last executing test programs: 5m26.390710337s ago: executing program 32 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) 4m44.097969304s ago: executing program 33 (id=950): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x201, 0x41, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x4}, 0x74b7c02b851c54d4, 0x0, 0x204, 0x0, 0x1, 0x10000, 0xffff, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 4m26.239079016s ago: executing program 34 (id=1427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0x3497, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3m15.466695707s ago: executing program 35 (id=2875): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffff9c, r0, 0x41, 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) mount$bpf(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x80, &(0x7f0000000840)={[{@uid={'uid', 0x3d, r2}}]}) 3m15.096859956s ago: executing program 36 (id=2886): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="110b00000000fedbdf2524"], 0x14}}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 3m4.124096461s ago: executing program 37 (id=3002): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) fchdir(r1) unlink(&(0x7f0000000200)='./sys\x00') 1m58.665347793s ago: executing program 38 (id=4290): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) 1m58.658217503s ago: executing program 39 (id=4291): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x800000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m49.461738644s ago: executing program 40 (id=4417): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1m42.542048078s ago: executing program 41 (id=4541): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x2) listen(r0, 0x28) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0xffffffffffffff29) shutdown(r0, 0x0) 1m24.465991592s ago: executing program 42 (id=4771): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0], 0xfe, 0x1244, &(0x7f0000000b40)="$eJzs3E9rXFUYB+DXSZq0SfNHrdUK0oPd6GZIsnCjIEFSkA4obSO0gnBrJjrkOhNyh8AUaXQl7vwKbsWlrgRxp5u4EPwG7rJx6UK9krlpzWgk1sSOhufZ5JBzfof33Hu5cIY5s/PCR++srRb11awbtYdejNp6xOgvKVLU4q734tnnv/7mqWs3bl5ZbDSWrqZ0efH6/HMppemLX77+7qdPf9WdfO2z6S/GY3v2jZ0fF37YPr99YefX62+3itQqUrvTTVm61el0s1t5M620irV6Sq/mzaxopla7aG4M9K/mnfX1XsraK1MT6xvNokhZu5fWmr3U7aTuRi9lb2WtdqrX62lqIjiK5U9+KssyoixPxViUZVmeiYmoxdmYiumYidl4OB6JR+NcPBbn4/F4Ii70R0WMDbt0AAAAAAAAAAAAAAAAAAAAOEEOOv8/OXj+//Oze2P3n//vuzjEwgEAAAAAAAAAAAAAAAAAAOAEuXbj5pXFRmPpakqnI/IPNpc3l6u/Vf/iarQij2bMxUz8HP3T/5WqPRaNpbnUNxvv51t7+a3N5ZHB/Hz/5wT+lL/8cmNpvsqnwfx4TOzPL8RMnDs4v/CH/KV+/nQ8c2lfvh4z8d2b0Yk8VmI3+3v+znxKL73SuJf/drta+8oQ7wsAAAAcp3q658D9e73+V/1V/rDPB3b313MH7u9H48nR4a6diKJ3ey3L8+bGP22c2ZvoqPPcvltR9Z+tiLjfeY6ljGNs1Hbr+T4ijmnCD+9UV+hvp8YOG3zq0Hkmh3DpPp6MOEJ8ZOBB+k88Cf/HxmFvjpF/5X3Eg7V308eHXQcAAAAAAAAAAAD350F8nXDYawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA3duBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD//0N+vqI=") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0xd0) getdents(r0, &(0x7f0000000140)=""/184, 0xb8) 1m23.466844906s ago: executing program 43 (id=4780): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 1m4.796859775s ago: executing program 44 (id=4819): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20010040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x56, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 1m4.764077926s ago: executing program 45 (id=4827): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x8, 0x0, 0x0) 1m4.744859496s ago: executing program 46 (id=4818): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) tee(r0, r2, 0x8, 0xc) 48.578512762s ago: executing program 47 (id=4998): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 47.938931098s ago: executing program 48 (id=5017): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) close(0x3) 46.352140138s ago: executing program 49 (id=5043): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x5e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x80}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x16bfc9754559bcb9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 39.07788071s ago: executing program 50 (id=5157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 29.639538636s ago: executing program 9 (id=5294): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x20}, {0x20008, 0x10, 0x100000002, 0x0, 0x6, 0xffffffffffffb475, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 29.608581348s ago: executing program 9 (id=5296): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0xfffffffffffffe63) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x80, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x20000000000, 0xc722}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 29.530752819s ago: executing program 9 (id=5297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000100)=0x3fe, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) 29.530502739s ago: executing program 9 (id=5298): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c666c7573682c646f74732c666c7573682c636865636b3d72656c617865642c71756965742c6572726f72733d72656d6f756e742d726f2c6e6f646f74732c00b809a6ed6a11fd459311c6140e8fc5300da85a95aa4baee25ecaf74c5cbc6b1859889a3eefa76b125b44478c5d9df7ed620840988ed102de6bdb80347c0d7a22e428bc9b0c5cde00c4c0746c933fe95479447bdbc7ad9cdf0a2818932a48f56a08110dbb247eed43b3fcd06f3fe3271b983a7cdddd3e777fc3ed4e1018676eb3b7240e886b92de0fb08c4649c5dff139c5d52aa2efce92b1992a44726bc2148221de8fc839f8d265bd368ad972a7e05961bcb381eb8ba1e21ec8e57ddb6a3f2d938caae1d44478336dcba441194be678fa1a9cf58062e1b80b60879938283c85f681d6e4353aba860e7958f489e70148933574c3359f34f6aa3f0e2e6f44adcc35e9e8267d999a75b7cfd6c962350eadc8c910afc0a572729ccd07007626f08a2701da467af2faff7a4a24177b765f2669abdf555c0c626ca0198e92e1c7b48ab8002d8a15d9619c1b3c80d2a979be623b0d5c538f59b8235e2bf27ceea76a82cade017ecd56eef67302"], 0x1f, 0x242, &(0x7f0000000540)="$eJzs3c1qE1EYBuDPWtvYjd0J4mLEjaug3sEgFcQBITILXTlQ3TSiTDejq1yBO/EevBCvwqvoqrtIM0OnP9aNbU7beR4I85KXge9ASLI4J3l3/+PO9qfdD99//YjRKIuViFnsR2wepM6N7rqyyGtx1CwAgKtmMqny1DNwseo6r25FxPqppvyZZCAAAAAAAAAAAAD+m/3/ADA89v9ff3WdVxvd97fj7P8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0tmfz+/M//FIPR8AcP58/gPA8Lx+8/ZlXhRbkywbRezNmrIp22vbP39RbD3OFjb7u/aaprx52D9p+6wr7z749nkRNrr+6fG+u38tHj1s+4Pu2aviRL8e20tYPwAAAAAAAAAAAAAAAAAAAFwG4+zQX8/3j8dn9W068vsAJ87vr8a91aUtAwAAAAAAAAAAAAAAAAAAAK603S9fd6rp9H3dh9+nnhlMyC7HGMsIt89+AQhCNU38xgQAAAAAAAAAAAAAAAAAAAPUH/pNPQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApNP////FhdRrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuhz8BAAD//2OqXbs=") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 29.364221383s ago: executing program 9 (id=5300): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) faccessat(0xffffffffffffffff, 0x0, 0x70) capset(0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x800000, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 29.157367579s ago: executing program 9 (id=5301): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x14, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xffff, 0x4) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x2}], 0x1, 0x40002042, 0x0) 29.132456479s ago: executing program 51 (id=5301): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x14, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xffff, 0x4) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x2}], 0x1, 0x40002042, 0x0) 25.592961838s ago: executing program 2 (id=5362): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x4000, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2b7, &(0x7f0000000700)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 25.182698808s ago: executing program 2 (id=5366): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xa, 0x1}, 0x0, 0x0, 0x6, 0x2, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 25.019221722s ago: executing program 2 (id=5370): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 24.796586668s ago: executing program 2 (id=5375): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1fb) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) read(r0, &(0x7f00000001c0)=""/115, 0x73) 24.705226691s ago: executing program 2 (id=5376): r0 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000080)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 23.489789011s ago: executing program 2 (id=5386): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) 23.471965251s ago: executing program 52 (id=5386): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) 18.943724385s ago: executing program 6 (id=5469): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000072000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 18.849857757s ago: executing program 6 (id=5474): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 18.814056758s ago: executing program 6 (id=5475): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x4}]) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r0, 0x0, r3, 0x0, 0x8000, 0x0) 17.860166112s ago: executing program 6 (id=5489): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@init_itable}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) fallocate(r1, 0x10, 0x6, 0x10001) 17.53311713s ago: executing program 6 (id=5495): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x12, 0x22, 0xd, 0x14, 0x3, 0x800, 0x1, 0x5a, 0x1}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 15.626844578s ago: executing program 6 (id=5540): unshare(0x26020480) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9c, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) 15.626716188s ago: executing program 53 (id=5540): unshare(0x26020480) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9c, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) 12.865537547s ago: executing program 7 (id=5583): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x4, 0x0, 0xa, 0x21, 0x10000000000}, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x7, 0x6}, 0x0, 0x0, 0x0) 12.823098768s ago: executing program 7 (id=5584): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 12.75574398s ago: executing program 7 (id=5586): socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe2(&(0x7f0000000400), 0x80000) unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x2, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xfffffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0x1, 0xe, 0x2b12, 0x1100, 0x6, 0x1c00, 0xb, 0x40, 0x4, 0x1, 0x3, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x5, 0x7f, 0x7, 0xa, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x400, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x20006, 0x7, 0x2, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x80003b, 0x2, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0xc59, 0xffffffff]}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12.689919962s ago: executing program 7 (id=5587): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x8954, 0x6, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f00000002c0)='./bus\x00', 0x14927d, 0x8) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6f8, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c432004cbc329834c9b1b167263bdbcef549ba197fce47d0100173400fff7ffffff000000f3e7f29b00000200000000000600", "b73200000000000000000d00000000000000000000080100", [0x40000000004, 0x670]}) 12.577783804s ago: executing program 8 (id=5588): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffed1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c89e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.506059997s ago: executing program 8 (id=5589): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 12.37316121s ago: executing program 7 (id=5595): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000180)=0x3, 0x4) 11.739972626s ago: executing program 8 (id=5612): dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x80000000, r1, 0x0, 0x20}, 0x38) 11.587593819s ago: executing program 8 (id=5604): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 11.359864545s ago: executing program 8 (id=5610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x2, 0x1f, 0x4, 0x6, 0x9, 0x8000, 0x80, 0x7, [{0xffffff59, 0x9, 0xe, 0x4}, {0x80000000, 0xb92, 0x7ff, 0xe}, {0x7ff, 0x10005, 0x2, 0x350}, {0x1, 0xbe1, 0x4cd72bd8, 0x69ce}]}}]}}]}, 0x84}}, 0x0) 11.010816274s ago: executing program 7 (id=5611): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x6, 0x10000}, 0x14413, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 11.005211194s ago: executing program 8 (id=5613): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="020400000003000000c894355e953923d254f00000008100", 0x18}], 0x1}, 0x4004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000140)={0x0, 0x2b}) 10.976477705s ago: executing program 54 (id=5613): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="020400000003000000c894355e953923d254f00000008100", 0x18}], 0x1}, 0x4004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000140)={0x0, 0x2b}) 10.955513956s ago: executing program 55 (id=5611): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x6, 0x10000}, 0x14413, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 3.137676912s ago: executing program 0 (id=5713): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x8000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 2.822736419s ago: executing program 0 (id=5716): lremovexattr(&(0x7f0000000000)='./cgroup\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000080)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000000)={0x2000002, 0xfffefffa, 0x1, 0xa, 0x80000000, 0xc5}) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000020) 2.526924727s ago: executing program 1 (id=5723): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 2.288444003s ago: executing program 3 (id=5727): setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000400)={0x9, 0x5, 0x2, 0x2d19}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2.118413667s ago: executing program 3 (id=5732): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000d295"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r3, r1, 0x4, r0}, 0x10) 2.106909187s ago: executing program 5 (id=5733): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) write(0xffffffffffffffff, &(0x7f0000000000)="240000004e0001000000f4f9002304000a03f511080001", 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.023507009s ago: executing program 5 (id=5734): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.01319989s ago: executing program 3 (id=5736): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x4}, 0x3086, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3, 0x0, 0x2500}, 0x18) 1.925800232s ago: executing program 4 (id=5737): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x20}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) 1.918111122s ago: executing program 0 (id=5738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.743386096s ago: executing program 3 (id=5739): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000000)=0xc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100), 0xfffffffffffffeda, 0x400c885, &(0x7f00000003c0)={0x11, 0x11, r2, 0x1, 0xe8, 0x6, @random="c0f424a1f50d"}, 0x14) 1.737576707s ago: executing program 0 (id=5740): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x80108906, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.61292338s ago: executing program 3 (id=5741): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0xa, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x14, 0x30}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="0000000000000000000000008100", 0xe}], 0x1}, 0x4040000) 1.573239931s ago: executing program 5 (id=5742): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_setup(0x2b1a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000080000000500000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20) 1.520105622s ago: executing program 4 (id=5743): sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05"], 0xd8}}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) unshare(0x20040400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x1000fffe}) 1.402631445s ago: executing program 4 (id=5744): openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x111000, 0x0) socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.348862846s ago: executing program 1 (id=5745): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000001500)='pagemap\x00') 829.324879ms ago: executing program 1 (id=5746): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000006000000ff00000000000000", @ANYRES32, @ANYBLOB="e1ffffffffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 776.842471ms ago: executing program 3 (id=5747): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x77c, r2}, 0x38) 775.678401ms ago: executing program 4 (id=5757): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f100", @ANYRES8=r1], 0x4000) 768.889921ms ago: executing program 0 (id=5748): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) r0 = socket$unix(0x1, 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) fchdir(r1) close(r1) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x62) 692.868693ms ago: executing program 1 (id=5749): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)='h', 0x1}], 0x1}}], 0x1, 0xc8844) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) lseek(r1, 0x800, 0x0) 692.264363ms ago: executing program 0 (id=5760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000001, 0x0, 0x6, 0x800, 0xef, 0x8100001, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0xc8}, 0x0, 0x0) 510.668357ms ago: executing program 4 (id=5750): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x4}, 0x3086, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3, 0x0, 0x2500}, 0x18) 422.785439ms ago: executing program 5 (id=5751): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000002300)={0x9, 0x1, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000340)=""/136, 0x88}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 394.35299ms ago: executing program 1 (id=5752): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1000002, 0x37, 0x0, 0x0) 291.028583ms ago: executing program 1 (id=5753): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 265.998734ms ago: executing program 5 (id=5754): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0xfffffffffffffebd, 0x0, 0x0, &(0x7f0000000640)=""/193, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10041}}], 0x1, 0x20000000) 849.28µs ago: executing program 4 (id=5755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x30, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x2}, {{0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0xfffa}, {0x4f9, 0x8, 0xfffffffd, 0x10000000}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) 0s ago: executing program 5 (id=5767): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24040800}, 0x40020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1771}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x1b58}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) kernel console output (not intermixed with test programs): comm syz.8.5112: mark_inode_dirty error [ 336.246426][T17622] EXT4-fs error (device loop8) in ext4_setattr:6247: Corrupt filesystem [ 336.252910][T17630] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #15: comm syz.8.5112: corrupted inode contents [ 336.313697][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5115'. [ 336.313789][T17633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5115'. [ 336.313917][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5115'. [ 336.313948][T17633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5115'. [ 336.392695][T16550] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.602743][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5123'. [ 336.856178][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 336.856218][ T29] audit: type=1326 audit(1788522618.759:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.8.5129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2960e159 code=0x7ffc0000 [ 336.891028][ T29] audit: type=1326 audit(1788522618.799:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.8.5129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2960e159 code=0x7ffc0000 [ 336.891077][ T29] audit: type=1326 audit(1788522618.799:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.8.5129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2960e159 code=0x7ffc0000 [ 336.945490][ T29] audit: type=1326 audit(1788522618.799:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.8.5129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcb2960e159 code=0x7ffc0000 [ 336.945586][ T29] audit: type=1326 audit(1788522618.859:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.8.5129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2960e159 code=0x7ffc0000 [ 336.945620][ T29] audit: type=1326 audit(1788522618.859:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.8.5129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2960e159 code=0x7ffc0000 [ 336.999226][ T29] audit: type=1326 audit(1788522618.859:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.8.5129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2960e159 code=0x7ffc0000 [ 336.999310][ T29] audit: type=1326 audit(1788522618.859:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.8.5129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2960e159 code=0x7ffc0000 [ 336.999461][ T29] audit: type=1326 audit(1788522618.859:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.8.5129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb2960e159 code=0x7ffc0000 [ 336.999496][ T29] audit: type=1326 audit(1788522618.859:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.8.5129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2960e159 code=0x7ffc0000 [ 337.199198][T17676] size and base must be multiples of 4 kiB [ 337.199219][T17676] CPU: 0 UID: 0 PID: 17676 Comm: syz.8.5133 Not tainted syzkaller #0 PREEMPT(lazy) [ 337.199246][T17676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.199315][T17676] Call Trace: [ 337.199325][T17676] [ 337.199335][T17676] __dump_stack+0x1d/0x30 [ 337.199371][T17676] dump_stack_lvl+0x95/0xd0 [ 337.199434][T17676] dump_stack+0x15/0x1b [ 337.199540][T17676] mtrr_del+0xbf/0xd0 [ 337.199575][T17676] mtrr_ioctl+0xb62/0xfb0 [ 337.199612][T17676] ? __pfx_mtrr_ioctl+0x10/0x10 [ 337.199644][T17676] ? proc_reg_poll+0x141/0x1a0 [ 337.199703][T17676] proc_reg_unlocked_ioctl+0x123/0x1b0 [ 337.199738][T17676] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 337.199772][T17676] __se_sys_ioctl+0xce/0x140 [ 337.199885][T17676] __x64_sys_ioctl+0x43/0x50 [ 337.199979][T17676] x64_sys_call+0x239d/0x2550 [ 337.200015][T17676] do_syscall_64+0x112/0x360 [ 337.200056][T17676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.200123][T17676] RIP: 0033:0x7fcb2960e159 [ 337.200147][T17676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.200218][T17676] RSP: 002b:00007fcb28067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.200239][T17676] RAX: ffffffffffffffda RBX: 00007fcb29895fa0 RCX: 00007fcb2960e159 [ 337.200252][T17676] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000003 [ 337.200267][T17676] RBP: 00007fcb296a5024 R08: 0000000000000000 R09: 0000000000000000 [ 337.200333][T17676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.200350][T17676] R13: 00007fcb29896038 R14: 00007fcb29895fa0 R15: 00007fff82f162b8 [ 337.200375][T17676] [ 337.515064][T17692] loop4: detected capacity change from 0 to 256 [ 337.522357][T17692] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 337.613022][T17692] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 337.613171][T17692] FAT-fs (loop4): Filesystem has been set read-only [ 337.613228][T17692] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 337.659854][T17104] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 337.660035][T17104] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 338.085703][T17561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.147224][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5148'. [ 338.223375][T17714] loop9: detected capacity change from 0 to 8192 [ 338.274499][T17719] loop8: detected capacity change from 0 to 8192 [ 338.283648][T17719] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.303793][T17722] loop0: detected capacity change from 0 to 256 [ 338.315255][T17722] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.337266][T17720] loop7: detected capacity change from 0 to 4096 [ 338.401493][T17720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.422997][T17724] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 338.423089][T17724] FAT-fs (loop0): Filesystem has been set read-only [ 338.423120][T17724] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 338.449924][T17720] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.5153: corrupted inode contents [ 338.464625][T17720] EXT4-fs error (device loop7): ext4_dirty_inode:6731: inode #15: comm syz.7.5153: mark_inode_dirty error [ 338.480334][T17720] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.5153: corrupted inode contents [ 338.488185][T17720] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.5153: mark_inode_dirty error [ 338.501582][T17720] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.5153: corrupted inode contents [ 338.506917][T17720] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.5153: mark_inode_dirty error [ 338.516202][T17720] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.5153: corrupted inode contents [ 338.527031][T17720] EXT4-fs error (device loop7): ext4_truncate:4721: inode #15: comm syz.7.5153: mark_inode_dirty error [ 338.532751][T17720] EXT4-fs error (device loop7) in ext4_setattr:6247: Corrupt filesystem [ 338.555180][T17726] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.5153: corrupted inode contents [ 338.644638][T16130] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 338.644690][T16130] FAT-fs (loop9): Filesystem has been set read-only [ 338.732429][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.792988][T17184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.835867][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.914075][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.998152][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.130598][ T68] bridge_slave_1: left allmulticast mode [ 339.130632][ T68] bridge_slave_1: left promiscuous mode [ 339.130739][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.144020][ T68] bridge_slave_0: left allmulticast mode [ 339.144125][ T68] bridge_slave_0: left promiscuous mode [ 339.145191][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.202231][T17759] loop0: detected capacity change from 0 to 8192 [ 339.236261][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.249433][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.263436][ T68] bond0 (unregistering): Released all slaves [ 339.344752][T17763] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5166'. [ 339.346878][ T68] hsr_slave_0: left promiscuous mode [ 339.351584][T17039] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 339.351695][T17039] FAT-fs (loop0): Filesystem has been set read-only [ 339.353813][ T68] hsr_slave_1: left promiscuous mode [ 339.354260][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.354280][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.360587][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.360749][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.389294][ T68] veth1_macvtap: left promiscuous mode [ 339.389325][ T68] veth0_macvtap: left promiscuous mode [ 339.389387][ T68] veth1_vlan: left promiscuous mode [ 339.389454][ T68] veth0_vlan: left promiscuous mode [ 339.540675][ T68] team0 (unregistering): Port device team_slave_1 removed [ 339.550582][ T68] team0 (unregistering): Port device team_slave_0 removed [ 339.615921][T17771] veth1_to_bond: entered allmulticast mode [ 339.618885][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5171'. [ 339.656410][T17771] veth1_to_bond (unregistering): left allmulticast mode [ 339.667247][T17771] bond0: (slave bond_slave_1): Releasing backup interface [ 339.734103][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5175'. [ 339.734135][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5175'. [ 339.778452][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 339.816498][T17738] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.816575][T17738] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.816707][T17738] bridge_slave_0: entered allmulticast mode [ 339.845879][T17738] bridge_slave_0: entered promiscuous mode [ 339.857557][T17738] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.857603][T17738] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.857716][T17738] bridge_slave_1: entered allmulticast mode [ 339.858281][T17738] bridge_slave_1: entered promiscuous mode [ 339.945026][T17738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.948320][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 339.962944][T17738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.004021][T17738] team0: Port device team_slave_0 added [ 340.012302][T17738] team0: Port device team_slave_1 added [ 340.089783][T17738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.089802][T17738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.089905][T17738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.090591][T17738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.090606][T17738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.090693][T17738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.144633][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 340.253983][T17738] hsr_slave_0: entered promiscuous mode [ 340.258365][T17738] hsr_slave_1: entered promiscuous mode [ 340.262271][T17738] debugfs: 'hsr0' already exists in 'hsr' [ 340.262320][T17738] Cannot create hsr debugfs directory [ 340.422026][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 340.432800][T17820] loop9: detected capacity change from 0 to 1024 [ 340.439853][T17820] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 340.462135][T17820] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.501346][T16130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.560548][T17834] loop9: detected capacity change from 0 to 512 [ 340.638629][T17834] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.638783][T17834] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.673337][T17834] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #2: comm syz.9.5185: corrupted inode contents [ 340.687694][T17834] EXT4-fs error (device loop9): ext4_dirty_inode:6731: inode #2: comm syz.9.5185: mark_inode_dirty error [ 340.699472][T17834] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #2: comm syz.9.5185: corrupted inode contents [ 340.717129][T17834] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.5185: mark_inode_dirty error [ 340.731770][T17834] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #2: comm syz.9.5185: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 340.731770][T17834] [ 340.752225][T17834] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #2: comm syz.9.5185: corrupted inode contents [ 340.768635][T17834] EXT4-fs error (device loop9): ext4_append:88: inode #2: comm syz.9.5185: mark_inode_dirty error [ 340.788214][T17834] EXT4-fs error (device loop9) in ext4_append:100: Corrupt filesystem [ 340.799373][T17834] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #2: comm syz.9.5185: corrupted inode contents [ 340.816606][T17834] EXT4-fs error (device loop9): add_dirent_to_buf:2153: inode #2: comm syz.9.5185: mark_inode_dirty error [ 340.966830][T16130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.113268][T17868] loop8: detected capacity change from 0 to 512 [ 341.135189][T17738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.144165][T17738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 341.145567][T17738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.155678][T17738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.158421][T17738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.163236][T17868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.163458][T17868] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.166433][T17738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.182118][T17738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.193713][T17738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 341.278523][T17868] loop8: detected capacity change from 512 to 3 [ 341.295673][T17738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.330364][T17738] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.343237][ T3844] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.343289][ T3844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.361674][ T3839] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.361720][ T3839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.485534][T17738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.515583][T17738] veth0_vlan: entered promiscuous mode [ 341.520384][T17738] veth1_vlan: entered promiscuous mode [ 