller1: entered allmulticast mode [ 325.038426][T20970] FAULT_INJECTION: forcing a failure. [ 325.038426][T20970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.038471][T20970] CPU: 1 UID: 0 PID: 20970 Comm: syz.0.6666 Not tainted syzkaller #0 PREEMPT(lazy) [ 325.038510][T20970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 325.038530][T20970] Call Trace: [ 325.038540][T20970] [ 325.038551][T20970] __dump_stack+0x1d/0x30 [ 325.038665][T20970] dump_stack_lvl+0x95/0xd0 [ 325.038700][T20970] dump_stack+0x15/0x1b [ 325.038732][T20970] should_fail_ex+0x262/0x280 [ 325.038789][T20970] should_fail+0xb/0x20 [ 325.038901][T20970] should_fail_usercopy+0x1a/0x20 [ 325.039021][T20970] _copy_to_user+0x20/0xa0 [ 325.039062][T20970] bpf_vlog_reverse_ubuf+0x265/0x360 [ 325.039182][T20970] bpf_vlog_finalize+0x11a/0x200 [ 325.039210][T20970] bpf_log_attr_finalize+0x33/0x100 [ 325.039240][T20970] btf_new_fd+0x34a/0x6a0 [ 325.039302][T20970] bpf_btf_load+0x116/0x130 [ 325.039336][T20970] __sys_bpf+0xbee/0xc50 [ 325.039367][T20970] ? do_futex+0x300/0x460 [ 325.039452][T20970] __x64_sys_bpf+0x69/0x80 [ 325.039504][T20970] x64_sys_call+0xf26/0x2550 [ 325.039543][T20970] do_syscall_64+0x112/0x360 [ 325.039623][T20970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.039655][T20970] RIP: 0033:0x7fed2facf559 [ 325.039680][T20970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.039749][T20970] RSP: 002b:00007fed2e527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.039778][T20970] RAX: ffffffffffffffda RBX: 00007fed2fd55fa0 RCX: 00007fed2facf559 [ 325.039794][T20970] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 325.039809][T20970] RBP: 00007fed2fb66b20 R08: 0000000000000000 R09: 0000000000000000 [ 325.039882][T20970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.039901][T20970] R13: 00007fed2fd56038 R14: 00007fed2fd55fa0 R15: 00007ffff0f8da68 [ 325.039930][T20970] [ 325.281046][T20984] sctp: [Deprecated]: syz.1.6670 (pid 20984) Use of int in max_burst socket option. [ 325.281046][T20984] Use struct sctp_assoc_value instead [ 325.363188][T20991] syzkaller0: entered promiscuous mode [ 325.363214][T20991] syzkaller0: entered allmulticast mode [ 325.364344][T20991] tipc: Enabled bearer , priority 0 [ 325.364714][T20990] tipc: Resetting bearer [ 325.367753][T20990] tipc: Disabling bearer [ 325.472936][T21002] FAULT_INJECTION: forcing a failure. [ 325.472936][T21002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.472967][T21002] CPU: 1 UID: 0 PID: 21002 Comm: syz.1.6678 Not tainted syzkaller #0 PREEMPT(lazy) [ 325.473011][T21002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 325.473028][T21002] Call Trace: [ 325.473036][T21002] [ 325.473046][T21002] __dump_stack+0x1d/0x30 [ 325.473083][T21002] dump_stack_lvl+0x95/0xd0 [ 325.473185][T21002] dump_stack+0x15/0x1b [ 325.473214][T21002] should_fail_ex+0x262/0x280 [ 325.473251][T21002] should_fail+0xb/0x20 [ 325.473321][T21002] should_fail_usercopy+0x1a/0x20 [ 325.473371][T21002] _copy_to_user+0x20/0xa0 [ 325.473412][T21002] bpf_log_attr_finalize+0xa7/0x100 [ 325.473530][T21002] btf_new_fd+0x34a/0x6a0 [ 325.473565][T21002] bpf_btf_load+0x116/0x130 [ 325.473594][T21002] __sys_bpf+0xbee/0xc50 [ 325.473625][T21002] ? do_futex+0x300/0x460 [ 325.473716][T21002] __x64_sys_bpf+0x69/0x80 [ 325.473761][T21002] x64_sys_call+0xf26/0x2550 [ 325.473866][T21002] do_syscall_64+0x112/0x360 [ 325.473908][T21002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.473941][T21002] RIP: 0033:0x7f638ae0f559 [ 325.474026][T21002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.474116][T21002] RSP: 002b:00007f638985f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.474138][T21002] RAX: ffffffffffffffda RBX: 00007f638b095fa0 RCX: 00007f638ae0f559 [ 325.474154][T21002] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 325.474170][T21002] RBP: 00007f638aea6b20 R08: 0000000000000000 R09: 0000000000000000 [ 325.474188][T21002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.474210][T21002] R13: 00007f638b096038 R14: 00007f638b095fa0 R15: 00007fff8f8297e8 [ 325.474237][T21002] [ 325.714094][T21014] netlink: 'syz.1.6682': attribute type 1 has an invalid length. [ 325.721490][T21014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.751713][T21014] bond3: (slave batadv0): Removing an active aggregator [ 325.751979][T21014] bond3: (slave batadv0): Releasing backup interface [ 325.767769][T21014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.769174][T21014] bond4: (slave batadv0): Enslaving as a backup interface with an up link [ 325.824516][ T53] net_ratelimit: 8 callbacks suppressed [ 325.824536][ T53] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 325.907012][T21030] FAULT_INJECTION: forcing a failure. [ 325.907012][T21030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.907090][T21030] CPU: 0 UID: 0 PID: 21030 Comm: syz.4.6689 Not tainted syzkaller #0 PREEMPT(lazy) [ 325.907118][T21030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 325.907133][T21030] Call Trace: [ 325.907140][T21030] [ 325.907151][T21030] __dump_stack+0x1d/0x30 [ 325.907186][T21030] dump_stack_lvl+0x95/0xd0 [ 325.907247][T21030] dump_stack+0x15/0x1b [ 325.907277][T21030] should_fail_ex+0x262/0x280 [ 325.907315][T21030] should_fail+0xb/0x20 [ 325.907414][T21030] should_fail_usercopy+0x1a/0x20 [ 325.907446][T21030] _copy_to_user+0x20/0xa0 [ 325.907483][T21030] bpf_vlog_reverse_ubuf+0x265/0x360 [ 325.907522][T21030] bpf_vlog_finalize+0x11a/0x200 [ 325.907561][T21030] bpf_log_attr_finalize+0x33/0x100 [ 325.907623][T21030] btf_new_fd+0x34a/0x6a0 [ 325.907666][T21030] bpf_btf_load+0x116/0x130 [ 325.907736][T21030] __sys_bpf+0xbee/0xc50 [ 325.907839][T21030] ? do_futex+0x300/0x460 [ 325.907875][T21030] __x64_sys_bpf+0x69/0x80 [ 325.907989][T21030] x64_sys_call+0xf26/0x2550 [ 325.908028][T21030] do_syscall_64+0x112/0x360 [ 325.908076][T21030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.908160][T21030] RIP: 0033:0x7f84fbaff559 [ 325.908183][T21030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.908205][T21030] RSP: 002b:00007f84fa54f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.908228][T21030] RAX: ffffffffffffffda RBX: 00007f84fbd85fa0 RCX: 00007f84fbaff559 [ 325.908309][T21030] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 325.908324][T21030] RBP: 00007f84fbb96b20 R08: 0000000000000000 R09: 0000000000000000 [ 325.908343][T21030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.908361][T21030] R13: 00007f84fbd86038 R14: 00007f84fbd85fa0 R15: 00007ffd50ebbb38 [ 325.908387][T21030] [ 325.943347][ T72] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 326.058034][T21020] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.427011][T21056] FAULT_INJECTION: forcing a failure. [ 326.427011][T21056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.427123][T21056] CPU: 1 UID: 0 PID: 21056 Comm: syz.4.6700 Not tainted syzkaller #0 PREEMPT(lazy) [ 326.427241][T21056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 326.427258][T21056] Call Trace: [ 326.427268][T21056] [ 326.427279][T21056] __dump_stack+0x1d/0x30 [ 326.427317][T21056] dump_stack_lvl+0x95/0xd0 [ 326.427348][T21056] dump_stack+0x15/0x1b [ 326.427378][T21056] should_fail_ex+0x262/0x280 [ 326.427428][T21056] should_fail+0xb/0x20 [ 326.427463][T21056] should_fail_usercopy+0x1a/0x20 [ 326.427503][T21056] _copy_to_user+0x20/0xa0 [ 326.427562][T21056] bpf_vlog_reverse_ubuf+0x265/0x360 [ 326.427592][T21056] bpf_vlog_finalize+0x11a/0x200 [ 326.427630][T21056] bpf_log_attr_finalize+0x33/0x100 [ 326.427667][T21056] btf_new_fd+0x34a/0x6a0 [ 326.427769][T21056] bpf_btf_load+0x116/0x130 [ 326.427797][T21056] __sys_bpf+0xbee/0xc50 [ 326.427820][T21056] ? do_futex+0x300/0x460 [ 326.427853][T21056] __x64_sys_bpf+0x69/0x80 [ 326.427936][T21056] x64_sys_call+0xf26/0x2550 [ 326.428037][T21056] do_syscall_64+0x112/0x360 [ 326.428121][T21056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.428155][T21056] RIP: 0033:0x7f84fbaff559 [ 326.428178][T21056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.428206][T21056] RSP: 002b:00007f84fa54f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.428281][T21056] RAX: ffffffffffffffda RBX: 00007f84fbd85fa0 RCX: 00007f84fbaff559 [ 326.428360][T21056] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 326.428375][T21056] RBP: 00007f84fbb96b20 R08: 0000000000000000 R09: 0000000000000000 [ 326.428390][T21056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.428415][T21056] R13: 00007f84fbd86038 R14: 00007f84fbd85fa0 R15: 00007ffd50ebbb38 [ 326.428445][T21056] [ 326.565828][T21061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6701'. [ 326.862818][T21090] FAULT_INJECTION: forcing a failure. [ 326.862818][T21090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.862897][T21090] CPU: 0 UID: 0 PID: 21090 Comm: syz.4.6712 Not tainted syzkaller #0 PREEMPT(lazy) [ 326.862931][T21090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 326.862955][T21090] Call Trace: [ 326.862964][T21090] [ 326.862974][T21090] __dump_stack+0x1d/0x30 [ 326.863011][T21090] dump_stack_lvl+0x95/0xd0 [ 326.863100][T21090] dump_stack+0x15/0x1b [ 326.863130][T21090] should_fail_ex+0x262/0x280 [ 326.863245][T21090] should_fail+0xb/0x20 [ 326.863271][T21090] should_fail_usercopy+0x1a/0x20 [ 326.863305][T21090] _copy_to_user+0x20/0xa0 [ 326.863357][T21090] bpf_vlog_reverse_ubuf+0x265/0x360 [ 326.863393][T21090] bpf_vlog_finalize+0x11a/0x200 [ 326.863418][T21090] bpf_log_attr_finalize+0x33/0x100 [ 326.863491][T21090] btf_new_fd+0x34a/0x6a0 [ 326.863536][T21090] bpf_btf_load+0x116/0x130 [ 326.863569][T21090] __sys_bpf+0xbee/0xc50 [ 326.863600][T21090] ? do_futex+0x300/0x460 [ 326.863643][T21090] __x64_sys_bpf+0x69/0x80 [ 326.863690][T21090] x64_sys_call+0xf26/0x2550 [ 326.863735][T21090] do_syscall_64+0x112/0x360 [ 326.863774][T21090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.863804][T21090] RIP: 0033:0x7f84fbaff559 [ 326.863828][T21090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.863857][T21090] RSP: 002b:00007f84fa54f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.863987][T21090] RAX: ffffffffffffffda RBX: 00007f84fbd85fa0 RCX: 00007f84fbaff559 [ 326.864009][T21090] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 326.864102][T21090] RBP: 00007f84fbb96b20 R08: 0000000000000000 R09: 0000000000000000 [ 326.864123][T21090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.864184][T21090] R13: 00007f84fbd86038 R14: 00007f84fbd85fa0 R15: 00007ffd50ebbb38 [ 326.864207][T21090] [ 327.189504][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 327.189524][ T29] audit: type=1400 audit(1792959071.804:1404): avc: denied { write } for pid=21109 comm="syz.4.6722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.290601][T21119] FAULT_INJECTION: forcing a failure. [ 327.290601][T21119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.290640][T21119] CPU: 0 UID: 0 PID: 21119 Comm: syz.1.6726 Not tainted syzkaller #0 PREEMPT(lazy) [ 327.290749][T21119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 327.290769][T21119] Call Trace: [ 327.290778][T21119] [ 327.290789][T21119] __dump_stack+0x1d/0x30 [ 327.290936][T21119] dump_stack_lvl+0x95/0xd0 [ 327.290967][T21119] dump_stack+0x15/0x1b [ 327.290989][T21119] should_fail_ex+0x262/0x280 [ 327.291028][T21119] should_fail+0xb/0x20 [ 327.291103][T21119] should_fail_usercopy+0x1a/0x20 [ 327.291145][T21119] _copy_to_user+0x20/0xa0 [ 327.291238][T21119] bpf_vlog_reverse_ubuf+0x265/0x360 [ 327.291276][T21119] bpf_vlog_finalize+0x11a/0x200 [ 327.291302][T21119] bpf_log_attr_finalize+0x33/0x100 [ 327.291331][T21119] btf_new_fd+0x34a/0x6a0 [ 327.291417][T21119] bpf_btf_load+0x116/0x130 [ 327.291522][T21119] __sys_bpf+0xbee/0xc50 [ 327.291546][T21119] ? do_futex+0x300/0x460 [ 327.291605][T21119] __x64_sys_bpf+0x69/0x80 [ 327.291794][T21119] x64_sys_call+0xf26/0x2550 [ 327.291859][T21119] do_syscall_64+0x112/0x360 [ 327.291903][T21119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.291935][T21119] RIP: 0033:0x7f638ae0f559 [ 327.291957][T21119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.292013][T21119] RSP: 002b:00007f638985f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.292038][T21119] RAX: ffffffffffffffda RBX: 00007f638b095fa0 RCX: 00007f638ae0f559 [ 327.292060][T21119] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 327.292128][T21119] RBP: 00007f638aea6b20 R08: 0000000000000000 R09: 0000000000000000 [ 327.292147][T21119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.292162][T21119] R13: 00007f638b096038 R14: 00007f638b095fa0 R15: 00007fff8f8297e8 [ 327.292208][T21119] [ 327.536506][T21126] syzkaller0: entered promiscuous mode [ 327.536533][T21126] syzkaller0: entered allmulticast mode [ 327.632628][T21135] syzkaller0: left promiscuous mode [ 327.632650][T21135] syzkaller0: left allmulticast mode [ 327.697325][T21145] FAULT_INJECTION: forcing a failure. [ 327.697325][T21145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.697365][T21145] CPU: 0 UID: 0 PID: 21145 Comm: syz.4.6738 Not tainted syzkaller #0 PREEMPT(lazy) [ 327.697397][T21145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 327.697414][T21145] Call Trace: [ 327.697421][T21145] [ 327.697443][T21145] __dump_stack+0x1d/0x30 [ 327.697472][T21145] dump_stack_lvl+0x95/0xd0 [ 327.697503][T21145] dump_stack+0x15/0x1b [ 327.697527][T21145] should_fail_ex+0x262/0x280 [ 327.697559][T21145] should_fail+0xb/0x20 [ 