last executing test programs: 50.68410434s ago: executing program 3 (id=151): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xe, 0x7fff0001}]}) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountstats\x00') sendfile(r0, r1, 0x0, 0x2000007ff) (fail_nth: 1) timer_create(0x2, 0x0, 0x0) 50.431492857s ago: executing program 3 (id=154): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300021c00000000000000000000001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac6000000000000000030006000000000002004e20ac141400000000000000000002000100000000000000060000000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x0) 50.035627086s ago: executing program 3 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001a80)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540", @ANYBLOB="f3b2e18123cae907f25f29f25a2d0fb2683c0fbc18474925ba16bab806f07c21a3a4e2e7eb952ffa953ea4fee1a421f58942e01e29b941c12f8e3de930ac1cc40569bc6004c260318805fc4430213b71b1b2e2e2fe1b94d4640b666e728b33be58edc408e8f9004947baeddf61d96de49b275de2e1a469ca5098231f097e12bb4d1b56e7cbc50df9aba8d782e6c76915d4539bb4d11bea5ef0f9424873381d41de409db0e795f08e2d4dd89ff3cf00ef22ee8e5d9a4ff69ecdd6589e86c91eed2e1be82a5f091cea5333ee970f76621d146682d735e6209e2a40389117ccd6e334", @ANYRES32=r0, @ANYRESDEC, @ANYRES8=r1], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 50.013021636s ago: executing program 3 (id=158): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) splice(r0, 0x0, r1, 0x0, 0x6, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x169ff1c9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x748c88e67926383f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0xe1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$selinux_validatetrans(r4, 0x0, 0x85) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x400, 0x0, 0x7, 0x1, 0x100000001, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'erspan0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x106, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x6b6}, 0x116414, 0x8001, 0x11000, 0x5, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0100001000130726bd70000000000064010101000000000000000000000000fe8800000000000000000000000000014e2200004e230003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semop(0x0, &(0x7f0000000140), 0x0) r6 = socket(0x10, 0x3, 0xa) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7fffffffffffffff) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b866b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d69c72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AE34uLSZOFKkCApSAaE2gitINyaGx1mnClzh8CIGF25de1HcO1O8Btk08/gLpsuuxCv9E6nTerUIiQzos+zmPtyz/lxzoFh4Az33KN3f/iyvVdme/kgGnNz0bgTke6nSNGIsde3R9ebt7Y3m82t6yld27yx/k5KaeWNXz/5eiEiLnz888ovC3G49unRvY3fDi8dXj7648YXrTK1ytTtDVKebvd6g/x2ZyXttsp2ltLdH4u8LFKrWxb9Y+1F2ns7IoYp7+4uL93pF2WZ8u4wtYthGvTSoD9M+ed5q5uyLEvLS8FTnXt2l52f7ldVFVFV5+L5qKqqOh9LcSFeiOVYiW8j4sV4KV6Oi/FKXIpX47W4XPeaxvQBAAAAAAAAAAAAAAAAAADg/+Pvzv+vxprz/wAAAAAAAAAAAAAAAAAAADAFH928tb3ZbG5dT2kxovP9/s7+zug6al978NGJIq7Gavwe9en/kVF97YPm1tVUW4vvOgcP8wf7O8/V+c1xfr1+ncDD/HzdNs6vj/LpZH4hlh7k96JV5zdiNS5OHn9jYn4x3nrzWD6L1bj7WfSiE7v12I/z36yn9P6HzSfyV+p+AAAA8F+QpUcm7t+z7Gnto/yj/fWz/x94Yn89H1fmZ7t2IsrhV+280Sn6ddEZF4t/uXN2RUxxrNMtIu5VdbFwsqlxRoM2YuZLPlbM/TumoTid4nycvDPrXyam4fHXYNYzAQAAAAAAAAAA4J844+cK52PCk2XvjYvqYOrrBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9mBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASwEAAP//NkHHfg==") r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) r9 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x81, 0x0, 0xc05, 0x0, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 49.112709458s ago: executing program 3 (id=174): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095", @ANYRESDEC=r0, @ANYRES64=r0], 0x0, 0x0, 0x2f, 0x0, 0x0, 0x23}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x6d2, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newlink={0x38, 0x10, 0x1, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17200}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xcadf}, @IFLA_LINK={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0x7}]}, 0x38}, 0x1, 0x8100, 0x0, 0x14}, 0x2800804c) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="020a0503070000002cbd7000fddbdf250500"], 0x38}}, 0x40004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0x7fffffff, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x8000, 0x8392, 0x9, 0x20, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fedbdf2500000000", @ANYRESDEC, @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r5 = socket(0x1, 0x5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r5, &(0x7f0000000040)={0x80002017}) epoll_pwait(r7, &(0x7f0000000080)=[{}], 0x1, 0x3f0, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002b40)=""/4127, 0x101f}, {&(0x7f0000001a40)=""/4082, 0xff2}, {&(0x7f0000002a40)=""/235, 0xeb}, {&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000280)=""/161, 0xa1}], 0x5}, 0x40000102) 48.406268526s ago: executing program 3 (id=180): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) epoll_create(0x2) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_access(r4, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280), 0xa}, 0x8040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d20000000000000000000008008", @ANYRES32], 0x58}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000125bd7000fddbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0x20001, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x8000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="028900090200000001000000f5ffffff"], 0x10}}, 0x0) 48.375106226s ago: executing program 32 (id=180): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) epoll_create(0x2) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_access(r4, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280), 0xa}, 0x8040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d20000000000000000000008008", @ANYRES32], 0x58}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000125bd7000fddbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0x20001, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x8000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="028900090200000001000000f5ffffff"], 0x10}}, 0x0) 36.706877702s ago: executing program 2 (id=286): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000700)={0x10000000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 35.727778656s ago: executing program 2 (id=295): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) syz_emit_ethernet(0xec, &(0x7f00000001c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@llc={0x4, {@llc={0xfc, 0x6, 'p', "8acb0893c860b456bbe0af37e4a16a55e23d27629ae068160fae459ddff0d235be1d18ad58b4299bb98fa06f38d1c846f41803cfa2d10ae99a12976e885aa0209004698ba8d9fcaca6f50ec02716216b9222adf2e87c719d545a9ecd89b7975a42066735f50737532f47c5265c549d7dbd29d8a1571a229dfed314b050e69d80379a1f61578a44c10ea7ffb98022bbb428d91391774609b02de03bceafe22bb51585919c077da7d6fc9000a102b670909808847e4ab0cb957f767b6c2b4c914213a1b07759af48c50a790cc7fdd25ec0686a2415e822032eae6794"}}}}}, &(0x7f00000002c0)={0x1, 0x3, [0xc7c, 0x757, 0x294, 0xcaf]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4, @val=@netkit={@void, @value=r0}}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r4, 0x25, 0x8, @void}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'netdevsim0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=r7, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x200048d0}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 35.261422588s ago: executing program 2 (id=302): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000006ce23dd5"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={r0, &(0x7f0000000580)}, 0x20) signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000d80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000011c0)={r1, 0x7, 0xd04a}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000340)=""/102386, 0x18ff2}, {0x0}], 0x2, 0xfffffffc, 0xfffffffd) 35.193727199s ago: executing program 2 (id=303): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) splice(r0, 0x0, r1, 0x0, 0x6, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x169ff1c9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x748c88e67926383f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0xe1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$selinux_validatetrans(r4, 0x0, 0x85) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x400, 0x0, 0x7, 0x1, 0x100000001, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x106, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x6b6}, 0x116414, 0x8001, 0x11000, 0x5, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0100001000130726bd70000000000064010101000000000000000000000000fe8800000000000000000000000000014e2200004e230003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semop(0x0, &(0x7f0000000140), 0x0) r6 = socket(0x10, 0x3, 0xa) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7fffffffffffffff) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b866b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d69c72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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") r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) r9 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 34.264064712s ago: executing program 2 (id=313): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000000200000000000006000000000600"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 33.481371181s ago: executing program 2 (id=322): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@bh}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") ioctl$BLKRASET(0xffffffffffffffff, 0x1262, &(0x7f0000000000)=0xe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x8004, 0x72}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x6, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000280)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x6c}, {@rand_addr=0x64010102, 0x4e26, 0x18001, 0xcb, 0x12d60, 0x9}}, 0x44) 33.480885871s ago: executing program 33 (id=322): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@bh}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") ioctl$BLKRASET(0xffffffffffffffff, 0x1262, &(0x7f0000000000)=0xe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x8004, 0x72}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x6, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000280)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x6c}, {@rand_addr=0x64010102, 0x4e26, 0x18001, 0xcb, 0x12d60, 0x9}}, 0x44) 7.76343849s ago: executing program 0 (id=573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newsa={0xf0, 0x10, 0x1, 0x70bc2c, 0x8000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}}, 0xf0}}, 0x44050) (fail_nth: 8) 7.630124453s ago: executing program 0 (id=574): timer_create(0x0, 0x0, &(0x7f00000002c0)) (async) timer_create(0x0, 0x0, &(0x7f00000002c0)=0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) (async) timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) read(r2, 0x0, 0x0) timer_gettime(r1, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0xc) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x6c0, &(0x7f0000001f80)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c01000010001304fcfffffffadbdf25e000000100000000000000000000000000000000000000000000000000000000000000004e2400000200002006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0001000000000000000000000000000004d432000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000ffffffffffffffff00000000000000000800000400020000000000000000000000000000000000000100000000006796d392000004000000000000000000000000000000f6000000000000000000000026bd7000000000000a00010900000000000000004c001200726663343330392863636d28616573292900"/244], 0x13c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) unshare(0x2a060400) (async) unshare(0x2a060400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x400, 0x1, 0x107fff, 0x3, 0x4, 0x89, 0x0, 0xffb, 0x0, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0x6, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x8, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x8e9, 0x3, 0x5, 0x2, 0x1, 0x9, 0x8, 0x7, 0x1, 0xffffffff, 0x4, 0x9, 0x78ba, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0x1, 0x6, 0x5, 0x9, 0x80000000, 0xfdffffff, 0x9ae, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0x4, 0x4, 0x9, 0xc50, 0x2, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x0, 0x5, 0x6, 0x100, 0x4, 0x2, 0x40, 0x8, 0x800, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) (async) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) (async) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) (async) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000000010104000000000000b200000000ee"], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105030002ef686da691e3fb000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) timer_settime(r1, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) io_uring_enter(r5, 0x195b, 0x641d, 0xe4, &(0x7f0000000100)={[0x3]}, 0x8) (async) io_uring_enter(r5, 0x195b, 0x641d, 0xe4, &(0x7f0000000100)={[0x3]}, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x1c0, 0xb, 0x108, 0x108, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x307) timer_delete(r0) (async) timer_delete(r0) 6.922950731s ago: executing program 0 (id=578): r0 = socket$inet_tcp(0x2, 0x1, 0x6) sendto(r0, 0x0, 0x0, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) 6.876082862s ago: executing program 0 (id=580): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x1, 0xa8, 0x40, 0x3, 0x8, 0x1, 0x1, 0x78, 0x8, 0x9f, 0x5}, 0xe) r2 = socket$kcm(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x480, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x40, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) shutdown(r1, 0x1) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40001123) shutdown(r0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000178800000000000028237aba50be4e790453813fa566ea16c5e0e767727aa81f156b702fffdcd2e762d643ac12c616a1b1"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000068b000/0x3000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x411b}) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x181cd, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x1000, 0x0, 0xf, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, r5, 0x9) socket$kcm(0x10, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/virtio-pci/new_id\x00', 0x1, 0x0) write(r7, &(0x7f0000000000)='8086 7', 0x6) 6.429726903s ago: executing program 0 (id=590): r0 = socket$inet_tcp(0x2, 0x1, 0x6) sendto(r0, 0x0, 0x0, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) 5.093200825s ago: executing program 0 (id=608): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x8e}, 0x108084, 0x2, 0x7d5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0) mq_unlink(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x1, 0x20008000, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e21, @broadcast}}, 0xfff9, 0x4}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000280)={'syzkaller0\x00'}) 5.067592446s ago: executing program 34 (id=608): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x8e}, 0x108084, 0x2, 0x7d5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0) mq_unlink(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x1, 0x20008000, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e21, @broadcast}}, 0xfff9, 0x4}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000280)={'syzkaller0\x00'}) 3.157265343s ago: executing program 4 (id=623): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095", @ANYRESDEC=r0, @ANYRES64=r0], 0x0, 0x0, 0x2f, 0x0, 0x0, 0x23}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x6d2, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="020a0503070000002cbd7000fddbdf250500"], 0x38}}, 0x40004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0x7fffffff, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x8000, 0x8392, 0x9, 0x20, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x3}, 0x50) open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fedbdf2500000000", @ANYRESDEC=r1, @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r4 = socket(0x1, 0x5, 0x0) close(r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000040)={0x80002017}) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002b40)=""/4127, 0x101f}, {&(0x7f0000001a40)=""/4082, 0xff2}, {&(0x7f0000002a40)=""/235, 0xeb}, {&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000280)=""/161, 0xa1}], 0x5}, 0x40000102) 2.223771916s ago: executing program 6 (id=633): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) splice(r0, 0x0, r1, 0x0, 0x6, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x169ff1c9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x748c88e67926383f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0xe1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$selinux_validatetrans(r4, 0x0, 0x85) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x400, 0x0, 0x7, 0x1, 