341.581496][T17738] veth0_macvtap: entered promiscuous mode [ 341.591072][T17738] veth1_macvtap: entered promiscuous mode [ 341.621889][T17738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.632999][T17738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.651562][T16550] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.665532][ T3844] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.666179][T17872] kmmpd-loop8: attempt to access beyond end of device [ 341.666179][T17872] loop8: rw=8402945, sector=48, nr_sectors = 4 limit=3 [ 341.666220][T17872] Buffer I/O error on dev loop8, logical block 12, lost sync page write [ 341.720829][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.721870][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.724176][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.724229][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.779863][ T3844] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.851260][ T3844] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.915296][ T3844] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.055424][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 342.055455][ T29] audit: type=1400 audit(1788522623.949:2717): avc: denied { setopt } for pid=17944 comm="syz.2.5209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 342.086431][ T3839] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.153159][ T3844] bridge_slave_1: left allmulticast mode [ 342.153194][ T3844] bridge_slave_1: left promiscuous mode [ 342.153326][ T3844] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.159550][ T3844] bridge_slave_0: left allmulticast mode [ 342.159574][ T3844] bridge_slave_0: left promiscuous mode [ 342.159763][ T3844] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.246604][ T3844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.256728][ T3844] bond0 (unregistering): Released all slaves [ 342.332153][T17958] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 342.355016][T17958] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.373120][ T3844] hsr_slave_0: left promiscuous mode [ 342.379766][ T3844] hsr_slave_1: left promiscuous mode [ 342.380396][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.380413][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.401823][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.401844][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.421581][T17184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.432864][ T3844] veth1_macvtap: left promiscuous mode [ 342.432940][ T3844] veth0_macvtap: left promiscuous mode [ 342.433006][ T3844] veth1_vlan: left promiscuous mode [ 342.433109][ T3844] veth0_vlan: left promiscuous mode [ 342.550964][ T3844] team0 (unregistering): Port device team_slave_1 removed [ 342.560977][ T3844] team0 (unregistering): Port device team_slave_0 removed [ 342.617026][T17928] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.617069][T17928] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.617172][T17928] bridge_slave_0: entered allmulticast mode [ 342.624084][T17928] bridge_slave_0: entered promiscuous mode [ 342.625249][T17928] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.625299][T17928] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.625599][T17928] bridge_slave_1: entered allmulticast mode [ 342.626902][T17928] bridge_slave_1: entered promiscuous mode [ 342.649361][T17928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.651846][T17928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.672107][T17928] team0: Port device team_slave_0 added [ 342.673236][T17928] team0: Port device team_slave_1 added [ 342.711126][T17928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.711159][T17928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.711195][T17928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.712301][T17928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.712342][T17928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.712436][T17928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.779630][T17928] hsr_slave_0: entered promiscuous mode [ 342.780792][T17928] hsr_slave_1: entered promiscuous mode [ 342.934448][ T29] audit: type=1400 audit(1788522624.839:2718): avc: denied { ioctl } for pid=17977 comm="syz.9.5219" path="socket:[61169]" dev="sockfs" ino=61169 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 342.966288][T17980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5218'. [ 343.159495][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5223'. [ 344.137501][ T3557] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 344.246142][ T29] audit: type=1400 audit(1788522626.149:2719): avc: denied { read } for pid=18011 comm="syz.9.5240" path="socket:[62224]" dev="sockfs" ino=62224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 345.496312][T17967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.506354][T17928] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 345.518626][T17928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.525617][T17928] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 345.538498][T17928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.542137][T17928] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 345.567613][T17928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.575537][T17928] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 345.594237][T17928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.637881][T18029] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5231'. [ 345.772627][ T29] audit: type=1400 audit(1788522627.669:2720): avc: denied { getopt } for pid=18045 comm="syz.9.5236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 345.825649][T17928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.842623][T17928] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.852196][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.852241][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.870330][T18052] set_capacity_and_notify: 1 callbacks suppressed [ 345.870432][T18052] loop9: detected capacity change from 0 to 256 [ 345.870900][ T3825] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.871161][ T3825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.912637][T18052] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 346.021383][T18052] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779264) [ 346.021424][T18052] FAT-fs (loop9): Filesystem has been set read-only [ 346.021593][T18052] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 346.021628][T18052] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 346.021704][T18052] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 346.021737][T18052] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 346.078856][T17928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.088873][ T29] audit: type=1400 audit(1788522627.999:2721): avc: denied { setopt } for pid=18065 comm="syz.2.5245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.130470][ T29] audit: type=1400 audit(1788522628.039:2722): avc: denied { connect } for pid=18078 comm="syz.0.5247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 346.133244][ T29] audit: type=1400 audit(1788522628.039:2723): avc: denied { write } for pid=18078 comm="syz.0.5247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 346.184633][T18084] Invalid argument reading file caps for ./file0 [ 346.234745][T17928] veth0_vlan: entered promiscuous mode [ 346.245341][T17928] veth1_vlan: entered promiscuous mode [ 346.257990][ T353] nci: nci_ntf_packet: unknown ntf opcode 0x600 [ 346.270554][T17928] veth0_macvtap: entered promiscuous mode [ 346.278640][T17928] veth1_macvtap: entered promiscuous mode [ 346.290319][T17928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.301663][T17928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.341192][ T3825] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.342468][ T3825] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.358936][ T3844] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.359160][ T3844] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.601158][T18100] loop0: detected capacity change from 0 to 32768 [ 346.649958][T18100] loop0: p1 p3 < > [ 346.675974][T18127] loop9: detected capacity change from 0 to 512 [ 346.685932][T18127] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 346.699399][T18127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c856e02c, mo2=0002] [ 346.699570][T18127] EXT4-fs (loop9): orphan cleanup on readonly fs [ 346.699602][T18127] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.5253: bad orphan inode 267 [ 346.699832][T18127] loop9: lost filesystem error report for type 5 error -117 [ 346.704979][T18127] EXT4-fs (loop9): Remounting filesystem read-only [ 346.727904][T18127] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 346.729041][T18127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 346.989069][T18131] loop8: detected capacity change from 0 to 32768 [ 346.997298][ T6712] udevd[6712]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 347.007615][T17444] udevd[17444]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 347.028079][T18131] loop8: p1 p3 < > [ 347.066340][T18136] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5261'. [ 347.142788][ T6712] udevd[6712]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 347.150458][T10068] udevd[10068]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 347.460315][T18166] ref_ctr_offset mismatch. inode: 0x237 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x900000080 [ 347.592230][T18179] FAULT_INJECTION: forcing a failure. [ 347.592230][T18179] name failslab, interval 1, probability 0, space 0, times 0 [ 347.592279][T18179] CPU: 0 UID: 0 PID: 18179 Comm: syz.8.5280 Not tainted syzkaller #0 PREEMPT(lazy) [ 347.592313][T18179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.592331][T18179] Call Trace: [ 347.592339][T18179] [ 347.592350][T18179] __dump_stack+0x1d/0x30 [ 347.592432][T18179] dump_stack_lvl+0x95/0xd0 [ 347.592526][T18179] dump_stack+0x15/0x1b [ 347.592607][T18179] should_fail_ex+0x262/0x280 [ 347.592689][T18179] ? vm_area_dup+0x33/0x300 [ 347.592790][T18179] should_failslab+0x8c/0xb0 [ 347.592869][T18179] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 347.592960][T18179] ? vm_area_dup+0x33/0x300 [ 347.593054][T18179] vm_area_dup+0x33/0x300 [ 347.593139][T18179] __split_vma+0xe4/0x720 [ 347.593241][T18179] ? _raw_spin_unlock+0x9/0x30 [ 347.593336][T18179] ? finish_task_switch+0x121/0x340 [ 347.593428][T18179] vma_modify+0xbf5/0xd50 [ 347.593503][T18179] vma_modify_flags+0x1be/0x250 [ 347.593603][T18179] mlock_fixup+0x166/0x460 [ 347.593709][T18179] apply_vma_lock_flags+0x1c7/0x290 [ 347.593833][T18179] do_mlock+0x3a0/0x510 [ 347.593941][T18179] ? __se_sys_futex+0x2f6/0x370 [ 347.594049][T18179] ? xfd_validate_state+0x45/0xf0 [ 347.594145][T18179] ? restore_fpregs_from_fpstate+0x61/0x110 [ 347.594230][T18179] __x64_sys_mlock+0x4d/0x70 [ 347.594314][T18179] x64_sys_call+0x2232/0x2550 [ 347.594406][T18179] do_syscall_64+0x112/0x360 [ 347.594502][T18179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.594582][T18179] RIP: 0033:0x7fb56c57e159 [ 347.594636][T18179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.594686][T18179] RSP: 002b:00007fb56afd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 347.594770][T18179] RAX: ffffffffffffffda RBX: 00007fb56c805fa0 RCX: 00007fb56c57e159 [ 347.594823][T18179] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 347.594868][T18179] RBP: 00007fb56c615024 R08: 0000000000000000 R09: 0000000000000000 [ 347.594919][T18179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.594962][T18179] R13: 00007fb56c806038 R14: 00007fb56c805fa0 R15: 00007ffe2a34bd78 [ 347.595035][T18179] [ 347.895333][T18190] loop9: detected capacity change from 0 to 256 [ 347.907797][T18190] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 347.907895][T18190] FAT-fs (loop9): Filesystem has been set read-only [ 347.967646][T18194] netlink: 'syz.8.5284': attribute type 1 has an invalid length. [ 347.967694][T18194] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5284'. [ 347.967934][T18194] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.968059][T18194] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.196264][T18209] loop9: detected capacity change from 0 to 128 [ 348.264649][T18213] netlink: 27 bytes leftover after parsing attributes in process `syz.8.5290'. [ 348.316094][ T29] audit: type=1326 audit(1788522630.219:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18218 comm="syz.8.5293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb56c57e159 code=0x0 [ 348.439147][T18232] loop9: detected capacity change from 0 to 512 [ 348.497548][T18232] loop9: detected capacity change from 512 to 0 [ 348.503669][T18234] FAT-fs (loop9): Directory bread(block 34) failed [ 348.503958][T18234] FAT-fs (loop9): Directory bread(block 35) failed [ 348.503989][T18234] FAT-fs (loop9): Directory bread(block 36) failed [ 348.504087][T18234] FAT-fs (loop9): Directory bread(block 37) failed [ 348.504111][T18234] FAT-fs (loop9): Directory bread(block 38) failed [ 348.504136][T18234] FAT-fs (loop9): Directory bread(block 39) failed [ 348.504167][T18234] FAT-fs (loop9): Directory bread(block 40) failed [ 348.504207][T18234] FAT-fs (loop9): Directory bread(block 41) failed [ 348.504273][T18234] FAT-fs (loop9): Directory bread(block 34) failed [ 348.504292][T18234] FAT-fs (loop9): Directory bread(block 35) failed [ 348.504539][T18234] Buffer I/O error on dev loop9, logical block 32, lost sync page write [ 348.809214][ T353] FAT-fs (loop9): bread failed in fat_clusters_flush [ 348.809371][T16130] FAT-fs (loop9): unable to read boot sector to mark fs as dirty [ 348.829999][ T3839] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.871171][ T3839] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.921882][ T3839] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.985136][ T3839] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.052356][T18237] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.052451][T18237] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.052627][T18237] bridge_slave_0: entered allmulticast mode [ 349.053519][T18237] bridge_slave_0: entered promiscuous mode [ 349.072863][T18237] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.072964][T18237] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.073163][T18237] bridge_slave_1: entered allmulticast mode [ 349.075528][T18237] bridge_slave_1: entered promiscuous mode [ 349.118792][T18237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.128803][ T3839] bond1: left allmulticast mode [ 349.128918][ T3839] bond1: left promiscuous mode [ 349.129322][ T3839] bridge0: port 3(bond1) entered disabled state [ 349.139043][ T3839] bridge_slave_1: left allmulticast mode [ 349.139066][ T3839] bridge_slave_1: left promiscuous mode [ 349.139407][ T3839] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.152339][ T3839] bridge_slave_0: left allmulticast mode [ 349.152434][ T3839] bridge_slave_0: left promiscuous mode [ 349.152697][ T3839] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.184627][T18085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.285238][T18254] loop8: detected capacity change from 0 to 8192 [ 349.302566][T18261] netlink: 'syz.0.5306': attribute type 16 has an invalid length. [ 349.320705][T18262] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5305'. [ 349.431012][ T3839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.443870][ T3839] bond0 (unregistering): Released all slaves [ 349.452230][ T3839] bond1 (unregistering): Released all slaves [ 349.477829][T18237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.538085][T18237] team0: Port device team_slave_0 added [ 349.556081][ T3839] hsr_slave_0: left promiscuous mode [ 349.570297][ T3839] hsr_slave_1: left promiscuous mode [ 349.570824][ T3839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.570849][ T3839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.575768][ T3839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.575819][ T3839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.614531][ T3839] veth1_macvtap: left promiscuous mode [ 349.614565][ T3839] veth0_macvtap: left promiscuous mode [ 349.614618][ T3839] veth1_vlan: left promiscuous mode [ 349.614739][ T3839] veth0_vlan: left promiscuous mode [ 349.793027][T18288] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5318'. [ 349.883944][ T29] audit: type=1400 audit(1788522631.789:2725): avc: denied { mounton } for