327.697689][T21145] should_fail_usercopy+0x1a/0x20 [ 327.697799][T21145] _copy_from_user+0x1c/0xb0 [ 327.697832][T21145] bpf_vlog_reverse_ubuf+0x9f/0x360 [ 327.697943][T21145] bpf_vlog_finalize+0x11a/0x200 [ 327.697975][T21145] bpf_log_attr_finalize+0x33/0x100 [ 327.698006][T21145] btf_new_fd+0x34a/0x6a0 [ 327.698049][T21145] bpf_btf_load+0x116/0x130 [ 327.698074][T21145] __sys_bpf+0xbee/0xc50 [ 327.698207][T21145] ? do_futex+0x300/0x460 [ 327.698238][T21145] __x64_sys_bpf+0x69/0x80 [ 327.698289][T21145] x64_sys_call+0xf26/0x2550 [ 327.698344][T21145] do_syscall_64+0x112/0x360 [ 327.698385][T21145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.698451][T21145] RIP: 0033:0x7f84fbaff559 [ 327.698468][T21145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.698490][T21145] RSP: 002b:00007f84fa54f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.698517][T21145] RAX: ffffffffffffffda RBX: 00007f84fbd85fa0 RCX: 00007f84fbaff559 [ 327.698536][T21145] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 327.698631][T21145] RBP: 00007f84fbb96b20 R08: 0000000000000000 R09: 0000000000000000 [ 327.698646][T21145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.698685][T21145] R13: 00007f84fbd86038 R14: 00007f84fbd85fa0 R15: 00007ffd50ebbb38 [ 327.698711][T21145] [ 327.859373][T21148] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6740'. [ 327.941911][T21149] syzkaller0: entered promiscuous mode [ 327.941938][T21149] syzkaller0: entered allmulticast mode [ 328.197282][T21189] syzkaller0: entered promiscuous mode [ 328.197309][T21189] syzkaller0: entered allmulticast mode [ 328.237434][T21191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6760'. [ 328.237566][T21191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6760'. [ 328.299542][T21199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6764'. [ 328.414070][T21213] syzkaller0: left promiscuous mode [ 328.414100][T21213] syzkaller0: left allmulticast mode [ 328.437037][T21215] syzkaller0: entered promiscuous mode [ 328.437064][T21215] syzkaller0: entered allmulticast mode [ 328.445640][T21217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6773'. [ 328.467490][T21217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6773'. [ 328.788229][T21250] syzkaller0: entered promiscuous mode [ 328.788308][T21250] syzkaller0: entered allmulticast mode [ 328.838668][T21256] tipc: Enabling of bearer rejected, already enabled [ 329.014186][T21274] netlink: 'syz.2.6799': attribute type 1 has an invalid length. [ 329.035753][T21274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.042431][T21274] bond1: (slave batadv0): Removing an active aggregator [ 329.042689][T21274] bond1: (slave batadv0): Releasing backup interface [ 329.077042][T21279] syzkaller0: entered promiscuous mode [ 329.077117][T21279] syzkaller0: entered allmulticast mode [ 329.196579][T21291] pimreg1: tun_chr_ioctl cmd 2147767507 [ 329.263880][T21303] netlink: 'syz.4.6812': attribute type 1 has an invalid length. [ 329.295993][T21303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.583251][T21341] syzkaller0: entered promiscuous mode [ 329.583270][T21341] syzkaller0: entered allmulticast mode [ 329.620313][T21321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.620454][T21321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.088108][T21370] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 330.102124][T21372] syzkaller1: entered promiscuous mode [ 330.102149][T21372] syzkaller1: entered allmulticast mode [ 330.171751][T21382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6845'. [ 330.195395][T21386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6847'. [ 330.334850][T21400] syzkaller0: entered promiscuous mode [ 330.334912][T21400] syzkaller0: entered allmulticast mode [ 330.431379][T21406] syzkaller1: entered promiscuous mode [ 330.431399][T21406] syzkaller1: entered allmulticast mode [ 330.802127][T21445] tipc: Enabling of bearer rejected, already enabled [ 330.876783][T21457] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21457 comm=syz.2.6878 [ 330.936429][T21465] syzkaller0: entered promiscuous mode [ 330.936527][T21465] syzkaller0: entered allmulticast mode [ 330.997466][T21472] syzkaller0: entered promiscuous mode [ 330.997490][T21472] syzkaller0: entered allmulticast mode [ 330.999420][T21472] tipc: Enabled bearer , priority 0 [ 330.999881][T21471] tipc: Resetting bearer [ 331.002198][T21471] tipc: Disabling bearer [ 331.134648][T21487] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 331.153584][ T29] audit: type=1400 audit(1792959075.774:1405): avc: denied { create } for pid=21488 comm="syz.4.6892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 331.293831][T21499] syzkaller0: entered promiscuous mode [ 331.293920][T21499] syzkaller0: entered allmulticast mode [ 331.425897][T21505] syzkaller0: entered promiscuous mode [ 331.425922][T21505] syzkaller0: entered allmulticast mode [ 331.428091][T21505] tipc: Enabled bearer , priority 0 [ 331.428823][T21504] tipc: Resetting bearer [ 331.436665][T21504] tipc: Disabling bearer [ 331.540004][T21521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6906'. [ 331.627239][ T29] audit: type=1400 audit(1792959076.244:1406): avc: denied { setopt } for pid=21522 comm="syz.0.6908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 331.658334][T21540] netlink: 'syz.2.6916': attribute type 1 has an invalid length. [ 332.142484][T21602] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 332.220804][T21617] syzkaller0: entered promiscuous mode [ 332.220828][T21617] syzkaller0: entered allmulticast mode [ 332.299673][ T29] audit: type=1326 audit(1792959076.914:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21622 comm="syz.0.6952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2facf559 code=0x7ffc0000 [ 332.299781][ T29] audit: type=1326 audit(1792959076.914:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21622 comm="syz.0.6952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2facf559 code=0x7ffc0000 [ 332.300465][ T29] audit: type=1326 audit(1792959076.914:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21622 comm="syz.0.6952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2facf559 code=0x7ffc0000 [ 332.300558][ T29] audit: type=1326 audit(1792959076.914:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21622 comm="syz.0.6952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2facf559 code=0x7ffc0000 [ 332.300597][ T29] audit: type=1326 audit(1792959076.914:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21622 comm="syz.0.6952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fed2facf559 code=0x7ffc0000 [ 332.300698][ T29] audit: type=1326 audit(1792959076.914:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21622 comm="syz.0.6952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2facf559 code=0x7ffc0000 [ 332.300806][ T29] audit: type=1326 audit(1792959076.914:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21622 comm="syz.0.6952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2facf559 code=0x7ffc0000 [ 332.300930][ T29] audit: type=1326 audit(1792959076.914:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21622 comm="syz.0.6952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fed2facf559 code=0x7ffc0000 [ 332.300978][ T29] audit: type=1326 audit(1792959076.914:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21622 comm="syz.0.6952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fed2facf559 code=0x7ffc0000 [ 332.552191][ T29] audit: type=1400 audit(1792959077.164:1416): avc: denied { setopt } for pid=21626 comm="syz.0.6954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 332.780802][T21654] ip_tables: iptables: counters copy to user failed while replacing table [ 332.948553][T21670] syzkaller0: entered promiscuous mode [ 332.948578][T21670] syzkaller0: entered allmulticast mode [ 333.017303][T21668] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 333.160604][T21691] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 333.186695][T21693] syzkaller0: entered promiscuous mode [ 333.186713][T21693] syzkaller0: entered allmulticast mode [ 333.189410][T21694] sctp: [Deprecated]: syz.3.6981 (pid 21694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.189410][T21694] Use struct sctp_sack_info instead [ 333.514270][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6997'. [ 333.597555][T21732] tipc: Enabled bearer , priority 0 [ 333.599299][T21730] tipc: Disabling bearer [ 334.007016][T21761] tipc: Enabling of bearer rejected, already enabled [ 334.245768][T21787] tipc: Enabling of bearer rejected, already enabled [ 334.321094][T21795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7031'. [ 334.482056][T21809] syzkaller0: entered promiscuous mode [ 334.482109][T21809] syzkaller0: entered allmulticast mode [ 334.562500][T21805] rxe_eth0 speed is unknown, defaulting to 1000 [ 334.711804][T21837] syzkaller0: entered promiscuous mode [ 334.711861][T21837] syzkaller0: entered allmulticast mode [ 334.778508][T21846] FAULT_INJECTION: forcing a failure. [ 334.778508][T21846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.778591][T21846] CPU: 0 UID: 0 PID: 21846 Comm: syz.4.7047 Not tainted syzkaller #0 PREEMPT(lazy) [ 334.778684][T21846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 334.778702][T21846] Call Trace: [ 334.778711][T21846] [ 334.778764][T21846] __dump_stack+0x1d/0x30 [ 334.778793][T21846] dump_stack_lvl+0x95/0xd0 [ 334.778868][T21846] dump_stack+0x15/0x1b [ 334.778897][T21846] should_fail_ex+0x262/0x280 [ 334.778969][T21846] should_fail+0xb/0x20 [ 334.779003][T21846] should_fail_usercopy+0x1a/0x20 [ 334.779108][T21846] _copy_to_user+0x20/0xa0 [ 334.779191][T21846] bpf_vlog_reverse_ubuf+0x265/0x360 [ 334.779376][T21846] bpf_vlog_finalize+0xf2/0x200 [ 334.779410][T21846] bpf_log_attr_finalize+0x33/0x100 [ 334.779507][T21846] btf_new_fd+0x34a/0x6a0 [ 334.779590][T21846] bpf_btf_load+0x116/0x130 [ 334.779619][T21846] __sys_bpf+0xbee/0xc50 [ 334.779709][T21846] ? do_futex+0x300/0x460 [ 334.779750][T21846] __x64_sys_bpf+0x69/0x80 [ 334.779797][T21846] x64_sys_call+0xf26/0x2550 [ 334.779867][T21846] do_syscall_64+0x112/0x360 [ 334.779911][T21846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.780053][T21846] RIP: 0033:0x7f84fbaff559 [ 334.780076][T21846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.780118][T21846] RSP: 002b:00007f84fa54f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.780157][T21846] RAX: ffffffffffffffda RBX: 00007f84fbd85fa0 RCX: 00007f84fbaff559 [ 334.780178][T21846] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 334.780193][T21846] RBP: 00007f84fbb96b20 R08: 0000000000000000 R09: 0000000000000000 [ 334.780207][T21846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.780334][T21846] R13: 00007f84fbd86038 R14: 00007f84fbd85fa0 R15: 00007ffd50ebbb38 [ 334.780361][T21846] [ 334.781919][T21805] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.781952][T21805] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.782004][T21805] bridge_slave_0: entered allmulticast mode [ 334.782592][T21805] bridge_slave_0: entered promiscuous mode [ 334.813819][T21805] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.813932][T21805] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.814305][T21805] bridge_slave_1: entered allmulticast mode [ 334.816584][T21805] bridge_slave_1: entered promiscuous mode [ 334.867871][T21805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.876436][T21805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.969233][T21805] team0: Port device team_slave_0 added [ 334.977650][T21805] team0: Port device team_slave_1 added [ 335.072103][T21805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.072122][T21805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.072229][T21805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.086387][T21805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.086432][T21805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.086526][T21805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.109167][T21850] syzkaller0: entered promiscuous mode [ 335.109229][T21850] syzkaller0: entered allmulticast mode [ 335.178007][T21805] hsr_slave_0: entered promiscuous mode [ 335.178510][T21805] hsr_slave_1: entered promiscuous mode [ 335.178811][T21805] debugfs: 'hsr0' already exists in 'hsr' [ 335.178835][T21805] Cannot create hsr debugfs directory [ 335.443006][T21805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 335.451981][T21805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.452503][T21805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 335.459523][T21805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.462369][T21805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 335.482247][T21805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.483189][T21805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 335.500107][T21805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.541872][T21805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.554170][T21805] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.557108][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.557170][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.561080][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.561123][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.605580][T21805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.720032][T21891] syzkaller0: entered promiscuous mode [ 335.720137][T21891] syzkaller0: entered allmulticast mode [ 335.756589][T21805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.794243][T21896] syzkaller0: entered promiscuous mode [ 335.794270][T21896] syzkaller0: entered allmulticast mode [ 335.910899][T21805] veth0_vlan: entered promiscuous mode [ 335.920140][T21805] veth1_vlan: entered promiscuous mode [ 335.945849][T21805] veth0_macvtap: entered promiscuous mode [ 335.949952][T21805] veth1_macvtap: entered promiscuous mode [ 335.969562][T21805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.986307][T21805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.035163][ T127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.035308][ T127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.035783][ T127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.035831][ T127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.061529][T21928] syzkaller0: entered promiscuous mode [ 336.061592][T21928] syzkaller0: entered allmulticast mode [ 336.187489][T21941] syzkaller0: entered promiscuous mode [ 336.187508][T21941] syzkaller0: entered allmulticast mode [ 336.453406][T21966] syzkaller0: entered promiscuous mode [ 336.453435][T21966] syzkaller0: entered allmulticast mode [ 336.574841][T21976] syzkaller0: entered promiscuous mode [ 336.574861][T21976] syzkaller0: entered allmulticast mode [ 336.695301][T21993] syzkaller0: entered promiscuous mode [ 336.695394][T21993] syzkaller0: entered allmulticast mode [ 336.926941][T22020] syzkaller0: entered promiscuous mode [ 336.926963][T22020] syzkaller0: entered allmulticast mode [ 336.974683][T22022] syzkaller0: entered promiscuous mode [ 336.974756][T22022] syzkaller0: entered allmulticast mode [ 337.017506][T22029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.017671][T22029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.259736][T22054] syzkaller0: entered promiscuous mode [ 337.259761][T22054] syzkaller0: entered allmulticast mode [ 337.341495][T22061] syzkaller0: entered promiscuous mode [ 337.341592][T22061] syzkaller0: entered allmulticast mode [ 337.582537][T22085] syzkaller0: entered promiscuous mode [ 337.582639][T22085] syzkaller0: entered allmulticast mode [ 337.691964][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 337.691983][ T29] audit: type=1400 audit(1792959082.304:1437): avc: denied { bind } for pid=22094 comm="syz.2.7146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 338.012194][T22120] tipc: Enabling of bearer rejected, failed to enable media [ 338.078878][T22143] netlink: 'syz.3.7165': attribute type 2 has an invalid length. [ 338.329227][T22162] tipc: Enabling of bearer rejected, failed to enable media [ 338.397061][T22184] syzkaller0: entered promiscuous mode [ 338.397082][T22184] syzkaller0: entered allmulticast mode [ 338.508910][T22199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7188'. [ 338.578206][ T29] audit: type=1400 audit(1792959083.194:1438): avc: denied { ioctl } for pid=22210 comm="syz.0.7192" path="socket:[69762]" dev="sockfs" ino=69762 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.624482][T22218] tipc: Enabling of bearer rejected, failed to enable media [ 338.628287][T22217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.628528][T22217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.648758][T22217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7194'. [ 338.918570][T22238] rxe_eth0 speed is unknown, defaulting to 1000 [ 339.051675][T22238] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.051718][T22238] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.051795][T22238] bridge_slave_0: entered allmulticast mode [ 339.052334][T22238] bridge_slave_0: entered promiscuous mode [ 339.054063][T22238] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.054177][T22238] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.054432][T22238] bridge_slave_1: entered allmulticast mode [ 339.055610][T22238] bridge_slave_1: entered promiscuous mode [ 339.078409][T22238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.081026][T22238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.111544][T22238] team0: Port device team_slave_0 added [ 339.116371][T22238] team0: Port device team_slave_1 added [ 339.118307][T22270] tipc: Enabling of bearer rejected, failed to enable media [ 339.152219][T22238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.152240][T22238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.152305][T22238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.152930][T22238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.152943][T22238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.153060][T22238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.274401][T22238] hsr_slave_0: entered promiscuous mode [ 339.276288][T22238] hsr_slave_1: entered promiscuous mode [ 339.276682][T22238] debugfs: 'hsr0' already exists in 'hsr' [ 339.276701][T22238] Cannot create hsr debugfs directory [ 339.410782][T22238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.410960][T22238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.504225][T22238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.504280][T22238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.510788][T22296] tipc: Enabling of bearer rejected, failed to enable media [ 339.561807][T22238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.561848][T22238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.641941][T22238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.641987][T22238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.744005][T22315] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7226'. [ 339.745136][T22238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.747213][T22238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.747495][T22315] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7226'. [ 339.749201][T22238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.751229][T22238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.751722][T22238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 339.799150][T22238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.810672][T22238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.819084][T22238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.879885][T22238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.895704][T22238] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.901414][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.901458][ T5604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.916408][T10210] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.916516][T10210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.096592][T22352] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7236'. [ 340.096707][T22352] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7236'. [ 340.141969][T22238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.258474][T22238] veth0_vlan: entered promiscuous mode [ 340.270837][T22238] veth1_vlan: entered promiscuous mode [ 340.280574][T22377] syzkaller0: entered promiscuous mode [ 340.280596][T22377] syzkaller0: entered allmulticast mode [ 340.308929][T22238] veth0_macvtap: entered promiscuous mode [ 340.312006][T22238] veth1_macvtap: entered promiscuous mode [ 340.329526][T22238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.334809][T22238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.364317][ T72] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.364503][ T72] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.364607][ T72] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.364642][ T72] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.444419][T22389] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7247'. [ 340.444521][T22389] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7247'. [ 340.529336][T22405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7253'. [ 340.624851][T22408] syzkaller0: entered promiscuous mode [ 340.624877][T22408] syzkaller0: entered allmulticast mode [ 340.658614][T22410] pimreg1: tun_chr_ioctl cmd 2147767520 [ 340.658702][T22410] pimreg1: tun_chr_ioctl cmd 2147767507 [ 340.785749][T22422] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7259'. [ 340.785994][T22422] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7259'. [ 340.835706][ T29] audit: type=1400 audit(1792959085.454:1439): avc: denied { execute_no_trans } for pid=22427 comm="syz.0.7262" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 340.888393][T22430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 340.997167][T22436] syzkaller0: entered promiscuous mode [ 340.997196][T22436] syzkaller0: entered allmulticast mode [ 341.037697][T22438] pimreg1: tun_chr_ioctl cmd 2147767520 [ 341.039198][T22438] pimreg1: tun_chr_ioctl cmd 2147767507 [ 341.756828][T22469] syzkaller1: entered promiscuous mode [ 341.756859][T22469] syzkaller1: entered allmulticast mode [ 341.832734][T22471] pimreg1: tun_chr_ioctl cmd 2147767520 [ 341.832868][T22471] pimreg1: tun_chr_ioctl cmd 2147767507 [ 342.057953][T22491] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 342.094335][T22495] syzkaller1: entered promiscuous mode [ 342.094361][T22495] syzkaller1: entered allmulticast mode [ 342.165889][T22503] ip_tables: iptables: counters copy to user failed while replacing table [ 342.181972][ T29] audit: type=1326 audit(1792959086.794:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22504 comm="syz.2.7295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e1a31f559 code=0x0 [ 342.277787][T22518] ipvlan2: entered allmulticast mode [ 342.277814][T22518] syz_tun: entered allmulticast mode [ 342.278578][T22519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.281416][T22519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.370174][T22530] syzkaller0: entered promiscuous mode [ 342.370200][T22530] syzkaller0: entered allmulticast mode [ 342.400253][T22533] tipc: Cannot configure node identity twice [ 342.472418][T22543] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.988820][T22568] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.298731][T22595] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.386389][T22602] tipc: Enabling of bearer rejected, failed to enable media [ 343.425526][T18290] hid_parser_main: 17 callbacks suppressed [ 343.425551][T18290] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 343.426090][T18290] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.626738][T22617] rxe_eth0 speed is unknown, defaulting to 1000 [ 343.729131][T22624] __nla_validate_parse: 21 callbacks suppressed [ 343.729196][T22624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7341'. [ 343.845059][T22628] syzkaller1: entered promiscuous mode [ 343.845077][T22628] syzkaller1: entered allmulticast mode [ 344.142598][T22639] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 344.154541][T22640] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 344.240682][T22642] usb usb8: usbfs: process 22642 (syz.3.7349) did not claim interface 0 before use [ 344.302524][T22648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7352'. [ 344.344725][T22652] syzkaller1: entered promiscuous mode [ 344.344744][T22652] syzkaller1: entered allmulticast mode [ 344.863551][T22661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7357'. [ 344.866715][T22661] ipvlan2: entered allmulticast mode [ 344.866743][T22661] syz_tun: entered allmulticast mode [ 344.916385][T22663] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7358'. [ 344.990923][T22665] tipc: Enabled bearer , priority 0 [ 344.991370][T22665] syzkaller0: entered promiscuous mode [ 344.991405][T22665] syzkaller0: entered allmulticast mode [ 345.024672][T22665] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 345.027194][T22665] tipc: Resetting bearer [ 345.047667][T22664] tipc: Resetting bearer [ 345.051973][T22664] tipc: Disabling bearer [ 345.184922][T22679] syzkaller1: entered promiscuous mode [ 345.184950][T22679] syzkaller1: entered allmulticast mode [ 345.238494][T22683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7368'. [ 345.282663][T22686] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 345.302704][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7369'. [ 345.526440][T22706] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 345.578181][T22710] syzkaller1: entered promiscuous mode [ 345.578202][T22710] syzkaller1: entered allmulticast mode [ 345.616853][T22712] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7382'. [ 345.679690][T22716] tipc: Started in network mode [ 345.679726][T22716] tipc: Node identity f27d1eb1f67d, cluster identity 4711 [ 345.679874][T22716] tipc: Enabled bearer , priority 0 [ 345.687286][T22715] tipc: Disabling bearer [ 345.732313][T22720] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.732454][T22720] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.916784][T22735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7392'. [ 345.927664][T22736] syzkaller1: entered promiscuous mode [ 345.927690][T22736] syzkaller1: entered allmulticast mode [ 346.012227][T22744] tipc: Enabled bearer , priority 0 [ 346.015919][T22743] tipc: Disabling bearer [ 346.027665][T22746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7398'. [ 