0x100000001, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'erspan0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x106, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x6b6}, 0x116414, 0x8001, 0x11000, 0x5, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semop(0x0, &(0x7f0000000140), 0x0) r6 = socket(0x10, 0x3, 0xa) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7fffffffffffffff) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b866b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d69c72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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") r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) r9 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x81, 0x0, 0xc05, 0x0, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 2.119266318s ago: executing program 4 (id=634): sendmsg(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000940)=@l2tp={0x2, 0x0, @private=0xa010102, 0x4}, 0x80, 0x0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400400000007bdb9f2528"], 0x14}, 0x1, 0x0, 0x0, 0x24004083}, 0x24054800) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) (fail_nth: 4) 2.03706419s ago: executing program 4 (id=636): r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000080)}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0xa, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5, 0x9c}}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x88, @private0={0xfc, 0x0, '\x00', 0x1}, 0x119d6050}, @in6={0xa, 0x4e24, 0x5, @private2, 0x7}}}, 0x118) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$inet(r5, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xfffc, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r7 = gettid() syz_clone3(&(0x7f00000003c0)={0x200000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r7, 0x0], 0x2}, 0x58) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000fbff5309b4a59066d1a40ccd75de4eedbb4d2002618582adfc679d034a20fa3a5be027fc4c6a4b13355258320100"/69, @ANYRES16=r6, @ANYBLOB="01000000000000000000070000000c0001800500020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) sendfile(0xffffffffffffffff, r1, 0x0, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x3ff, @remote, 0xff}}, 0x0, 0x0, 0x23, 0x0, "009b59557dc1b5123c64fcc67df9901d7a2e8a8ab8af14f15749796d758da20e43d329589647ea9f6a817312d894acc8525f60c827120fe6ba22affcc0260520dbbe61e312ce83b5f61534b6d6bb6ffd"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x9, @loopback, 0x1}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d01000000a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_open_procfs(0x0, 0x0) 1.748400317s ago: executing program 7 (id=641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xfff2, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x8}, {}, {0x1, 0x1ffe3}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x409, 0x0, 0x1000, 0x8a2, 0xd5}}, @TCA_U32_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000800) 1.63254662s ago: executing program 1 (id=642): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) r3 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) write$binfmt_script(r3, 0x0, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="77733b4681b4", 'gre0\x00'}}, 0x1e) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) (async) ftruncate(0xffffffffffffffff, 0x51a9497) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000800) (async) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x20000050) 1.331806087s ago: executing program 1 (id=643): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1221, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2001001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = open(&(0x7f00000004c0)='.\x00', 0x0, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x204, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mq_open(0x0, 0x42, 0x120, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x200000000000000a, 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000081000000040000000080000052000000", @ANYRES32, @ANYBLOB="0f00000000110007000000000000000000000000b458090156ba5884fdeeeb294be56deb102057db69f5263859306a84fefbf1700a58b6db08def8ce772a1c42a4d78d9bb743537ebc0fb2f14860cb8db1c334ffc51cfca0e3f95b26dba81cda9c2ad67e0585f0facdcd0a6995ca61376be5f43ced409f67e972f506952f20d5cb1e3cc4edf80524336638df23b5a417d4f2ecdd5c50c293ed5fe63a55ae9b696b8bbb9e8d2842964262dad0dbff0e98aec7e538061dd22a18c02000dd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x42020054, 0x0, &(0x7f0000000180)) r2 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="28ab17adaa1c250109cfbf7cd52be4d1aeb210f190e3541b4a7f3f54361066a4d8435d594257db9f74c914c1e91a80fd07e69caacf2e4976f7d51cf22f19dd8c2052562713ee9c2e87b26e949da46095a22381d4bd313b64146969359a39126fae09d3e8c95245afc864145486e8aeba973c05953a888b3e4cb409d0d7", 0x7d}], 0x1}, 0x4) openat$loop_ctrl(0xffffff9c, 0x0, 0x1cfb01, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000400), 0x2, 0x2040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x74, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x44, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x9126}, @TCA_FQ_PIE_BETA={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7fffffff}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x11}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x81bb}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x74}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="016f58cd0004670001003a230900aaab13256c6a0800deff07082263d3b264980703dfbd665f2ad6790fc8e57251b6daa8515cce898660fad11be3171261fccb0a79c3e01aac08ba69af77ff3e8ecb60f882bb99abe11dc933108436b93ac2d8b8835d37518639ef9dd1b5245cbabf85f1bc17f213"], 0x75) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000005c0)=""/157) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000600000002000000030000930100000003000000b70b0000ffffff7f04000000050001000500000004000000010000000101000000615f5f2e"], 0x0, 0x4e, 0x0, 0x9}, 0x28) 1.272695859s ago: executing program 5 (id=646): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) sendmsg(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000940)=@l2tp={0x2, 0x0, @private=0xa010102, 0x4}, 0x80, 0x0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400400000007bdb9f2528"], 0x14}, 0x1, 0x0, 0x0, 0x24004083}, 0x24054800) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 1.253959779s ago: executing program 7 (id=647): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f3395f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24", 0x5dc}], 0x1}, 0x30008b08) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x80000000000008, &(0x7f0000000200)="de", 0x1) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f0000005b80)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000190009002cbd7000000080000a001000fe03000f00040000"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) 1.23308356s ago: executing program 6 (id=648): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 1.189611841s ago: executing program 7 (id=649): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x395}, 0x204, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000d24000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000b37000/0x1000)=nil, &(0x7f0000724000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000780000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_setup(0x8, &(0x7f0000000100)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 1.189188541s ago: executing program 1 (id=650): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x450e}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) sendto(r0, 0x0, 0x0, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) 1.188753741s ago: executing program 5 (id=651): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone(0xb100, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1.150760052s ago: executing program 4 (id=652): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x402001) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x5, 0x80, 0x2, 0x0, 0x8, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x80, 0x0, 0x0, 0x0, 0x30}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000"], 0x28}, 0xfc40) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)}, 0xfc00) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x0, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x34, 0x71, 0x425, 0x5070bd28, 0x7e, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x63, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) writev(r0, &(0x7f0000000480)=[{0x0}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x200}]}}]}, 0x3c}}, 0x24004045) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.150242332s ago: executing program 6 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.129955402s ago: executing program 5 (id=654): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') pread64(r2, &(0x7f0000000840)=""/154, 0x9a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) 1.105933573s ago: executing program 6 (id=655): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/102386, 0x18ff2}], 0x1, 0xfffffffc, 0xfffffffd) 1.045471634s ago: executing program 1 (id=656): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r0, &(0x7f0000000040)=[{&(0x7f0000001040)="ba", 0x1}, {0x0, 0xea}], 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, 0x0) 1.030639085s ago: executing program 7 (id=657): unshare(0x28000600) (async) r0 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) (async) unshare(0x8000280) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x23, &(0x7f0000000000), 0x4) (async) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[], 0x9) (async) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x5a, 0x0, 0x0, 0xfffffffffffffffd, 0x1f}, 0x40010000) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000000c0)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x6}, @ioring_restriction_sqe_flags_required={0x3, 0xc}, @ioring_restriction_sqe_flags_allowed={0x2, 0xd}], 0x3) (async) close_range(r1, 0xffffffffffffffff, 0x0) sendfile(r0, r2, &(0x7f0000000180)=0x5, 0x8) 1.013341915s ago: executing program 4 (id=658): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000200)="0069e5734657", 0x6, 0x7) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b2000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0xb0}}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r3, 0x0) mkdirat(r3, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x8000, 0x0) r5 = signalfd(r1, &(0x7f0000000040)={[0x1]}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) 961.204186ms ago: executing program 1 (id=659): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x47f}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (fail_nth: 8) 946.777597ms ago: executing program 7 (id=660): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844b100e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000000)={0x6, 0xfdd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) ftruncate(r0, 0x8008976) truncate(&(0x7f00000000c0)='./file0\x00', 0x7) 525.721527ms ago: executing program 1 (id=661): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2503030000000000000016000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x200180a4}, 0x4000010) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0xfffd, 0x2, 0x10, {0x2, 0x2327, @broadcast}}, 0x24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa019600ba9380d440", 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000003040)='./file0\x00') listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x110, 0xe}, {0x18, 0x110, 0x1, "02"}], 0x28}, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x28dc2) ioctl$XFS_IOC_ERROR_CLEARALL(r7, 0x40085875) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x2000b}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$PIO_FONT(r7, 0x4b61, &(0x7f00000000c0)="6c4990f3fbf5a451c995cf886095e0b3f1c74f122b69568b49ff32e768") ioctl$PTP_PIN_GETFUNC(r7, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x1ff, 0x1, 0x4}) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000fbff000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 493.454508ms ago: executing program 6 (id=662): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x531, &(0x7f0000000cc0)="$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") 490.152178ms ago: executing program 4 (id=663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x2000cc0, r0}, 0x38) 344.797951ms ago: executing program 5 (id=664): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone(0xb100, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 147.574276ms ago: executing program 6 (id=665): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) splice(r0, 0x0, r1, 0x0, 0x6, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x169ff1c9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x748c88e67926383f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0xe1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$selinux_validatetrans(r4, 0x0, 0x85) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x400, 0x0, 0x7, 0x1, 0x100000001, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'erspan0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x106, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x6b6}, 0x116414, 0x8001, 0x11000, 0x5, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0100001000130726bd7000000000006401010100"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semop(0x0, &(0x7f0000000140), 0x0) r6 = socket(0x10, 0x3, 0xa) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7fffffffffffffff) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b866b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d69c72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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") r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) r9 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x81, 0x0, 0xc05, 0x0, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 147.011806ms ago: executing program 5 (id=666): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300021c00000000000000000000001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac6000000000000000030006000000000002004e20ac141400000000000000000002000100000000000000060000000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setregid(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x11, 0x2, 0x6, 0xa, 0x1, 0x0, 0x3, 0x4056, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000000200000000000006000000000600150001000000180016"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x4040000) connect$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 33.340599ms ago: executing program 7 (id=667): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x395}, 0x204, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000d24000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000b37000/0x1000)=nil, &(0x7f0000724000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000780000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_setup(0x8, &(0x7f0000000100)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 0s ago: executing program 5 (id=668): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300021c00000000000000000000001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac6000000000000000030006000000000002004e20ac141400000000000000000002000100000000000000060000000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setregid(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x11, 0x2, 0x6, 0xa, 0x1, 0x0, 0x3, 0x4056, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000000200000000000006000000000600150001000000180016"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x4040000) connect$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): s=dir permissive=1 [ 57.916583][ T28] audit: type=1400 audit(1787527955.713:1239): avc: denied { write } for pid=4141 comm="syz.2.190" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.981767][ T28] audit: type=1400 audit(1787527955.713:1240): avc: denied { create } for pid=4141 comm="syz.2.190" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.041082][ T28] audit: type=1400 audit(1787527955.733:1241): avc: denied { read append open } for pid=4141 comm="syz.2.190" path="/38/file1/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.066181][ T28] audit: type=1400 audit(1787527955.783:1242): avc: denied { write } for pid=4156 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.502893][ T28] audit: type=1326 audit(1787527956.343:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f527e0d9 code=0x7ffc0000 [ 58.530642][ T28] audit: type=1326 audit(1787527956.343:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f527e0d9 code=0x7ffc0000 [ 58.627813][ T2114] team0 (unregistering): Port device team_slave_1 removed [ 58.631070][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.657205][ T2114] team0 (unregistering): Port device team_slave_0 removed [ 58.673253][ T28] audit: type=1326 audit(1787527956.343:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f527e0d9 code=0x7ffc0000 [ 58.749028][ T28] audit: type=1326 audit(1787527956.343:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f527e0d9 