last executing test programs: 2m15.303824096s ago: executing program 2 (id=82): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x100}}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0xa}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 2m13.08632095s ago: executing program 2 (id=88): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000002800), 0x3fc3e4d6, 0x101400) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000340)}) creat(&(0x7f0000000240)='./config\x00', 0x20) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x84, &(0x7f0000000140)) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='keyA keyB 2000000000 0 0 outhandle outtoken\n', 0x2e) write(r1, &(0x7f0000000180)='keyB keyA 2000000000 0 0 outhandle outtok', 0x29) (fail_nth: 2) 2m12.838327456s ago: executing program 0 (id=91): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000011c0), 0x0, 0x4000800) fsopen(&(0x7f0000000280)='devpts\x00', 0x0) r0 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r2, @ANYBLOB="18000880"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 2m12.722586849s ago: executing program 2 (id=93): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x100}}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x80002, 0x0) pread64(r1, &(0x7f00000016c0)=""/172, 0xfffffe87, 0x5) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x2, 0x9}, {0x200, 0x8}]}, 0x14, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x3, 0x2, 0xfff6, 0x0, 0x0, 0x0, 0x9b, 0x4, 0x3, 0x0, 0x0, 0x2, 0x6, 0x44, 0x0, [0x0, 0x800001]}}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) socket(0x10, 0x803, 0x0) unshare(0x2c020400) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 2m12.545425573s ago: executing program 0 (id=95): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) 2m12.348658978s ago: executing program 0 (id=98): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x8000000000, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x800000, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in=@broadcast, 0x4, 0x3, 0x0, 0x0, 0xfffffc01, 0x5001, 0x6}}, 0xe8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a80)={@fallback, 0xffffffffffffffff, 0x11}, 0x20) listen(r2, 0x0) r3 = memfd_create(&(0x7f0000002180)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZe8z\xb0\x11X\x0e\xa1\b\x00\x98S7\xc9\xcc\xd8v\xe2}KN\x0eI]\xcfO\xb90=U\x80\xc9&\xc7\xc0`@\x1eqq\x0f\x9b=\x9eK\xae9\xed\x05_\xa9_\x8c55vW&\xc0\xd0\x9d\xff\xbc\xb66\x9ey:\xbdt>V\xe5\x97c\xb8*\xe8;+TIRN\xf5%\x1e\t\xca0 \xbe0\x14\x89\x8d\x80\xca\xad\x17\r\xd1\x95\xe5\x8c\xc3r\xde\x0e\x06Ox\xfb2m\x8c\r%\xe4`\x9eOQ\x97\xa0\x17\x05$\xe0\xb8\xf5-\xd4;\a)\xf3\xe8\x9a\x91\xa9$&\xe7|\xaf\xfc6\xd70\x9e\x88Cb\xaf<\"\xca\x80\xcfD^\x1a9\xff\'\x86\x87Q\xd81\xcc\x80\xf4\x93\x9e\xc3\xce\b\xfc*\xa4\xd7\xcf\x01\xd2\xf9\xf5\x83\x04\xfa/Sp;\xd2-\x1afq)\x16#\xa6\xa8\xa9\xae\x0f\x8b\xb5\xaarH\x87S\x8e A\xb3\xca\xcc\x97\xef\x14\xe3G1\xad\xbd\xfe\xa9\xc9\xc1\x87 \xc2MV\x8boM\x83\xe6\x01\xc4!-\x12\x06\x1e\xefpf{\xfcI`\xec\x95J\\z\\]\x16\xf9\xfe\xc8l/h\xae\xe3I\xdf\xb3\x8e\xdaH\x17\xbc\x8c\x9b\xe2\x84\t\x00\x00\x80\x00\x00\x00\x00q\xf8A\x01\x80\xb5\xe2\x8bT\xa1\xd6\n\x17\xc6\xdd\x88J_\xd7\tI%\'\x0f\'\xbd\x15\xbf\x1f\xf8\x00\xb6k\xab\xecz\xa8(\x92\x82\x85=\xbe\xed}\x18\xc2\xc2\xf5\x9b\xd0\xc1\xd8\x1e.\xfe\x1bDWM\xef\xd9\xe5\x0f\xcb5\xcd\xf3\x96:\x1a\xe0WOZ\xbb\xea_\xfc\f\xfd\xb2\xc1L.\xd5\xcb,\x1cr{!99\xea\xbb\xad\xa6\x1b\xad_\r\x10(\xa6C\xaf!=\x9d\xf1\\\x9d\xa0\xd3|\nS\x18\xfa\xfd\x14h\xba\b\x91.\xe2G\\gR\fc$\xe6\v\xf6}\x1ca\xd2\x85&\x1eH\xdf\xf0D\xc4$F\xee\x03\x0f\x9d\x15f\x97\x13\x97Iv\x01\xf5\x92\x15\x89\x98\x01\x06u\xf7\x01\xa5i\x05\x00e.f\x99\xb8\x8a9\x19-JS2\x8bs\xf5\x95+l:\xe4\xec1\xd5v\x89\x06[\xdf\b\xb3\xbe\xb6p\xb4\xdby&xc^\xc2\xfa\x9c\\\x8a\xb3\xa8\x1b$\x03\x98J\x87\xf6q>~^\xc6l\xdcU\x80\xca\x0f\xed\xfd\x98\x0e\x87Wg\x0e\xbe\xde?\xef\xa5k\x99\xbcJ\xbb-\xf9\xcb$\xa1\xf49\x12\xfc\xe9\xd87\xf9\xa0\x8d\x880\xd2\x85\xf3\xbe\xf6\x05m\x17\x02q\xf7\x00\x00-]+s:v+\x04\xfbg\xe3\x98]\x1c\xe6\x12\xb3\x93;j\xa1!:?\xec\xcc|\xcd}\x14z]v\xfc\x05\xd2>\xaa\xd2\x164\xe4\x8b-\x98\xb7\xad\xac\xbf', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r4, 0x0, 0x9b8b6cf8a0de5357, &(0x7f0000000640)="9f1bdd30b1effbb798d7fcf2d12a163413a55dd4ef3912fc81080da43f97eebe93685dc5bc899a1ec951fd84c937d35ae4372e6c2b7a3a3351941a1a6a20f9d6c67b56", 0x43) socket$inet6(0xa, 0xa234431645f98eb, 0x38) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 2m12.330331639s ago: executing program 2 (id=99): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f00000000c0)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000004000000ffff000000000000f01e9f56133679f092b28ff302e55c1416b2699247135d8939d3fb5540eabdb343cd2c957693ece361ee2e6675e9ba350835d4773f3979f04f7245504ceceaef916a5c74b45f3e601e1aeccf71fcf7301658a4688d45a6a736d82802d738ac8d43a2008798211acf725ea8ac053caeb8806e16cbdb9d371aad41e9475e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) syz_create_resource$binfmt(&(0x7f0000000000)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='0', 0x1) r5 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0xc2, 0x1, 0x1, 0x6, 0x80000000000, 0x3, 0x3e, 0xc, 0x6b, 0x40, 0x2001df, 0x0, 0x3e, 0x38, 0x1, 0xd, 0x2, 0x1}, [{0x3, 0x1ff, 0x7, 0x8000000000000000, 0x4, 0x7, 0x0, 0x7fffffff}]}, 0x78) close(r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") preadv2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) 2m12.135686923s ago: executing program 0 (id=100): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f00000000c0)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000004000000ffff000000000000f01e9f56133679f092b28ff302e55c1416b2699247135d8939d3fb5540eabdb343cd2c957693ece361ee2e6675e9ba350835d4773f3979f04f7245504ceceaef916a5c74b45f3e601e1aeccf71fcf7301658a4688d45a6a736d82802d738ac8d43a2008798211acf725ea8ac053caeb8806e16cbdb9d371aad41e9475e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) syz_create_resource$binfmt(&(0x7f0000000000)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='0', 