346.126041][T22763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7406'. [ 346.241688][T15097] logitech-hidpp-device 0003:046D:C082.0007: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 346.282839][T22787] syzkaller0: entered promiscuous mode [ 346.282869][T22787] syzkaller0: entered allmulticast mode [ 346.292098][T22787] tipc: Enabled bearer , priority 0 [ 346.301737][T22784] tipc: Resetting bearer [ 346.320583][T22784] tipc: Disabling bearer [ 346.333046][T22788] fido_id[22788]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 346.354959][T22795] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 346.516010][T22818] syzkaller1: entered promiscuous mode [ 346.516046][T22818] syzkaller1: entered allmulticast mode [ 346.609657][T22832] syzkaller0: entered promiscuous mode [ 346.609679][T22832] syzkaller0: entered allmulticast mode [ 346.611734][T22832] tipc: Started in network mode [ 346.611770][T22832] tipc: Node identity 1a2f6b6a635a, cluster identity 4711 [ 346.611805][T22832] tipc: Enabled bearer , priority 0 [ 346.625122][T22831] tipc: Resetting bearer [ 346.652569][T22831] tipc: Disabling bearer [ 346.925161][T22872] netlink: 'syz.2.7457': attribute type 1 has an invalid length. [ 346.945944][T22872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.961569][T22872] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 347.011369][T22887] syzkaller1: entered promiscuous mode [ 347.011409][T22887] syzkaller1: entered allmulticast mode [ 347.408756][T22917] syzkaller1: entered promiscuous mode [ 347.408776][T22917] syzkaller1: entered allmulticast mode [ 347.684355][T22949] syzkaller0: entered promiscuous mode [ 347.684373][T22949] syzkaller0: entered allmulticast mode [ 347.747895][T22954] netlink: 'syz.1.7490': attribute type 24 has an invalid length. [ 348.385154][T23045] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 348.692939][T23082] syzkaller0: entered promiscuous mode [ 348.693247][T23082] syzkaller0: entered allmulticast mode [ 348.695656][T23082] tipc: Enabled bearer , priority 0 [ 348.696096][T23081] tipc: Resetting bearer [ 348.698311][T23081] tipc: Disabling bearer [ 348.836902][T23088] syzkaller0: entered promiscuous mode [ 348.836922][T23088] syzkaller0: entered allmulticast mode [ 348.979224][T23096] netlink: 'syz.1.7553': attribute type 1 has an invalid length. [ 348.980636][T23096] bond4: (slave batadv0): Removing an active aggregator [ 348.980937][T23096] bond4: (slave batadv0): Releasing backup interface [ 349.214064][T23113] syzkaller0: entered promiscuous mode [ 349.214089][T23113] syzkaller0: entered allmulticast mode [ 349.312209][T23123] netlink: 'syz.0.7565': attribute type 1 has an invalid length. [ 349.450096][T23134] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 349.520384][T23140] loop8: detected capacity change from 0 to 16384 [ 349.903773][T23146] loop8: detected capacity change from 16384 to 16383 [ 350.090928][T23170] netlink: 'syz.0.7585': attribute type 1 has an invalid length. [ 350.120371][T23174] usb usb8: usbfs: process 23174 (syz.0.7586) did not claim interface 0 before use [ 350.214357][T23186] syzkaller0: entered promiscuous mode [ 350.214375][T23186] syzkaller0: entered allmulticast mode [ 350.216563][T23186] tipc: Enabled bearer , priority 0 [ 350.217095][T23185] tipc: Resetting bearer [ 350.219852][T23185] tipc: Disabling bearer [ 350.351499][T23200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.351718][T23200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.482780][T23217] syzkaller0: entered promiscuous mode [ 350.482808][T23217] syzkaller0: entered allmulticast mode [ 350.494560][T23217] tipc: Enabled bearer , priority 0 [ 350.501735][T23216] tipc: Resetting bearer [ 350.509865][T23216] tipc: Disabling bearer [ 350.535175][T23225] xt_connbytes: Forcing CT accounting to be enabled [ 350.725726][T23253] __nla_validate_parse: 4 callbacks suppressed [ 350.725748][T23253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7624'. [ 351.026066][T23300] syzkaller0: entered promiscuous mode [ 351.026091][T23300] syzkaller0: entered allmulticast mode [ 351.028187][T23300] tipc: Enabled bearer , priority 0 [ 351.028607][T23299] tipc: Resetting bearer [ 351.061090][T23299] tipc: Disabling bearer [ 351.500973][T23330] tipc: Enabled bearer , priority 0 [ 351.501283][T23330] syzkaller0: entered promiscuous mode [ 351.501299][T23330] syzkaller0: entered allmulticast mode [ 351.515665][T23330] tipc: Resetting bearer [ 351.522886][T23329] tipc: Resetting bearer [ 351.534588][T23329] tipc: Disabling bearer [ 352.094666][T23370] rxe_eth0 speed is unknown, defaulting to 1000 [ 352.237487][ T38] bridge_slave_1: left allmulticast mode [ 352.237510][ T38] bridge_slave_1: left promiscuous mode [ 352.237691][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.241047][ T38] bridge_slave_0: left allmulticast mode [ 352.241073][ T38] bridge_slave_0: left promiscuous mode [ 352.241234][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.307890][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.308021][ T38] bond_slave_0: left allmulticast mode [ 352.308636][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.308854][ T38] bond_slave_1: left allmulticast mode [ 352.309105][ T38] bond0 (unregistering): Released all slaves [ 352.311061][ T38] bond1 (unregistering): Released all slaves [ 352.316287][ T38] bond2 (unregistering): Released all slaves [ 352.323552][ T38] bond3 (unregistering): Released all slaves [ 352.330287][ T38] bond4 (unregistering): Released all slaves [ 352.378638][ T38] tipc: Disabling bearer [ 352.378690][ T38] tipc: Left network mode [ 352.450636][ T38] hsr_slave_0: left promiscuous mode [ 352.451010][ T38] hsr_slave_1: left promiscuous mode [ 352.451476][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.451851][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.508069][ T38] team_slave_1 (unregistering): left allmulticast mode [ 352.508475][ T38] team0 (unregistering): Port device team_slave_1 removed [ 352.510984][ T38] team_slave_0 (unregistering): left allmulticast mode [ 352.511536][ T38] team0 (unregistering): Port device team_slave_0 removed [ 352.572035][ T29] audit: type=1400 audit(1792959097.184:1441): avc: denied { write } for pid=23423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.608545][ T29] audit: type=1400 audit(1792959097.224:1442): avc: denied { write } for pid=23435 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.646881][ T3016] 8021q: adding VLAN 0 to HW filter on device eth1 [ 352.650556][T23370] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.650599][T23370] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.650669][T23370] bridge_slave_0: entered allmulticast mode [ 352.651269][T23370] bridge_slave_0: entered promiscuous mode [ 352.688847][T23370] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.688890][T23370] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.689069][T23370] bridge_slave_1: entered allmulticast mode [ 352.689649][T23370] bridge_slave_1: entered promiscuous mode [ 352.730617][T23370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.732834][T23442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7687'. [ 352.751904][T23370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.780163][T23370] team0: Port device team_slave_0 added [ 352.781236][T23370] team0: Port device team_slave_1 added [ 352.808938][T23370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.808958][T23370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.809009][T23370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.810086][T23370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.810113][T23370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.810150][T23370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.877982][T23370] hsr_slave_0: entered promiscuous mode [ 352.879429][T23370] hsr_slave_1: entered promiscuous mode [ 352.880136][T23370] debugfs: 'hsr0' already exists in 'hsr' [ 352.880180][T23370] Cannot create hsr debugfs directory [ 352.932922][T23444] syzkaller0: entered promiscuous mode [ 352.933022][T23444] syzkaller0: entered allmulticast mode [ 352.982070][T23448] syzkaller0: entered promiscuous mode [ 352.982099][T23448] syzkaller0: entered allmulticast mode [ 353.002909][T23448] tipc: Enabled bearer , priority 0 [ 353.008235][T23447] tipc: Resetting bearer [ 353.025492][T23447] tipc: Disabling bearer [ 353.122618][ T29] audit: type=1400 audit(1792959097.734:1443): avc: denied { write } for pid=23454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.167562][T23473] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 353.170860][ T29] audit: type=1400 audit(1792959097.784:1444): avc: denied { write } for pid=23475 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.187022][T23473] sch_tbf: peakrate 257 is lower than or equals to rate 13227048128461824939 ! [ 353.238981][ T3016] 8021q: adding VLAN 0 to HW filter on device eth2 [ 353.377649][ T29] audit: type=1400 audit(1792959097.994:1445): avc: denied { write } for pid=23487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.436390][T23502] syzkaller0: entered promiscuous mode [ 353.436435][T23502] syzkaller0: entered allmulticast mode [ 353.439313][ T29] audit: type=1400 audit(1792959098.054:1446): avc: denied { write } for pid=23506 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.578251][ T29] audit: type=1400 audit(1792959098.194:1447): avc: denied { write } for pid=23511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.612468][ T29] audit: type=1400 audit(1792959098.224:1448): avc: denied { write } for pid=23528 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.715086][ T29] audit: type=1400 audit(1792959098.334:1449): avc: denied { write } for pid=23532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.722218][T23370] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 353.748789][T23370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.763336][ T29] audit: type=1400 audit(1792959098.374:1450): avc: denied { write } for pid=23548 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.787296][T23370] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 353.789641][T23370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.790253][T23370] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 353.792266][T23370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.792734][T23370] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.802463][T23370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.869394][T23370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.883909][T23370] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.888975][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.889021][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.890606][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.890649][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.987707][T23569] tipc: Enabled bearer , priority 0 [ 353.987974][T23569] syzkaller0: entered promiscuous mode [ 353.988046][T23569] syzkaller0: entered allmulticast mode [ 354.004093][T23569] tipc: Resetting bearer [ 354.014226][T23568] tipc: Resetting bearer [ 354.025669][T23568] tipc: Disabling bearer [ 354.123942][T23370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.246626][T23590] syzkaller0: entered promiscuous mode [ 354.246645][T23590] syzkaller0: entered allmulticast mode [ 354.272323][T23370] veth0_vlan: entered promiscuous mode [ 354.279097][T23370] veth1_vlan: entered promiscuous mode [ 354.310010][T23370] veth0_macvtap: entered promiscuous mode [ 354.312402][T23370] veth1_macvtap: entered promiscuous mode [ 354.323636][T23370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.335096][T23370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.363989][T10210] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.365916][T10210] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.366000][T10210] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.366171][T10210] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.424657][T23607] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 354.425076][T23607] sch_tbf: peakrate 257 is lower than or equals to rate 13227048128461824939 ! [ 354.511478][T23616] tipc: Enabled bearer , priority 0 [ 354.511778][T23616] syzkaller0: entered promiscuous mode [ 354.511845][T23616] syzkaller0: entered allmulticast mode [ 354.544409][T23616] tipc: Resetting bearer [ 354.546693][T23615] tipc: Resetting bearer [ 354.550404][T23615] tipc: Disabling bearer [ 354.615513][T23627] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.615699][T23627] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.236024][T23656] tipc: Enabled bearer , priority 0 [ 355.236319][T23656] syzkaller0: entered promiscuous mode [ 355.236342][T23656] syzkaller0: entered allmulticast mode [ 355.240089][T23656] tipc: Resetting bearer [ 355.250385][T23655] tipc: Resetting bearer [ 355.267208][T23655] tipc: Disabling bearer [ 355.302678][T23658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7739'. [ 355.621373][T23694] tipc: Enabled bearer , priority 0 [ 355.623785][T23694] syzkaller0: entered promiscuous mode [ 355.623865][T23694] syzkaller0: entered allmulticast mode [ 355.652536][T23694] tipc: Resetting bearer [ 355.662472][T23693] tipc: Resetting bearer [ 355.670089][T23693] tipc: Disabling bearer [ 355.762652][T23714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7763'. [ 