code=0x7ffc0000 [ 58.783809][ T4173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.197'. [ 58.845856][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 58.860029][ T4179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 58.993359][ T4095] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.000775][ T4095] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.008596][ T4095] bridge_slave_0: entered allmulticast mode [ 59.015338][ T4095] bridge_slave_0: entered promiscuous mode [ 59.022821][ T4095] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.030132][ T4095] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.037544][ T4095] bridge_slave_1: entered allmulticast mode [ 59.044233][ T4095] bridge_slave_1: entered promiscuous mode [ 59.063320][ T4095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.073864][ T4095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.098585][ T4095] team0: Port device team_slave_0 added [ 59.112530][ T4095] team0: Port device team_slave_1 added [ 59.141047][ T4095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.166768][ T4095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.193208][ T4095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.204702][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 59.217072][ T4095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.228219][ T4095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.260443][ T4095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.306494][ T4095] hsr_slave_0: entered promiscuous mode [ 59.319071][ T4095] hsr_slave_1: entered promiscuous mode [ 59.333744][ T4095] debugfs: 'hsr0' already exists in 'hsr' [ 59.351536][ T4095] Cannot create hsr debugfs directory [ 59.371304][ T4201] loop2: detected capacity change from 0 to 512 [ 59.500254][ T4201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.549426][ T4095] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.568840][ T4095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.580066][ T4201] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.596818][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 59.605041][ T4095] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.629175][ T4095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.641437][ T4095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.665933][ T4095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.692733][ T4095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.722879][ T4095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.782407][ T4095] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.789548][ T4095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.796921][ T4095] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.804056][ T4095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.873929][ T4237] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 2, id = 0 [ 59.904474][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.921614][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.980340][ T4240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'. [ 60.002282][ T4095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.028001][ T4095] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.054528][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.061694][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.074881][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.081982][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.113004][ T4095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.130328][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.143283][ T4095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.459463][ T4095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.705435][ T4095] veth0_vlan: entered promiscuous mode [ 60.718430][ T4095] veth1_vlan: entered promiscuous mode [ 60.735551][ T4095] veth0_macvtap: entered promiscuous mode [ 60.743964][ T4095] veth1_macvtap: entered promiscuous mode [ 60.759249][ T4095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.772302][ T4095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.848374][ T4276] tipc: Started in network mode [ 60.859428][ T4276] tipc: Node identity , cluster identity 4711 [ 60.879509][ T4276] tipc: Failed to set node id, please configure manually [ 60.896540][ T4276] tipc: Enabling of bearer rejected, failed to enable media [ 60.914102][ T4281] loop1: detected capacity change from 0 to 512 [ 60.937549][ T362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.947477][ T362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.962735][ T4281] EXT4-fs: Ignoring removed bh option [ 60.994112][ T4281] ext2: Unknown parameter 'noacl' [ 60.994403][ T4285] FAULT_INJECTION: forcing a failure. [ 60.994403][ T4285] name failslab, interval 1, probability 0, space 0, times 0 [ 61.012192][ T362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.024615][ T4285] CPU: 1 UID: 0 PID: 4285 Comm: syz.5.208 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.024657][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.024679][ T4285] Call Trace: [ 61.024686][ T4285] [ 61.024694][ T4285] __dump_stack+0x1d/0x30 [ 61.024734][ T4285] dump_stack_lvl+0x95/0xd0 [ 61.024787][ T4285] dump_stack+0x15/0x1b [ 61.024846][ T4285] should_fail_ex+0x262/0x280 [ 61.024887][ T4285] should_failslab+0x8c/0xb0 [ 61.024997][ T4285] __kmalloc_noprof+0xd4/0x4c0 [ 61.025029][ T4285] ? __memcg_list_lru_alloc+0x288/0x470 [ 61.025134][ T4285] ? __memcg_list_lru_alloc+0x288/0x470 [ 61.025177][ T4285] __memcg_list_lru_alloc+0x288/0x470 [ 61.025222][ T4285] memcg_list_lru_alloc+0x88/0xa0 [ 61.025335][ T4285] __memcg_slab_post_alloc_hook+0x228/0x8a0 [ 61.025387][ T4285] ? should_fail_ex+0xdb/0x280 [ 61.025426][ T4285] kmem_cache_alloc_lru_noprof+0x1fd/0x3e0 [ 61.025451][ T4285] ? __d_alloc+0x34/0x320 [ 61.025528][ T4285] ? __d_alloc+0x34/0x320 [ 61.025554][ T4285] __d_alloc+0x34/0x320 [ 61.025578][ T4285] ? d_alloc_pseudo+0x13/0x80 [ 61.025601][ T4285] d_alloc_pseudo+0x1e/0x80 [ 61.025632][ T4285] alloc_path_pseudo+0xa4/0x140 [ 61.025713][ T4285] alloc_file_pseudo+0x55/0x120 [ 61.025753][ T4285] __shmem_file_setup+0x226/0x260 [ 61.025782][ T4285] shmem_file_setup+0x3b/0x50 [ 61.025814][ T4285] memfd_alloc_file+0x4e/0x300 [ 61.025847][ T4285] __se_sys_memfd_create+0x2e1/0x3b0 [ 61.026020][ T4285] __x64_sys_memfd_create+0x31/0x40 [ 61.026045][ T4285] x64_sys_call+0x1955/0x2550 [ 61.026070][ T4285] do_syscall_64+0x112/0x360 [ 61.026151][ T4285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.026179][ T4285] RIP: 0033:0x7fda3edde0d9 [ 61.026207][ T4285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.026270][ T4285] RSP: 002b:00007fda3d836e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 61.026299][ T4285] RAX: ffffffffffffffda RBX: 0000000000000bd1 RCX: 00007fda3edde0d9 [ 61.026316][ T4285] RDX: 00007fda3d836ee0 RSI: 0000000000000000 RDI: 00007fda3ee75204 [ 61.026408][ T4285] RBP: 0000200000001340 R08: 00000000ffffffff R09: 0000000000000000 [ 61.026479][ T4285] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000140 [ 61.026493][ T4285] R13: 00007fda3d836ee0 R14: 00007fda3d836ea0 R15: 00002000000001c0 [ 61.026514][ T4285] [ 61.042755][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.295792][ T4290] loop2: detected capacity change from 0 to 1024 [ 61.338011][ T4290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 61.359420][ T4290] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.371757][ T4290] EXT4-fs error (device loop2): ext4_readdir:280: inode #2: block 16: comm syz.2.209: path /42/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 61.392166][ T4290] EXT4-fs (loop2): Remounting filesystem read-only [ 61.428260][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 61.675393][ T4308] loop5: detected capacity change from 0 to 512 [ 61.682957][ T4292] loop0: detected capacity change from 0 to 4096 [ 61.711706][ T4292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.751439][ T4308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.765253][ T4308] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.792181][ T4292] __nla_validate_parse: 1 callbacks suppressed [ 61.792207][ T4292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.211'. [ 61.850174][ T4320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.217'. [ 62.617203][ T28] kauditd_printk_skb: 3150 callbacks suppressed [ 62.617228][ T28] audit: type=1326 audit(1787527960.453:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22180e0d9 code=0x7fc00000 [ 62.662942][ T28] audit: type=1326 audit(1787527960.453:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22180e0d9 code=0x7fc00000 [ 62.702726][ T28] audit: type=1326 audit(1787527960.453:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22180e0d9 code=0x7fc00000 [ 62.754453][ T28] audit: type=1326 audit(1787527960.453:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22180e0d9 code=0x7fc00000 [ 62.798616][ T28] audit: type=1326 audit(1787527960.453:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22180e0d9 code=0x7fc00000 [ 62.848781][ T28] audit: type=1326 audit(1787527960.453:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22180e0d9 code=0x7fc00000 [ 62.907233][ T28] audit: type=1326 audit(1787527960.453:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22180e0d9 code=0x7fc00000 [ 62.934287][ T28] audit: type=1326 audit(1787527960.453:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22180e0d9 code=0x7fc00000 [ 62.969271][ T28] audit: type=1326 audit(1787527960.453:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22180e0d9 code=0x7fc00000 [ 62.995229][ T28] audit: type=1326 audit(1787527960.503:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22180e0d9 code=0x7fc00000 [ 63.141532][ T4095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.285464][ T4346] FAULT_INJECTION: forcing a failure. [ 63.285464][ T4346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.320838][ T4346] CPU: 0 UID: 0 PID: 4346 Comm: syz.5.225 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.320875][ T4346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.320967][ T4346] Call Trace: [ 63.320976][ T4346] [ 63.320987][ T4346] __dump_stack+0x1d/0x30 [ 63.321027][ T4346] dump_stack_lvl+0x95/0xd0 [ 63.321056][ T4346] dump_stack+0x15/0x1b [ 63.321083][ T4346] should_fail_ex+0x262/0x280 [ 63.321199][ T4346] should_fail+0xb/0x20 [ 63.321271][ T4346] should_fail_usercopy+0x1a/0x20 [ 63.321310][ T4346] _copy_from_user+0x1c/0xb0 [ 63.321330][ T4346] ___sys_sendmsg+0xc1/0x1e0 [ 63.321420][ T4346] __x64_sys_sendmsg+0xd4/0x160 [ 63.321455][ T4346] x64_sys_call+0x22ab/0x2550 [ 63.321480][ T4346] do_syscall_64+0x112/0x360 [ 63.321585][ T4346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.321691][ T4346] RIP: 0033:0x7fda3edde0d9 [ 63.321712][ T4346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.321735][ T4346] RSP: 002b:00007fda3d837028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.321759][ T4346] RAX: ffffffffffffffda RBX: 00007fda3f065fa0 RCX: 00007fda3edde0d9 [ 63.321773][ T4346] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 63.321797][ T4346] RBP: 00007fda3d837090 R08: 0000000000000000 R09: 0000000000000000 [ 63.321814][ T4346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.321830][ T4346] R13: 00007fda3f066038 R14: 00007fda3f065fa0 R15: 00007ffd7e90deb8 [ 63.321855][ T4346] [ 63.542448][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.168827][ T4398] FAULT_INJECTION: forcing a failure. [ 64.168827][ T4398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.181921][ T4398] CPU: 1 UID: 0 PID: 4398 Comm: syz.0.235 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.181957][ T4398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.181972][ T4398] Call Trace: [ 64.182041][ T4398] [ 64.182052][ T4398] __dump_stack+0x1d/0x30 [ 64.182081][ T4398] dump_stack_lvl+0x95/0xd0 [ 64.182164][ T4398] dump_stack+0x15/0x1b [ 64.182191][ T4398] should_fail_ex+0x262/0x280 [ 64.182273][ T4398] should_fail+0xb/0x20 [ 64.182311][ T4398] should_fail_usercopy+0x1a/0x20 [ 64.182355][ T4398] _copy_from_iter+0xcc/0xe70 [ 64.182397][ T4398] ? __alloc_skb+0x516/0x6f0 [ 64.182474][ T4398] ? __alloc_skb+0x209/0x6f0 [ 64.182556][ T4398] netlink_sendmsg+0x4a4/0x6f0 [ 64.182604][ T4398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.182730][ T4398] ____sys_sendmsg+0x532/0x580 [ 64.182827][ T4398] ___sys_sendmsg+0x195/0x1e0 [ 64.182875][ T4398] __x64_sys_sendmsg+0xd4/0x160 [ 64.182910][ T4398] x64_sys_call+0x22ab/0x2550 [ 64.182944][ T4398] do_syscall_64+0x112/0x360 [ 64.183018][ T4398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.183043][ T4398] RIP: 0033:0x7fa22180e0d9 [ 64.183064][ T4398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.183089][ T4398] RSP: 002b:00007fa220267028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.183115][ T4398] RAX: ffffffffffffffda RBX: 00007fa221a95fa0 RCX: 00007fa22180e0d9 [ 64.183209][ T4398] RDX: 00000000040040c4 RSI: 0000200000000200 RDI: 0000000000000006 [ 64.183227][ T4398] RBP: 00007fa220267090 R08: 0000000000000000 R09: 0000000000000000 [ 64.183240][ T4398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.183280][ T4398] R13: 00007fa221a96038 R14: 00007fa221a95fa0 R15: 00007ffcf47c05f8 [ 64.183312][ T4398] [ 64.542179][ T4418] loop0: detected capacity change from 0 to 1024 [ 64.561427][ T4417] loop1: detected capacity change from 0 to 512 [ 64.615920][ T4418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.686187][ T4417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.704968][ T4417] ext4 filesystem being mounted at /51/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.736426][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.886682][ T69] IPVS: starting estimator thread 0... [ 64.967553][ T4445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 65.007411][ T4446] IPVS: using max 2208 ests per chain, 110400 per kthread [ 65.023333][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 65.025896][ T4458] netlink: 'syz.5.245': attribute type 15 has an invalid length. [ 65.077941][ T4460] netlink: 'syz.5.245': attribute type 15 has an invalid length. [ 65.308870][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.386696][ T4478] FAULT_INJECTION: forcing a failure. [ 65.386696][ T4478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.477998][ T4478] CPU: 0 UID: 0 PID: 4478 Comm: syz.1.249 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.478063][ T4478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.478087][ T4478] Call Trace: [ 65.478096][ T4478] [ 65.478117][ T4478] __dump_stack+0x1d/0x30 [ 65.478157][ T4478] dump_stack_lvl+0x95/0xd0 [ 65.478191][ T4478] dump_stack+0x15/0x1b [ 65.478218][ T4478] should_fail_ex+0x262/0x280 [ 65.478286][ T4478] should_fail+0xb/0x20 [ 65.478324][ T4478] should_fail_usercopy+0x1a/0x20 [ 65.478374][ T4478] _copy_from_user+0x1c/0xb0 [ 65.478399][ T4478] ____sys_sendmsg+0x1c1/0x580 [ 65.478502][ T4478] ___sys_sendmsg+0x195/0x1e0 [ 65.478550][ T4478] __x64_sys_sendmsg+0xd4/0x160 [ 65.478588][ T4478] x64_sys_call+0x22ab/0x2550 [ 65.478628][ T4478] do_syscall_64+0x112/0x360 [ 65.478739][ T4478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.478770][ T4478] RIP: 0033:0x7f75f527e0d9 [ 65.478791][ T4478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.478850][ T4478] RSP: 002b:00007f75f3cd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.478958][ T4478] RAX: ffffffffffffffda RBX: 00007f75f5505fa0 RCX: 00007f75f527e0d9 [ 65.478977][ T4478] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 65.478994][ T4478] RBP: 00007f75f3cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.479012][ T4478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.479028][ T4478] R13: 00007f75f5506038 R14: 00007f75f5505fa0 R15: 00007ffd7e7c2a78 [ 65.479114][ T4478] [ 65.891425][ T4484] netlink: 132 bytes leftover after parsing attributes in process `syz.1.252'. [ 65.946723][ T4482] loop0: detected capacity change from 0 to 512 [ 65.995465][ T4482] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.032008][ T4482] EXT4-fs (loop0): 1 truncate cleaned up [ 66.044120][ T4482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.160031][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.392590][ T4511] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 66.405472][ T4511] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 66.960114][ T4511] loop0: detected capacity change from 0 to 4096 [ 67.058669][ T4526] loop2: detected capacity change from 0 to 8192 [ 67.065535][ T4526] vfat: Unknown parameter 'f [ 67.065535][ T4526] ' [ 67.169532][ T4511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.302552][ T4532] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 67.376591][ T4538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.267'. [ 67.402153][ T4511] gtp0: entered promiscuous mode [ 67.502925][ T4546] netlink: 1039 bytes leftover after parsing attributes in process `syz.5.271'. [ 67.506217][ T4548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'. [ 67.533033][ T4546] netlink: 'syz.5.271': attribute type 9 has an invalid length. [ 67.562701][ T4546] netlink: 'syz.5.271': attribute type 8 has an invalid length. [ 67.580323][ T4546] netlink: 335 bytes leftover after parsing attributes in process `syz.5.271'. [ 67.632188][ T28] kauditd_printk_skb: 169 callbacks suppressed [ 67.632219][ T28] audit: type=1326 audit(1787527965.473:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3edde0d9 code=0x7ffc0000 [ 67.680314][ T28] audit: type=1326 audit(1787527965.473:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3edde0d9 code=0x7ffc0000 [ 67.726572][ T28] audit: type=1326 audit(1787527965.473:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3edde0d9 code=0x7ffc0000 [ 67.766072][ T28] audit: type=1326 audit(1787527965.513:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3edde0d9 code=0x7ffc0000 [ 67.807325][ T28] audit: type=1326 audit(1787527965.513:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3edde0d9 code=0x7ffc0000 [ 67.858519][ T28] audit: type=1326 audit(1787527965.513:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fda3edde0d9 code=0x7ffc0000 [ 67.896646][ T4562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.276'. [ 67.923956][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.934179][ T28] audit: type=1326 audit(1787527965.513:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3edde0d9 code=0x7ffc0000 [ 68.005035][ T28] audit: type=1326 audit(1787527965.513:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3edde0d9 code=0x7ffc0000 [ 68.093151][ T28] audit: type=1326 audit(1787527965.513:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3edde0d9 code=0x7ffc0000 [ 68.122756][ T4569] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 68.147567][ T28] audit: type=1326 audit(1787527965.513:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3edde0d9 code=0x7ffc0000 [ 68.381864][ T4586] loop1: detected capacity change from 0 to 512 [ 68.402689][ T4569] bond1 (unregistering): Released all slaves [ 68.417030][ T4586] EXT4-fs: Ignoring removed bh option [ 68.447209][ T4582] loop0: detected capacity change from 0 to 512 [ 68.487327][ T4586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.490118][ T4582] EXT4-fs: Ignoring removed bh option [ 68.529908][ T4586] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.661732][ T4582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.677419][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.724472][ T4599] netlink: 36 bytes leftover after parsing attributes in process `syz.2.286'. [ 68.756044][ T4582] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.974279][ T4611] loop1: detected capacity change from 0 to 512 [ 69.011013][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.027597][ T4611] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.114655][ T4617] loop0: detected capacity change from 0 to 512 [ 69.151651][ T4617] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.174638][ T4617] FAULT_INJECTION: forcing a failure. [ 69.174638][ T4617] name failslab, interval 1, probability 0, space 0, times 0 [ 69.199300][ T4617] CPU: 1 UID: 0 PID: 4617 Comm: syz.0.293 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.199417][ T4617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.199520][ T4617] Call Trace: [ 69.199534][ T4617] [ 69.199545][ T4617] __dump_stack+0x1d/0x30 [ 69.199572][ T4617] dump_stack_lvl+0x95/0xd0 [ 69.199599][ T4617] dump_stack+0x15/0x1b [ 69.199636][ T4617] should_fail_ex+0x262/0x280 [ 69.199729][ T4617] should_failslab+0x8c/0xb0 [ 69.199773][ T4617] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 69.199813][ T4617] ? alloc_empty_file+0x70/0x1e0 [ 69.199852][ T4617] ? alloc_empty_file+0x70/0x1e0 [ 69.199893][ T4617] alloc_empty_file+0x70/0x1e0 [ 69.199970][ T4617] path_openat+0x50/0x10d0 [ 69.200007][ T4617] ? kstrtouint+0x76/0xc0 [ 69.200043][ T4617] do_file_open+0x16c/0x290 [ 69.200106][ T4617] do_sys_openat2+0xa0/0x130 [ 69.200150][ T4617] __x64_sys_openat+0xf2/0x120 [ 69.200230][ T4617] x64_sys_call+0x1f72/0x2550 [ 69.200269][ T4617] do_syscall_64+0x112/0x360 [ 69.200346][ T4617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.200421][ T4617] RIP: 0033:0x7fa22180e0d9 [ 69.200441][ T4617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.200460][ T4617] RSP: 002b:00007fa220267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.200481][ T4617] RAX: ffffffffffffffda RBX: 00007fa221a95fa0 RCX: 00007fa22180e0d9 [ 69.200501][ T4617] RDX: 0000000000008541 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 69.200520][ T4617] RBP: 00007fa220267090 R08: 0000000000000000 R09: 0000000000000000 [ 69.200564][ T4617] R10: 00000000000001a9 R11: 0000000000000246 R12: 0000000000000001 [ 69.200581][ T4617] R13: 00007fa221a96038 R14: 00007fa221a95fa0 R15: 00007ffcf47c05f8 [ 69.200668][ T4617] [ 69.428055][ T4559] loop5: detected capacity change from 0 to 4096 [ 69.478459][ T4559] netlink: 28 bytes leftover after parsing attributes in process `syz.5.275'. [ 69.541195][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 69.555873][ T4619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 69.589153][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 69.594135][ T4626] FAULT_INJECTION: forcing a failure. [ 69.594135][ T4626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.612135][ T4626] CPU: 1 UID: 0 PID: 4626 Comm: syz.0.294 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.612178][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.612194][ T4626] Call Trace: [ 69.612201][ T4626] [ 69.612210][ T4626] __dump_stack+0x1d/0x30 [ 69.612234][ T4626] dump_stack_lvl+0x95/0xd0 [ 69.612258][ T4626] dump_stack+0x15/0x1b [ 69.612295][ T4626] should_fail_ex+0x262/0x280 [ 69.612331][ T4626] should_fail+0xb/0x20 [ 69.612358][ T4626] should_fail_usercopy+0x1a/0x20 [ 69.612403][ T4626] _copy_from_user+0x1c/0xb0 [ 69.612429][ T4626] ___sys_sendmsg+0xc1/0x1e0 [ 69.612468][ T4626] __x64_sys_sendmsg+0xd4/0x160 [ 69.612504][ T4626] x64_sys_call+0x22ab/0x2550 [ 69.612576][ T4626] do_syscall_64+0x112/0x360 [ 69.612614][ T4626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.612642][ T4626] RIP: 0033:0x7fa22180e0d9 [ 69.612736][ T4626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.612826][ T4626] RSP: 002b:00007fa220267028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.612923][ T4626] RAX: ffffffffffffffda RBX: 00007fa221a95fa0 RCX: 00007fa22180e0d9 [ 69.612941][ T4626] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000008 [ 69.612955][ T4626] RBP: 00007fa220267090 R08: 0000000000000000 R09: 0000000000000000 [ 69.612968][ T4626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.612980][ T4626] R13: 00007fa221a96038 R14: 00007fa221a95fa0 R15: 00007ffcf47c05f8 [ 69.613005][ T4626] [ 69.934846][ T4644] loop0: detected capacity change from 0 to 1024 [ 70.034872][ T4641] loop1: detected capacity change from 0 to 4096 [ 70.046510][ T4644] EXT4-fs mount: 5 callbacks suppressed [ 70.046524][ T4644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.084877][ T4641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.099335][ T4095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.390179][ T4661] loop2: detected capacity change from 0 to 512 [ 70.415219][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.434592][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.516830][ T4661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.536022][ T4661] ext4 filesystem being mounted at /58/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.677667][ T4680] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 70.760233][ T4680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.835399][ T4696] bond1: (slave syz_tun): making interface the new active one [ 70.844408][ T4696] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 70.999294][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 71.022636][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 71.044935][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 71.067489][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 71.108843][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 71.120844][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 71.134733][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 71.170367][ T4741] netlink: 'syz.5.318': attribute type 1 has an invalid length. [ 71.180121][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 71.194744][ T4741] bond1 (unregistering): Released all slaves [ 71.201402][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 71.228895][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 71.241667][ T4744] hub 7-0:1.0: USB hub found [ 71.246712][ T4744] hub 7-0:1.0: 8 ports detected [ 71.259369][ T4744] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.548665][ T4752] loop5: detected capacity change from 0 to 512 [ 71.556147][ T4752] EXT4-fs: Ignoring removed bh option [ 71.580619][ T4752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.594294][ T4752] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.710217][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.721935][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.834135][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.942821][ T4756] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.949928][ T4756] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.957223][ T4756] bridge_slave_0: entered allmulticast mode [ 71.964341][ T4756] bridge_slave_0: entered promiscuous mode [ 71.971218][ T4756] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.978411][ T4756] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.985528][ T4756] bridge_slave_1: entered allmulticast mode [ 71.991965][ T4756] bridge_slave_1: entered promiscuous mode [ 72.010882][ T4756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.021151][ T4756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.041660][ T4756] team0: Port device team_slave_0 added [ 72.048457][ T4756] team0: Port device team_slave_1 added [ 72.065286][ T4756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.074562][ T4756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.119439][ T4756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.146060][ T4756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.155862][ T4756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.182535][ T4756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.197960][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.229321][ T4756] hsr_slave_0: entered promiscuous mode [ 72.235779][ T4756] hsr_slave_1: entered promiscuous mode [ 72.241969][ T4756] debugfs: 'hsr0' already exists in 'hsr' [ 72.247871][ T4756] Cannot create hsr debugfs directory [ 72.262704][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.280851][ T4793] loop1: detected capacity change from 0 to 1024 [ 72.300844][ T4793] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c029, mo2=0002] [ 72.321756][ T4793] System zones: 0-1, 3-12 [ 72.332263][ T4793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.355244][ T4793] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 72.367573][ T4793] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.325: bg 0: block 216: padding at end of block bitmap is not set [ 72.384000][ T4793] EXT4-fs (loop1): Remounting filesystem read-only [ 72.392410][ T4793] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1613: inode #11: comm syz.1.325: cleanup dec ref error -28 [ 72.431107][ T37] bridge_slave_1: left allmulticast mode [ 72.436838][ T37] bridge_slave_1: left promiscuous mode [ 72.439015][ T4793] __nla_validate_parse: 5 callbacks suppressed [ 72.439058][ T4793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 72.443528][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.465365][ T37] bridge_slave_0: left allmulticast mode [ 72.471197][ T37] bridge_slave_0: left promiscuous mode [ 72.476963][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.484919][ T4793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 72.519014][ T4793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 72.550818][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.560754][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.570349][ T37] bond0 (unregistering): Released all slaves [ 72.661841][ T37] hsr_slave_0: left promiscuous mode [ 72.668238][ T37] hsr_slave_1: left promiscuous mode [ 72.676480][ T37] veth1_macvtap: left promiscuous mode [ 72.682027][ T37] veth0_macvtap: left promiscuous mode [ 72.687618][ T37] veth1_vlan: left promiscuous mode [ 72.693260][ T37] veth0_vlan: left promiscuous mode [ 72.756065][ T37] team0 (unregistering): Port device team_slave_1 removed [ 72.765721][ T37] team0 (unregistering): Port device team_slave_0 removed [ 73.599084][ T4710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.613563][ T4756] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 73.643792][ T4095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.655213][ T4756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.663623][ T4756] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 73.673855][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.678589][ T4756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.705698][ T4756] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 73.731737][ T4756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.746829][ T4756] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 73.758969][ T4756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.827368][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.850954][ T4756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.864313][ T4756] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.891755][ T4825] FAULT_INJECTION: forcing a failure. [ 73.891755][ T4825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.907990][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.915183][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.932969][ T4825] CPU: 0 UID: 0 PID: 4825 Comm: syz.5.331 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.933058][ T4825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.933074][ T4825] Call Trace: [ 73.933084][ T4825] [ 73.933093][ T4825] __dump_stack+0x1d/0x30 [ 73.933122][ T4825] dump_stack_lvl+0x95/0xd0 [ 73.933163][ T4825] dump_stack+0x15/0x1b [ 73.933183][ T4825] should_fail_ex+0x262/0x280 [ 73.933224][ T4825] should_fail+0xb/0x20 [ 73.933277][ T4825] should_fail_usercopy+0x1a/0x20 [ 73.933361][ T4825] _copy_to_user+0x20/0xa0 [ 73.933432][ T4825] simple_read_from_buffer+0xb5/0x130 [ 73.933473][ T4825] proc_fail_nth_read+0x10e/0x150 [ 73.933504][ T4825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.933534][ T4825] vfs_read+0x18e/0x7c0 [ 73.933638][ T4825] ? __rcu_read_unlock+0x4e/0x70 [ 73.933761][ T4825] ? __fget_files+0x184/0x1c0 [ 73.933792][ T4825] ? mutex_lock+0x57/0x90 [ 73.933819][ T4825] ksys_read+0xdc/0x1a0 [ 73.933916][ T4825] __x64_sys_read+0x40/0x50 [ 73.933995][ T4825] x64_sys_call+0x2135/0x2550 [ 73.934077][ T4825] do_syscall_64+0x112/0x360 [ 73.934186][ T4825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.934217][ T4825] RIP: 0033:0x7fda3ed9e90e [ 73.934238][ T4825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.934257][ T4825] RSP: 002b:00007fda3d836fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.934282][ T4825] RAX: ffffffffffffffda RBX: 00007fda3d8376c0 RCX: 00007fda3ed9e90e [ 73.934296][ T4825] RDX: 000000000000000f RSI: 00007fda3d8370a0 RDI: 0000000000000003 [ 73.934362][ T4825] RBP: 00007fda3d837090 R08: 0000000000000000 R09: 0000000000000000 [ 73.934384][ T4825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.934399][ T4825] R13: 00007fda3f066038 R14: 00007fda3f065fa0 R15: 00007ffd7e90deb8 [ 73.934422][ T4825] [ 74.136157][ T4756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.146611][ T4756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.161889][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.169091][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.228556][ T28] kauditd_printk_skb: 612 callbacks suppressed [ 74.228574][ T28] audit: type=1400 audit(1787527972.073:5198): avc: denied { write } for pid=4807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.262167][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.321871][ T28] audit: type=1400 audit(1787527972.163:5200): avc: denied { write } for pid=4844 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.360096][ T28] audit: type=1400 audit(1787527972.163:5199): avc: denied { bind } for pid=4834 comm="syz.5.