pid=18296 comm="syz.2.5319" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 349.908064][ T3839] team0 (unregistering): Port device team_slave_1 removed [ 349.926802][ T3839] team0 (unregistering): Port device team_slave_0 removed [ 350.002424][T18237] team0: Port device team_slave_1 added [ 350.041620][T18288] ip6gre1: entered promiscuous mode [ 350.041651][T18288] ip6gre1: entered allmulticast mode [ 350.095376][T18303] [ 350.175965][T18237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.175988][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.176023][T18237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.176775][T18237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.176835][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.176988][T18237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.288910][T18310] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5325'. [ 350.325454][T18237] hsr_slave_0: entered promiscuous mode [ 350.329827][T18237] hsr_slave_1: entered promiscuous mode [ 350.330421][T18237] debugfs: 'hsr0' already exists in 'hsr' [ 350.330463][T18237] Cannot create hsr debugfs directory [ 350.429786][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 350.533382][T18332] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5332'. [ 350.544730][T18332] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5332'. [ 350.604761][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 350.708490][T18351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5340'. [ 350.754176][T18351] bond1: Invalid ad_actor_system MAC address. [ 350.754277][T18351] bond1: option ad_actor_system: invalid value (1) [ 350.770893][T18351] bond1 (unregistering): Released all slaves [ 350.855646][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 350.901886][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 350.910701][T18362] FAULT_INJECTION: forcing a failure. [ 350.910701][T18362] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.910739][T18362] CPU: 1 UID: 0 PID: 18362 Comm: syz.7.5343 Not tainted syzkaller #0 PREEMPT(lazy) [ 350.910765][T18362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.910838][T18362] Call Trace: [ 350.910846][T18362] [ 350.910854][T18362] __dump_stack+0x1d/0x30 [ 350.910924][T18362] dump_stack_lvl+0x95/0xd0 [ 350.910956][T18362] dump_stack+0x15/0x1b [ 350.910988][T18362] should_fail_ex+0x262/0x280 [ 350.911038][T18362] should_fail_alloc_page+0xf2/0x100 [ 350.911079][T18362] __alloc_frozen_pages_noprof+0x157/0x400 [ 350.911145][T18362] alloc_pages_mpol+0xaf/0x1d0 [ 350.911168][T18362] folio_alloc_mpol_noprof+0x39/0x80 [ 350.911191][T18362] shmem_get_folio_gfp+0x3ff/0xd90 [ 350.911313][T18362] shmem_fallocate+0x631/0x8d0 [ 350.911370][T18362] vfs_fallocate+0x3ac/0x400 [ 350.911541][T18362] __x64_sys_fallocate+0x7a/0xd0 [ 350.911578][T18362] x64_sys_call+0x1e1d/0x2550 [ 350.911685][T18362] do_syscall_64+0x112/0x360 [ 350.911728][T18362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.911825][T18362] RIP: 0033:0x7f34df5be159 [ 350.911843][T18362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.911862][T18362] RSP: 002b:00007f34de017028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 350.911883][T18362] RAX: ffffffffffffffda RBX: 00007f34df845fa0 RCX: 00007f34df5be159 [ 350.911900][T18362] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 350.911975][T18362] RBP: 00007f34df655024 R08: 0000000000000000 R09: 0000000000000000 [ 350.911995][T18362] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 350.912014][T18362] R13: 00007f34df846038 R14: 00007f34df845fa0 R15: 00007ffe14b79e28 [ 350.912099][T18362] [ 350.946145][ T29] audit: type=1326 audit(1788522632.809:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.0.5344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa58ee159 code=0x7ffc0000 [ 350.946188][ T29] audit: type=1326 audit(1788522632.849:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.0.5344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa58ee159 code=0x7ffc0000 [ 350.946222][ T29] audit: type=1326 audit(1788522632.849:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.0.5344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa58ee159 code=0x7ffc0000 [ 351.091507][ T29] audit: type=1326 audit(1788522632.929:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.0.5344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7feaa58ee159 code=0x7ffc0000 [ 351.091625][ T29] audit: type=1326 audit(1788522632.929:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.0.5344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa58ee159 code=0x7ffc0000 [ 351.091783][ T29] audit: type=1326 audit(1788522632.929:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.0.5344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa58ee159 code=0x7ffc0000 [ 351.091887][ T29] audit: type=1326 audit(1788522632.929:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.0.5344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feaa58ee159 code=0x7ffc0000 [ 351.161221][T18237] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 351.179820][T18378] netlink: 'syz.2.5347': attribute type 1 has an invalid length. [ 351.217318][T18237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.314720][T18378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.317582][T18237] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 351.343166][T18237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.352947][T18237] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 351.399580][ T29] audit: type=1400 audit(1788522633.309:2733): avc: denied { shutdown } for pid=18386 comm="syz.8.5350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 352.079830][T18237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.098469][T18384] bond1: (slave gretap1): making interface the new active one [ 352.106912][T18384] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 352.110392][T18237] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.138269][T18237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.200956][T18408] loop7: detected capacity change from 0 to 2048 [ 352.231852][T18408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.321318][T18237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.346084][T18237] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.361004][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.361070][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.387662][T17184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.405885][T18431] loop2: detected capacity change from 0 to 256 [ 352.449525][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.449576][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.511255][T18438] loop7: detected capacity change from 0 to 1024 [ 352.519142][T18438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 352.540704][T18438] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2042c018, mo2=0102] [ 352.540806][T18438] System zones: 0-1, 3-12 [ 352.541778][T18438] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.615112][T18447] FAULT_INJECTION: forcing a failure. [ 352.615112][T18447] name failslab, interval 1, probability 0, space 0, times 0 [ 352.615156][T18447] CPU: 0 UID: 0 PID: 18447 Comm: syz.0.5365 Not tainted syzkaller #0 PREEMPT(lazy) [ 352.615224][T18447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.615240][T18447] Call Trace: [ 352.615249][T18447] [ 352.615259][T18447] __dump_stack+0x1d/0x30 [ 352.615296][T18447] dump_stack_lvl+0x95/0xd0 [ 352.615400][T18447] dump_stack+0x15/0x1b [ 352.615424][T18447] should_fail_ex+0x262/0x280 [ 352.615456][T18447] should_failslab+0x8c/0xb0 [ 352.615552][T18447] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 352.615592][T18447] ? kstrdup_const+0x3e/0x50 [ 352.615612][T18447] ? kstrdup_const+0x3e/0x50 [ 352.615689][T18447] kstrdup+0x3e/0xd0 [ 352.615717][T18447] kstrdup_const+0x3e/0x50 [ 352.615745][T18447] alloc_vfsmnt+0xe2/0x2f0 [ 352.615783][T18447] clone_mnt+0x30/0x5d0 [ 352.615872][T18447] copy_tree+0x2dc/0x890 [ 352.615918][T18447] copy_mnt_ns+0x1d2/0x720 [ 352.615966][T18447] create_new_namespaces+0x7f/0x420 [ 352.616027][T18447] unshare_nsproxy_namespaces+0x115/0x150 [ 352.616086][T18447] ksys_unshare+0x42b/0x710 [ 352.616124][T18447] __x64_sys_unshare+0x1f/0x30 [ 352.616174][T18447] x64_sys_call+0x1e33/0x2550 [ 352.616254][T18447] do_syscall_64+0x112/0x360 [ 352.616294][T18447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.616393][T18447] RIP: 0033:0x7feaa58ee159 [ 352.616455][T18447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.616475][T18447] RSP: 002b:00007feaa4347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 352.616500][T18447] RAX: ffffffffffffffda RBX: 00007feaa5b75fa0 RCX: 00007feaa58ee159 [ 352.616564][T18447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 352.616584][T18447] RBP: 00007feaa5985024 R08: 0000000000000000 R09: 0000000000000000 [ 352.616602][T18447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.616667][T18447] R13: 00007feaa5b76038 R14: 00007feaa5b75fa0 R15: 00007ffe0a8ac5a8 [ 352.616692][T18447] [ 352.792047][T18438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.904011][T18237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.921611][T18470] FAULT_INJECTION: forcing a failure. [ 352.921611][T18470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.921644][T18470] CPU: 0 UID: 0 PID: 18470 Comm: syz.7.5368 Not tainted syzkaller #0 PREEMPT(lazy) [ 352.921716][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.921735][T18470] Call Trace: [ 352.921744][T18470] [ 352.921755][T18470] __dump_stack+0x1d/0x30 [ 352.921782][T18470] dump_stack_lvl+0x95/0xd0 [ 352.921808][T18470] dump_stack+0x15/0x1b [ 352.921899][T18470] should_fail_ex+0x262/0x280 [ 352.921978][T18470] should_fail+0xb/0x20 [ 352.922004][T18470] should_fail_usercopy+0x1a/0x20 [ 352.922115][T18470] _copy_to_user+0x20/0xa0 [ 352.922189][T18470] bpf_log_attr_finalize+0xa7/0x100 [ 352.922230][T18470] btf_new_fd+0x34a/0x670 [ 352.922279][T18470] bpf_btf_load+0x116/0x130 [ 352.922356][T18470] __sys_bpf+0xbce/0xc30 [ 352.922391][T18470] ? do_futex+0x350/0x460 [ 352.922462][T18470] __x64_sys_bpf+0x69/0x80 [ 352.922484][T18470] x64_sys_call+0xf26/0x2550 [ 352.922558][T18470] do_syscall_64+0x112/0x360 [ 352.922626][T18470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.922658][T18470] RIP: 0033:0x7f34df5be159 [ 352.922685][T18470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.922711][T18470] RSP: 002b:00007f34de017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.922739][T18470] RAX: ffffffffffffffda RBX: 00007f34df845fa0 RCX: 00007f34df5be159 [ 352.922755][T18470] RDX: 0000000000000028 RSI: 0000200000000d80 RDI: 0000000000000012 [ 352.922816][T18470] RBP: 00007f34df655024 R08: 0000000000000000 R09: 0000000000000000 [ 352.922835][T18470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.922854][T18470] R13: 00007f34df846038 R14: 00007f34df845fa0 R15: 00007ffe14b79e28 [ 352.922893][T18470] [ 353.010067][T18476] netlink: 'syz.2.5370': attribute type 4 has an invalid length. [ 353.053698][T18476] netlink: 'syz.2.5370': attribute type 4 has an invalid length. [ 353.223060][T18237] veth0_vlan: entered promiscuous mode [ 353.231385][T18237] veth1_vlan: entered promiscuous mode [ 353.255357][T18237] veth0_macvtap: entered promiscuous mode [ 353.266029][T18237] veth1_macvtap: entered promiscuous mode [ 353.299670][T18237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.324995][T18237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.414489][T18506] FAULT_INJECTION: forcing a failure. [ 353.414489][T18506] name failslab, interval 1, probability 0, space 0, times 0 [ 353.414533][T18506] CPU: 0 UID: 0 PID: 18506 Comm: syz.8.5378 Not tainted syzkaller #0 PREEMPT(lazy) [ 353.414571][T18506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.414608][T18506] Call Trace: [ 353.414618][T18506] [ 353.414628][T18506] __dump_stack+0x1d/0x30 [ 353.414663][T18506] dump_stack_lvl+0x95/0xd0 [ 353.414687][T18506] dump_stack+0x15/0x1b [ 353.414709][T18506] should_fail_ex+0x262/0x280 [ 353.414772][T18506] ? skb_clone+0x151/0x1f0 [ 353.414815][T18506] should_failslab+0x8c/0xb0 [ 353.414843][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 353.414856][T18506] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 353.414885][ T29] audit: type=1400 audit(1788522635.319:2944): avc: denied { getopt } for pid=18509 comm="syz.7.5379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 353.414899][T18506] ? skb_clone+0x151/0x1f0 [ 353.414978][T18506] skb_clone+0x151/0x1f0 [ 353.415022][T18506] bpf_clone_redirect+0xed/0x280 [ 353.415065][T18506] bpf_prog_69c2527fbc57d46b+0x5f/0x68 [ 353.415134][T18506] ? __perf_event_task_sched_in+0xa7a/0xae0 [ 353.415163][T18506] ? perf_cgroup_switch+0x10c/0x480 [ 353.415190][T18506] ? xfd_validate_state+0x45/0xf0 [ 353.415258][T18506] ? _raw_spin_unlock+0x9/0x30 [ 353.415311][T18506] ? finish_task_switch+0x121/0x340 [ 353.415355][T18506] ? __schedule+0x79e/0xd20 [ 353.415434][T18506] ? is_bpf_text_address+0x141/0x160 [ 353.415525][T18506] ? preempt_schedule_common+0x12/0x40 [ 353.415573][T18506] ? preempt_schedule_thunk+0x16/0x40 [ 353.415619][T18506] ? bpf_test_timer_continue+0xac/0x350 [ 353.415656][T18506] bpf_test_run+0x29b/0x620 [ 353.415686][T18506] ? __list_add_valid_or_report+0x38/0xe0 [ 353.415804][T18506] ? bpf_test_run+0x198/0x620 [ 353.415845][T18506] bpf_prog_test_run_skb+0xe67/0x11b0 [ 353.415880][T18506] ? __rcu_read_unlock+0x4e/0x70 [ 353.415932][T18506] ? __fget_files+0x184/0x1c0 [ 353.415959][T18506] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 353.415991][T18506] bpf_prog_test_run+0x208/0x340 [ 353.416024][T18506] __sys_bpf+0x8da/0xc30 [ 353.416115][T18506] ? do_futex+0x350/0x460 [ 353.416156][T18506] __x64_sys_bpf+0x69/0x80 [ 353.416182][T18506] x64_sys_call+0xf26/0x2550 [ 353.416224][T18506] do_syscall_64+0x112/0x360 [ 353.416260][T18506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.416345][T18506] RIP: 0033:0x7fb56c57e159 [ 353.416364][T18506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.416384][T18506] RSP: 002b:00007fb56afd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.416414][T18506] RAX: ffffffffffffffda RBX: 00007fb56c805fa0 RCX: 00007fb56c57e159 [ 353.416457][T18506] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 353.416476][T18506] RBP: 00007fb56c615024 R08: 0000000000000000 R09: 0000000000000000 [ 353.416493][T18506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.416511][T18506] R13: 00007fb56c806038 R14: 00007fb56c805fa0 R15: 00007ffe2a34bd78 [ 353.416537][T18506] [ 354.335909][T18521] loop8: detected capacity change from 0 to 512 [ 354.336677][T18521] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 354.355170][ T353] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.359335][ T3844] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.369595][ T411] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.370154][ T411] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.450010][ T411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.568803][ T411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.649737][ T411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.700298][T18559] loop8: detected capacity change from 0 to 512 [ 354.734243][T18559] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.5394: bad orphan inode 11862016 [ 354.734326][T18559] loop8: lost filesystem error report for type 5 error -117 [ 354.748458][T18559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 354.748540][T18559] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.770916][ T29] audit: type=1400 audit(1788522636.679:2945): avc: denied { write } for pid=18558 comm="syz.8.5394" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 354.796619][ T29] audit: type=1400 audit(1788522636.679:2946): avc: denied { write } for pid=18558 comm="syz.8.5394" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 354.835285][ T411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.854393][T18570] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5399'. [ 354.866417][T17928] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 354.877539][ T29] audit: type=1400 audit(1788522636.789:2947): avc: denied { execheap } for pid=18569 comm="syz.5.5399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 354.936782][T18574] bridge0: port 3(syz_tun) entered blocking state [ 354.936837][T18574] bridge0: port 3(syz_tun) entered disabled state [ 354.936931][T18574] syz_tun: entered allmulticast mode [ 354.938225][T18574] syz_tun: entered promiscuous mode [ 