355.896010][T23732] tipc: Enabled bearer , priority 0 [ 355.896371][T23732] syzkaller0: entered promiscuous mode [ 355.896408][T23732] syzkaller0: entered allmulticast mode [ 355.902453][T23736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.902559][T23736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.908789][T23732] tipc: Resetting bearer [ 355.909451][T23736] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.909850][T23736] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.921703][T23730] tipc: Resetting bearer [ 355.939222][T23730] tipc: Disabling bearer [ 356.006601][T23738] syzkaller0: entered promiscuous mode [ 356.006619][T23738] syzkaller0: entered allmulticast mode [ 356.222962][T23759] tipc: Enabled bearer , priority 0 [ 356.223712][T23759] syzkaller0: entered promiscuous mode [ 356.223833][T23759] syzkaller0: entered allmulticast mode [ 356.232160][T23759] tipc: Resetting bearer [ 356.241929][T23758] tipc: Resetting bearer [ 356.254143][T23758] tipc: Disabling bearer [ 356.367017][T23763] syzkaller0: entered promiscuous mode [ 356.367040][T23763] syzkaller0: entered allmulticast mode [ 356.577119][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7795'. [ 356.632691][T23791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.632792][T23791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.693495][T23789] syzkaller0: entered promiscuous mode [ 356.693514][T23789] syzkaller0: entered allmulticast mode [ 356.695330][T23791] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.695483][T23791] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.950135][T23825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7812'. [ 357.244905][T23856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7827'. [ 357.382860][T23876] syzkaller0: entered promiscuous mode [ 357.382897][T23876] syzkaller0: entered allmulticast mode [ 357.414173][T23880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7839'. [ 357.842755][T23918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.843000][T23918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.711317][T23929] syzkaller0: entered promiscuous mode [ 358.711340][T23929] syzkaller0: entered allmulticast mode [ 359.455869][T24007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.458276][T24007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.503198][T10210] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.503247][T10210] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.503286][T10210] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.503347][T10210] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.619344][T24023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 359.984894][T24037] team0: left allmulticast mode [ 359.985076][T24037] team_slave_0: left allmulticast mode [ 359.985162][T24037] team_slave_1: left allmulticast mode [ 360.115618][T24037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.117917][T24037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.282220][ T5604] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.282277][ T5604] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.282325][ T5604] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.282384][ T5604] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.376587][T24063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7905'. [ 360.399072][T24065] netlink: 'syz.1.7906': attribute type 1 has an invalid length. [ 360.429903][T24065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.447596][T24065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.453055][T24065] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 360.755807][T24056] rxe_eth0 speed is unknown, defaulting to 1000 [ 361.142691][T24101] netlink: 'syz.0.7920': attribute type 1 has an invalid length. [ 361.202354][T24092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.215073][T24092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.404720][T24101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.433933][T24104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.437113][T24104] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 361.504417][T10210] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.504496][T10210] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.504541][T10210] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.504643][T10210] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.509655][T24116] syzkaller0: entered promiscuous mode [ 361.509675][T24116] syzkaller0: entered allmulticast mode [ 362.165989][T24134] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.166206][T24134] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.364507][T24134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.376411][T24134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.583158][ T72] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.583227][ T72] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.583342][ T72] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.583389][ T72] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.783737][T24056] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.783777][T24056] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.783924][T24056] bridge_slave_0: entered allmulticast mode [ 362.784656][T24056] bridge_slave_0: entered promiscuous mode [ 362.789294][T24056] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.789834][T24056] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.790027][T24056] bridge_slave_1: entered allmulticast mode [ 362.793529][T24056] bridge_slave_1: entered promiscuous mode [ 362.861599][T24056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.862958][T24056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.926817][T24056] team0: Port device team_slave_0 added [ 362.935566][T24056] team0: Port device team_slave_1 added [ 363.018435][T24056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.018451][T24056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.018539][T24056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.034207][T24056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.034258][T24056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.034354][T24056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.170847][T24056] hsr_slave_0: entered promiscuous mode [ 363.171300][T24056] hsr_slave_1: entered promiscuous mode [ 363.186455][T24056] debugfs: 'hsr0' already exists in 'hsr' [ 363.186472][T24056] Cannot create hsr debugfs directory [ 363.232700][T24183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24183 comm=syz.1.7946 [ 363.488694][T24056] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.527918][T24056] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.657779][T24056] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.740198][T24056] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.848907][T24209] tipc: Enabled bearer , priority 0 [ 363.849328][T24209] syzkaller0: entered promiscuous mode [ 363.849399][T24209] syzkaller0: entered allmulticast mode [ 363.862834][T24056] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 363.882624][T24056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.883765][T24209] tipc: Resetting bearer [ 363.893290][T24208] tipc: Resetting bearer [ 363.913429][T24208] tipc: Disabling bearer [ 363.923609][T24056] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 363.926757][T24056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.927285][T24056] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 363.938367][T24056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.958798][T24056] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 363.977829][T24056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.062198][T24231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7962'. [ 364.147838][T24056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.169808][T24056] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.177728][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.177843][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.196807][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.196845][ T5604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.247808][T24243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.256358][T24243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.427899][T24056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.454646][T24263] syzkaller0: entered promiscuous mode [ 364.454674][T24263] syzkaller0: entered allmulticast mode [ 364.648528][T24275] syzkaller0: entered promiscuous mode [ 364.648557][T24275] syzkaller0: entered allmulticast mode [ 364.707027][T24056] veth0_vlan: entered promiscuous mode [ 364.709638][T24056] veth1_vlan: entered promiscuous mode [ 364.745683][T24056] veth0_macvtap: entered promiscuous mode [ 364.749570][T24056] veth1_macvtap: entered promiscuous mode [ 364.796011][T24056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.817319][T24056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.833174][ T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.842018][T10210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.864555][ T5604] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.864696][ T5604] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.067416][T24305] rxe_eth0 speed is unknown, defaulting to 1000 [ 365.229781][T24312] syzkaller0: entered promiscuous mode [ 365.229826][T24312] syzkaller0: entered allmulticast mode [ 365.300415][T24323] syzkaller0: entered promiscuous mode [ 365.300440][T24323] syzkaller0: entered allmulticast mode [ 365.831668][T24386] tipc: Enabled bearer , priority 0 [ 365.832440][T24386] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 365.838960][T24386] tipc: Resetting bearer [ 365.857824][T24385] tipc: Disabling bearer [ 366.058126][T24408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8018'. [ 366.135380][T24420] syzkaller0: entered promiscuous mode [ 366.135398][T24420] syzkaller0: entered allmulticast mode [ 366.137065][T24420] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 366.230826][T24423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.230983][T24423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.325424][T24436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8031'. [ 366.504598][T24454] syzkaller0: entered promiscuous mode [ 366.504653][T24454] syzkaller0: entered allmulticast mode [ 366.508825][T24454] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 366.714720][T24488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.715450][T24488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.799011][T24492] rxe_eth0 speed is unknown, defaulting to 1000 [ 366.849166][T24497] syzkaller0: entered promiscuous mode [ 366.849191][T24497] syzkaller0: entered allmulticast mode [ 366.867195][T24497] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 367.014179][T24501] IPVS: Scheduler module ip_vs_mh not found [ 367.022109][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 367.022177][ T29] audit: type=1400 audit(1792959111.634:1453): avc: denied { checkpoint_restore } for pid=24503 comm="syz.2.8059" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 367.296905][T24522] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 367.299798][T24523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8068'. [ 367.347183][T24527] syzkaller0: entered promiscuous mode [ 367.347207][T24527] syzkaller0: entered allmulticast mode [ 367.350539][T24527] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 367.565722][T24534] syzkaller0: entered promiscuous mode [ 367.565749][T24534] syzkaller0: entered allmulticast mode [ 367.764441][T24538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8074'. [ 368.203619][T24549] syzkaller0: entered promiscuous mode [ 368.203649][T24549] syzkaller0: entered allmulticast mode [ 368.381868][T24567] loop2: detected capacity change from 0 to 128 [ 368.392672][T24570] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 368.393466][T24567] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.394130][T24567] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.401287][ T29] audit: type=1400 audit(1792959113.014:1454): avc: denied { write } for pid=24566 comm="syz.2.8088" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 368.460581][T21805] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.467313][T24570] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 368.494758][T24574] syzkaller0: entered promiscuous mode [ 368.494785][T24574] syzkaller0: entered allmulticast mode [ 368.497138][T24574] tipc: Started in network mode [ 368.497171][T24574] tipc: Node identity 7231572fb004, cluster identity 4711 [ 368.497211][T24574] tipc: Enabled bearer , priority 0 [ 368.497855][T24572] tipc: Resetting bearer [ 368.500410][T24572] tipc: Disabling bearer [ 368.563477][T24577] loop4: detected capacity change from 0 to 256 [ 368.593183][T24577] FAT-fs (loop4): IO charset cp857 not found [ 368.654403][T24586] loop4: detected capacity change from 0 to 2048 [ 368.686776][T24586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.686905][T24586] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.786539][T24600] syzkaller0: entered promiscuous mode [ 368.786566][T24600] syzkaller0: entered allmulticast mode [ 369.419631][T24056] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.462520][T24635] loop1: detected capacity change from 0 to 512 [ 369.471130][T24635] EXT4-fs: test_dummy_encryption option not supported [ 369.605176][T24645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.605439][T24645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.766022][T24649] syzkaller0: entered promiscuous mode [ 369.766045][T24649] syzkaller0: entered allmulticast mode [ 369.941963][T24655] loop3: detected capacity change from 0 to 256 [ 369.963650][T24657] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 369.963901][T24657] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 369.968522][T24655] FAT-fs (loop3): codepage cp737 not found [ 370.287546][T24678] syzkaller0: entered promiscuous mode [ 370.287574][T24678] syzkaller0: entered allmulticast mode [ 370.402452][ T29] audit: type=1400 audit(1792959115.014:1455): avc: denied { ioctl } for pid=24682 comm="syz.1.8139" path="socket:[79266]" dev="sockfs" ino=79266 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 370.467315][T24686] syzkaller0: entered promiscuous mode [ 370.467343][T24686] syzkaller0: entered allmulticast mode [ 370.971599][T24711] syzkaller0: entered promiscuous mode [ 370.971676][T24711] syzkaller0: entered allmulticast mode [ 371.078797][T24718] FAULT_INJECTION: forcing a failure. [ 371.078797][T24718] name failslab, interval 1, probability 0, space 0, times 0 [ 371.078857][T24718] CPU: 1 UID: 0 PID: 24718 Comm: syz.1.8152 Not tainted syzkaller #0 PREEMPT(lazy) [ 371.078892][T24718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 371.078962][T24718] Call Trace: [ 371.078973][T24718] [ 371.078982][T24718] __dump_stack+0x1d/0x30 [ 371.079011][T24718] dump_stack_lvl+0x95/0xd0 [ 371.079106][T24718] dump_stack+0x15/0x1b [ 371.079131][T24718] should_fail_ex+0x262/0x280 [ 371.079170][T24718] ? security_prepare_creds+0x52/0x120 [ 371.079270][T24718] should_failslab+0x8c/0xb0 [ 371.079362][T24718] __kmalloc_noprof+0xb6/0x4b0 [ 371.079403][T24718] ? security_prepare_creds+0x52/0x120 [ 371.079433][T24718] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 371.079538][T24718] security_prepare_creds+0x52/0x120 [ 371.079626][T24718] prepare_creds+0x385/0x550 [ 371.079682][T24718] lookup_user_key+0x184/0xef0 [ 371.079724][T24718] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 371.079759][T24718] __se_sys_add_key+0x272/0x360 [ 371.079795][T24718] __x64_sys_add_key+0x67/0x80 [ 371.079825][T24718] x64_sys_call+0x1fa9/0x2550 [ 371.079889][T24718] do_syscall_64+0x112/0x360 [ 371.079923][T24718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.079952][T24718] RIP: 0033:0x7f414189f559 [ 371.079974][T24718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.080048][T24718] RSP: 002b:00007f41402ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 371.080090][T24718] RAX: ffffffffffffffda RBX: 00007f4141b25fa0 RCX: 00007f414189f559 [ 371.080111][T24718] RDX: 0000200000000a40 RSI: 0000000000000000 RDI: 0000200000000a00 [ 371.080130][T24718] RBP: 00007f4141936b20 R08: fffffffffffffffe R09: 0000000000000000 [ 371.080149][T24718] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 371.080167][T24718] R13: 00007f4141b26038 R14: 00007f4141b25fa0 R15: 00007ffda248fd68 [ 371.080220][T24718] [ 371.413713][T24728] tipc: Enabling of bearer rejected, failed to enable media [ 371.432675][T24728] syzkaller0: entered promiscuous mode [ 371.432695][T24728] syzkaller0: entered allmulticast mode [ 371.574950][T24741] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 371.587781][T24741] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 371.636501][T24743] syzkaller0: entered promiscuous mode [ 371.636530][T24743] syzkaller0: entered allmulticast mode [ 371.876732][T24761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.876873][T24761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.976043][ T29] audit: type=1326 audit(1792959116.594:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.4.8169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4174e7f559 code=0x7ffc0000 [ 371.977276][ T29] audit: type=1326 audit(1792959116.594:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.4.8169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f4174e7f559 code=0x7ffc0000 [ 371.977339][ T29] audit: type=1326 audit(1792959116.594:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.4.8169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4174e7f559 code=0x7ffc0000 [ 371.977372][ T29] audit: type=1326 audit(1792959116.594:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.4.8169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4174e7f559 code=0x7ffc0000 [ 372.088952][T24767] tipc: New replicast peer: 172.20.20.187 [ 372.089234][T24767] tipc: Enabled bearer , priority 10 [ 372.311826][T24777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8174'. [ 372.408123][T24781] syzkaller0: entered promiscuous mode [ 372.408148][T24781] syzkaller0: entered allmulticast mode [ 372.681272][T24797] loop3: detected capacity change from 0 to 1024 [ 372.695476][T24797] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 372.711791][T24797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.795857][ T53] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5172: inode #15: block 63: len 65: ext4_map_blocks returned -28 [ 372.795956][ T53] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -28) [ 372.835591][ T29] audit: type=1400 audit(1792959117.354:1460): avc: denied { write } for pid=24795 comm="syz.3.8184" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.881921][T22238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.896460][T24799] syzkaller0: entered promiscuous mode [ 372.896502][T24799] syzkaller0: entered allmulticast mode [ 373.052943][T24813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8188'. [ 373.089546][T20328] tipc: Node number set to 3258275631 [ 373.137336][T24815] syzkaller0: entered promiscuous mode [ 373.137427][T24815] syzkaller0: entered allmulticast mode [ 373.543778][T24838] syzkaller0: entered promiscuous mode [ 373.543802][T24838] syzkaller0: entered allmulticast mode [ 373.640591][T24842] syzkaller0: entered promiscuous mode [ 373.640693][T24842] syzkaller0: entered allmulticast mode [ 373.820727][T24864] TC_ACT_REPEAT abuse ? [ 373.882638][T24872] syzkaller0: entered promiscuous mode [ 373.882662][T24872] syzkaller0: entered allmulticast mode [ 373.994030][T24891] loop1: detected capacity change from 0 to 128 [ 374.013455][T24891] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.015057][T24891] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.016771][ T29] audit: type=1400 audit(1792959118.634:1461): avc: denied { write } for pid=24890 comm="syz.1.8223" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 374.020864][ T29] audit: type=1400 audit(1792959118.634:1462): avc: denied { write } for pid=24890 comm="syz.1.8223" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 374.116335][T23370] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.327365][T24916] syzkaller0: entered promiscuous mode [ 374.327394][T24916] syzkaller0: entered allmulticast mode [ 374.639909][T24937] TC_ACT_REPEAT abuse ? [ 374.775165][T24941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8245'. [ 374.779697][T24939] syzkaller0: entered promiscuous mode [ 374.779794][T24939] syzkaller0: entered allmulticast mode [ 374.934632][T24947] loop0: detected capacity change from 0 to 128 [ 374.947962][T24947] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.949835][T24947] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.966154][ T29] audit: type=1400 audit(1792959119.574:1463): avc: denied { write } for pid=24946 comm="syz.0.8248" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 374.977375][ T29] audit: type=1400 audit(1792959119.594:1464): avc: denied { write } for pid=24946 comm="syz.0.8248" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 375.027518][T19772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.134435][T24963] syzkaller0: entered promiscuous mode [ 375.134461][T24963] syzkaller0: entered allmulticast mode [ 375.168716][T24969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8258'. [ 375.224620][T24967] syzkaller0: entered promiscuous mode [ 375.224648][T24967] syzkaller0: entered allmulticast mode [ 375.283637][T24981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.283794][T24981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.429705][T24998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8270'. [ 375.491156][T25000] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.491312][T25000] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.541283][T25000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.551398][T25000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.614402][ T5604] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.614460][ T5604] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.614509][ T5604] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.614680][ T5604] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.724900][ T29] audit: type=1400 audit(1792959120.344:1465): avc: denied { read } for pid=25002 comm="syz.4.8272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.834496][T25006] syzkaller0: entered promiscuous mode [ 375.834543][T25006] syzkaller0: entered allmulticast mode [ 376.023864][T25010] syzkaller0: entered promiscuous mode [ 376.023883][T25010] syzkaller0: entered allmulticast mode [ 376.147699][T25016] loop1: detected capacity change from 0 to 128 [ 376.150096][T25016] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.150421][T25016] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.199856][T25019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8279'. [ 376.231825][T23370] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.266489][T25027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.266601][T25027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.306221][T25029] loop2: detected capacity change from 0 to 128 [ 376.314829][T25029] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.315036][T25029] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.316707][ T29] audit: type=1400 audit(1792959120.934:1466): avc: denied { write } for pid=25028 comm="syz.2.8284" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.369857][T21805] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.387637][T25032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8285'. [ 376.485074][T25045] loop1: detected capacity change from 0 to 256 [ 376.508469][T25045] FAT-fs (loop1): codepage cp775 not found [ 376.595424][T25052] syzkaller0: entered promiscuous mode [ 376.595454][T25052] syzkaller0: entered allmulticast mode [ 377.079435][T25060] loop0: detected capacity change from 0 to 512 [ 377.098824][T25060] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 377.098842][T25060] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 377.132594][T25060] EXT4-fs (loop0): 1 truncate cleaned up [ 377.142692][T25060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.181682][ T29] audit: type=1400 audit(1792959121.794:1467): avc: denied { write } for pid=25059 comm="syz.0.8293" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.224166][T25060] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 377.238292][ T29] audit: type=1400 audit(1792959121.844:1468): avc: denied { write } for pid=25059 comm="syz.0.8293" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.274384][T19772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.313766][T25067] tipc: Enabled bearer , priority 0 [ 377.314529][T25067] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 377.315617][T25066] tipc: Disabling bearer [ 377.462592][T25079] syzkaller0: entered promiscuous mode [ 377.462679][T25079] syzkaller0: entered allmulticast mode [ 377.471010][T25079] tipc: Started in network mode [ 377.471127][T25079] tipc: Node identity 56c257061dc9, cluster identity 4711 [ 377.471261][T25079] tipc: Enabled bearer , priority 0 [ 377.475159][T25078] tipc: Resetting bearer [ 377.488887][T25078] tipc: Disabling bearer [ 377.530166][T25083] tipc: Enabling of bearer rejected, failed to enable media [ 377.530800][T25083] syzkaller0: entered promiscuous mode [ 377.530823][T25083] syzkaller0: entered allmulticast mode [ 377.667329][T25094] syzkaller0: entered promiscuous mode [ 377.667348][T25094] syzkaller0: entered allmulticast mode [ 377.753576][T25101] tipc: Enabled bearer , priority 0 [ 377.754261][T25101] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 377.755188][T25100] tipc: Disabling bearer [ 377.809303][T25103] loop1: detected capacity change from 0 to 128 [ 377.821963][T25103] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.822210][T25103] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.829321][ T29] audit: type=1400 audit(1792959122.444:1469): avc: denied { write } for pid=25102 comm="syz.1.8310" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.870995][T23370] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.078769][T25113] syzkaller0: entered promiscuous mode [ 378.078813][T25113] syzkaller0: entered allmulticast mode [ 378.080007][T25113] tipc: Enabled bearer , priority 0 [ 378.080378][T25111] tipc: Resetting bearer [ 378.081316][T25111] tipc: Disabling bearer [ 378.202682][T25123] syzkaller0: entered promiscuous mode [ 378.202701][T25123] syzkaller0: entered allmulticast mode [ 378.277221][T25128] tipc: Enabling of bearer