0x1) r5 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0xc2, 0x1, 0x1, 0x6, 0x80000000000, 0x3, 0x3e, 0xc, 0x6b, 0x40, 0x2001df, 0x0, 0x3e, 0x38, 0x1, 0xd, 0x2, 0x1}, [{0x3, 0x1ff, 0x7, 0x8000000000000000, 0x4, 0x7, 0x0, 0x7fffffff}]}, 0x78) r6 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) 2m12.108107394s ago: executing program 2 (id=101): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f00000000c0)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000004000000ffff000000000000f01e9f56133679f092b28ff302e55c1416b2699247135d8939d3fb5540eabdb343cd2c957693ece361ee2e6675e9ba350835d4773f3979f04f7245504ceceaef916a5c74b45f3e601e1aeccf71fcf7301658a4688d45a6a736d82802d738ac8d43a2008798211acf725ea8ac053caeb8806e16cbdb9d371aad41e9475e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) syz_create_resource$binfmt(&(0x7f0000000000)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='0', 0x1) r5 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0xc2, 0x1, 0x1, 0x6, 0x80000000000, 0x3, 0x3e, 0xc, 0x6b, 0x40, 0x2001df, 0x0, 0x3e, 0x38, 0x1, 0xd, 0x2, 0x1}, [{0x3, 0x1ff, 0x7, 0x8000000000000000, 0x4, 0x7, 0x0, 0x7fffffff}]}, 0x78) close(r5) r6 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) 2m11.950669618s ago: executing program 0 (id=103): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_setup(0x2278, &(0x7f0000000180)) r0 = syz_open_procfs$userns(0x0, &(0x7f00000020c0)) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000020e0ffffff0000e1ffffff00ff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000700)=[{0x8, 0x0, [0x8, 0x8, 0x2, 0xc2c, 0x3, 0x5, 0x2, 0x48c5, 0x800, 0x6, 0x9, 0x9, 0x4, 0x7, 0x9, 0xffff]}, {0x20, 0x0, [0x101, 0x7fff, 0x8001, 0x549, 0x1, 0x1000, 0x9, 0x7, 0x4, 0x3800000, 0xc21, 0x3, 0x9d5, 0x1, 0x10, 0x9]}, {0x28, 0x0, [0x9, 0x1, 0x5, 0x3, 0x1ff, 0x4, 0x0, 0x18000000, 0x6, 0x7, 0xfffffffd, 0x80000000, 0x2, 0x3, 0x1000, 0x1]}], 0xffffffffffffffff, 0x1, 0x1, 0xd8}}, 0x20) socket(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r3, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) 2m11.932293769s ago: executing program 2 (id=104): socket$kcm(0x10, 0x2, 0x4) (async) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00001d001000250002000f2c1f0017d3446005251e6182949a369f3d3b48dfd8b4fa51f60a64c9f4d4938037e786a6d0bdd700"/76, 0x4c}], 0x15, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m11.9011932s ago: executing program 32 (id=104): socket$kcm(0x10, 0x2, 0x4) (async) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00001d001000250002000f2c1f0017d3446005251e6182949a369f3d3b48dfd8b4fa51f60a64c9f4d4938037e786a6d0bdd700"/76, 0x4c}], 0x15, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m11.88283268s ago: executing program 4 (id=106): syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 2m11.782105742s ago: executing program 4 (id=108): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x8000000000, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x800000, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in=@broadcast, 0x4, 0x3, 0x0, 0x0, 0xfffffc01, 0x5001, 0x6}}, 0xe8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a80)={@fallback, 0xffffffffffffffff, 0x11}, 0x20) listen(r2, 0x0) r3 = memfd_create(&(0x7f0000002180)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZe8z\xb0\x11X\x0e\xa1\b\x00\x98S7\xc9\xcc\xd8v\xe2}KN\x0eI]\xcfO\xb90=U\x80\xc9&\xc7\xc0`@\x1eqq\x0f\x9b=\x9eK\xae9\xed\x05_\xa9_\x8c55vW&\xc0\xd0\x9d\xff\xbc\xb66\x9ey:\xbdt>V\xe5\x97c\xb8*\xe8;+TIRN\xf5%\x1e\t\xca0 \xbe0\x14\x89\x8d\x80\xca\xad\x17\r\xd1\x95\xe5\x8c\xc3r\xde\x0e\x06Ox\xfb2m\x8c\r%\xe4`\x9eOQ\x97\xa0\x17\x05$\xe0\xb8\xf5-\xd4;\a)\xf3\xe8\x9a\x91\xa9$&\xe7|\xaf\xfc6\xd70\x9e\x88Cb\xaf<\"\xca\x80\xcfD^\x1a9\xff\'\x86\x87Q\xd81\xcc\x80\xf4\x93\x9e\xc3\xce\b\xfc*\xa4\xd7\xcf\x01\xd2\xf9\xf5\x83\x04\xfa/Sp;\xd2-\x1afq)\x16#\xa6\xa8\xa9\xae\x0f\x8b\xb5\xaarH\x87S\x8e A\xb3\xca\xcc\x97\xef\x14\xe3G1\xad\xbd\xfe\xa9\xc9\xc1\x87 \xc2MV\x8boM\x83\xe6\x01\xc4!-\x12\x06\x1e\xefpf{\xfcI`\xec\x95J\\z\\]\x16\xf9\xfe\xc8l/h\xae\xe3I\xdf\xb3\x8e\xdaH\x17\xbc\x8c\x9b\xe2\x84\t\x00\x00\x80\x00\x00\x00\x00q\xf8A\x01\x80\xb5\xe2\x8bT\xa1\xd6\n\x17\xc6\xdd\x88J_\xd7\tI%\'\x0f\'\xbd\x15\xbf\x1f\xf8\x00\xb6k\xab\xecz\xa8(\x92\x82\x85=\xbe\xed}\x18\xc2\xc2\xf5\x9b\xd0\xc1\xd8\x1e.\xfe\x1bDWM\xef\xd9\xe5\x0f\xcb5\xcd\xf3\x96:\x1a\xe0WOZ\xbb\xea_\xfc\f\xfd\xb2\xc1L.\xd5\xcb,\x1cr{!99\xea\xbb\xad\xa6\x1b\xad_\r\x10(\xa6C\xaf!=\x9d\xf1\\\x9d\xa0\xd3|\nS\x18\xfa\xfd\x14h\xba\b\x91.\xe2G\\gR\fc$\xe6\v\xf6}\x1ca\xd2\x85&\x1eH\xdf\xf0D\xc4$F\xee\x03\x0f\x9d\x15f\x97\x13\x97Iv\x01\xf5\x92\x15\x89\x98\x01\x06u\xf7\x01\xa5i\x05\x00e.f\x99\xb8\x8a9\x19-JS2\x8bs\xf5\x95+l:\xe4\xec1\xd5v\x89\x06[\xdf\b\xb3\xbe\xb6p\xb4\xdby&xc^\xc2\xfa\x9c\\\x8a\xb3\xa8\x1b$\x03\x98J\x87\xf6q>~^\xc6l\xdcU\x80\xca\x0f\xed\xfd\x98\x0e\x87Wg\x0e\xbe\xde?\xef\xa5k\x99\xbcJ\xbb-\xf9\xcb$\xa1\xf49\x12\xfc\xe9\xd87\xf9\xa0\x8d\x880\xd2\x85\xf3\xbe\xf6\x05m\x17\x02q\xf7\x00\x00-]+s:v+\x04\xfbg\xe3\x98]\x1c\xe6\x12\xb3\x93;j\xa1!:?