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.400802][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 74.407847][ T28] audit: type=1400 audit(1787527972.173:5201): avc: denied { name_bind } for pid=4834 comm="syz.5.334" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 74.459884][ T28] audit: type=1400 audit(1787527972.303:5202): avc: denied { mount } for pid=4840 comm="syz.0.335" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.501012][ T28] audit: type=1400 audit(1787527972.303:5203): avc: denied { create } for pid=4840 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 74.527133][ T4756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.617316][ T28] audit: type=1400 audit(1787527972.453:5204): avc: denied { write } for pid=4861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.663701][ T28] audit: type=1400 audit(1787527972.503:5205): avc: denied { write } for pid=4880 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.705532][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 74.713195][ T4756] veth0_vlan: entered promiscuous mode [ 74.725226][ T4756] veth1_vlan: entered promiscuous mode [ 74.742068][ T4756] veth0_macvtap: entered promiscuous mode [ 74.749963][ T4756] veth1_macvtap: entered promiscuous mode [ 74.771019][ T4756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.783356][ T4756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.791687][ T4887] netlink: 80 bytes leftover after parsing attributes in process `syz.4.337'. [ 74.837351][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.852609][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.905857][ T312] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.918231][ T312] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.966278][ T28] audit: type=1400 audit(1787527972.803:5206): avc: denied { write } for pid=4889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.032310][ T28] audit: type=1400 audit(1787527972.873:5207): avc: denied { write } for pid=4910 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.067431][ T4911] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 75.090576][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 75.129194][ T4909] loop6: detected capacity change from 0 to 1024 [ 75.243233][ T4929] loop0: detected capacity change from 0 to 1024 [ 75.254829][ T4929] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 75.273797][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 75.301113][ T4929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.319812][ T4909] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c029, mo2=0002] [ 75.328029][ T4909] System zones: 0-1, 3-12 [ 75.333082][ T4909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.363223][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.492229][ T4909] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.323: bg 0: block 216: padding at end of block bitmap is not set [ 75.524444][ T4944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 75.534265][ T4944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.344'. [ 75.556884][ T4909] EXT4-fs (loop6): Remounting filesystem read-only [ 75.563469][ T4909] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1613: inode #11: comm syz.6.323: cleanup dec ref error -117 [ 75.936830][ T4968] loop0: detected capacity change from 0 to 512 [ 76.009374][ T4968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.022631][ T4968] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.067919][ T4756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.079782][ T4955] loop5: detected capacity change from 0 to 1024 [ 76.104553][ T4968] netlink: 92 bytes leftover after parsing attributes in process `syz.0.350'. [ 76.193617][ T4955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.233426][ T4955] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.348: bg 0: block 216: padding at end of block bitmap is not set [ 76.261287][ T4955] EXT4-fs (loop5): Remounting filesystem read-only [ 76.268643][ T4955] EXT4-fs warning (device loop5): ext4_xattr_inode_lookup_create:1613: inode #11: comm syz.5.348: cleanup dec ref error -28 [ 77.456413][ T4095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.475012][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.833589][ T5023] FAULT_INJECTION: forcing a failure. [ 77.833589][ T5023] name failslab, interval 1, probability 0, space 0, times 0 [ 77.846413][ T5024] loop6: detected capacity change from 0 to 1024 [ 77.848428][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.857413][ T5023] CPU: 1 UID: 0 PID: 5023 Comm: syz.0.370 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.857502][ T5023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.857536][ T5023] Call Trace: [ 77.857558][ T5023] [ 77.857587][ T5023] __dump_stack+0x1d/0x30 [ 77.857718][ T5023] dump_stack_lvl+0x95/0xd0 [ 77.857789][ T5023] dump_stack+0x15/0x1b [ 77.857851][ T5023] should_fail_ex+0x262/0x280 [ 77.857953][ T5023] should_failslab+0x8c/0xb0 [ 77.858041][ T5023] __kmalloc_noprof+0xd4/0x4c0 [ 77.858171][ T5023] ? hash_ip_create+0x4c5/0xa50 [ 77.858303][ T5023] ? hash_ip_create+0x4c5/0xa50 [ 77.858403][ T5023] hash_ip_create+0x4c5/0xa50 [ 77.858537][ T5023] ? __nla_parse+0x40/0x60 [ 77.858594][ T5023] ? __pfx_hash_ip_create+0x10/0x10 [ 77.858704][ T5023] ip_set_create+0x3cc/0x970 [ 77.858912][ T5023] ? __nla_parse+0x40/0x60 [ 77.858972][ T5023] nfnetlink_rcv_msg+0x4e2/0x5b0 [ 77.859117][ T5023] netlink_rcv_skb+0x11e/0x220 [ 77.859219][ T5023] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 77.859359][ T5023] nfnetlink_rcv+0x15f/0x1740 [ 77.859450][ T5023] ? kmem_cache_free+0x106/0x3a0 [ 77.859544][ T5023] ? __kfree_skb+0x109/0x150 [ 77.859684][ T5023] ? nlmon_xmit+0x4f/0x60 [ 77.859770][ T5023] ? consume_skb+0x4b/0x130 [ 77.859823][ T5023] ? nlmon_xmit+0x4f/0x60 [ 77.859859][ T5023] ? dev_hard_start_xmit+0x34e/0x380 [ 77.859933][ T5023] ? __dev_queue_xmit+0x1361/0x1e90 [ 77.860064][ T5023] ? __dev_queue_xmit+0x151/0x1e90 [ 77.860165][ T5023] ? ref_tracker_free+0x380/0x3f0 [ 77.860271][ T5023] ? __netlink_deliver_tap+0x4e6/0x510 [ 77.860383][ T5023] netlink_unicast+0x5a9/0x680 [ 77.860523][ T5023] netlink_sendmsg+0x5be/0x6f0 [ 77.860631][ T5023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.860736][ T5023] ____sys_sendmsg+0x532/0x580 [ 77.860898][ T5023] ___sys_sendmsg+0x195/0x1e0 [ 77.861012][ T5023] __x64_sys_sendmsg+0xd4/0x160 [ 77.861123][ T5023] x64_sys_call+0x22ab/0x2550 [ 77.861205][ T5023] do_syscall_64+0x112/0x360 [ 77.861312][ T5023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.861461][ T5023] RIP: 0033:0x7fa22180e0d9 [ 77.861533][ T5023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.861581][ T5023] RSP: 002b:00007fa220267028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.861692][ T5023] RAX: ffffffffffffffda RBX: 00007fa221a95fa0 RCX: 00007fa22180e0d9 [ 77.861742][ T5023] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 77.861783][ T5023] RBP: 00007fa220267090 R08: 0000000000000000 R09: 0000000000000000 [ 77.861873][ T5023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.861914][ T5023] R13: 00007fa221a96038 R14: 00007fa221a95fa0 R15: 00007ffcf47c05f8 [ 77.861995][ T5023] [ 78.026782][ T5026] loop1: detected capacity change from 0 to 512 [ 78.030557][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.142014][ T5032] loop0: detected capacity change from 0 to 512 [ 78.210713][ T5017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.220413][ T5017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.239943][ T5024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.252583][ T5024] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.278487][ T5032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.288847][ T5026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.300110][ T5032] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.303718][ T5026] ext4 filesystem being mounted at /85/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.349952][ T5046] FAULT_INJECTION: forcing a failure. [ 78.349952][ T5046] name failslab, interval 1, probability 0, space 0, times 0 [ 78.363560][ T5046] CPU: 0 UID: 0 PID: 5046 Comm: syz.5.375 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.363594][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.363611][ T5046] Call Trace: [ 78.363621][ T5046] [ 78.363630][ T5046] __dump_stack+0x1d/0x30 [ 78.363662][ T5046] dump_stack_lvl+0x95/0xd0 [ 78.363729][ T5046] dump_stack+0x15/0x1b [ 78.363752][ T5046] should_fail_ex+0x262/0x280 [ 78.363793][ T5046] should_failslab+0x8c/0xb0 [ 78.363825][ T5046] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 78.363891][ T5046] ? skb_clone+0x151/0x1f0 [ 78.363953][ T5046] ? skb_clone+0x151/0x1f0 [ 78.363977][ T5046] skb_clone+0x151/0x1f0 [ 78.364000][ T5046] __netlink_deliver_tap+0x2be/0x510 [ 78.364097][ T5046] netlink_unicast+0x656/0x680 [ 78.364134][ T5046] netlink_sendmsg+0x5be/0x6f0 [ 78.364170][ T5046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.364272][ T5046] ____sys_sendmsg+0x532/0x580 [ 78.364315][ T5046] ___sys_sendmsg+0x195/0x1e0 [ 78.364363][ T5046] __x64_sys_sendmsg+0xd4/0x160 [ 78.364401][ T5046] x64_sys_call+0x22ab/0x2550 [ 78.364458][ T5046] do_syscall_64+0x112/0x360 [ 78.364502][ T5046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.364531][ T5046] RIP: 0033:0x7fda3edde0d9 [ 78.364550][ T5046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.364626][ T5046] RSP: 002b:00007fda3d837028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.364721][ T5046] RAX: ffffffffffffffda RBX: 00007fda3f065fa0 RCX: 00007fda3edde0d9 [ 78.364737][ T5046] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 78.364750][ T5046] RBP: 00007fda3d837090 R08: 0000000000000000 R09: 0000000000000000 [ 78.364763][ T5046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.364775][ T5046] R13: 00007fda3f066038 R14: 00007fda3f065fa0 R15: 00007ffd7e90deb8 [ 78.364824][ T5046] [ 78.364992][ T5046] netlink: 48 bytes leftover after parsing attributes in process `syz.5.375'. [ 78.678751][ T69] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.688047][ T69] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.706175][ T69] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.722452][ T69] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.743481][ T4756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.944765][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.956013][ T5058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.377'. [ 79.012999][ T5064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.381'. [ 79.042332][ T5064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.381'. [ 79.260883][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.295001][ T3399] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 79.305070][ T5070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.322437][ T3399] wiimote 0005:057E:0306.0001: New device registered [ 79.335279][ T5070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.344554][ T5074] udevd[5074]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 79.356139][ T3399] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 79.370111][ T5068] wiimote 0005:057E:0306.0001: Device removed [ 79.380153][ T3399] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 79.396540][ T28] kauditd_printk_skb: 540 callbacks suppressed [ 79.396558][ T28] audit: type=1400 audit(1787527977.233:5748): avc: denied { read } for pid=2967 comm="acpid" name="event4" dev="devtmpfs" ino=741 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.398098][ T3399] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 79.403018][ T28] audit: type=1400 audit(1787527977.233:5749): avc: denied { open } for pid=2967 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=741 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.468947][ T28] audit: type=1400 audit(1787527977.233:5750): avc: denied { ioctl } for pid=2967 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=741 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.514436][ T5087] netlink: 'syz.4.388': attribute type 8 has an invalid length. [ 79.523017][ T5087] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.388'. [ 79.530872][ T3399] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 79.541515][ T28] audit: type=1400 audit(1787527977.383:5751): avc: denied { create } for pid=5080 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.570354][ T5088] ip_tables: iptables: counters copy to user failed while replacing table [ 79.571758][ T28] audit: type=1400 audit(1787527977.413:5752): avc: denied { write } for pid=5080 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.599246][ T28] audit: type=1400 audit(1787527977.413:5753): avc: denied { bind } for pid=5079 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.609165][ T5087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5087 comm=syz.4.388 [ 79.637321][ T28] audit: type=1400 audit(1787527977.483:5754): avc: denied { bind } for pid=5080 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.658378][ T28] audit: type=1400 audit(1787527977.483:5755): avc: denied { write } for pid=5080 comm="syz.4.388" path="socket:[10005]" dev="sockfs" ino=10005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.682431][ T28] audit: type=1326 audit(1787527977.483:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.6.377" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9dae0d9 code=0x7fc00000 [ 79.708230][ T28] audit: type=1326 audit(1787527977.483:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.6.377" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa6d9dae0d9 code=0x7fc00000 [ 79.773764][ T5093] serio: Serial port ttyS3 [ 79.859649][ T5098] loop6: detected capacity change from 0 to 8192 [ 79.866893][ T5098] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.968270][ T5098] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 79.986108][ T5098] FAT-fs (loop6): Filesystem has been set read-only [ 79.993782][ T5098] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 80.003091][ T5098] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 80.256483][ T5113] netlink: zone id is out of range [ 80.268062][ T5113] netlink: zone id is out of range [ 80.278306][ T5113] netlink: zone id is out of range [ 80.291939][ T5113] netlink: set zone limit has 4 unknown bytes [ 80.330658][ T5113] Illegal XDP return value 640811044 on prog (id 84) dev N/A, expect packet loss! [ 80.522411][ T5125] netlink: 24 bytes leftover after parsing attributes in process `syz.5.403'. [ 80.538975][ T5125] netlink: 24 bytes leftover after parsing attributes in process `syz.5.403'. [ 80.885043][ T5141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 80.894760][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 80.914132][ T5145] loop6: detected capacity change from 0 to 4096 [ 81.105488][ T5145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.173677][ T5135] netlink: 28 bytes leftover after parsing attributes in process `syz.6.407'. [ 81.332242][ T5158] loop1: detected capacity change from 0 to 1024 [ 81.417399][ T5158] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c029, mo2=0002] [ 81.425616][ T5158] System zones: 0-1, 3-12 [ 81.430948][ T5158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.462756][ T5158] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.415: bg 0: block 216: padding at end of block bitmap is not set [ 81.482825][ T5158] EXT4-fs (loop1): Remounting filesystem read-only [ 81.497939][ T5158] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1613: inode #11: comm syz.1.415: cleanup dec ref error -28 [ 81.616706][ T5167] FAULT_INJECTION: forcing a failure. [ 81.616706][ T5167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.630139][ T5167] CPU: 0 UID: 0 PID: 5167 Comm: syz.5.418 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.630169][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.630183][ T5167] Call Trace: [ 81.630191][ T5167] [ 81.630199][ T5167] __dump_stack+0x1d/0x30 [ 81.630226][ T5167] dump_stack_lvl+0x95/0xd0 [ 81.630256][ T5167] dump_stack+0x15/0x1b [ 81.630277][ T5167] should_fail_ex+0x262/0x280 [ 81.630457][ T5167] should_fail+0xb/0x20 [ 81.630487][ T5167] should_fail_usercopy+0x1a/0x20 [ 81.630564][ T5167] _copy_to_user+0x20/0xa0 [ 81.630590][ T5167] simple_read_from_buffer+0xb5/0x130 [ 81.630625][ T5167] proc_fail_nth_read+0x10e/0x150 [ 81.630706][ T5167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.630738][ T5167] vfs_read+0x18e/0x7c0 [ 81.630760][ T5167] ? __rcu_read_unlock+0x4e/0x70 [ 81.630792][ T5167] ? __fget_files+0x184/0x1c0 [ 81.630894][ T5167] ? mutex_lock+0x57/0x90 [ 81.630924][ T5167] ksys_read+0xdc/0x1a0 [ 81.630949][ T5167] __x64_sys_read+0x40/0x50 [ 81.630973][ T5167] x64_sys_call+0x2135/0x2550 [ 81.631060][ T5167] do_syscall_64+0x112/0x360 [ 81.631130][ T5167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.631158][ T5167] RIP: 0033:0x7fda3ed9e90e [ 81.631246][ T5167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.631266][ T5167] RSP: 002b:00007fda3d836fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.631364][ T5167] RAX: ffffffffffffffda RBX: 00007fda3d8376c0 RCX: 00007fda3ed9e90e [ 81.631379][ T5167] RDX: 000000000000000f RSI: 00007fda3d8370a0 RDI: 0000000000000004 [ 81.631393][ T5167] RBP: 00007fda3d837090 R08: 0000000000000000 R09: 0000000000000000 [ 81.631409][ T5167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.631422][ T5167] R13: 00007fda3f066038 R14: 00007fda3f065fa0 R15: 00007ffd7e90deb8 [ 81.631444][ T5167] [ 81.632146][ T4756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.748549][ T5169] loop5: detected capacity change from 0 to 512 [ 81.850155][ T5169] EXT4-fs: Ignoring removed bh option [ 81.985880][ T5169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.038656][ T5169] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.065858][ T5181] loop6: detected capacity change from 0 to 512 [ 82.119777][ T4095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.170588][ T5181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.193334][ T5185] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.203361][ T5181] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.341686][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.369837][ T5185] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.530765][ T5185] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.609789][ T5200] loop1: detected capacity change from 0 to 512 [ 82.650543][ T5200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.664784][ T5200] ext4 filesystem being mounted at /98/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.675243][ T5185] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.851639][ T312] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.866096][ T312] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.875513][ T312] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.892141][ T312] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.902975][ T4756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.461661][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.508568][ T5236] FAULT_INJECTION: forcing a failure. [ 83.508568][ T5236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.537844][ T5236] CPU: 1 UID: 0 PID: 5236 Comm: syz.1.443 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.537917][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.537935][ T5236] Call Trace: [ 83.537943][ T5236] [ 83.537950][ T5236] __dump_stack+0x1d/0x30 [ 83.537983][ T5236] dump_stack_lvl+0x95/0xd0 [ 83.538014][ T5236] dump_stack+0x15/0x1b [ 83.538041][ T5236] should_fail_ex+0x262/0x280 [ 83.538084][ T5236] should_fail+0xb/0x20 [ 83.538164][ T5236] should_fail_usercopy+0x1a/0x20 [ 83.538207][ T5236] _copy_from_user+0x1c/0xb0 [ 83.538231][ T5236] keyctl_pkey_params_get_2+0x7c/0x3e0 [ 83.538270][ T5236] keyctl_pkey_e_d_s+0x54/0x260 [ 83.538338][ T5236] __se_sys_keyctl+0x5fb/0xb70 [ 83.538379][ T5236] ? vfs_write+0x850/0x9a0 [ 83.538411][ T5236] ? __fget_files+0x184/0x1c0 [ 83.538446][ T5236] ? mutex_lock+0x57/0x90 [ 83.538549][ T5236] ? mutex_unlock+0x4e/0x90 [ 83.538582][ T5236] ? fput+0x91/0xc0 [ 83.538618][ T5236] __x64_sys_keyctl+0x67/0x80 [ 83.538688][ T5236] x64_sys_call+0x1fe0/0x2550 [ 83.538722][ T5236] do_syscall_64+0x112/0x360 [ 83.538768][ T5236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.538798][ T5236] RIP: 0033:0x7f75f527e0d9 [ 83.538870][ T5236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.538889][ T5236] RSP: 002b:00007f75f3cd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 83.538915][ T5236] RAX: ffffffffffffffda RBX: 00007f75f5505fa0 RCX: 00007f75f527e0d9 [ 83.538934][ T5236] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000019 [ 83.539023][ T5236] RBP: 00007f75f3cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.539040][ T5236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.539056][ T5236] R13: 00007f75f5506038 R14: 00007f75f5505fa0 R15: 00007ffd7e7c2a78 [ 83.539078][ T5236] [ 84.021058][ T5244] loop1: detected capacity change from 0 to 1024 [ 84.231291][ T5244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.245172][ T5244] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.544369][ T28] kauditd_printk_skb: 396 callbacks suppressed [ 84.544389][ T28] audit: type=1400 audit(1787527982.383:6154): avc: denied { setopt } for pid=5243 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.615634][ T5203] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 84.679758][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.753370][ T28] audit: type=1400 audit(1787527983.593:6155): avc: denied { write } for pid=5269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.816387][ T28] audit: type=1400 audit(1787527983.633:6156): avc: denied { write } for pid=5282 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.933034][ T5279] __nla_validate_parse: 4 callbacks suppressed [ 85.933077][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 85.948092][ T5279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'. [ 86.003949][ T5287] FAULT_INJECTION: forcing a failure. [ 86.003949][ T5287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.089729][ T5287] CPU: 1 UID: 0 PID: 5287 Comm: syz.0.455 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.089766][ T5287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.089783][ T5287] Call Trace: [ 86.089792][ T5287] [ 86.089803][ T5287] __dump_stack+0x1d/0x30 [ 86.089972][ T5287] dump_stack_lvl+0x95/0xd0 [ 86.090008][ T5287] dump_stack+0x15/0x1b [ 86.090033][ T5287] should_fail_ex+0x262/0x280 [ 86.090072][ T5287] should_fail+0xb/0x20 [ 86.090111][ T5287] should_fail_usercopy+0x1a/0x20 [ 86.090154][ T5287] _copy_to_user+0x20/0xa0 [ 86.090233][ T5287] simple_read_from_buffer+0xb5/0x130 [ 86.090275][ T5287] proc_fail_nth_read+0x10e/0x150 [ 86.090362][ T5287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.090403][ T5287] vfs_read+0x18e/0x7c0 [ 86.090440][ T5287] ? __rcu_read_unlock+0x4e/0x70 [ 86.090479][ T5287] ? __fget_files+0x184/0x1c0 [ 86.090532][ T5287] ? mutex_lock+0x57/0x90 [ 86.090566][ T5287] ksys_read+0xdc/0x1a0 [ 86.090597][ T5287] __x64_sys_read+0x40/0x50 [ 86.090627][ T5287] x64_sys_call+0x2135/0x2550 [ 86.090661][ T5287] do_syscall_64+0x112/0x360 [ 86.090722][ T5287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.090752][ T5287] RIP: 0033:0x7fa2217ce90e [ 86.090769][ T5287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.090788][ T5287] RSP: 002b:00007fa220266fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.090815][ T5287] RAX: ffffffffffffffda RBX: 00007fa2202676c0 RCX: 00007fa2217ce90e [ 86.090899][ T5287] RDX: 000000000000000f RSI: 00007fa2202670a0 RDI: 0000000000000008 [ 86.090916][ T5287] RBP: 00007fa220267090 R08: 0000000000000000 R09: 0000000000000000 [ 86.090934][ T5287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.090950][ T5287] R13: 00007fa221a96038 R14: 00007fa221a95fa0 R15: 00007ffcf47c05f8 [ 86.091016][ T5287] [ 86.511656][ T28] audit: type=1400 audit(1787527984.343:6157): avc: denied { write } for pid=5292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.585255][ T28] audit: type=1400 audit(1787527984.423:6158): avc: denied { write } for pid=5306 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.970928][ T5311] syzkaller0: entered promiscuous mode [ 86.976495][ T5311] syzkaller0: entered allmulticast mode [ 87.566289][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.467'. [ 87.585392][ T5331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.467'. [ 87.768006][ T5347] netlink: 20 bytes leftover after parsing attributes in process `syz.5.471'. [ 87.809774][ T5347] netlink: 20 bytes leftover after parsing attributes in process `syz.5.471'. [ 87.832443][ T28] audit: type=1400 audit(1787527985.673:6159): avc: denied { write } for pid=5335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.855824][ T5336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.468'. [ 88.066606][ T28] audit: type=1400 audit(1787527985.873:6160): avc: denied { write } for pid=5359 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.185663][ T5363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.473'. [ 88.254199][ T5364] netlink: 40 bytes leftover after parsing attributes in process `syz.1.473'. [ 88.557272][ T5362] loop6: detected capacity change from 0 to 4096 [ 88.888025][ T5362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.913341][ T5377] ref_ctr_offset mismatch. inode: 0x233 offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 89.025542][ T28] audit: type=1400 audit(1787527986.853:6161): avc: denied { write } for pid=5344 comm="syz.6.470" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.078038][ T5362] netlink: 28 bytes leftover after parsing attributes in process `syz.6.470'. [ 89.124502][ T28] audit: type=1400 audit(1787527986.933:6162): avc: denied { write } for pid=5369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.185139][ T28] audit: type=1400 audit(1787527987.023:6163): avc: denied { write } for pid=5393 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.210628][ T5392] loop1: detected capacity change from 0 to 128 [ 89.217277][ T5392] vfat: Unknown parameter '2: (85) call pc+6 [ 89.217277][ T5392] 3: (18) r0 ' [ 89.552274][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 89.552299][ T28] audit: type=1326 audit(1787527987.383:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.6.470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9dae0d9 code=0x7fc00000 [ 89.623872][ T28] audit: type=1326 audit(1787527987.443:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.1.483" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f527e0d9 code=0x7ffc0000 [ 89.649723][ T28] audit: type=1326 audit(1787527987.443:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.1.483" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f527e0d9 code=0x7ffc0000 [ 89.675070][ T28] audit: type=1326 audit(1787527987.443:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.6.470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9dae0d9 code=0x7fc00000 [ 89.700546][ T28] audit: type=1326 audit(1787527987.443:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.6.470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9dae0d9 code=0x7fc00000 [ 89.732049][ T28] audit: type=1326 audit(1787527987.443:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.6.470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9dae0d9 code=0x7fc00000 [ 89.758725][ T28] audit: type=1326 audit(1787527987.453:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.6.470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9dae0d9 code=0x7fc00000 [ 89.785268][ T28] audit: type=1326 audit(1787527987.453:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.6.470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9dae0d9 code=0x7fc00000 [ 89.812729][ T28] audit: type=1326 audit(1787527987.453:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.6.470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9dae0d9 code=0x7fc00000 [ 89.841621][ T28] audit: type=1326 audit(1787527987.453:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.6.470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9dae0d9 code=0x7fc00000 [ 90.175681][ T4756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.331107][ T5432] FAULT_INJECTION: forcing a failure. [ 90.331107][ T5432] name failslab, interval 1, probability 0, space 0, times 0 [ 90.343829][ T5432] CPU: 1 UID: 0 PID: 5432 Comm: syz.4.493 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.343898][ T5432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.343915][ T5432] Call Trace: [ 90.343923][ T5432] [ 90.343992][ T5432] __dump_stack+0x1d/0x30 [ 90.344022][ T5432] dump_stack_lvl+0x95/0xd0 [ 90.344051][ T5432] dump_stack+0x15/0x1b [ 90.344077][ T5432] should_fail_ex+0x262/0x280 [ 90.344181][ T5432] should_failslab+0x8c/0xb0 [ 90.344214][ T5432] kmem_cache_alloc_node_noprof+0x86/0x3f0 [ 90.344244][ T5432] ? __alloc_skb+0x2e0/0x6f0 [ 90.344351][ T5432] ? __alloc_skb+0x2e0/0x6f0 [ 90.344462][ T5432] __alloc_skb+0x2e0/0x6f0 [ 90.344504][ T5432] ? __alloc_skb+0x209/0x6f0 [ 90.344549][ T5432] netlink_ack+0xfd/0x530 [ 90.344661][ T5432] ? nfnetlink_rcv+0xa41/0x1740 [ 90.344715][ T5432] nfnetlink_rcv+0x1567/0x1740 [ 90.344781][ T5432] netlink_unicast+0x5a9/0x680 [ 90.344891][ T5432] netlink_sendmsg+0x5be/0x6f0 [ 90.344940][ T5432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.344984][ T5432] ____sys_sendmsg+0x532/0x580 [ 90.345043][ T5432] ___sys_sendmsg+0x195/0x1e0 [ 90.345092][ T5432] __x64_sys_sendmsg+0xd4/0x160 [ 90.345129][ T5432] x64_sys_call+0x22ab/0x2550 [ 90.345169][ T5432] do_syscall_64+0x112/0x360 [ 90.345275][ T5432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.345322][ T5432] RIP: 0033:0x7fa63a16e0d9 [ 90.345344][ T5432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.345406][ T5432] RSP: 002b:00007fa638bc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.345477][ T5432] RAX: ffffffffffffffda RBX: 00007fa63a3f5fa0 RCX: 00007fa63a16e0d9 [ 90.345497][ T5432] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 90.345512][ T5432] RBP: 00007fa638bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.345530][ T5432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.345546][ T5432] R13: 00007fa63a3f6038 R14: 00007fa63a3f5fa0 R15: 00007ffed0c64328 [ 90.345581][ T5432] [ 90.995569][ T5449] __nla_validate_parse: 6 callbacks suppressed [ 90.995627][ T5449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'. [ 91.026443][ T5434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.494'. [ 91.038166][ T5449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'. [ 91.231351][ T5464] process 'syz.6.504' launched './file0' with NULL argv: empty string added [ 91.249500][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.504'. [ 91.260140][ T5464] bridge_slave_1: left allmulticast mode [ 91.279538][ T5464] bridge_slave_1: left promiscuous mode [ 91.285268][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.296985][ T5464] bridge_slave_0: left allmulticast mode [ 91.302692][ T5464] bridge_slave_0: left promiscuous mode [ 91.308519][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.598270][ T5483] FAULT_INJECTION: forcing a failure. [ 91.598270][ T5483] name failslab, interval 1, probability 0, space 0, times 0 [ 91.611144][ T5483] CPU: 0 UID: 0 PID: 5483 Comm: syz.4.510 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.611178][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.611195][ T5483] Call Trace: [ 91.611211][ T5483] [ 91.611255][ T5483] __dump_stack+0x1d/0x30 [ 91.611372][ T5483] dump_stack_lvl+0x95/0xd0 [ 91.611403][ T5483] dump_stack+0x15/0x1b [ 91.611423][ T5483] should_fail_ex+0x262/0x280 [ 91.611462][ T5483] should_failslab+0x8c/0xb0 [ 91.611500][ T5483] __kmalloc_noprof+0xd4/0x4c0 [ 91.611528][ T5483] ? iovec_from_user+0x84/0x200 [ 91.611593][ T5483] ? iovec_from_user+0x84/0x200 [ 91.611684][ T5483] ? __rcu_read_unlock+0x4e/0x70 [ 91.611724][ T5483] iovec_from_user+0x84/0x200 [ 91.611837][ T5483] __import_iovec+0xf3/0x530 [ 91.611862][ T5483] ? kstrtoull+0x111/0x140 [ 91.611889][ T5483] import_iovec+0x60/0x80 [ 91.611920][ T5483] vfs_writev+0xf6/0x8c0 [ 91.611949][ T5483] ? get_pid_task+0x92/0xc0 [ 91.611991][ T5483] __se_sys_pwritev2+0xfc/0x1c0 [ 91.612115][ T5483] __x64_sys_pwritev2+0x67/0x80 [ 91.612160][ T5483] x64_sys_call+0x899/0x2550 [ 91.612250][ T5483] do_syscall_64+0x112/0x360 [ 91.612298][ T5483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.612328][ T5483] RIP: 0033:0x7fa63a16e0d9 [ 91.612349][ T5483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.612371][ T5483] RSP: 002b:00007fa638b85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 91.612411][ T5483] RAX: ffffffffffffffda RBX: 00007fa63a3f6180 RCX: 00007fa63a16e0d9 [ 91.612425][ T5483] RDX: 000000000000001f RSI: 0000200000000100 RDI: 0000000000000003 [ 91.612439][ T5483] RBP: 00007fa638b85090 R08: 0000000000000000 R09: 0000000000000000 [ 91.612457][ T5483] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000001 [ 91.612474][ T5483] R13: 00007fa63a3f6218 R14: 00007fa63a3f6180 R15: 00007ffed0c64328 [ 91.612590][ T5483] [ 91.859960][ T5485] netlink: 20 bytes leftover after parsing attributes in process `syz.5.512'. [ 91.922990][ T5486] netlink: 20 bytes leftover after parsing attributes in process `syz.5.512'. [ 91.944056][ T5488] loop0: detected capacity change from 0 to 1024 [ 91.967380][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 92.046551][ T5488] EXT4-fs: Ignoring removed bh option [ 92.052703][ T5488] ext4: Unknown parameter 'euid>00000000000000000000' [ 92.089917][ T5488] bonding: no command found in bonding_masters - use +ifname or -ifname [ 92.174990][ T5481] loop6: detected capacity change from 0 to 512 [ 92.196215][ T5481] EXT4-fs: Ignoring removed bh option [ 92.435972][ T5481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.477105][ T5481] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.696832][ T4756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.795606][ T5508] FAULT_INJECTION: forcing a failure. [ 92.795606][ T5508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.821456][ T5508] CPU: 1 UID: 0 PID: 5508 Comm: syz.6.518 Not tainted syzkaller #0 PREEMPT(lazy) [ 92.821498][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.821512][ T5508] Call Trace: [ 92.821519][ T5508] [ 92.821528][ T5508] __dump_stack+0x1d/0x30 [ 92.821555][ T5508] dump_stack_lvl+0x95/0xd0 [ 92.821621][ T5508] dump_stack+0x15/0x1b [ 92.821681][ T5508] should_fail_ex+0x262/0x280 [ 92.821718][ T5508] should_fail+0xb/0x20 [ 92.821786][ T5508] should_fail_usercopy+0x1a/0x20 [ 92.821888][ T5508] _copy_from_user+0x1c/0xb0 [ 92.821914][ T5508] __sys_sendto+0x1b5/0x470 [ 92.821943][ T5508] __x64_sys_sendto+0x76/0x90 [ 92.821969][ T5508] x64_sys_call+0x200c/0x2550 [ 92.822064][ T5508] do_syscall_64+0x112/0x360 [ 92.822129][ T5508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.822174][ T5508] RIP: 0033:0x7fa6d9dae0d9 [ 92.822190][ T5508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.822208][ T5508] RSP: 002b:00007fa6d8807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 92.822311][ T5508] RAX: ffffffffffffffda RBX: 00007fa6da035fa0 RCX: 00007fa6d9dae0d9 [ 92.822343][ T5508] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 92.822358][ T5508] RBP: 00007fa6d8807090 R08: 000020000005ffe4 R09: 000000000000001c [ 92.822371][ T5508] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 92.822408][ T5508] R13: 00007fa6da036038 R14: 00007fa6da035fa0 R15: 00007ffda7b4ac58 [ 92.822434][ T5508] [ 93.529258][ T5491] kexec: Could not allocate control_code_buffer [ 94.076599][ T5510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 94.096806][ T5514] loop0: detected capacity change from 0 to 4096 [ 94.117683][ T5532] loop1: detected capacity change from 0 to 512 [ 94.124322][ T5532] EXT4-fs: Ignoring removed bh option [ 94.137857][ T5514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.242431][ T5526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.520'. [ 94.250212][ T5532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.264548][ T5532] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.384052][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.507089][ T5557] loop6: detected capacity change from 0 to 512 [ 94.617446][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'. [ 94.627133][ T5559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 94.640893][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.652833][ T5557] EXT4-fs (loop6): 1 orphan inode deleted [ 94.659026][ T5557] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.674991][ T5557] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.690586][ T37] __quota_error: 645 callbacks suppressed [ 94.690605][ T37] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 94.723107][ T37] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 1 [ 94.773940][ T28] audit: type=1400 audit(1787527992.613:6833): avc: denied { write } for pid=5556 comm="syz.6.534" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.832297][ T5572] loop0: detected capacity change from 0 to 512 [ 94.841792][ T28] audit: type=1400 audit(1787527992.683:6834): avc: denied { read } for pid=5556 comm="syz.6.