rejected, failed to enable media [ 378.277902][T25128] syzkaller0: entered promiscuous mode [ 378.277938][T25128] syzkaller0: entered allmulticast mode [ 378.453975][T25135] syzkaller0: entered promiscuous mode [ 378.454002][T25135] syzkaller0: entered allmulticast mode [ 378.524144][T25140] loop0: detected capacity change from 0 to 128 [ 378.525576][T25140] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 378.552763][T25140] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 378.569915][T25140] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #11: comm syz.0.8326: No space for directory leaf checksum. Please run e2fsck -D. [ 378.569958][T25140] EXT4-fs error (device loop0): __ext4_find_entry:1628: inode #11: comm syz.0.8326: checksumming directory block 0 [ 378.619998][T19772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.722962][T25147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8330'. [ 378.803400][T25149] syzkaller0: entered promiscuous mode [ 378.803425][T25149] syzkaller0: entered allmulticast mode [ 378.936579][T25151] tipc: Enabling of bearer rejected, failed to enable media [ 378.937850][T25151] syzkaller0: entered promiscuous mode [ 378.937868][T25151] syzkaller0: entered allmulticast mode [ 379.191914][T25157] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 379.243954][T25158] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 379.366142][T25165] syzkaller0: entered promiscuous mode [ 379.366163][T25165] syzkaller0: entered allmulticast mode [ 379.367327][T25165] tipc: Enabled bearer , priority 0 [ 379.368209][T25164] tipc: Resetting bearer [ 379.371067][T25164] tipc: Disabling bearer [ 379.712072][T25180] syzkaller0: entered promiscuous mode [ 379.712091][T25180] syzkaller0: entered allmulticast mode [ 379.766236][T25184] tipc: Enabling of bearer rejected, failed to enable media [ 379.766795][T25184] syzkaller0: entered promiscuous mode [ 379.766816][T25184] syzkaller0: entered allmulticast mode [ 379.832814][T25187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8346'. [ 380.032378][ T29] audit: type=1400 audit(1792959124.644:1470): avc: denied { write } for pid=25212 comm="syz.3.8356" name="functions" dev="configfs" ino=30671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 380.032419][ T29] audit: type=1400 audit(1792959124.644:1471): avc: denied { write } for pid=25212 comm="syz.3.8356" name="hs" dev="configfs" ino=80876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 380.032534][ T29] audit: type=1400 audit(1792959124.644:1472): avc: denied { write } for pid=25212 comm="syz.3.8356" name="hs" dev="configfs" ino=80876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 380.032848][ T29] audit: type=1400 audit(1792959124.644:1473): avc: denied { write } for pid=25212 comm="syz.3.8356" name="header" dev="configfs" ino=80855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 380.069791][T25215] FAULT_INJECTION: forcing a failure. [ 380.069791][T25215] name failslab, interval 1, probability 0, space 0, times 0 [ 380.069944][T25215] CPU: 0 UID: 0 PID: 25215 Comm: syz.4.8357 Not tainted syzkaller #0 PREEMPT(lazy) [ 380.070031][T25215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 380.070138][T25215] Call Trace: [ 380.070168][T25215] [ 380.070200][T25215] __dump_stack+0x1d/0x30 [ 380.070288][T25215] dump_stack_lvl+0x95/0xd0 [ 380.070371][T25215] dump_stack+0x15/0x1b [ 380.070535][T25215] should_fail_ex+0x262/0x280 [ 380.070631][T25215] ? nfs_get_tree+0x8ab/0xc60 [ 380.070713][T25215] should_failslab+0x8c/0xb0 [ 380.070810][T25215] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 380.070983][T25215] ? nfs_get_tree+0x8ab/0xc60 [ 380.071071][T25215] kmemdup_nul+0x36/0xc0 [ 380.071203][T25215] nfs_get_tree+0x8ab/0xc60 [ 380.071287][T25215] vfs_get_tree+0x57/0x1d0 [ 380.071462][T25215] vfs_cmd_create+0x8a/0x140 [ 380.071557][T25215] vfs_fsconfig_locked+0x6f/0x210 [ 380.071721][T25215] __se_sys_fsconfig+0x671/0x7e0 [ 380.071823][T25215] __x64_sys_fsconfig+0x67/0x80 [ 380.071918][T25215] x64_sys_call+0xaa0/0x2550 [ 380.072057][T25215] do_syscall_64+0x112/0x360 [ 380.072171][T25215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.072256][T25215] RIP: 0033:0x7f4174e7f559 [ 380.072311][T25215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.072383][T25215] RSP: 002b:00007f41738d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 380.072459][T25215] RAX: ffffffffffffffda RBX: 00007f4175105fa0 RCX: 00007f4174e7f559 [ 380.072547][T25215] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 380.072590][T25215] RBP: 00007f4174f16b20 R08: 0000000000000000 R09: 0000000000000000 [ 380.072641][T25215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.072684][T25215] R13: 00007f4175106038 R14: 00007f4175105fa0 R15: 00007ffda70c7c78 [ 380.072757][T25215] [ 380.331300][T25222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8360'. [ 380.345009][T25225] syzkaller0: entered promiscuous mode [ 380.345030][T25225] syzkaller0: entered allmulticast mode [ 380.425628][T25218] syzkaller0: entered promiscuous mode [ 380.425656][T25218] syzkaller0: entered allmulticast mode [ 380.621666][T25227] syzkaller0: entered promiscuous mode [ 380.621693][T25227] syzkaller0: entered allmulticast mode [ 380.775360][ T29] audit: type=1400 audit(1792959125.394:1474): avc: denied { write } for pid=25255 comm="syz.3.8372" path="socket:[81941]" dev="sockfs" ino=81941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.822024][T25262] loop3: detected capacity change from 0 to 128 [ 380.843819][T25262] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.844699][T25262] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.852252][ T29] audit: type=1400 audit(1792959125.464:1475): avc: denied { write } for pid=25261 comm="syz.3.8374" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.913185][T22238] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.927082][T25269] syzkaller0: entered promiscuous mode [ 380.927104][T25269] syzkaller0: entered allmulticast mode [ 380.982186][T25271] syzkaller0: entered promiscuous mode [ 380.982215][T25271] syzkaller0: entered allmulticast mode [ 381.082763][T25285] tipc: Enabled bearer , priority 0 [ 381.090651][T25285] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 381.091730][T25284] tipc: Disabling bearer [ 381.232903][T25298] syzkaller0: entered promiscuous mode [ 381.232923][T25298] syzkaller0: entered allmulticast mode [ 381.303292][T25304] syzkaller0: entered promiscuous mode [ 381.303318][T25304] syzkaller0: entered allmulticast mode [ 381.450609][ T72] bridge_slave_1: left allmulticast mode [ 381.450659][ T72] bridge_slave_1: left promiscuous mode [ 381.450757][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.451425][ T72] bridge_slave_0: left allmulticast mode [ 381.451447][ T72] bridge_slave_0: left promiscuous mode [ 381.451664][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.581481][T25315] loop3: detected capacity change from 0 to 128 [ 381.596603][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.598007][T25315] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 381.602349][T25315] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 381.639148][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.639599][T22238] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.659611][ T72] bond0 (unregistering): Released all slaves [ 381.726244][T25310] syzkaller0: entered promiscuous mode [ 381.726300][T25310] syzkaller0: entered allmulticast mode [ 381.726887][ T72] tipc: Left network mode [ 381.727528][T25319] tipc: Enabled bearer , priority 0 [ 381.730134][T25319] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 381.734333][T25318] tipc: Disabling bearer [ 381.823739][ T72] hsr_slave_0: left promiscuous mode [ 381.827364][ T72] hsr_slave_1: left promiscuous mode [ 381.827851][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.827868][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.829717][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.829732][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.839678][ T72] veth1_macvtap: left promiscuous mode [ 381.839820][ T72] veth0_macvtap: left promiscuous mode [ 381.840028][ T72] veth1_vlan: left promiscuous mode [ 381.840092][ T72] veth0_vlan: left promiscuous mode [ 381.904883][T25333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8401'. [ 381.908720][T25335] loop0: detected capacity change from 0 to 128 [ 381.935887][T25335] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 381.936081][T25335] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.939723][ T29] audit: type=1400 audit(1792959126.554:1476): avc: denied { write } for pid=25334 comm="syz.0.8402" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 382.001287][T19772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 382.046054][ T72] team0 (unregistering): Port device team_slave_1 removed [ 382.048741][ T72] team0 (unregistering): Port device team_slave_0 removed [ 382.100764][T25325] syzkaller0: entered promiscuous mode [ 382.100791][T25325] syzkaller0: entered allmulticast mode [ 382.149229][T25356] loop3: detected capacity change from 0 to 128 [ 382.152244][T25356] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 382.171692][T25356] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 382.220730][T22238] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 382.270632][T25367] tipc: Enabling of bearer rejected, failed to enable media [ 382.354716][T25377] syzkaller0: entered promiscuous mode [ 382.354762][T25377] syzkaller0: entered allmulticast mode [ 382.408194][ T72] IPVS: stop unused estimator thread 0... [ 382.460533][T25391] loop1: detected capacity change from 0 to 128 [ 382.463998][T25391] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 382.469964][T25391] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.504761][ T29] audit: type=1400 audit(1792959127.114:1477): avc: denied { write } for pid=25390 comm="syz.1.8415" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 382.635895][T25398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8418'. [ 382.887343][T23370] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 383.170191][T25405] syzkaller0: entered promiscuous mode [ 383.170328][T25405] syzkaller0: entered allmulticast mode [ 383.475504][T25419] syzkaller0: entered promiscuous mode [ 383.475681][T25419] syzkaller0: entered allmulticast mode [ 383.555165][T25425] loop3: detected capacity change from 0 to 128 [ 383.557213][T25425] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 383.557424][T25425] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.565187][ T29] audit: type=1400 audit(1792959128.174:1478): avc: denied { write } for pid=25424 comm="syz.3.8430" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 383.656983][T22238] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 383.856441][T25451] syzkaller0: entered promiscuous mode [ 383.856466][T25451] syzkaller0: entered allmulticast mode [ 384.026922][ T29] audit: type=1400 audit(1792959128.634:1479): avc: denied { create } for pid=25456 comm="syz.0.8433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 384.137465][T25470] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 384.137841][T25470] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 384.458826][T25490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8457'. [ 384.834821][T25505] syzkaller0: entered promiscuous mode [ 384.834952][T25505] syzkaller0: entered allmulticast mode [ 384.836107][T25505] tipc: Enabled bearer , priority 0 [ 384.836580][T25504] tipc: Resetting bearer [ 384.842899][T25504] tipc: Disabling bearer [ 385.052281][T25516] ip_tables: iptables: counters copy to user failed while replacing table [ 385.954710][T25546] syzkaller0: entered promiscuous mode [ 385.954762][T25546] syzkaller0: entered allmulticast mode [ 385.978260][T25546] tipc: Enabled bearer , priority 0 [ 385.991529][T25545] tipc: Resetting bearer [ 386.021448][T25545] tipc: Disabling bearer [ 386.142910][T25548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.173890][T25551] loop0: detected capacity change from 0 to 512 [ 386.191870][T25551] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 386.191893][T25551] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 386.217717][T25548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.218367][T25551] EXT4-fs (loop0): 1 truncate cleaned up [ 386.218814][T25551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.222454][T25548] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 386.261358][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 386.261379][ T29] audit: type=1400 audit(1792959130.874:1481): avc: denied { write } for pid=25550 comm="syz.0.8481" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.299590][T25554] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.302276][T25554] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 386.339203][T19772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.608760][T25576] loop2: detected capacity change from 0 to 512 [ 386.609321][T25576] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 386.609341][T25576] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 386.610448][T25576] EXT4-fs (loop2): 1 truncate cleaned up [ 386.610912][T25576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.662714][ T29] audit: type=1400 audit(1792959131.274:1482): avc: denied { write } for pid=25575 