\xec\xcc|\xcd}\x14z]v\xfc\x05\xd2>\xaa\xd2\x164\xe4\x8b-\x98\xb7\xad\xac\xbf', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 2m11.689738675s ago: executing program 0 (id=109): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x100}}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x80002, 0x0) pread64(r1, &(0x7f00000016c0)=""/172, 0xfffffe87, 0x5) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x2, 0x9}, {0x200, 0x8}]}, 0x14, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x3, 0x2, 0xfff6, 0x0, 0x0, 0x0, 0x9b, 0x4, 0x3, 0x0, 0x0, 0x2, 0x6, 0x44, 0x0, [0x0, 0x800001]}}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) socket(0x10, 0x803, 0x0) unshare(0x2c020400) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 2m11.689119405s ago: executing program 4 (id=110): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) 2m11.601276157s ago: executing program 33 (id=109): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x100}}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x80002, 0x0) pread64(r1, &(0x7f00000016c0)=""/172, 0xfffffe87, 0x5) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x2, 0x9}, {0x200, 0x8}]}, 0x14, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x3, 0x2, 0xfff6, 0x0, 0x0, 0x0, 0x9b, 0x4, 0x3, 0x0, 0x0, 0x2, 0x6, 0x44, 0x0, [0x0, 0x800001]}}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) socket(0x10, 0x803, 0x0) unshare(0x2c020400) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 2m11.379759852s ago: executing program 4 (id=114): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f00000000c0)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000004000000ffff000000000000f01e9f56133679f092b28ff302e55c1416b2699247135d8939d3fb5540eabdb343cd2c957693ece361ee2e6675e9ba350835d4773f3979f04f7245504ceceaef916a5c74b45f3e601e1aeccf71fcf7301658a4688d45a6a736d82802d738ac8d43a2008798211acf725ea8ac053caeb8806e16cbdb9d371aad41e9475e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) syz_create_resource$binfmt(&(0x7f0000000000)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='0', 0x1) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r5 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) 2m11.06156991s ago: executing program 4 (id=118): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2d4, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x0, 0x160) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001"], 0x150}}, 0x0) r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000008724b44fd300"/149]}, 0x10d) timer_create(0x2, &(0x7f000049efa0), &(0x7f0000044000)=0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0xb, 0x43, 0x4c3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(r2, &(0x7f0000000240)) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x3, 0x4, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_bp={0x0, 0x2}, 0x204, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x2}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r4}]}, 0x28}}, 0x8c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bridge0\x00', {0x1}, 0x8}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x24000000) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5) r7 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x400) 2m10.845665366s ago: executing program 4 (id=119): capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000006c00)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) capget(&(0x7f0000000240)={0x20071026, r1}, &(0x7f0000000280)={0xa531, 0x5, 0x3, 0x32, 0xa, 0x6}) r2 = io_uring_setup(0x1ae9, &(0x7f0000000380)={0x0, 0xcee8, 0x40, 0x0, 0x340}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000940)="2694", 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) unshare(0x22020600) r5 = gettid() r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) poll(&(0x7f0000000000)=[{r6, 0x5}], 0x1, 0x90) timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180016db1e72c529bb0000fcffffff000000002c", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r8, &(0x7f0000000300)=[{&(0x7f00000000c0)="06", 0x1}], 0x1, 0xb, 0xc) r9 = syz_create_resource$binfmt(&(0x7f0000000000)='./dev\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x41, 0x1ff) lgetxattr(&(0x7f0000000080)='./dev/kmsg\x00', &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', &(0x7f0000000140)=""/248, 0xf8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) symlinkat(&(0x7f00000002c0)='./dev\x00', r8, &(0x7f0000000500)='./dev\x00') 2m10.815538586s ago: executing program 34 (id=119): capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000006c00)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) capget(&(0x7f0000000240)={0x20071026, r1}, &(0x7f0000000280)={0xa531, 0x5, 0x3, 0x32, 0xa, 0x6}) r2 = io_uring_setup(0x1ae9, &(0x7f0000000380)={0x0, 0xcee8, 0x40, 0x0, 0x340}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000940)="2694", 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) unshare(0x22020600) r5 = gettid() r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) poll(&(0x7f0000000000)=[{r6, 0x5}], 0x1, 0x90) timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180016db1e72c529bb0000fcffffff000000002c", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r8, &(0x7f0000000300)=[{&(0x7f00000000c0)="06", 0x1}], 0x1, 0xb, 0xc) r9 = syz_create_resource$binfmt(&(0x7f0000000000)='./dev\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x41, 0x1ff) lgetxattr(&(0x7f0000000080)='./dev/kmsg\x00', &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', &(0x7f0000000140)=""/248, 0xf8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) symlinkat(&(0x7f00000002c0)='./dev\x00', r8, &(0x7f0000000500)='./dev\x00') 2m7.228404955s ago: executing program 7 (id=120): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x80, &(0x7f0000000380)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@mb_optimize_scan}, {@user_xattr}]}, 0x3, 0x465, &(0x7f0000001900)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000600), 0x8, 0x51a, &(0x7f00000010c0)="$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") r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x400300) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000300)=""/99) openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x101000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000540)=0xc) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x4, @perf_bp={0x0, 