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.875908][ T5572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.891201][ T5572] ext4 filesystem being mounted at /85/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.907019][ T28] audit: type=1400 audit(1787527992.753:6835): avc: denied { write } for pid=5556 comm="syz.6.534" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.938287][ T28] audit: type=1400 audit(1787527992.773:6836): avc: denied { write } for pid=5567 comm="syz.0.538" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.081924][ T28] audit: type=1326 audit(1787527992.923:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.4.541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa63a16e0d9 code=0x0 [ 95.218504][ T4756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.238118][ T5587] ip_tables: iptables: counters copy to user failed while replacing table [ 95.574481][ T5598] loop5: detected capacity change from 0 to 128 [ 95.583623][ T5598] vfat: Unknown parameter 'utf8×Î…' [ 95.665865][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.801211][ T5604] loop5: detected capacity change from 0 to 512 [ 95.855902][ T28] audit: type=1400 audit(1787527993.693:6838): avc: denied { mounton } for pid=5611 comm="syz.4.552" path="/124/file0" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.890096][ T5604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.903392][ T5604] ext4 filesystem being mounted at /72/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.920260][ T28] audit: type=1400 audit(1787527993.763:6839): avc: denied { write } for pid=5599 comm="syz.5.547" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.044479][ T5624] netlink: 'syz.0.555': attribute type 15 has an invalid length. [ 96.218994][ T28] audit: type=1326 audit(1787527994.043:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.6.545" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9dae0d9 code=0x7fc00000 [ 96.244564][ T5627] loop0: detected capacity change from 0 to 512 [ 96.285941][ T5627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.298592][ T5627] ext4 filesystem being mounted at /92/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.329546][ T28] audit: type=1400 audit(1787527994.163:6841): avc: denied { map } for pid=5632 comm="syz.4.558" path="socket:[12204]" dev="sockfs" ino=12204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 96.755069][ T4095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.922388][ T5660] lo: entered allmulticast mode [ 96.929217][ T5659] lo: left allmulticast mode [ 97.096593][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.494313][ T5675] FAULT_INJECTION: forcing a failure. [ 97.494313][ T5675] name failslab, interval 1, probability 0, space 0, times 0 [ 97.520401][ T5675] CPU: 1 UID: 0 PID: 5675 Comm: syz.0.573 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.520435][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.520455][ T5675] Call Trace: [ 97.520464][ T5675] [ 97.520474][ T5675] __dump_stack+0x1d/0x30 [ 97.520507][ T5675] dump_stack_lvl+0x95/0xd0 [ 97.520536][ T5675] dump_stack+0x15/0x1b [ 97.520623][ T5675] should_fail_ex+0x262/0x280 [ 97.520730][ T5675] should_failslab+0x8c/0xb0 [ 97.520770][ T5675] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 97.520803][ T5675] ? skb_clone+0x151/0x1f0 [ 97.520830][ T5675] ? skb_clone+0x151/0x1f0 [ 97.520889][ T5675] skb_clone+0x151/0x1f0 [ 97.520986][ T5675] __netlink_deliver_tap+0x2be/0x510 [ 97.521035][ T5675] netlink_sendskb+0x126/0x150 [ 97.521082][ T5675] netlink_unicast+0x287/0x680 [ 97.521124][ T5675] netlink_ack+0x4fe/0x530 [ 97.521196][ T5675] netlink_rcv_skb+0x18d/0x220 [ 97.521237][ T5675] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 97.521283][ T5675] xfrm_netlink_rcv+0x48/0x60 [ 97.521334][ T5675] netlink_unicast+0x5a9/0x680 [ 97.521376][ T5675] netlink_sendmsg+0x5be/0x6f0 [ 97.521425][ T5675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.521576][ T5675] ____sys_sendmsg+0x532/0x580 [ 97.521612][ T5675] ___sys_sendmsg+0x195/0x1e0 [ 97.521661][ T5675] __x64_sys_sendmsg+0xd4/0x160 [ 97.521705][ T5675] x64_sys_call+0x22ab/0x2550 [ 97.521759][ T5675] do_syscall_64+0x112/0x360 [ 97.521800][ T5675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.521831][ T5675] RIP: 0033:0x7fa22180e0d9 [ 97.521852][ T5675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.521879][ T5675] RSP: 002b:00007fa220267028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.521985][ T5675] RAX: ffffffffffffffda RBX: 00007fa221a95fa0 RCX: 00007fa22180e0d9 [ 97.522006][ T5675] RDX: 0000000000044050 RSI: 0000200000000180 RDI: 0000000000000003 [ 97.522024][ T5675] RBP: 00007fa220267090 R08: 0000000000000000 R09: 0000000000000000 [ 97.522042][ T5675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.522119][ T5675] R13: 00007fa221a96038 R14: 00007fa221a95fa0 R15: 00007ffcf47c05f8 [ 97.522139][ T5675] [ 97.523576][ T5669] loop5: detected capacity change from 0 to 512 [ 97.744326][ T5678] loop0: detected capacity change from 0 to 164 [ 97.747063][ T5678] Unable to read rock-ridge attributes [ 97.765364][ T5678] __nla_validate_parse: 6 callbacks suppressed [ 97.765382][ T5678] netlink: 76 bytes leftover after parsing attributes in process `syz.0.574'. [ 97.774296][ T5679] Unable to read rock-ridge attributes [ 97.829581][ T5669] EXT4-fs: Mount option(s) incompatible with ext2 [ 97.906744][ T5678] Unable to read rock-ridge attributes [ 97.972929][ T5678] xt_CT: No such helper "netbios-ns" [ 98.061353][ T5684] FAULT_INJECTION: forcing a failure. [ 98.061353][ T5684] name failslab, interval 1, probability 0, space 0, times 0 [ 98.080040][ T5684] CPU: 0 UID: 0 PID: 5684 Comm: syz.6.576 Not tainted syzkaller #0 PREEMPT(lazy) [ 98.080091][ T5684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.080105][ T5684] Call Trace: [ 98.080190][ T5684] [ 98.080201][ T5684] __dump_stack+0x1d/0x30 [ 98.080229][ T5684] dump_stack_lvl+0x95/0xd0 [ 98.080287][ T5684] dump_stack+0x15/0x1b [ 98.080312][ T5684] should_fail_ex+0x262/0x280 [ 98.080379][ T5684] should_failslab+0x8c/0xb0 [ 98.080403][ T5684] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 98.080428][ T5684] ? security_file_alloc+0x32/0xf0 [ 98.080538][ T5684] ? security_file_alloc+0x32/0xf0 [ 98.080566][ T5684] security_file_alloc+0x32/0xf0 [ 98.080691][ T5684] init_file+0x5b/0x1b0 [ 98.080731][ T5684] alloc_empty_file+0x85/0x1e0 [ 98.080764][ T5684] path_openat+0x50/0x10d0 [ 98.080794][ T5684] ? irqentry_exit+0x58f/0x610 [ 98.080883][ T5684] do_file_open+0x16c/0x290 [ 98.080927][ T5684] io_openat2+0x2bc/0x450 [ 98.080973][ T5684] io_openat+0x1b/0x30 [ 98.081009][ T5684] __io_issue_sqe+0xfd/0x2e0 [ 98.081104][ T5684] io_issue_sqe+0x1e7/0xb80 [ 98.081128][ T5684] ? io_issue_sqe+0x1/0xb80 [ 98.081153][ T5684] io_submit_sqes+0x7e1/0x1180 [ 98.081189][ T5684] __se_sys_io_uring_enter+0x25c/0xf90 [ 98.081256][ T5684] ? tick_program_event+0x79/0xc0 [ 98.081289][ T5684] ? _raw_spin_unlock+0x9/0x30 [ 98.081308][ T5684] ? __hrtimer_rearm_deferred+0x571/0x650 [ 98.081406][ T5684] __x64_sys_io_uring_enter+0x78/0x90 [ 98.081507][ T5684] x64_sys_call+0x1780/0x2550 [ 98.081618][ T5684] do_syscall_64+0x112/0x360 [ 98.081656][ T5684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.081682][ T5684] RIP: 0033:0x7fa6d9dae0d9 [ 98.081699][ T5684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.081773][ T5684] RSP: 002b:00007fa6d8807028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 98.081800][ T5684] RAX: ffffffffffffffda RBX: 00007fa6da035fa0 RCX: 00007fa6d9dae0d9 [ 98.081818][ T5684] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 98.081835][ T5684] RBP: 00007fa6d8807090 R08: 0000000000000000 R09: 0000000000000000 [ 98.081864][ T5684] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 98.081881][ T5684] R13: 00007fa6da036038 R14: 00007fa6da035fa0 R15: 00007ffda7b4ac58 [ 98.081903][ T5684] [ 98.435483][ T5693] loop0: detected capacity change from 0 to 512 [ 98.458034][ T5669] vfat: Unknown parameter ' P÷Íbš[ÓiQ¦2ÿý¶õú#âÄÌ¿_eSlP?' [ 98.530286][ T5693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.535761][ T5698] tun0: tun_chr_ioctl cmd 1074025677 [ 98.542916][ T5693] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.558964][ T5698] tun0: linktype set to 823 [ 98.568024][ T5698] tun0: tun_chr_ioctl cmd 1074025677 [ 98.573422][ T5698] tun0: linktype set to 264 [ 98.579552][ T5693] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 98.657770][ T5714] netlink: 24 bytes leftover after parsing attributes in process `syz.6.586'. [ 98.670478][ T5714] netlink: 24 bytes leftover after parsing attributes in process `syz.6.586'. [ 98.782057][ T3296] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 98.942715][ T5731] FAULT_INJECTION: forcing a failure. [ 98.942715][ T5731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.993500][ T5731] CPU: 1 UID: 0 PID: 5731 Comm: syz.1.591 Not tainted syzkaller #0 PREEMPT(lazy) [ 98.993531][ T5731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.993548][ T5731] Call Trace: [ 98.993556][ T5731] [ 98.993566][ T5731] __dump_stack+0x1d/0x30 [ 98.993598][ T5731] dump_stack_lvl+0x95/0xd0 [ 98.993628][ T5731] dump_stack+0x15/0x1b [ 98.993734][ T5731] should_fail_ex+0x262/0x280 [ 98.993771][ T5731] should_fail+0xb/0x20 [ 98.993799][ T5731] should_fail_usercopy+0x1a/0x20 [ 98.993853][ T5731] _copy_from_iter+0xcc/0xe70 [ 98.993895][ T5731] ? __alloc_skb+0x516/0x6f0 [ 98.993952][ T5731] ? __alloc_skb+0x209/0x6f0 [ 98.994067][ T5731] netlink_sendmsg+0x4a4/0x6f0 [ 98.994111][ T5731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.994156][ T5731] ____sys_sendmsg+0x532/0x580 [ 98.994208][ T5731] ___sys_sendmsg+0x195/0x1e0 [ 98.994253][ T5731] __x64_sys_sendmsg+0xd4/0x160 [ 98.994305][ T5731] x64_sys_call+0x22ab/0x2550 [ 98.994346][ T5731] do_syscall_64+0x112/0x360 [ 98.994460][ T5731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.994490][ T5731] RIP: 0033:0x7f75f527e0d9 [ 98.994526][ T5731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.994545][ T5731] RSP: 002b:00007f75f3cd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.994617][ T5731] RAX: ffffffffffffffda RBX: 00007f75f5505fa0 RCX: 00007f75f527e0d9 [ 98.994634][ T5731] RDX: 0000000004000800 RSI: 0000200000006040 RDI: 0000000000000003 [ 98.994647][ T5731] RBP: 00007f75f3cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.994662][ T5731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.994675][ T5731] R13: 00007f75f5506038 R14: 00007f75f5505fa0 R15: 00007ffd7e7c2a78 [ 98.994701][ T5731] [ 99.193576][ T3296] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 99.726624][ T5754] set_capacity_and_notify: 1 callbacks suppressed [ 99.726645][ T5754] loop6: detected capacity change from 0 to 128 [ 99.739860][ T5754] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.752004][ T5754] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.788267][ T28] kauditd_printk_skb: 152 callbacks suppressed [ 99.788286][ T28] audit: type=1326 audit(1787527997.623:6994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.6.602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9dae0d9 code=0x0 [ 99.926826][ T28] audit: type=1400 audit(1787527997.763:6995): avc: denied { mount } for pid=5761 comm="syz.5.604" name="/" dev="autofs" ino=13480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 99.997034][ T5770] loop1: detected capacity change from 0 to 512 [ 100.035090][ T5770] EXT4-fs: dax option not supported [ 100.132832][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.146743][ T5776] loop5: detected capacity change from 0 to 1024 [ 100.167840][ T312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.262944][ T312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.280488][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 100.289390][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'. [ 100.395433][ T312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.414955][ T28] audit: type=1326 audit(1787527998.253:6996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a16e0d9 code=0x7ffc0000 [ 100.452871][ T28] audit: type=1326 audit(1787527998.253:6997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a16e0d9 code=0x7ffc0000 [ 100.478347][ T28] audit: type=1326 audit(1787527998.253:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a16e0d9 code=0x7ffc0000 [ 100.498966][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.503657][ T28] audit: type=1326 audit(1787527998.253:6999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa63a16e0d9 code=0x7ffc0000 [ 100.510962][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.543644][ T5780] bridge_slave_0: entered allmulticast mode [ 100.558204][ T5780] bridge_slave_0: entered promiscuous mode [ 100.561866][ T28] audit: type=1326 audit(1787527998.263:7000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a16e0d9 code=0x7ffc0000 [ 100.566704][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.596642][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.601653][ T28] audit: type=1326 audit(1787527998.263:7001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a16e0d9 code=0x7ffc0000 [ 100.603943][ T5780] bridge_slave_1: entered allmulticast mode [ 100.635660][ T5780] bridge_slave_1: entered promiscuous mode [ 100.639727][ T28] audit: type=1326 audit(1787527998.263:7002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a16e0d9 code=0x7ffc0000 [ 100.680083][ T28] audit: type=1326 audit(1787527998.263:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a16e0d9 code=0x7ffc0000 [ 100.687429][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.715789][ T5807] syz.1.614 uses obsolete (PF_INET,SOCK_PACKET) [ 100.741299][ T312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.765410][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.775382][ T5807] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.826403][ T5780] team0: Port device team_slave_0 added [ 100.834624][ T5780] team0: Port device team_slave_1 added [ 100.861579][ T5812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'. [ 100.890859][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.906271][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.940099][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.951661][ T5816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'. [ 100.961897][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.971534][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.007298][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.034369][ T5821] loop6: detected capacity change from 0 to 512 [ 101.041101][ T5821] EXT4-fs: Ignoring removed orlov option [ 101.047618][ T5821] ext4: Bad value for 'data' [ 101.137285][ T5780] hsr_slave_0: entered promiscuous mode [ 101.143454][ T5780] hsr_slave_1: entered promiscuous mode [ 101.178054][ T312] bridge_slave_1: left