354.938712][T18574] bridge0: port 3(syz_tun) entered blocking state [ 354.938794][T18574] bridge0: port 3(syz_tun) entered forwarding state [ 354.979447][T18574] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 355.063765][ T29] audit: type=1400 audit(1788522636.969:2948): avc: denied { listen } for pid=18578 comm="syz.8.5402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 355.191251][ T411] bridge_slave_1: left allmulticast mode [ 355.191290][ T411] bridge_slave_1: left promiscuous mode [ 355.191803][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.219424][ T411] bridge_slave_0: left allmulticast mode [ 355.219456][ T411] bridge_slave_0: left promiscuous mode [ 355.219589][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.294830][ T411] bond1 (unregistering): (slave gretap1): Releasing active interface [ 355.334619][ T411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.348919][ T411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.349934][ T411] bond0 (unregistering): Released all slaves [ 355.356872][ T411] bond1 (unregistering): Released all slaves [ 355.427042][ T29] audit: type=1326 audit(1788522637.329:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18611 comm="syz.8.5416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 355.427135][ T29] audit: type=1326 audit(1788522637.329:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18611 comm="syz.8.5416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 355.482910][ T29] audit: type=1326 audit(1788522637.389:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18611 comm="syz.8.5416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 355.483133][ T29] audit: type=1326 audit(1788522637.389:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18611 comm="syz.8.5416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 355.483181][ T29] audit: type=1326 audit(1788522637.389:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18611 comm="syz.8.5416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 355.572000][ T411] hsr_slave_0: left promiscuous mode [ 355.573350][ T411] hsr_slave_1: left promiscuous mode [ 355.574318][ T411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.574392][ T411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.578404][ T411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.578422][ T411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.609648][ T411] veth1_macvtap: left promiscuous mode [ 355.609735][ T411] veth0_macvtap: left promiscuous mode [ 355.609942][ T411] veth1_vlan: left promiscuous mode [ 355.610090][ T411] veth0_vlan: left promiscuous mode [ 355.897317][ T411] team0 (unregistering): Port device team_slave_1 removed [ 355.915954][ T411] team0 (unregistering): Port device team_slave_0 removed [ 356.057326][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 356.066595][T18545] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.066637][T18545] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.066852][T18545] bridge_slave_0: entered allmulticast mode [ 356.070186][T18545] bridge_slave_0: entered promiscuous mode [ 356.085878][T18545] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.085931][T18545] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.086153][T18545] bridge_slave_1: entered allmulticast mode [ 356.088350][T18545] bridge_slave_1: entered promiscuous mode [ 356.173820][T18545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.193981][T18545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.290710][T18545] team0: Port device team_slave_0 added [ 356.303644][T18545] team0: Port device team_slave_1 added [ 356.391752][T18545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.391776][T18545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.391820][T18545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.400865][T18545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.400906][T18545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.400996][T18545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.509178][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 356.572779][T18545] hsr_slave_0: entered promiscuous mode [ 356.576433][T18545] hsr_slave_1: entered promiscuous mode [ 356.577077][T18545] debugfs: 'hsr0' already exists in 'hsr' [ 356.577106][T18545] Cannot create hsr debugfs directory [ 356.700269][T18672] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5437'. [ 356.723388][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 356.866681][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5442'. [ 356.946227][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 357.042506][T18687] bridge_slave_0: left allmulticast mode [ 357.042539][T18687] bridge_slave_0: left promiscuous mode [ 357.042719][T18687] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.080583][T18687] bridge_slave_1: left allmulticast mode [ 357.080619][T18687] bridge_slave_1: left promiscuous mode [ 357.080805][T18687] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.106255][T18695] ip_tables: iptables: counters copy to user failed while replacing table [ 357.126319][T18687] bond0: (slave bond_slave_0): Releasing backup interface [ 357.147334][T18687] bond0: (slave bond_slave_1): Releasing backup interface [ 357.187899][T18687] team0: Port device team_slave_0 removed [ 357.219071][T18687] team0: Port device team_slave_1 removed [ 357.220168][T18687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.220191][T18687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.250853][T18687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.250883][T18687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.280666][T18687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 357.344863][T18705] loop8: detected capacity change from 0 to 4096 [ 357.423186][T18545] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.442475][T18705] EXT4-fs (loop8): corrupt root inode, run e2fsck [ 357.442523][T18705] EXT4-fs (loop8): mount failed [ 357.568108][T18545] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.669971][T18545] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.746607][T18545] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.946619][T18545] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.965973][T18723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.974583][T18545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.983053][T18545] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.993770][T18723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.004663][T18545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 358.014325][T18545] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 358.034510][T18545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 358.045727][T18545] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 358.063269][T18545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 358.257476][T18545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.290542][T18545] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.309283][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.309333][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.342775][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.342846][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.445585][T18545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.530906][T18545] veth0_vlan: entered promiscuous mode [ 358.534205][T18545] veth1_vlan: entered promiscuous mode [ 358.565341][T18545] veth0_macvtap: entered promiscuous mode [ 358.573437][T18545] veth1_macvtap: entered promiscuous mode [ 358.585878][T18545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.601110][T18545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.632087][T18774] loop0: detected capacity change from 0 to 512 [ 358.648819][T18774] EXT4-fs (loop0): orphan cleanup on readonly fs [ 358.648956][T18774] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 358.667132][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.682708][T18774] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 358.682992][T18774] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.5464: attempt to clear invalid blocks 33619980 len 1 [ 358.683038][T18774] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 358.707474][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 358.707590][ C0] EXT4-fs (loop0): initial error at time 1788522640: ext4_mb_generate_buddy:1317 [ 358.707694][ C0] EXT4-fs (loop0): last error at time 1788522640: ext4_clear_blocks:876: inode 13 [ 358.756761][T18774] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5464: invalid indirect mapped block 1819239214 (level 0) [ 358.756812][T18774] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 358.760523][T18774] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5464: invalid indirect mapped block 1819239214 (level 1) [ 358.760766][T18774] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 358.766647][T18774] EXT4-fs (loop0): 1 truncate cleaned up [ 358.767867][T18774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 358.786966][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 358.787079][ T29] audit: type=1400 audit(1788522640.699:2994): avc: denied { watch watch_reads } for pid=18773 comm="syz.0.5464" path="/86/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.810898][ T353] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.816017][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.816492][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.905446][T17039] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.222026][T18809] netlink: 'syz.0.5477': attribute type 4 has an invalid length. [ 359.235591][T18809] netlink: 'syz.0.5477': attribute type 4 has an invalid length. [ 359.324239][T18815] FAULT_INJECTION: forcing a failure. [ 359.324239][T18815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.324294][T18815] CPU: 0 UID: 0 PID: 18815 Comm: syz.7.5479 Not tainted syzkaller #0 PREEMPT(lazy) [ 359.324331][T18815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.324349][T18815] Call Trace: [ 359.324359][T18815] [ 359.324396][T18815] __dump_stack+0x1d/0x30 [ 359.324432][T18815] dump_stack_lvl+0x95/0xd0 [ 359.324472][T18815] dump_stack+0x15/0x1b [ 359.324502][T18815] should_fail_ex+0x262/0x280 [ 359.324530][T18815] should_fail+0xb/0x20 [ 359.324549][T18815] should_fail_usercopy+0x1a/0x20 [ 359.324620][T18815] _copy_from_user+0x1c/0xb0 [ 359.324654][T18815] bpf_vlog_reverse_ubuf+0xed/0x360 [ 359.324759][T18815] bpf_vlog_finalize+0x147/0x200 [ 359.324808][T18815] bpf_log_attr_finalize+0x33/0x100 [ 359.324836][T18815] btf_new_fd+0x34a/0x670 [ 359.324950][T18815] bpf_btf_load+0x116/0x130 [ 359.324981][T18815] __sys_bpf+0xbce/0xc30 [ 359.325007][T18815] ? do_futex+0x350/0x460 [ 359.325133][T18815] __x64_sys_bpf+0x69/0x80 [ 359.325159][T18815] x64_sys_call+0xf26/0x2550 [ 359.325250][T18815] do_syscall_64+0x112/0x360 [ 359.325304][T18815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.325353][T18815] RIP: 0033:0x7f34df5be159 [ 359.325448][T18815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.325550][T18815] RSP: 002b:00007f34de017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.325580][T18815] RAX: ffffffffffffffda RBX: 00007f34df845fa0 RCX: 00007f34df5be159 [ 359.325600][T18815] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 359.325728][T18815] RBP: 00007f34df655024 R08: 0000000000000000 R09: 0000000000000000 [ 359.325748][T18815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.325767][T18815] R13: 00007f34df846038 R14: 00007f34df845fa0 R15: 00007ffe14b79e28 [ 359.325860][T18815] [ 359.851345][ T29] audit: type=1326 audit(1788522641.759:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18829 comm="syz.8.5485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 359.851920][ T29] audit: type=1326 audit(1788522641.759:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18829 comm="syz.8.5485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 359.852259][ T29] audit: type=1326 audit(1788522641.759:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18829 comm="syz.8.5485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 359.853703][ T29] audit: type=1326 audit(1788522641.759:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18829 comm="syz.8.5485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 359.895424][ T29] audit: type=1326 audit(1788522641.789:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18829 comm="syz.8.5485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 359.900707][ T29] audit: type=1326 audit(1788522641.789:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18829 comm="syz.8.5485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 359.954476][ T29] audit: type=1326 audit(1788522641.849:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18829 comm="syz.8.5485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 359.956624][ T29] audit: type=1326 audit(1788522641.849:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18829 comm="syz.8.5485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 360.150120][T18840] loop6: detected capacity change from 0 to 1024 [ 360.159728][T18840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 360.180721][T18842] FAULT_INJECTION: forcing a failure. [ 360.180721][T18842] name failslab, interval 1, probability 0, space 0, times 0 [ 360.180853][T18842] CPU: 1 UID: 0 PID: 18842 Comm: syz.8.5490 Not tainted syzkaller #0 PREEMPT(lazy) [ 360.180882][T18842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.180896][T18842] Call Trace: [ 360.180903][T18842] [ 360.180912][T18842] __dump_stack+0x1d/0x30 [ 360.180952][T18842] dump_stack_lvl+0x95/0xd0 [ 360.180976][T18842] dump_stack+0x15/0x1b [ 360.181030][T18842] should_fail_ex+0x262/0x280 [ 360.181154][T18842] ? security_sem_alloc+0x45/0x100 [ 360.181186][T18842] should_failslab+0x8c/0xb0 [ 360.181226][T18842] __kmalloc_noprof+0xd0/0x4d0 [ 360.181266][T18842] ? security_sem_alloc+0x45/0x100 [ 360.181317][T18842] security_sem_alloc+0x45/0x100 [ 360.181396][T18842] newary+0x130/0x630 [ 360.181420][T18842] ? down_write+0x63/0xc0 [ 360.181519][T18842] ipcget+0x3b3/0x4f0 [ 360.181561][T18842] __x64_sys_semget+0x119/0x150 [ 360.181603][T18842] x64_sys_call+0x2529/0x2550 [ 360.181647][T18842] do_syscall_64+0x112/0x360 [ 360.181685][T18842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.181716][T18842] RIP: 0033:0x7fb56c57e159 [ 360.181746][T18842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.181766][T18842] RSP: 002b:00007fb56afd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 360.181787][T18842] RAX: ffffffffffffffda RBX: 00007fb56c805fa0 RCX: 00007fb56c57e159 [ 360.181863][T18842] RDX: 000000000000039c RSI: 0000000000000004 RDI: 00000000798e2654 [ 360.181882][T18842] RBP: 00007fb56c615024 R08: 0000000000000000 R09: 0000000000000000 [ 360.181898][T18842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.181916][T18842] R13: 00007fb56c806038 R14: 00007fb56c805fa0 R15: 00007ffe2a34bd78 [ 360.181944][T18842] [ 360.238581][T18840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.265021][ T29] audit: type=1400 audit(1788522642.169:3003): avc: denied { write } for pid=18839 comm="syz.6.5489" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.465280][T18853] loop7: detected capacity change from 0 to 512 [ 360.484043][T18853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.484132][T18853] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.543667][T17184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.653442][T18867] loop5: detected capacity change from 0 to 512 [ 360.659920][T18867] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 360.738989][T18876] loop0: detected capacity change from 0 to 1024 [ 360.752795][T18876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 360.753024][T18876] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.824091][T18884] loop8: detected capacity change from 0 to 128 [ 360.832262][T18884] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.832548][T18884] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.915248][T17039] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 360.978632][T18892] FAULT_INJECTION: forcing a failure. [ 360.978632][T18892] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.978733][T18892] CPU: 0 UID: 0 PID: 18892 Comm: syz.7.5511 Not tainted syzkaller #0 PREEMPT(lazy) [ 360.978904][T18892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.978962][T18892] Call Trace: [ 360.978986][T18892] [ 360.979012][T18892] __dump_stack+0x1d/0x30 [ 360.979106][T18892] dump_stack_lvl+0x95/0xd0 [ 