0x6}, 0x100004, 0x0, 0x10004, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r1, 0x0, 0x1) perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x4000, 0x80000000, 0xfffffffd, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xb, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'dvmrp1\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0x1d, 0x2, 0x6) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) sendmsg$NFT_BATCH(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) personality(0x87bf5ac905ea0f7f) 2m4.20314503s ago: executing program 7 (id=154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8a"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 2m3.556504996s ago: executing program 7 (id=156): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_setup(0x2278, &(0x7f0000000180)) r0 = syz_open_procfs$userns(0x0, &(0x7f00000020c0)) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000020e0ffffff0000e1ffffff00ff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000700)=[{0x8, 0x0, [0x8, 0x8, 0x2, 0xc2c, 0x3, 0x5, 0x2, 0x48c5, 0x800, 0x6, 0x9, 0x9, 0x4, 0x7, 0x9, 0xffff]}, {0x20, 0x0, [0x101, 0x7fff, 0x8001, 0x549, 0x1, 0x1000, 0x9, 0x7, 0x4, 0x3800000, 0xc21, 0x3, 0x9d5, 0x1, 0x10, 0x9]}, {0x28, 0x0, [0x9, 0x1, 0x5, 0x3, 0x1ff, 0x4, 0x0, 0x18000000, 0x6, 0x7, 0xfffffffd, 0x80000000, 0x2, 0x3, 0x1000, 0x1]}], 0xffffffffffffffff, 0x1, 0x1, 0xd8}}, 0x20) socket(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r3, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) 2m3.451845928s ago: executing program 35 (id=156): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_setup(0x2278, &(0x7f0000000180)) r0 = syz_open_procfs$userns(0x0, &(0x7f00000020c0)) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000020e0ffffff0000e1ffffff00ff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000700)=[{0x8, 0x0, [0x8, 0x8, 0x2, 0xc2c, 0x3, 0x5, 0x2, 0x48c5, 0x800, 0x6, 0x9, 0x9, 0x4, 0x7, 0x9, 0xffff]}, {0x20, 0x0, [0x101, 0x7fff, 0x8001, 0x549, 0x1, 0x1000, 0x9, 0x7, 0x4, 0x3800000, 0xc21, 0x3, 0x9d5, 0x1, 0x10, 0x9]}, {0x28, 0x0, [0x9, 0x1, 0x5, 0x3, 0x1ff, 0x4, 0x0, 0x18000000, 0x6, 0x7, 0xfffffffd, 0x80000000, 0x2, 0x3, 0x1000, 0x1]}], 0xffffffffffffffff, 0x1, 0x1, 0xd8}}, 0x20) socket(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r3, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) 2.361432512s ago: executing program 6 (id=1327): perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e"], 0x0, 0x8e}, 0x28) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r0}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x22, 0x0, &(0x7f0000000340)="dcab94706c7e295c2b84860188a86a4e0800b976e31b5ab941e6a6c32db698ef2e76", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x58080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x8}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) 1.738622517s ago: executing program 5 (id=1332): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xf80, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000010c0)="ea", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x2, 0xd, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SNAPSHOT_FREE(r0, 0x3305) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001000)=@newqdisc={0x48, 0x24, 0x4, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0xb}, {0xa, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x400}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x3}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000001080)=0xf) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.706569118s ago: executing program 6 (id=1334): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x200000, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.414406955s ago: executing program 6 (id=1336): io_setup(0x20, &(0x7f0000001140)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x200, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.305023788s ago: executing program 5 (id=1339): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c0004"], 0x88}}, 0x20000) 1.252278589s ago: executing program 5 (id=1340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000000e00)=[{0x0, &(0x7f0000000740)="388de5", 0x0, 0x3}], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1400000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0xfffffff8, &(0x7f0000001280)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r3, 0x0}]) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x2000000000, {0x2, 0x0, 0x3}, 0x2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x6, 0x4, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x95, 0x5}, 0x8200, 0x0, 0x7fffffff, 0x0, 0x0, 0x3, 0xfffd, 0x0, 0xfffffffc, 0x0, 0x1}, 0x0, 0x0, r3, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08060001"], 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x240488cc}, 0x4040040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r8, 0x58, &(0x7f0000000600)}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f0000000140)={0x0, 0x0, '\x00', @zc_export={r3}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[], 0x0, 0x25a, &(0x7f0000000240)="$eJzs2s9rI2UYB/Bn6sqmXbqp+ItdEF/0oF6Gbc8edpEKYkFRK6yC7KydauyYlE4oRMT2pFf/BM/i0Zsge/TSi3+BB2+99LgHcSRNWtOysIs/mqX7+RySh3nnm7zzvmF4ErL/6refb6zX+XrRj5ksi5nrsRt3s1iImTiyG6+8dPOX5969+cGbN1ZWWuOjSymly8///OGXP7xwp3/p/R8v/3Qx9hY+2j9Y+n3vmb0r+3++92mnTp06dXv9VKTbvV6/uF2Vaa1Tb+QpvV2VRV2mTrcut06Mr1e9zc1BKrpr83ObW2Vdp6I7SBvlIPV7qb81SMUnRaeb8jxP83PBv7H6/d2miYPm8VvRNM3sd3HpTsz/Fu3InkjZk9ezp29lz+5mVw6apn06OjudGfPf+sf7z7kwvqkvv5NSK6L6Znt1e3X0PBxtxY316EQVZVyL2fgjhh+TsVH9+hsry9fSoYX4utoZ53e2Vx87fP3j/GK0Y+He+cVRPh3lL0bE8HFuMr8U7Xjq3vmlU/nR+7fi5Rcn8nm049ePoxdVrMUwGzvjJVj+ajGl195aOZW/engeAMB5k6djw/5t2LSd6N/y/MT4RH80yk/0h+379Ien+qsLcfXCdK+diHrwxUZRVeXW8AveYXF85FEtZieX5UGKo59C/r+JzZzYs4dloRTnuYj4bCp3JM7S35t+31NbZzIhAAAAAAAAAAAAHshZ/J1w2tcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA83P4KAAD//8scwHs=") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r12 = socket$inet(0xa, 0x801, 0x84) connect$inet(r12, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 1.2341511s ago: executing program 6 (id=1342): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = io_uring_setup(0x4de8, &(0x7f0000000080)={0x0, 0xd661, 0x400, 0x0, 0x2ff}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x20000000, 0xf, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x40106183, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a00ff"], 0x5c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='+ 1 0 1 1', 0x9) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x501, 0xb7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x1}, 0x5}) 1.057048723s ago: executing program 5 (id=1345): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000600), 0x0) 968.988366ms ago: executing program 5 (id=1347): perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e"], 0x0, 0x8e}, 0x28) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r0}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x22, 0x0, &(0x7f0000000340)="dcab94706c7e295c2b84860188a86a4e0800b976e31b5ab941e6a6c32db698ef2e76", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') socket$nl_generic(0x10, 0x3, 0x10) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 965.492976ms ago: executing program 3 (id=1348): perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e"], 0x0, 0x8e}, 0x28) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r0}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x22, 0x0, &(0x7f0000000340)="dcab94706c7e295c2b84860188a86a4e0800b976e31b5ab941e6a6c32db698ef2e76", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x58080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x8}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) 928.353967ms ago: executing program 6 (id=1349): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3a8bc000) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f00000011c0)={&(0x7f0000000000)=0x8, 0x3, &(0x7f0000001800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001180)}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x40808}, 0x0) 871.702428ms ago: executing program 8 (id=1350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000) 854.022119ms ago: executing program 1 (id=1351): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0xf000, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2e5, 0x9}, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = eventfd(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000ac0)={r8}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) readv(r10, &(0x7f0000000c80)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) (fail_nth: 1) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x44, r7, 0x0, 0x0, 0x36, 0x0, 0x0, r7}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe, 0x0, r6, 0x0, 0x0, 0x3, 0x0, 0x3, r7}]) 807.06165ms ago: executing program 8 (id=1352): perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 806.61725ms ago: executing program 8 (id=1353): writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000400)='?', 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050009"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x11c0ad, 0x0, 0x5, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400050000007000fcdbdf250b00000008000200"], 0x1c}}, 0x200000c0) r5 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x14}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) write$cgroup_int(r3, 0x0, 0x3d) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x77d21f479076994d}, 0x24000840) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082104, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r8, &(0x7f0000000380)=[{&(0x7f0000007fc0)=""/4110, 0x100e}, {0x0}], 0x2, 0x0, 0x5, 0xc) inotify_init1(0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, 0x0) 685.955853ms ago: executing program 8 (id=1354): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000640)={@random="b9200ccf188c", @random="ada1d50109bc", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x0, 0x0, 0xa, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e20, 0x8}}}}}, 0x0) 611.537625ms ago: executing program 8 (id=1355): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0xf000, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2e5, 0x9}, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = eventfd(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000ac0)={r8}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) readv(r10, &(0x7f0000000c80)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x44, r7, 0x0, 0x0, 0x36, 0x0, 0x0, r7}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe, 0x0, r6, 0x0, 0x0, 0x3, 0x0, 0x3, r7}]) 515.915997ms ago: executing program 3 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 463.827048ms ago: executing program 1 (id=1357): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000600), 0x0) 460.636629ms ago: executing program 3 (id=1358): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xf80, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000010c0)="ea", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x2, 0xd, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SNAPSHOT_FREE(r0, 0x3305) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001000)=@newqdisc={0x48, 0x24, 0x4, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0xb}, {0xa, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x400}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x3}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000001080)=0xf) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 