comm="syz.2.8493" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.708394][T25579] loop1: detected capacity change from 0 to 1024 [ 386.722703][T25581] syzkaller0: entered promiscuous mode [ 386.722732][T25581] syzkaller0: entered allmulticast mode [ 386.740708][T21805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.741778][T25579] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 386.776897][T25579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.780614][ T29] audit: type=1400 audit(1792959131.394:1483): avc: denied { write } for pid=25577 comm="syz.1.8494" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.842520][T25589] syzkaller0: entered promiscuous mode [ 386.842546][T25589] syzkaller0: entered allmulticast mode [ 386.859152][T23370] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.944458][T25598] tipc: Enabled bearer , priority 0 [ 386.945465][T25597] tipc: Disabling bearer [ 386.946617][T25599] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.946834][T25599] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 387.011127][ T29] audit: type=1400 audit(1792959131.624:1484): avc: denied { write } for pid=25602 comm="syz.4.8503" name="hs" dev="configfs" ino=80876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.011223][ T29] audit: type=1400 audit(1792959131.624:1485): avc: denied { write } for pid=25602 comm="syz.4.8503" name="hs" dev="configfs" ino=80876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.108754][T25611] loop4: detected capacity change from 0 to 512 [ 387.112773][T25611] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 387.112827][T25611] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 387.122055][T25611] EXT4-fs (loop4): 1 truncate cleaned up [ 387.122857][T25611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.157275][ T29] audit: type=1400 audit(1792959131.774:1486): avc: denied { write } for pid=25610 comm="syz.4.8507" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 387.197870][T24056] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.226355][T25618] loop1: detected capacity change from 0 to 1024 [ 387.232179][T25618] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 387.259084][T25618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.276298][ T29] audit: type=1400 audit(1792959131.894:1487): avc: denied { write } for pid=25617 comm="syz.1.8510" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 387.301748][T25620] syzkaller0: entered promiscuous mode [ 387.301867][T25620] syzkaller0: entered allmulticast mode [ 387.363472][T23370] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.526161][T25627] FAULT_INJECTION: forcing a failure. [ 387.526161][T25627] name failslab, interval 1, probability 0, space 0, times 0 [ 387.526197][T25627] CPU: 0 UID: 0 PID: 25627 Comm: syz.1.8513 Not tainted syzkaller #0 PREEMPT(lazy) [ 387.526228][T25627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 387.526244][T25627] Call Trace: [ 387.526253][T25627] [ 387.526263][T25627] __dump_stack+0x1d/0x30 [ 387.526293][T25627] dump_stack_lvl+0x95/0xd0 [ 387.526322][T25627] dump_stack+0x15/0x1b [ 387.526348][T25627] should_fail_ex+0x262/0x280 [ 387.526381][T25627] ? mpol_set_shared_policy+0x3b2/0x800 [ 387.526410][T25627] should_failslab+0x8c/0xb0 [ 387.526445][T25627] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 387.526479][T25627] ? mpol_set_shared_policy+0x3b2/0x800 [ 387.526510][T25627] mpol_set_shared_policy+0x3b2/0x800 [ 387.526553][T25627] shmem_set_policy+0x3d/0x50 [ 387.526589][T25627] mbind_range+0x240/0x430 [ 387.526625][T25627] __se_sys_mbind+0x8b5/0xdd0 [ 387.526680][T25627] __x64_sys_mbind+0x78/0x90 [ 387.526726][T25627] x64_sys_call+0x1d78/0x2550 [ 387.526761][T25627] do_syscall_64+0x112/0x360 [ 387.526802][T25627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.526833][T25627] RIP: 0033:0x7f414189f559 [ 387.526854][T25627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.526882][T25627] RSP: 002b:00007f41402ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 387.526912][T25627] RAX: ffffffffffffffda RBX: 00007f4141b25fa0 RCX: 00007f414189f559 [ 387.526933][T25627] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 387.526952][T25627] RBP: 00007f4141936b20 R08: 0000000000000000 R09: 0000000000000000 [ 387.526971][T25627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.526988][T25627] R13: 00007f4141b26038 R14: 00007f4141b25fa0 R15: 00007ffda248fd68 [ 387.527016][T25627] [ 387.840090][ T29] audit: type=1400 audit(1792959132.454:1488): avc: denied { write } for pid=25635 comm="syz.2.8517" name="hs" dev="configfs" ino=80876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.840203][ T29] audit: type=1400 audit(1792959132.454:1489): avc: denied { write } for pid=25635 comm="syz.2.8517" name="hs" dev="configfs" ino=80876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.926663][T25640] syzkaller0: entered promiscuous mode [ 387.926701][T25640] syzkaller0: entered allmulticast mode [ 387.989294][T25642] bond3: Unable to set down delay as MII monitoring is disabled [ 387.994303][T25642] bond3 (unregistering): Released all slaves [ 388.022783][T25646] bond2: (slave batadv0): Releasing backup interface [ 388.094058][T25652] syzkaller0: entered promiscuous mode [ 388.094080][T25652] syzkaller0: entered allmulticast mode [ 388.191089][T25665] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 388.191363][T25665] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 388.223278][T25669] loop4: detected capacity change from 0 to 128 [ 388.243409][T25670] syzkaller0: entered promiscuous mode [ 388.243458][T25670] syzkaller0: entered allmulticast mode [ 388.258818][T25669] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 388.264683][T25669] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 388.292521][T24056] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 388.376596][T25679] syzkaller0: entered promiscuous mode [ 388.376624][T25679] syzkaller0: entered allmulticast mode [ 388.562887][ T29] audit: type=1400 audit(1792959133.174:1490): avc: denied { write } for pid=25694 comm="syz.4.8544" name="hs" dev="configfs" ino=80876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.642554][T25701] syzkaller0: entered promiscuous mode [ 388.642582][T25701] syzkaller0: entered allmulticast mode [ 388.659774][T25703] syzkaller0: entered promiscuous mode [ 388.659795][T25703] syzkaller0: entered allmulticast mode [ 388.753967][T25709] loop2: detected capacity change from 0 to 512 [ 388.755366][T25709] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 388.755383][T25709] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.760676][T25709] EXT4-fs (loop2): 1 truncate cleaned up [ 388.761112][T25709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.827865][T21805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.932540][T25720] syzkaller0: entered promiscuous mode [ 388.932562][T25720] syzkaller0: entered allmulticast mode [ 389.133250][T25732] syzkaller0: entered promiscuous mode [ 389.133352][T25732] syzkaller0: entered allmulticast mode [ 389.286898][T25741] loop3: detected capacity change from 0 to 512 [ 389.292015][T25741] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 389.292037][T25741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 389.427099][T25741] EXT4-fs (loop3): 1 truncate cleaned up [ 389.427567][T25741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.447438][T22238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.051612][T25752] loop2: detected capacity change from 0 to 128 [ 390.070652][T25753] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 390.070853][T25753] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 390.091121][T25752] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 390.154839][T25752] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 390.191096][T21805] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.488641][T25772] loop4: detected capacity change from 0 to 512 [ 390.490629][T25772] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 390.490720][T25772] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 390.521020][T25772] EXT4-fs (loop4): 1 truncate cleaned up [ 390.521450][T25772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.582365][T24056] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.801491][T25803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8588'. [ 390.880949][T25807] syzkaller0: entered promiscuous mode [ 390.880976][T25807] syzkaller0: entered allmulticast mode [ 390.896269][T25809] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 390.896289][T25809] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 390.899565][T25809] EXT4-fs (loop3): 1 truncate cleaned up [ 390.900057][T25809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.942607][T25809] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 390.989592][T22238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.206258][T25796] ================================================================== [ 391.206309][T25796] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 391.206369][T25796] [ 391.206375][T25796] read-write to 0xffff888111cb6230 of 8 bytes by interrupt on cpu 0: [ 391.206397][T25796] __xa_clear_mark+0xf5/0x1e0 [ 391.206434][T25796] __folio_end_writeback+0xe7/0x530 [ 391.206463][T25796] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 391.206484][T25796] folio_end_writeback+0x72/0x110 [ 391.206506][T25796] bh_end_async_write+0x18b/0x230 [ 391.206537][T25796] bio_endio+0x390/0x570 [ 391.206570][T25796] blk_update_request+0x33a/0x710 [ 391.206604][T25796] blk_mq_end_request+0x26/0x50 [ 391.206636][T25796] lo_complete_rq+0x98/0x130 [ 391.206671][T25796] blk_done_softirq+0x77/0xb0 [ 391.206692][T25796] handle_softirqs+0x109/0x310 [ 391.206720][T25796] __irq_exit_rcu+0x40/0xf0 [ 391.206751][T25796] sysvec_apic_timer_interrupt+0x74/0x80 [ 391.206780][T25796] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 391.206804][T25796] kcsan_setup_watchpoint+0x429/0x4a0 [ 391.206842][T25796] xas_load+0x2a1/0x430 [ 391.206875][T25796] filemap_get_entry+0x96/0x2e0 [ 391.206897][T25796] shmem_get_folio_gfp+0x196/0xb90 [ 391.206929][T25796] shmem_write_begin+0xfc/0x1f0 [ 391.206963][T25796] generic_perform_write+0x186/0x490 [ 391.206991][T25796] shmem_file_write_iter+0xc5/0xf0 [ 391.207023][T25796] lo_rw_aio+0x6a6/0x760 [ 391.207065][T25796] loop_process_work+0x569/0xac0 [ 391.207104][T25796] loop_workfn+0x31/0x40 [ 391.207142][T25796] process_scheduled_works+0x53f/0xa20 [ 391.207169][T25796] worker_thread+0x56c/0x770 [ 391.207194][T25796] kthread+0x223/0x270 [ 391.207222][T25796] ret_from_fork+0x146/0x330 [ 391.207260][T25796] ret_from_fork_asm+0x1a/0x30 [ 391.207288][T25796] [ 391.207296][T25796] read to 0xffff888111cb6230 of 8 bytes by task 25796 on cpu 1: [ 391.207319][T25796] xas_find_marked+0x211/0x650 [ 391.207359][T25796] filemap_get_folios_tag+0xf7/0x400 [ 391.207385][T25796] filemap_write_and_wait_range+0x1f5/0x370 [ 391.207427][T25796] bdev_release+0xd4/0x3d0 [ 391.207464][T25796] blkdev_release+0x15/0x20 [ 391.207483][T25796] __fput+0x286/0x610 [ 391.207508][T25796] fput_close_sync+0xad/0x190 [ 391.207533][T25796] filp_close_sync+0x27/0x40 [ 391.207557][T25796] __se_sys_close_range+0x915/0xa00 [ 391.207578][T25796] __x64_sys_close_range+0x43/0x50 [ 391.207603][T25796] x64_sys_call+0x2198/0x2550 [ 391.207637][T25796] do_syscall_64+0x112/0x360 [ 391.207673][T25796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.207700][T25796] [ 391.207706][T25796] value changed: 0xffffffffffffffc0 -> 0xfffffffffffffc00 [ 391.207723][T25796] [ 391.207729][T25796] Reported by Kernel Concurrency Sanitizer on: [ 391.207744][T25796] CPU: 1 UID: 0 PID: 25796 Comm: syz.2.8586 Not tainted syzkaller #0 PREEMPT(lazy) [ 391.207772][T25796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 391.207786][T25796] ================================================================== [ 391.370339][ T5604] bridge_slave_1: left allmulticast mode [ 391.370412][ T5604] bridge_slave_1: left promiscuous mode [ 391.370721][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.380908][ T5604] bridge_slave_0: left allmulticast mode [ 391.381017][ T5604] bridge_slave_0: left promiscuous mode [ 391.381281][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.560771][ T5604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.562643][ T5604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.568200][ T5604] bond0 (unregistering): Released all slaves [ 391.573864][T25830] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 391.580442][T25831] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 391.614404][ T5604] tipc: Left network mode [ 391.639385][ T5604] hsr_slave_0: left promiscuous mode [ 391.639746][ T5604] hsr_slave_1: left promiscuous mode [ 391.640216][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.640230][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.640589][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.640606][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.650430][ T5604] veth1_macvtap: left promiscuous mode [ 391.650523][ T5604] veth0_macvtap: left promiscuous mode [ 391.650710][ T5604] veth1_vlan: left promiscuous mode [ 391.650820][ T5604] veth0_vlan: left promiscuous mode [ 391.749934][ T5604] team0 (unregistering): Port device team_slave_1 removed [ 391.752941][ T5604] team0 (unregistering): Port device team_slave_0 removed