360.979189][T18892] dump_stack+0x15/0x1b [ 360.979307][T18892] should_fail_ex+0x262/0x280 [ 360.979439][T18892] should_fail_alloc_page+0xf2/0x100 [ 360.979596][T18892] __alloc_frozen_pages_noprof+0x157/0x400 [ 360.979731][T18892] alloc_pages_mpol+0xaf/0x1d0 [ 360.979828][T18892] folio_alloc_mpol_noprof+0x39/0x80 [ 360.979923][T18892] shmem_get_folio_gfp+0x3ff/0xd90 [ 360.980046][T18892] ? filemap_map_pages+0xe96/0xf70 [ 360.980235][T18892] shmem_fault+0xf6/0x250 [ 360.980346][T18892] handle_mm_fault+0x2310/0x3bb0 [ 360.980466][T18892] __get_user_pages+0x12e9/0x1eb0 [ 360.980620][T18892] __mm_populate+0x242/0x390 [ 360.980693][T18892] vm_mmap_pgoff+0x23b/0x2d0 [ 360.980845][T18892] ksys_mmap_pgoff+0xc1/0x310 [ 360.980949][T18892] ? __x64_sys_mmap+0x49/0x70 [ 360.981128][T18892] x64_sys_call+0x23b3/0x2550 [ 360.981220][T18892] do_syscall_64+0x112/0x360 [ 360.981314][T18892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.981451][T18892] RIP: 0033:0x7f34df5be159 [ 360.981514][T18892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.981582][T18892] RSP: 002b:00007f34de017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 360.981657][T18892] RAX: ffffffffffffffda RBX: 00007f34df845fa0 RCX: 00007f34df5be159 [ 360.981673][T18892] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 360.981686][T18892] RBP: 00007f34df655024 R08: ffffffffffffffff R09: 0000000000000000 [ 360.981700][T18892] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 360.981808][T18892] R13: 00007f34df846038 R14: 00007f34df845fa0 R15: 00007ffe14b79e28 [ 360.981879][T18892] [ 361.210976][T18896] tls_set_device_offload_rx: netdev not found [ 361.285901][T17928] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.478450][T18915] loop5: detected capacity change from 0 to 1024 [ 361.509345][T18915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 361.509464][T18915] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.593690][T18237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 361.623898][T18928] netlink: 'syz.5.5524': attribute type 25 has an invalid length. [ 361.623927][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5524'. [ 361.645313][T18928] netlink: 'syz.5.5524': attribute type 25 has an invalid length. [ 361.645341][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5524'. [ 361.657640][ T353] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.657816][ T353] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.657911][ T353] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.658052][ T353] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.859936][T18943] loop7: detected capacity change from 0 to 512 [ 361.869146][T18943] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 361.883573][T18943] EXT4-fs (loop7): 1 truncate cleaned up [ 361.884313][T18943] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.926909][T17184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.984197][T18951] ip6gre2: entered promiscuous mode [ 361.984228][T18951] ip6gre2: entered allmulticast mode [ 362.175015][ T3844] IPVS: starting estimator thread 0... [ 362.257552][T18964] IPVS: using max 2400 ests per chain, 120000 per kthread [ 362.309642][T18849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.323237][ T3844] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.361477][ T3844] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.412125][ T3844] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.447978][ T3844] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.552046][ T3844] bridge_slave_1: left allmulticast mode [ 362.552091][ T3844] bridge_slave_1: left promiscuous mode [ 362.552344][ T3844] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.558933][ T3844] bridge_slave_0: left allmulticast mode [ 362.558997][ T3844] bridge_slave_0: left promiscuous mode [ 362.559412][ T3844] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.658090][ T3844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.670322][ T3844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.673066][ T3844] bond0 (unregistering): Released all slaves [ 362.716123][T18967] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.716191][T18967] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.716379][T18967] bridge_slave_0: entered allmulticast mode [ 362.724661][T18967] bridge_slave_0: entered promiscuous mode [ 362.733485][T18967] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.733524][T18967] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.733667][T18967] bridge_slave_1: entered allmulticast mode [ 362.734889][T18967] bridge_slave_1: entered promiscuous mode [ 362.775683][ T3844] hsr_slave_0: left promiscuous mode [ 362.781341][ T3844] hsr_slave_1: left promiscuous mode [ 362.781920][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.781940][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.785451][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.785468][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.806343][ T3844] veth1_macvtap: left promiscuous mode [ 362.806446][ T3844] veth0_macvtap: left promiscuous mode [ 362.806625][ T3844] veth1_vlan: left promiscuous mode [ 362.806731][ T3844] veth0_vlan: left promiscuous mode [ 362.906726][ T3844] team0 (unregistering): Port device team_slave_1 removed [ 362.918108][ T3844] team0 (unregistering): Port device team_slave_0 removed [ 362.968691][T18967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.980506][T18993] ip6gre1: entered promiscuous mode [ 362.980566][T18993] ip6gre1: entered allmulticast mode [ 362.993616][T18967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.049386][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 363.087850][T18967] team0: Port device team_slave_0 added [ 363.102602][T18967] team0: Port device team_slave_1 added [ 363.167526][T18967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.167576][T18967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.167718][T18967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.216202][T18967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.216245][T18967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.216305][T18967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.293272][T18967] hsr_slave_0: entered promiscuous mode [ 363.302200][T18967] hsr_slave_1: entered promiscuous mode [ 363.308246][T18967] debugfs: 'hsr0' already exists in 'hsr' [ 363.308270][T18967] Cannot create hsr debugfs directory [ 363.410297][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 363.495404][T19027] loop7: detected capacity change from 0 to 512 [ 363.523443][T19027] EXT4-fs (loop7): orphan cleanup on readonly fs [ 363.523472][T19027] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 363.531955][T19027] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 363.532092][T19027] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.5559: attempt to clear invalid blocks 33619980 len 1 [ 363.532121][T19027] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 363.540463][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 363.540488][ C0] EXT4-fs (loop7): initial error at time 1788522645: ext4_mb_generate_buddy:1317 [ 363.540531][ C0] EXT4-fs (loop7): last error at time 1788522645: ext4_clear_blocks:876: inode 13 [ 363.559360][T19027] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5559: invalid indirect mapped block 1819239214 (level 0) [ 363.559404][T19027] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 363.560005][T19027] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5559: invalid indirect mapped block 1819239214 (level 1) [ 363.560057][T19027] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 363.575700][T19027] EXT4-fs (loop7): 1 truncate cleaned up [ 363.589640][T19027] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 363.712917][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24 [ 363.728945][T17184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.766647][T19042] FAULT_INJECTION: forcing a failure. [ 363.766647][T19042] name failslab, interval 1, probability 0, space 0, times 0 [ 363.766711][T19042] CPU: 0 UID: 0 PID: 19042 Comm: syz.7.5563 Not tainted syzkaller #0 PREEMPT(lazy) [ 363.766739][T19042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.766756][T19042] Call Trace: [ 363.766771][T19042] [ 363.766779][T19042] __dump_stack+0x1d/0x30 [ 363.766806][T19042] dump_stack_lvl+0x95/0xd0 [ 363.766838][T19042] dump_stack+0x15/0x1b [ 363.766861][T19042] should_fail_ex+0x262/0x280 [ 363.766891][T19042] ? security_sem_alloc+0x45/0x100 [ 363.767062][T19042] should_failslab+0x8c/0xb0 [ 363.767103][T19042] __kmalloc_noprof+0xd0/0x4d0 [ 363.767196][T19042] ? security_sem_alloc+0x45/0x100 [ 363.767228][T19042] security_sem_alloc+0x45/0x100 [ 363.767258][T19042] newary+0x130/0x630 [ 363.767281][T19042] ipcget+0x3b3/0x4f0 [ 363.767328][T19042] __x64_sys_semget+0x119/0x150 [ 363.767353][T19042] x64_sys_call+0x2529/0x2550 [ 363.767388][T19042] do_syscall_64+0x112/0x360 [ 363.767437][T19042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.767531][T19042] RIP: 0033:0x7f34df5be159 [ 363.767551][T19042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.767571][T19042] RSP: 002b:00007f34de017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 363.767592][T19042] RAX: ffffffffffffffda RBX: 00007f34df845fa0 RCX: 00007f34df5be159 [ 363.767698][T19042] RDX: 000000000000039c RSI: 0000000000000004 RDI: 00000000798e2650 [ 363.767717][T19042] RBP: 00007f34df655024 R08: 0000000000000000 R09: 0000000000000000 [ 363.767731][T19042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.767745][T19042] R13: 00007f34df846038 R14: 00007f34df845fa0 R15: 00007ffe14b79e28 [ 363.767765][T19042] [ 363.968444][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5565'. [ 363.994920][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 363.994946][ T29] audit: type=1326 audit(1788522645.899:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19050 comm="syz.8.5567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 364.027216][ T29] audit: type=1326 audit(1788522645.929:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19050 comm="syz.8.5567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 364.053314][ T29] audit: type=1326 audit(1788522645.959:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19050 comm="syz.8.5567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 364.082521][ T29] audit: type=1326 audit(1788522645.989:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19050 comm="syz.8.5567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 364.082585][ T29] audit: type=1326 audit(1788522645.989:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19050 comm="syz.8.5567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 364.082629][ T29] audit: type=1326 audit(1788522645.989:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19050 comm="syz.8.5567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 364.141582][ T29] audit: type=1326 audit(1788522646.049:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19050 comm="syz.8.5567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 364.185541][T19047] ipvlan2: entered allmulticast mode [ 364.185570][T19047] syz_tun: entered allmulticast mode [ 364.199646][ T29] audit: type=1326 audit(1788522646.109:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19050 comm="syz.8.5567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 364.199740][ T29] audit: type=1326 audit(1788522646.109:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19050 comm="syz.8.5567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 364.203287][ T29] audit: type=1326 audit(1788522646.109:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19050 comm="syz.8.5567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb56c57e159 code=0x7ffc0000 [ 364.363767][T19059] xt_hashlimit: size too large, truncated to 1048576 [ 364.452910][T19064] ip_tables: iptables: counters copy to user failed while replacing table [ 364.477200][ T3022] 8021q: adding VLAN 0 to HW filter on device eth25 [ 364.557251][T19072] loop8: detected capacity change from 0 to 512 [ 364.568987][T19072] EXT4-fs (loop8): orphan cleanup on readonly fs [ 364.569084][T19072] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 364.585174][T19072] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 364.599688][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 364.599716][ C0] EXT4-fs (loop8): initial error at time 1788522646: ext4_mb_generate_buddy:1317 [ 364.599748][ C0] EXT4-fs (loop8): last error at time 1788522646: ext4_mb_generate_buddy:1317 [ 364.615648][T19072] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.5574: attempt to clear invalid blocks 33619980 len 1 [ 364.615688][T19072] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 364.616776][T18967] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.625826][T19072] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5574: invalid indirect mapped block 1819239214 (level 0) [ 364.625879][T19072] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 364.628951][T18967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.655855][T19072] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5574: invalid indirect mapped block 1819239214 (level 1) [ 364.655983][T19072] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 364.657928][T19072] EXT4-fs (loop8): 1 truncate cleaned up [ 364.658921][T19072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.669417][T18967] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.695211][T18967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.717338][T18967] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.739470][T18967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.772704][T18967] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.784768][T18967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.806916][T17928] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.928289][T18967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.941123][T18967] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.956697][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.956918][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.984335][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.984568][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.178391][T18967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.271977][T18967] veth0_vlan: entered promiscuous mode [ 365.281265][T18967] veth1_vlan: entered promiscuous mode [ 365.311705][T18967] veth0_macvtap: entered promiscuous mode [ 365.321251][T18967] veth1_macvtap: entered promiscuous mode [ 365.333514][T18967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.341991][T19142] loop7: detected capacity change from 0 to 512 [ 365.349938][T18967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.360537][ T353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.360660][ T353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.361013][ T353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.411193][T19142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.411428][T19142] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.439332][ T353] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.477803][T19142] loop7: detected capacity change from 512 to 3 [ 365.732435][T19169] FAULT_INJECTION: forcing a failure. [ 365.732435][T19169] name failslab, interval 1, probability 0, space 0, times 0 [ 365.732477][T19169] CPU: 0 UID: 0 PID: 19169 Comm: syz.3.5597 Not tainted syzkaller #0 PREEMPT(lazy) [ 365.732512][T19169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.732531][T19169] Call Trace: [ 365.732540][T19169] [ 365.732550][T19169] __dump_stack+0x1d/0x30 [ 365.732582][T19169] dump_stack_lvl+0x95/0xd0 [ 365.732607][T19169] dump_stack+0x15/0x1b [ 365.732632][T19169] should_fail_ex+0x262/0x280 [ 365.732662][T19169] ? mas_alloc_nodes+0x1a2/0x210 [ 365.732704][T19169] should_failslab+0x8c/0xb0 [ 365.732744][T19169] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 365.732782][T19169] ? mas_alloc_nodes+0x1a2/0x210 [ 365.732823][T19169] mas_alloc_nodes+0x1a2/0x210 [ 365.732861][T19169] mas_preallocate+0x2ca/0x500 [ 365.732901][T19169] __split_vma+0x299/0x720 [ 365.732934][T19169] ? _raw_spin_unlock+0x9/0x30 [ 365.732968][T19169] ? __css_rstat_updated+0xbb/0x280 [ 365.733019][T19169] vma_modify+0xbf5/0xd50 [ 365.733046][T19169] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 365.733082][T19169] ? __rb_insert_augmented+0x2ae/0x2c0 [ 365.733114][T19169] vma_modify_flags+0x1be/0x250 [ 365.733152][T19169] mlock_fixup+0x166/0x460 [ 365.733190][T19169] apply_vma_lock_flags+0x1c7/0x290 [ 365.733238][T19169] do_mlock+0x3a0/0x510 [ 365.733273][T19169] ? xfd_validate_state+0x45/0xf0 [ 365.733312][T19169] ? restore_fpregs_from_fpstate+0x61/0x110 [ 365.733347][T19169] __x64_sys_mlock+0x4d/0x70 [ 365.733380][T19169] x64_sys_call+0x2232/0x2550 [ 365.733407][T19169] do_syscall_64+0x112/0x360 [ 365.733442][T19169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.733473][T19169] RIP: 0033:0x7fe59284e159 [ 365.733497][T19169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.733524][T19169] RSP: 002b:00007fe5912a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 365.733552][T19169] RAX: ffffffffffffffda RBX: 00007fe592ad5fa0 RCX: 00007fe59284e159 [ 365.733572][T19169] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 365.733591][T19169] RBP: 00007fe5928e5024 R08: 0000000000000000 R09: 0000000000000000 [ 365.733608][T19169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.733621][T19169] R13: 00007fe592ad6038 R14: 00007fe592ad5fa0 R15: 00007ffcad0b11f8 [ 365.733641][T19169] [ 366.110437][ T68] nci: nci_ntf_packet: unknown ntf opcode 0x600 [ 366.272796][T19187] loop0: detected capacity change from 0 to 128 [ 366.289615][T19187] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.303739][T19187] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.403209][T19192] loop8: detected capacity change from 0 to 512 [ 366.447802][T19197] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 366.458327][T19192] loop8: detected capacity change from 512 to 0 [ 366.466951][T19198] FAT-fs (loop8): Directory bread(block 34) failed [ 366.467024][T19198] FAT-fs (loop8): Directory bread(block 35) failed [ 366.467148][T19198] FAT-fs (loop8): Directory bread(block 36) failed [ 366.467245][T19198] FAT-fs (loop8): Directory bread(block 37) failed [ 366.467338][T19198] FAT-fs (loop8): Directory bread(block 38) failed [ 366.469049][T19198] FAT-fs (loop8): Directory bread(block 39) failed [ 366.469114][T19198] FAT-fs (loop8): Directory bread(block 40) failed [ 366.469187][T19198] FAT-fs (loop8): Directory bread(block 41) failed [ 366.469358][T19198] FAT-fs (loop8): Directory bread(block 34) failed [ 366.469422][T19198] FAT-fs (loop8): Directory bread(block 35) failed [ 366.594747][T17039] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.691823][T19206] FAULT_INJECTION: forcing a failure. [ 366.691823][T19206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.691902][T19206] CPU: 1 UID: 0 PID: 19206 Comm: syz.0.5608 Not tainted syzkaller #0 PREEMPT(lazy) [ 366.691946][T19206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.691960][T19206] Call Trace: [ 366.691967][T19206] [ 366.691976][T19206] __dump_stack+0x1d/0x30 [ 366.692041][T19206] dump_stack_lvl+0x95/0xd0 [ 366.692143][T19206] dump_stack+0x15/0x1b [ 366.692225][T19206] should_fail_ex+0x262/0x280 [ 366.692308][T19206] should_fail+0xb/0x20 [ 366.692368][T19206] should_fail_usercopy+0x1a/0x20 [ 366.692503][T19206] _copy_from_user+0x1c/0xb0 [ 366.692585][T19206] generic_map_update_batch+0x4a9/0x680 [ 366.692772][T19206] ? __pfx_generic_map_update_batch+0x10/0x10 [ 366.692881][T19206] bpf_map_do_batch+0x25b/0x380 [ 366.693030][T19206] __sys_bpf+0xa8e/0xc30 [ 366.693161][T19206] ? do_futex+0x350/0x460 [ 366.693350][T19206] __x64_sys_bpf+0x69/0x80 [ 366.693425][T19206] x64_sys_call+0xf26/0x2550 [ 366.693528][T19206] do_syscall_64+0x112/0x360 [ 366.693722][T19206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.693805][T19206] RIP: 0033:0x7feaa58ee159 [ 366.693939][T19206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.694003][T19206] RSP: 002b:00007feaa4347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.694077][T19206] RAX: ffffffffffffffda RBX: 00007feaa5b75fa0 RCX: 00007feaa58ee159 [ 366.694133][T19206] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 366.694178][T19206] RBP: 00007feaa5985024 R08: 0000000000000000 R09: 0000000000000000 [ 366.694229][T19206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.694293][T19206] R13: 00007feaa5b76038 R14: 00007feaa5b75fa0 R15: 00007ffe0a8ac5a8 [ 366.694358][T19206] [ 366.881366][T18259] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.911038][T19145] kmmpd-loop7: attempt to access beyond end of device [ 366.911038][T19145] loop7: rw=8402945, sector=48, nr_sectors = 4 limit=3 [ 366.911109][T19145] Buffer I/O error on dev loop7, logical block 12, lost sync page write [ 366.935823][ T31] FAT-fs (loop8): bread failed in fat_clusters_flush [ 366.940845][T18173] FAT-fs (loop8): unable to read boot sector to mark fs as dirty [ 366.991897][ T353] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.020655][T10367] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 367.021125][T10367] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 367.037219][T10367] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 367.045441][T10367] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 367.045481][T10367] rtc rtc0: __rtc_set_alarm: err=-22 [ 367.073022][ T353] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.144627][ T353] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.218826][T19237] loop0: detected capacity change from 0 to 256 [ 367.230423][ T353] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.245433][T19237] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 367.245473][T19237] FAT-fs (loop0): Filesystem has been set read-only [ 367.336489][T19214] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.336576][T19214] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.337148][T19214] bridge_slave_0: entered allmulticast mode [ 367.344244][T19214] bridge_slave_0: entered promiscuous mode [ 367.345632][T19214] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.345688][T19214] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.345853][T19214] bridge_slave_1: entered allmulticast mode [ 367.347730][T19214] bridge_slave_1: entered promiscuous mode [ 367.414545][T19214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.416925][T19214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.501847][T19248] loop0: detected capacity change from 0 to 8192 [ 367.518181][T19214] team0: Port device team_slave_0 added [ 367.524989][T19214] team0: Port device team_slave_1 added [ 367.623423][T19252] [ 367.750686][ T353] bond0 (unregistering): Released all slaves [ 367.786942][T19214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.786967][T19214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.787012][T19214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.787614][T19214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.787633][T19214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.787695][T19214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.028465][T19258] bridge_slave_0: left allmulticast mode [ 368.028533][T19258] bridge_slave_0: left promiscuous mode [ 368.028791][T19258] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.056776][T19258] bridge_slave_1: left allmulticast mode [ 368.056880][T19258] bridge_slave_1: left promiscuous mode [ 368.057181][T19258] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.087808][T19258] bond0: (slave bond_slave_0): Releasing backup interface [ 368.108726][T19258] bond0: (slave bond_slave_1): Releasing backup interface [ 368.124724][T19258] team0: Port device team_slave_0 removed [ 368.139811][T19258] team0: Port device team_slave_1 removed [ 368.157870][T19258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.157896][T19258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.170995][T19258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.171057][T19258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.199043][T19258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.245432][ T353] hsr_slave_0: left promiscuous mode [ 368.263837][ T353] hsr_slave_1: left promiscuous mode [ 368.294093][ T353] veth1_macvtap: left promiscuous mode [ 368.294133][ T353] veth0_macvtap: left promiscuous mode [ 368.294197][ T353] veth1_vlan: left promiscuous mode [ 368.294242][ T353] veth0_vlan: left promiscuous mode [ 368.608404][T19214] hsr_slave_0: entered promiscuous mode [ 368.614567][T19214] hsr_slave_1: entered promiscuous mode [ 368.614800][T19214] debugfs: 'hsr0' already exists in 'hsr' [ 368.614821][T19214] Cannot create hsr debugfs directory [ 368.664650][T19225] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.664698][T19225] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.664784][T19225] bridge_slave_0: entered allmulticast mode [ 368.665470][T19225] bridge_slave_0: entered promiscuous mode [ 368.692903][T19225] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.692964][T19225] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.693175][T19225] bridge_slave_1: entered allmulticast mode [ 368.693824][T19225] bridge_slave_1: entered promiscuous mode [ 368.742218][T19225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.774693][T19225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.817856][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5630'. [ 368.844874][T19285] bond1: Invalid ad_actor_system MAC address. [ 368.844927][T19285] bond1: option ad_actor_system: invalid value (1) [ 368.859596][T19285] bond1 (unregistering): Released all slaves [ 368.873050][T19225] team0: Port device team_slave_0 added [ 368.883381][T19225] team0: Port device team_slave_1 added [ 368.908674][T19225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.908694][T19225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.908731][T19225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.922087][T19225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.922142][T19225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.922254][T19225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.015740][T19225] hsr_slave_0: entered promiscuous mode [ 369.022161][T19225] hsr_slave_1: entered promiscuous mode [ 369.022418][T19225] debugfs: 'hsr0' already exists in 'hsr' [ 369.022437][T19225] Cannot create hsr debugfs directory [ 369.031377][T19172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.112346][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 369.125223][ T353] IPVS: stop unused estimator thread 0... [ 369.238718][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 369.261786][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 369.313695][T19214] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.333585][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.338355][T19307] ref_ctr_offset mismatch. inode: 0x85 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x900000080 [ 369.365612][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 369.372817][T19214] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.385506][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.392923][T19214] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.401692][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.406688][T19214] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.417673][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.484382][T19214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.495892][T19214] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.697884][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.697934][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.714171][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.714216][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.743704][T19214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.743738][T19214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.930669][T19351] loop3: detected capacity change from 0 to 128 [ 369.988898][T19214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.004964][T19225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.069019][T19351] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 370.099964][T19351] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.103359][T19225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.123728][T19225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 370.145738][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 370.145779][ T29] audit: type=1400 audit(1788522652.049:3114): avc: denied { write } for pid=19350 comm="syz.3.5640" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 370.188933][T19225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.208165][T19225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.216975][T19225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.217947][T19225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.232671][T19225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.273640][ T51] IPVS: starting estimator thread 0... [ 370.324794][T19214] veth0_vlan: entered promiscuous mode [ 370.343561][T19214] veth1_vlan: entered promiscuous mode [ 370.398297][T19214] veth0_macvtap: entered promiscuous mode [ 370.419932][T19371] IPVS: using max 2208 ests per chain, 110400 per kthread [ 370.428330][T19214] veth1_macvtap: entered promiscuous mode [ 370.444454][T19214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.453580][T19214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.519672][T19225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.527663][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.532871][ T353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.533013][ T353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.533205][ T353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.542265][T19225] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.549624][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.549676][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.559946][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.560013][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.655677][T18967] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.670999][T19225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.741844][T19225] veth0_vlan: entered promiscuous mode [ 370.753871][T19225] veth1_vlan: entered promiscuous mode [ 370.772831][T19225] veth0_macvtap: entered promiscuous mode [ 370.782559][T19225] veth1_macvtap: entered promiscuous mode [ 370.804540][T19225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.840755][T19225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.898096][ T3839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.903858][ T353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.904328][ T353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.904596][ T353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.118718][T19447] loop4: detected capacity change from 0 to 128 [ 371.131523][T19447] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.131895][T19447] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.164171][ T29] audit: type=1400 audit(1788522653.069:3115): avc: denied { write } for pid=19446 comm="syz.4.5655" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.235092][T19452] FAULT_INJECTION: forcing a failure. [ 371.235092][T19452] name failslab, interval 1, probability 0, space 0, times 0 [ 371.235136][T19452] CPU: 0 UID: 0 PID: 19452 Comm: syz.5.5656 Not tainted syzkaller #0 PREEMPT(lazy) [ 371.235173][T19452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.235192][T19452] Call Trace: [ 371.235202][T19452] [ 371.235213][T19452] __dump_stack+0x1d/0x30 [ 371.235243][T19452] dump_stack_lvl+0x95/0xd0 [ 371.235266][T19452] dump_stack+0x15/0x1b [ 371.235287][T19452] should_fail_ex+0x262/0x280 [ 371.235314][T19452] ? mas_alloc_nodes+0x1a2/0x210 [ 371.235353][T19452] should_failslab+0x8c/0xb0 [ 371.235395][T19452] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 371.235432][T19452] ? mas_alloc_nodes+0x1a2/0x210 [ 371.235473][T19452] mas_alloc_nodes+0x1a2/0x210 [ 371.235513][T19452] mas_preallocate+0x2ca/0x500 [ 371.235560][T19452] commit_merge+0x39d/0x840 [ 371.235588][T19452] vma_modify+0x9eb/0xd50 [ 371.235611][T19452] vma_modify_flags+0x1be/0x250 [ 371.235643][T19452] mlock_fixup+0x166/0x460 [ 371.235686][T19452] apply_vma_lock_flags+0x1c7/0x290 [ 371.235731][T19452] do_mlock+0x3a0/0x510 [ 371.235759][T19452] ? __se_sys_futex+0x2f6/0x370 [ 371.235814][T19452] ? xfd_validate_state+0x45/0xf0 [ 371.235957][T19452] ? restore_fpregs_from_fpstate+0x61/0x110 [ 371.236055][T19452] __x64_sys_mlock+0x4d/0x70 [ 371.236148][T19452] x64_sys_call+0x2232/0x2550 [ 371.236242][T19452] do_syscall_64+0x112/0x360 [ 371.236340][T19452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.236410][T19452] RIP: 0033:0x7fa602e6e159 [ 371.236463][T19452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.236532][T19452] RSP: 