319.515602ms ago: executing program 1 (id=1359): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = io_uring_setup(0x4de8, &(0x7f0000000080)={0x0, 0xd661, 0x400, 0x0, 0x2ff}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x20000000, 0xf, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x40106183, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a00ff"], 0x5c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='+ 1 0 1 1', 0x9) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x501, 0xb7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x1}, 0x5}) 315.858282ms ago: executing program 8 (id=1360): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000700)=[{0x0}], 0x1) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000001c0)={0x3e4, 0x5, 0x400000, 0xd7, 0x3, 0xffffffff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = fsopen(&(0x7f0000000a40)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000002"], 0xf40f0000) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) set_mempolicy(0x2, 0x0, 0x6) shmctl$SHM_UNLOCK(0x0, 0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYRESHEX=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002080)=ANY=[@ANYBLOB="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", @ANYRES8=r6, @ANYBLOB="05"], 0x10) close(r7) set_mempolicy(0x8000, &(0x7f0000000180)=0xffffffffffff1335, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4c814) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f00000000c0), &(0x7f0000000100)=r7}, 0x20) sendmsg$inet(r9, &(0x7f00000006c0)={&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x4000005) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x400043, 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 236.948284ms ago: executing program 6 (id=1361): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x200000, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 207.316465ms ago: executing program 3 (id=1362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000) 201.353835ms ago: executing program 1 (id=1363): perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 174.494556ms ago: executing program 3 (id=1364): writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000400)='?', 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050009"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x11c0ad, 0x0, 0x5, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400050000007000fcdbdf250b00000008000200"], 0x1c}}, 0x200000c0) r5 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x14}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) write$cgroup_int(r3, 0x0, 0x3d) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0003}]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x77d21f479076994d}, 0x24000840) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082104, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r8, &(0x7f0000000380)=[{&(0x7f0000007fc0)=""/4110, 0x100e}, {0x0}], 0x2, 0x0, 0x5, 0xc) inotify_init1(0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, 0x0) 174.178485ms ago: executing program 1 (id=1365): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000640)={@random="b9200ccf188c", @random="ada1d50109bc", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x0, 0x0, 0xa, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e20, 0x8}}}}}, 0x0) 106.164267ms ago: executing program 1 (id=1366): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4ec, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x4) write(r1, 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000a00)={0x1, 0x2, 0x8, 0xffffffff, 0xffffffff, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050890) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 35.234179ms ago: executing program 5 (id=1367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x401}, {{0x18, 0x4, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, 0xffffffffffffffff, 0x0, 0x0, 0x36}]) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r7, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x39000, 0x0) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5) 0s ago: executing program 3 (id=1368): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0xe) pipe(&(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x48) splice(r2, 0x0, r4, 0x0, 0x3000, 0x100000000000000d) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x200000000000000) kernel console output (not intermixed with test programs): [ 115.425792][ T6739] EXT4-fs: test_dummy_encryption option not supported [ 115.738140][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 115.782944][ T6862] loop5: detected capacity change from 0 to 1024 [ 115.786272][ T6862] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 115.805070][ T6862] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 115.805126][ T6862] System zones: 0-1, 3-36 [ 115.805289][ T6862] EXT4-fs (loop5): orphan cleanup on readonly fs [ 115.828240][ T6862] EXT4-fs (loop5): 1 orphan inode deleted [ 115.891598][ T6771] loop3: detected capacity change from 0 to 8192 [ 115.898206][ T6862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.956904][ T3851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.998284][ T6874] netlink: 'syz.5.869': attribute type 2 has an invalid length. [ 116.124870][ T6883] loop8: detected capacity change from 0 to 128 [ 116.137903][ T6883] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 116.240047][ T6883] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.240987][ T6883] ext2 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.282416][ T4329] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.335288][ T6892] usb usb8: usbfs: process 6892 (syz.6.876) did not claim