allmulticast mode [ 101.183859][ T312] bridge_slave_1: left promiscuous mode [ 101.189631][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.208391][ T312] bridge_slave_0: left allmulticast mode [ 101.219028][ T312] bridge_slave_0: left promiscuous mode [ 101.235194][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.317509][ T312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.328928][ T312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.338843][ T312] bond0 (unregistering): Released all slaves [ 101.346963][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 101.393155][ T312] IPVS: stopping master sync thread 4237 ... [ 101.411742][ T312] hsr_slave_0: left promiscuous mode [ 101.424920][ T312] hsr_slave_1: left promiscuous mode [ 101.439456][ T312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.453577][ T5847] loop6: detected capacity change from 0 to 512 [ 101.462929][ T312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.481093][ T312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.496954][ T5847] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 101.507102][ T312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.517197][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 101.519569][ T5847] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #11: comm syz.6.619: corrupted inode contents [ 101.525052][ C0] EXT4-fs (loop6): initial error at time 1787527999: mb_free_blocks:2049 [ 101.536686][ T5847] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.545183][ C0] : inode 11: block 64 [ 101.558429][ C0] EXT4-fs (loop6): last error at time 1787527999: ext4_do_update_inode:5801: inode 11 [ 101.599662][ T5847] EXT4-fs error (device loop6): ext4_dirty_inode:6731: inode #11: comm syz.6.619: mark_inode_dirty error [ 101.612906][ T312] veth1_macvtap: left promiscuous mode [ 101.619038][ T312] veth0_macvtap: left promiscuous mode [ 101.624807][ T312] veth1_vlan: left promiscuous mode [ 101.630672][ T5847] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.630941][ T5847] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.619: invalid indirect mapped block 1 (level 1) [ 101.653593][ T312] veth0_vlan: left promiscuous mode [ 101.660418][ T5847] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.660858][ T5847] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #11: comm syz.6.619: corrupted inode contents [ 101.715865][ T5847] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.718309][ T5847] EXT4-fs error (device loop6) in ext4_orphan_del:304: Corrupt filesystem [ 101.744951][ T5847] loop6: lost filesystem error report for type 5 error -117 [ 101.762518][ T5847] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #11: comm syz.6.619: corrupted inode contents [ 101.790923][ T5847] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.807893][ T5847] EXT4-fs error (device loop6): ext4_truncate:4721: inode #11: comm syz.6.619: mark_inode_dirty error [ 101.828028][ T5847] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.830346][ T312] team0 (unregistering): Port device team_slave_1 removed [ 101.849925][ T5847] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 101.858846][ T5847] loop6: lost filesystem error report for type 5 error -117 [ 101.859647][ T312] team0 (unregistering): Port device team_slave_0 removed [ 101.876785][ T5847] EXT4-fs (loop6): 1 truncate cleaned up [ 101.885063][ T5847] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.928803][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 101.987983][ T5780] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 101.999593][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.012629][ T5780] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 102.028593][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.037757][ T5780] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 102.088113][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.095960][ T5780] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 102.104463][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.155553][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.167541][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.180970][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.188055][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.196491][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.203546][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.254531][ T5780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.305450][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.351090][ T5885] smpboot: CPU 1 is now offline [ 102.382592][ T5869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.623'. [ 102.403436][ T4756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.535368][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 102.585863][ T312] IPVS: stop unused estimator thread 0... [ 102.591939][ T5890] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 102.614780][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.833534][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 102.855387][ T5935] loop1: detected capacity change from 0 to 1764 [ 102.941335][ T5780] veth0_vlan: entered promiscuous mode [ 102.961843][ T5780] veth1_vlan: entered promiscuous mode [ 102.999367][ T5780] veth0_macvtap: entered promiscuous mode [ 103.043911][ T5780] veth1_macvtap: entered promiscuous mode [ 103.119105][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.144210][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.180372][ T5954] loop6: detected capacity change from 0 to 512 [ 103.222747][ T312] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.235837][ T312] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.248345][ T5954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.262436][ T5954] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.381142][ T2114] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.400856][ T2114] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.588754][ T5979] FAULT_INJECTION: forcing a failure. [ 103.588754][ T5979] name failslab, interval 1, probability 0, space 0, times 0 [ 103.621768][ T5979] CPU: 1 UID: 0 PID: 5979 Comm: syz.5.640 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.621797][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.621810][ T5979] Call Trace: [ 103.621817][ T5979] [ 103.621900][ T5979] __dump_stack+0x1d/0x30 [ 103.621931][ T5979] dump_stack_lvl+0x95/0xd0 [ 103.621953][ T5979] dump_stack+0x15/0x1b [ 103.621975][ T5979] should_fail_ex+0x262/0x280 [ 103.622053][ T5979] should_failslab+0x8c/0xb0 [ 103.622083][ T5979] __kmalloc_node_track_caller_noprof+0xd6/0x4e0 [ 103.622118][ T5979] ? sidtab_sid2str_get+0xa0/0x130 [ 103.622210][ T5979] ? sidtab_sid2str_get+0xa0/0x130 [ 103.622262][ T5979] kmemdup_noprof+0x2b/0x70 [ 103.622306][ T5979] sidtab_sid2str_get+0xa0/0x130 [ 103.622390][ T5979] security_sid_to_context_core+0x179/0x2d0 [ 103.622424][ T5979] security_sid_to_context+0x27/0x40 [ 103.622451][ T5979] selinux_lsmprop_to_secctx+0x67/0xf0 [ 103.622490][ T5979] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 103.622547][ T5979] audit_log_subj_ctx+0xa4/0x3e0 [ 103.622655][ T5979] audit_log_task_context+0x48/0x70 [ 103.622677][ T5979] audit_log_task+0xf3/0x240 [ 103.622710][ T5979] audit_seccomp+0x6a/0x110 [ 103.622757][ T5979] __seccomp_filter+0x909/0x1360 [ 103.622827][ T5979] ? __fget_files+0x184/0x1c0 [ 103.622862][ T5979] ? xfd_validate_state+0x45/0xf0 [ 103.622900][ T5979] __seccomp_permit_syscall+0x7d/0x150 [ 103.623013][ T5979] do_syscall_64+0xca/0x360 [ 103.623049][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.623071][ T5979] RIP: 0033:0x7fda3edde0d9 [ 103.623155][ T5979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.623174][ T5979] RSP: 002b:00007fda3d837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 103.623273][ T5979] RAX: ffffffffffffffda RBX: 00007fda3f065fa0 RCX: 00007fda3edde0d9 [ 103.623289][ T5979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 103.623302][ T5979] RBP: 00007fda3d837090 R08: 0000000000000000 R09: 0000000000000000 [ 103.623344][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.623358][ T5979] R13: 00007fda3f066038 R14: 00007fda3f065fa0 R15: 00007ffd7e90deb8 [ 103.623384][ T5979] [ 104.013128][ T6003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.032316][ T4756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.178749][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 104.193337][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 104.264282][ T6030] netlink: 'syz.4.658': attribute type 15 has an invalid length. [ 104.281494][ T6032] FAULT_INJECTION: forcing a failure. [ 104.281494][ T6032] name failslab, interval 1, probability 0, space 0, times 0 [ 104.318887][ T6032] CPU: 0 UID: 0 PID: 6032 Comm: syz.1.659 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.318964][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.318981][ T6032] Call Trace: [ 104.318989][ T6032] [ 104.318999][ T6032] __dump_stack+0x1d/0x30 [ 104.319032][ T6032] dump_stack_lvl+0x95/0xd0 [ 104.319062][ T6032] dump_stack+0x15/0x1b [ 104.319159][ T6032] should_fail_ex+0x262/0x280 [ 104.319240][ T6032] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 104.319321][ T6032] should_failslab+0x8c/0xb0 [ 104.319374][ T6032] kmem_cache_alloc_lru_noprof+0x81/0x3e0 [ 104.319409][ T6032] ? debugfs_alloc_inode+0x34/0x40 [ 104.319446][ T6032] ? debugfs_alloc_inode+0x34/0x40 [ 104.319551][ T6032] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 104.319663][ T6032] debugfs_alloc_inode+0x34/0x40 [ 104.319712][ T6032] alloc_inode+0x40/0x170 [ 104.319764][ T6032] new_inode+0x1d/0xe0 [ 104.319820][ T6032] __debugfs_create_file+0x97/0x2b0 [ 104.319955][ T6032] debugfs_create_file_full+0x3f/0x60 [ 104.320000][ T6032] ? __pfx_ipoib_setup_common+0x10/0x10 [ 104.320038][ T6032] ref_tracker_dir_debugfs+0x10e/0x220 [ 104.320158][ T6032] alloc_netdev_mqs+0x1a9/0xa90 [ 104.320192][ T6032] rtnl_create_link+0x239/0x720 [ 104.320273][ T6032] rtnl_newlink_create+0x17a/0x4a0 [ 104.320380][ T6032] rtnl_newlink+0x1255/0x1510 [ 104.320419][ T6032] ? __siphash_unaligned+0x185/0x2d0 [ 104.320468][ T6032] ? __memcg_slab_free_hook+0x10f/0x2f0 [ 104.320528][ T6032] ? __rcu_read_unlock+0x4e/0x70 [ 104.320566][ T6032] ? avc_has_perm_noaudit+0xa3/0x120 [ 104.320748][ T6032] ? cred_has_capability+0x224/0x2a0 [ 104.320792][ T6032] ? selinux_capable+0x31/0x40 [ 104.320825][ T6032] ? security_capable+0x7b/0x90 [ 104.320920][ T6032] ? ns_capable+0x80/0xb0 [ 104.320946][ T6032] ? __pfx_rtnl_newlink+0x10/0x10 [ 104.320984][ T6032] rtnetlink_rcv_msg+0x64b/0x720 [ 104.321048][ T6032] netlink_rcv_skb+0x11e/0x220 [ 104.321089][ T6032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.321134][ T6032] rtnetlink_rcv+0x1c/0x30 [ 104.321253][ T6032] netlink_unicast+0x5a9/0x680 [ 104.321293][ T6032] netlink_sendmsg+0x5be/0x6f0 [ 104.321370][ T6032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.321414][ T6032] ____sys_sendmsg+0x532/0x580 [ 104.321509][ T6032] ___sys_sendmsg+0x195/0x1e0 [ 104.321556][ T6032] __x64_sys_sendmsg+0xd4/0x160 [ 104.321591][ T6032] x64_sys_call+0x22ab/0x2550 [ 104.321625][ T6032] do_syscall_64+0x112/0x360 [ 104.321705][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.321759][ T6032] RIP: 0033:0x7f75f527e0d9 [ 104.321780][ T6032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.321805][ T6032] RSP: 002b:00007f75f3cd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.321855][ T6032] RAX: ffffffffffffffda RBX: 00007f75f5505fa0 RCX: 00007f75f527e0d9 [ 104.321875][ T6032] RDX: 0000000004000044 RSI: 0000200000000440 RDI: 0000000000000003 [ 104.321893][ T6032] RBP: 00007f75f3cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.321965][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.321982][ T6032] R13: 00007f75f5506038 R14: 00007f75f5505fa0 R15: 00007ffd7e7c2a78 [ 104.322073][ T6032] [ 104.322361][ T6032] debugfs: out of free dentries, can not create file 'netdev@ffff8881539ec5e0' [ 104.588540][ T6037] loop7: detected capacity change from 0 to 8192 [ 104.703284][ T6037] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.774882][ T6045] loop6: detected capacity change from 0 to 512 [ 104.789725][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.661'. [ 104.807366][ T6045] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 104.827300][ T6045] EXT4-fs (loop6): group descriptors corrupted! [ 104.857263][ T28] kauditd_printk_skb: 231 callbacks suppressed [ 104.857280][ T28] audit: type=1400 audit(1787528002.663:7234): avc: denied { bind } for pid=6041 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.137350][ T6056] netlink: 20 bytes leftover after parsing attributes in process `syz.5.666'. [ 105.149975][ T28] audit: type=1400 audit(1787528002.983:7235): avc: denied { listen } for pid=6041 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.151823][ T6056] netlink: 20 bytes leftover after parsing attributes in process `syz.5.666'. [ 105.181777][ T28] audit: type=1400 audit(1787528002.983:7236): avc: denied { setopt } for pid=6041 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.207709][ T6058] loop6: detected capacity change from 0 to 512 [ 105.264140][ T5780] ================================================================== [ 105.272291][ T5780] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 105.279684][ T5780] [ 105.282025][ T5780] read-write to 0xffff88810e25f470 of 8 bytes by interrupt on cpu 0: [ 105.290111][ T5780] __xa_clear_mark+0xf5/0x1e0 [ 105.294813][ T5780] __folio_end_writeback+0xe7/0x530 [ 105.300078][ T5780] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 105.306368][ T5780] folio_end_writeback+0x1c/0x70 [ 105.311357][ T5780] mpage_write_end_io+0x245/0x4c0 [ 105.316422][ T5780] bio_endio+0x390/0x570 [ 105.320704][ T5780] blk_update_request+0x33a/0x710 [ 105.325779][ T5780] blk_mq_end_request+0x26/0x50 [ 105.330679][ T5780] lo_complete_rq+0x98/0x130 [ 105.335302][ T5780] blk_done_softirq+0x77/0xb0 [ 105.340013][ T5780] handle_softirqs+0xcc/0x2a0 [ 105.344716][ T5780] run_ksoftirqd+0x1c/0x30 [ 105.349174][ T5780] smpboot_thread_fn+0x32f/0x520 [ 105.354177][ T5780] kthread+0x223/0x270 [ 105.358280][ T5780] ret_from_fork+0x146/0x330 [ 105.362918][ T5780] ret_from_fork_asm+0x1a/0x30 [ 105.364808][ T6060] netlink: 20 bytes leftover after parsing attributes in process `syz.5.668'. [ 105.367720][ T5780] [ 105.367730][ T5780] read to 0xffff88810e25f470 of 8 bytes by task 5780 on cpu 1: [ 105.367749][ T5780] xas_find_marked+0x211/0x650 [ 105.367769][ T5780] filemap_get_folios_tag+0xf7/0x400 [ 105.367802][ T5780] filemap_fdatawait_keep_errors+0x6c/0x190 [ 105.402514][ T5780] sync_inodes_sb+0x424/0x4d0 [ 105.407311][ T5780] sync_filesystem+0x108/0x190 [ 105.412146][ T5780] generic_shutdown_super+0x4c/0x220 [ 105.417459][ T5780] kill_block_super+0x2d/0xb0 [ 105.422189][ T5780] deactivate_locked_super+0x75/0x200 [ 105.427601][ T5780] deactivate_super+0x9a/0xb0 [ 105.432303][ T5780] cleanup_mnt+0x2c3/0x340 [ 105.436749][ T5780] __cleanup_mnt+0x19/0x20 [ 105.441195][ T5780] task_work_run+0x130/0x1a0 [ 105.445824][ T5780] exit_to_user_mode_loop+0x1e4/0x8c0 [ 105.451243][ T5780] do_syscall_64+0x212/0x360 [ 105.455877][ T5780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.461810][ T5780] [ 105.464152][ T5780] value changed: 0xffffe00000000000 -> 0xe000000000000000 [ 105.467001][ T6060] netlink: 20 bytes leftover after parsing attributes in process `syz.5.668'. [ 105.471281][ T5780] [ 105.471288][ T5780] Reported by Kernel Concurrency Sanitizer on: [ 105.488645][ T5780] CPU: 1 UID: 0 PID: 5780 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 105.498144][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.508230][ T5780] ================================================================== [ 105.581261][ T6058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.595914][ T6058] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.618180][ T28] audit: type=1400 audit(1787528003.453:7237): avc: denied { write } for pid=6053 comm="syz.6.665" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.709603][ T6058] netlink: 92 bytes leftover after parsing attributes in process `syz.6.665'. [ 105.968669][ T4756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.705197][ T28] audit: type=1400 audit(1787528010.543:7238): avc: denied { write } for pid=6071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.738857][ T28] audit: type=1400 audit(1787528010.583:7239): avc: denied { write } for pid=6082 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.252841][ T28] audit: type=1400 audit(1787528011.093:7240): avc: denied { write } for pid=6085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.286556][ T28] audit: type=1400 audit(1787528011.123:7241): avc: denied { write } for pid=6096 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.507838][ T28] audit: type=1400 audit(1787528012.353:7242): avc: denied { write } for pid=6099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.542320][ T28] audit: type=1400 audit(1787528012.383:7243): avc: denied { write } for pid=6110 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1