002b:00007fa6018c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 371.236607][T19452] RAX: ffffffffffffffda RBX: 00007fa6030f5fa0 RCX: 00007fa602e6e159 [ 371.236662][T19452] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 371.236706][T19452] RBP: 00007fa602f05024 R08: 0000000000000000 R09: 0000000000000000 [ 371.236756][T19452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.236798][T19452] R13: 00007fa6030f6038 R14: 00007fa6030f5fa0 R15: 00007ffd7892c828 [ 371.236871][T19452] [ 371.586998][T19458] loop0: detected capacity change from 0 to 512 [ 371.599573][T19458] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 371.609451][T19458] EXT4-fs (loop0): 1 truncate cleaned up [ 371.610321][T19458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.644583][ T29] audit: type=1400 audit(1788522653.549:3116): avc: denied { write } for pid=19455 comm="syz.0.5667" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.674341][ T29] audit: type=1400 audit(1788522653.579:3117): avc: denied { write } for pid=19455 comm="syz.0.5667" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.699478][ T29] audit: type=1400 audit(1788522653.579:3118): avc: denied { write } for pid=19455 comm="syz.0.5667" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.701494][ T29] audit: type=1400 audit(1788522653.609:3119): avc: denied { write } for pid=19455 comm="syz.0.5667" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.714930][ T29] audit: type=1400 audit(1788522653.609:3120): avc: denied { write } for pid=19455 comm="syz.0.5667" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.715054][ T29] audit: type=1400 audit(1788522653.609:3121): avc: denied { write } for pid=19455 comm="syz.0.5667" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.733596][T19225] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.859041][T17039] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.872700][T19468] netlink: 'syz.1.5660': attribute type 4 has an invalid length. [ 371.905000][T19468] netlink: 'syz.1.5660': attribute type 4 has an invalid length. [ 372.093946][T19480] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 372.113848][T19480] bond1: (slave lo): Enslaving as an active interface with an up link [ 372.125944][T19480] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 372.168071][T19483] loop4: detected capacity change from 0 to 512 [ 372.185248][T19483] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.5665: EA inode 11 has unexpected i_nlink=2 ref_count=1 [ 372.185306][T19483] loop4: lost filesystem error report for type 5 error -117 [ 372.185593][T19483] EXT4-fs (loop4): 1 orphan inode deleted [ 372.186199][T19483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.335746][T19225] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.531527][T19504] loop5: detected capacity change from 0 to 512 [ 372.543412][T19504] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 372.613201][T19504] EXT4-fs (loop5): 1 truncate cleaned up [ 372.613899][T19504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.641005][ T29] audit: type=1400 audit(1788522654.549:3122): avc: denied { write } for pid=19502 comm="syz.5.5675" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.665532][ T29] audit: type=1400 audit(1788522654.579:3123): avc: denied { write } for pid=19502 comm="syz.5.5675" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.713060][T18237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.198854][T19534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5687'. [ 373.198985][T19534] syz_tun: Device is already in use. [ 373.409986][T19541] loop4: detected capacity change from 0 to 512 [ 373.420631][T19541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 373.426515][T19541] EXT4-fs (loop4): 1 truncate cleaned up [ 373.428190][T19541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.491322][T19225] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.413672][T19570] bridge0: port 1(syz_tun) entered blocking state [ 374.413722][T19570] bridge0: port 1(syz_tun) entered disabled state [ 374.413947][T19570] syz_tun: entered allmulticast mode [ 374.414502][T19570] syz_tun: entered promiscuous mode [ 374.414806][T19570] bridge0: port 1(syz_tun) entered blocking state [ 374.414841][T19570] bridge0: port 1(syz_tun) entered forwarding state [ 374.421014][T19570] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 374.632563][T19580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.037395][T19601] loop0: detected capacity change from 0 to 2048 [ 375.063239][T19601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.176404][T17039] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.227925][T19606] loop3: detected capacity change from 0 to 2048 [ 375.238874][T19606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.239041][T19606] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.253658][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 375.253677][ T29] audit: type=1400 audit(1788522657.159:3135): avc: denied { write } for pid=19605 comm="syz.3.5717" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 375.582198][T18967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.749271][ T29] audit: type=1400 audit(1788522657.659:3136): avc: denied { write } for pid=19631 comm="syz.4.5728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 376.192073][T19648] loop5: detected capacity change from 0 to 8192 [ 377.238394][ T29] audit: type=1400 audit(1788522659.149:3137): avc: denied { read } for pid=19687 comm="syz.4.5757" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 377.238545][ T29] audit: type=1400 audit(1788522659.149:3138): avc: denied { open } for pid=19687 comm="syz.4.5757" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 377.305193][T19683] loop5: detected capacity change from 0 to 1024 [ 377.316753][T19683] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 377.316867][T19683] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 377.316991][T19683] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 377.317710][T19683] EXT4-fs error (device loop5): ext4_get_journal_inode:5927: inode #32: comm syz.5.5742: iget: special inode unallocated [ 377.317845][T19683] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 377.318101][T19683] EXT4-fs (loop5): no journal found [ 377.318144][T19683] EXT4-fs (loop5): can't get journal size [ 377.347457][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 377.347483][ C0] EXT4-fs (loop5): initial error at time 1788522659: ext4_get_journal_inode:5927: inode 32 [ 377.347542][ C0] EXT4-fs (loop5): last error at time 1788522659: ext4_get_journal_inode:5927: inode 32 [ 377.362502][T19683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 377.569674][T18237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.016176][T19714] ================================================================== [ 378.016219][T19714] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 378.016290][T19714] [ 378.016298][T19714] write to 0xffff88810993e820 of 8 bytes by task 19705 on cpu 1: [ 378.016321][T19714] shmem_file_splice_read+0x401/0x590 [ 378.016361][T19714] splice_direct_to_actor+0x261/0x680 [ 378.016402][T19714] do_splice_direct+0x119/0x1a0 [ 378.016447][T19714] do_sendfile+0x37d/0x640 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 378.016470][T19714] __x64_sys_sendfile64+0x105/0x150 [ 378.016512][T19714] x64_sys_call+0x1015/0x2550 [ 378.016548][T19714] do_syscall_64+0x112/0x360 [ 378.016601][T19714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.016641][T19714] [ 378.016650][T19714] write to 0xffff88810993e820 of 8 bytes by task 19714 on cpu 0: [ 378.016669][T19714] shmem_file_splice_read+0x401/0x590 [ 378.016713][T19714] splice_direct_to_actor+0x261/0x680 [ 378.016752][T19714] do_splice_direct+0x119/0x1a0 [ 378.016787][T19714] do_sendfile+0x37d/0x640 [ 378.016811][T19714] __x64_sys_sendfile64+0x105/0x150 [ 378.016846][T19714] x64_sys_call+0x1015/0x2550 [ 378.016877][T19714] do_syscall_64+0x112/0x360 [ 378.016914][T19714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.016945][T19714] [ 378.016951][T19714] value changed: 0x00000000000004a3 -> 0x00000000000004a4 [ 378.016980][T19714] [ 378.016985][T19714] Reported by Kernel Concurrency Sanitizer on: [ 378.017001][T19714] CPU: 0 UID: 0 PID: 19714 Comm: syz.1.5753 Not tainted syzkaller #0 PREEMPT(lazy) [ 378.017028][T19714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.017041][T19714] ================================================================== [ 378.076893][ T29] audit: type=1400 audit(1788522659.979:3139): avc: denied { write } for pid=3283 comm="syz-executor" path="pipe:[1629]" dev="pipefs" ino=1629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 378.090053][T19716] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5756'. [ 378.093726][T19716] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5756'. [ 378.556218][T18237] bridge0: port 3(syz_tun) entered disabled state [ 378.568639][T18237] syz_tun (unregistering): left allmulticast mode [ 378.568724][T18237] syz_tun (unregistering): left promiscuous mode [ 378.568763][T18237] bridge0: port 3(syz_tun) entered disabled state [ 378.636819][T18967] bridge0: port 1(syz_tun) entered disabled state [ 378.646213][T18967] syz_tun (unregistering): left allmulticast mode [ 378.646243][T18967] syz_tun (unregistering): left promiscuous mode [ 378.646276][T18967] bridge0: port 1(syz_tun) entered disabled state [ 378.694511][ T353] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.694585][ T353] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.812665][ T353] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.812750][ T353] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.905115][ T353] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.905189][ T353] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.971058][ T353] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.971114][ T353] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.018910][ T353] bridge_slave_1: left allmulticast mode [ 379.018942][ T353] bridge_slave_1: left promiscuous mode [ 379.019128][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.038292][ T353] bridge_slave_0: left allmulticast mode [ 379.038334][ T353] bridge_slave_0: left promiscuous mode [ 379.038615][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.097488][ T353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.113062][ T353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.123885][ T353] bond0 (unregistering): Released all slaves [ 379.146362][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 379.164379][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 379.180717][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 379.200113][ T353] hsr_slave_0: left promiscuous mode [ 379.205537][ T353] hsr_slave_1: left promiscuous mode [ 379.211468][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.211532][ T353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.224114][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.224239][ T353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.242892][ T353] veth1_macvtap: left promiscuous mode [ 379.242930][ T353] veth0_macvtap: left promiscuous mode [ 379.243104][ T353] veth1_vlan: left promiscuous mode [ 379.243227][ T353] veth0_vlan: left promiscuous mode [ 379.337204][ T353] team0 (unregistering): Port device team_slave_1 removed [ 379.346936][ T353] team0 (unregistering): Port device team_slave_0 removed [ 379.384957][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 379.620760][ T353] IPVS: stop unused estimator thread 0... [ 379.671944][ T353] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.721596][ T353] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.771793][ T353] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.841459][ T353] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.895389][ T353] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.924563][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 379.946153][ T353] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.966792][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 379.991182][ T353] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.003040][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 380.023861][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 380.041750][ T353] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.128917][ T353] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.157702][ T3022] 8021q: adding VLAN 0 to HW filter on device eth26 [ 380.178535][ T3022] 8021q: adding VLAN 0 to HW filter on device eth27 [ 380.188762][ T353] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.213196][ T3022] 8021q: adding VLAN 0 to HW filter on device eth28 [ 380.233206][ T3022] 8021q: adding VLAN 0 to HW filter on device eth29 [ 380.251960][ T353] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.310835][ T353] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.385516][ T353] bridge_slave_1: left allmulticast mode [ 380.385566][ T353] bridge_slave_1: left promiscuous mode [ 380.385825][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.393195][ T353] bridge_slave_0: left allmulticast mode [ 380.393223][ T353] bridge_slave_0: left promiscuous mode [ 380.395391][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.424875][ T353] bridge_slave_1: left allmulticast mode [ 380.424950][ T353] bridge_slave_1: left promiscuous mode [ 380.425202][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.436511][ T353] bridge_slave_0: left allmulticast mode [ 380.436577][ T353] bridge_slave_0: left promiscuous mode [ 380.436827][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.563985][ T353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.574695][ T353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.584730][ T353] bond0 (unregistering): Released all slaves [ 380.592970][ T353] bond1 (unregistering): (slave lo): Releasing backup interface [ 380.601169][ T353] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 380.602035][ T353] bond1 (unregistering): Released all slaves [ 380.638878][ T353] bond0 (unregistering): Released all slaves [ 380.642754][ T353] bond1 (unregistering): Released all slaves [ 380.671570][ T353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.682468][ T353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.692237][ T353] bond0 (unregistering): Released all slaves [ 380.722619][ T3022] 8021q: adding VLAN 0 to HW filter on device eth30 [ 380.751707][ T353] hsr_slave_0: left promiscuous mode [ 380.757124][ T353] hsr_slave_1: left promiscuous mode [ 380.758640][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.758817][ T353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.763887][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.764029][ T353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.794661][ T353] hsr_slave_0: left promiscuous mode [ 380.800525][ T353] hsr_slave_1: left promiscuous mode [ 380.808692][ T353] hsr_slave_0: left promiscuous mode [ 380.814114][ T353] hsr_slave_1: left promiscuous mode [ 380.818513][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.818640][ T353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.830519][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.830535][ T353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.853755][ T353] veth1_macvtap: left promiscuous mode [ 380.853847][ T353] veth0_macvtap: left promiscuous mode [ 380.853978][ T353] veth1_vlan: left promiscuous mode [ 380.854149][ T353] veth0_vlan: left promiscuous mode [ 380.875630][ T353] veth1_macvtap: left promiscuous mode [ 380.875675][ T353] veth0_macvtap: left promiscuous mode [ 380.875857][ T353] veth1_vlan: left promiscuous mode [ 380.875973][ T353] veth0_vlan: left promiscuous mode [ 380.892224][ T353] veth1_macvtap: left promiscuous mode [ 380.892325][ T353] veth0_macvtap: left promiscuous mode [ 380.892470][ T353] veth1_vlan: left promiscuous mode [ 380.892580][ T353] veth0_vlan: left promiscuous mode [ 381.055244][ T353] team0 (unregistering): Port device team_slave_1 removed [ 381.065110][ T353] team0 (unregistering): Port device team_slave_0 removed [ 381.209331][ T353] team0 (unregistering): Port device team_slave_1 removed [ 381.216712][ T353] team0 (unregistering): Port device team_slave_0 removed [ 381.267364][ T3022] 8021q: adding VLAN 0 to HW filter on device eth31 [ 381.311059][ T3022] 8021q: adding VLAN 0 to HW filter on device eth32 [ 381.328613][ T3022] 8021q: adding VLAN 0 to HW filter on device eth33