interface 0 before use [ 116.600942][ T6902] netlink: 56 bytes leftover after parsing attributes in process `syz.6.877'. [ 116.625583][ T6902] loop6: detected capacity change from 0 to 512 [ 116.635668][ T6902] EXT4-fs: Ignoring removed i_version option [ 116.635688][ T6902] EXT4-fs: Ignoring removed nobh option [ 116.656490][ T6902] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 116.689957][ T6902] EXT4-fs (loop6): 1 truncate cleaned up [ 116.690452][ T6902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.825226][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.847252][ T6917] sctp: [Deprecated]: syz.1.878 (pid 6917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.847252][ T6917] Use struct sctp_sack_info instead [ 116.942831][ T9] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000A/input/input13 [ 116.943854][ T9] hid-generic 0005:FFFD057E:0305.000A: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 117.162945][ T6938] netlink: 296 bytes leftover after parsing attributes in process `syz.6.879'. [ 117.193872][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.881'. [ 117.346842][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.882'. [ 117.380883][ T6917] team0: Device gtp0 is of different type [ 118.314021][ T6881] loop5: detected capacity change from 0 to 8192 [ 118.542599][ T6964] loop6: detected capacity change from 0 to 256 [ 119.048860][ T6965] FAT-fs (loop6): unable to read block(219043332096) for building NFS inode [ 119.061626][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.8.886'. [ 119.067268][ T6970] random: crng reseeded on system resumption [ 119.263958][ T6985] loop3: detected capacity change from 0 to 512 [ 119.264807][ T6985] EXT4-fs: Ignoring removed i_version option [ 119.312443][ T6985] EXT4-fs (loop3): 1 truncate cleaned up [ 119.314294][ T6985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.368813][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 119.369029][ T29] audit: type=1400 audit(1791385032.571:5909): avc: denied { getopt } for pid=6940 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.414921][ T6987] Restarting kernel threads ... [ 119.415160][ T6987] Done restarting kernel threads. [ 119.483188][ T29] audit: type=1400 audit(1791385032.731:5910): avc: denied { write } for pid=6966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.492730][ T6987] syzkaller0: entered promiscuous mode [ 119.492751][ T6987] syzkaller0: entered allmulticast mode [ 119.546441][ T29] audit: type=1400 audit(1791385032.791:5911): avc: denied { write } for pid=6995 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.618046][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.643086][ T6917] syz.1.878 (6917) used greatest stack depth: 9288 bytes left [ 119.655086][ T7001] ip_tables: iptables: counters copy to user failed while replacing table [ 119.719371][ T29] audit: type=1400 audit(1791385032.961:5912): avc: denied { create } for pid=7000 comm="syz.8.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.728767][ T29] audit: type=1400 audit(1791385032.961:5913): avc: denied { connect } for pid=7000 comm="syz.8.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.752721][ T29] audit: type=1400 audit(1791385033.001:5914): avc: denied { write } for pid=7000 comm="syz.8.889" name="packet" dev="proc" ino=4026532779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 119.957329][ T7018] sctp: [Deprecated]: syz.1.894 (pid 7018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.957329][ T7018] Use struct sctp_sack_info instead [ 120.043113][ T3376] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000B/input/input14 [ 120.060117][ T3376] hid-generic 0005:FFFD057E:0305.000B: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 120.215726][ T7018] team0: Device gtp0 is of different type [ 120.270846][ T29] audit: type=1400 audit(1791385033.481:5915): avc: denied { write } for pid=6997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.270883][ T29] audit: type=1400 audit(1791385033.501:5916): avc: denied { write } for pid=7024 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.387998][ T29] audit: type=1400 audit(1791385033.631:5917): avc: denied { write } for pid=7026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.429992][ T29] audit: type=1400 audit(1791385033.681:5918): avc: denied { write } for pid=7037 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.577910][ T7043] loop6: detected capacity change from 0 to 512 [ 120.594170][ T7043] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 120.619849][ T7043] EXT4-fs (loop6): 1 truncate cleaned up [ 120.620315][ T7043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.911614][ T7043] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.896: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 121.075029][ T7049] random: crng reseeded on system resumption [ 121.081265][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.196102][ T7049] Restarting kernel threads ... [ 121.207870][ T7049] Done restarting kernel threads. [ 121.322841][ T7049] syzkaller0: entered promiscuous mode [ 121.322970][ T7049] syzkaller0: entered allmulticast mode [ 121.520628][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.901'. [ 121.623002][ T7011] loop3: detected capacity change from 0 to 8192 [ 122.872194][ T7076] random: crng reseeded on system resumption [ 122.978054][ T7082] loop1: detected capacity change from 0 to 512 [ 122.979670][ T7082] EXT4-fs: Ignoring removed i_version option [ 123.135052][ T7082] EXT4-fs (loop1): 1 truncate cleaned up [ 123.136374][ T7082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.229797][ T7086] Restarting kernel threads ... [ 123.232159][ T7086] Done restarting kernel threads. [ 123.258549][ T7087] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 123.265154][ T7086] syzkaller0: entered promiscuous mode [ 123.265176][ T7086] syzkaller0: entered allmulticast mode [ 123.307945][ T7092] sctp: [Deprecated]: syz.8.910 (pid 7092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.307945][ T7092] Use struct sctp_sack_info instead [ 123.336537][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.381192][ T3376] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000C/input/input15 [ 123.382294][ T3376] hid-generic 0005:FFFD057E:0305.000C: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 123.502015][ T7092] team0: Device gtp0 is of different type [ 123.572952][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'. [ 123.741269][ T7109] loop5: detected capacity change from 0 to 1024 [ 123.774886][ T7109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.817542][ T7117] sctp: [Deprecated]: syz.1.917 (pid 7117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.817542][ T7117] Use struct sctp_sack_info instead [ 123.897403][ T7105] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 123.947674][ T3416] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000D/input/input16 [ 124.078883][ T3416] hid-generic 0005:FFFD057E:0305.000D: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 124.154014][ T7117] team0: Device gtp0 is of different type [ 124.207392][ T7121] random: crng reseeded on system resumption [ 124.514042][ T3851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.625604][ T7139] random: crng reseeded on system resumption [ 124.706327][ T7101] loop6: detected capacity change from 0 to 8192 [ 124.871724][ T7144] ip_tables: iptables: counters copy to user failed while replacing table [ 125.053075][ T7149] syzkaller0: entered promiscuous mode [ 125.053099][ T7149] syzkaller0: entered allmulticast mode [ 125.055329][ T7157] syzkaller0: entered promiscuous mode [ 125.055349][ T7157] syzkaller0: entered allmulticast mode [ 125.141986][ T7160] syzkaller0: entered promiscuous mode [ 125.142087][ T7160] syzkaller0: entered allmulticast mode [ 125.220143][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 125.281954][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 125.281969][ T29] audit: type=1400 audit(1791385038.531:5926): avc: denied { write } for pid=7173 comm="syz.5.932" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 125.281994][ T29] audit: type=1400 audit(1791385038.531:5927): avc: denied { open } for pid=7173 comm="syz.5.932" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 125.285441][ T31] IPVS: starting estimator thread 0... [ 125.355482][ T7170] loop8: detected capacity change from 0 to 512 [ 125.369979][ T7175] IPVS: using max 2304 ests per chain, 115200 per kthread [ 125.407762][ T7170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 125.407924][ T7170] System zones: 1-12 [ 125.419953][ T7170] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.930: missing EA_INODE flag [ 125.420071][ T7170] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 125.420767][ T7170] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.930: error while reading EA inode 12 err=-117 [ 125.420807][ T7170] loop8: lost filesystem error report for type 5 error -117 [ 125.428604][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 125.428713][ C0] EXT4-fs (loop8): initial error at time 1791385038: ext4_xattr_inode_iget:437: inode 12 [ 125.428851][ C0] EXT4-fs (loop8): last error at time 1791385038: ext4_xattr_inode_iget:442 [ 125.433472][ T7174] cgroup: fork rejected by pids controller in /syz5 [ 125.460355][ T7170] EXT4-fs (loop8): 1 orphan inode deleted [ 125.476288][ T7170] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.499154][ T29] audit: type=1400 audit(1791385038.741:5928): avc: denied { write } for pid=7169 comm="syz.8.930" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.989762][ T29] audit: type=1400 audit(1791385039.191:5929): avc: denied { mounton } for pid=7299 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 126.078776][ T7302] syzkaller0: entered promiscuous mode [ 126.078798][ T7302] syzkaller0: entered allmulticast mode [ 126.124802][ T4329] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.430958][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.430994][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.431059][ T7299] bridge_slave_0: entered allmulticast mode [ 126.431535][ T7299] bridge_slave_0: entered promiscuous mode [ 126.461902][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.461934][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.461999][ T7299] bridge_slave_1: entered allmulticast mode [ 126.462491][ T7299] bridge_slave_1: entered promiscuous mode [ 126.560976][ T7299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.562014][ T7299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.634574][ T7299] team0: Port device team_slave_0 added [ 126.637840][ T7299] team0: Port device team_slave_1 added [ 127.016508][ T7339] random: crng reseeded on system resumption [ 127.129793][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.129807][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.129835][ T7299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.183125][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.183141][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.183166][ T7299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.269941][ T7299] hsr_slave_0: entered promiscuous mode [ 127.270482][ T7299] hsr_slave_1: entered promiscuous mode [ 127.271876][ T7299] debugfs: 'hsr0' already exists in 'hsr' [ 127.271905][ T7299] Cannot create hsr debugfs directory [ 127.320050][ T7342] sctp: [Deprecated]: syz.3.949 (pid 7342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.320050][ T7342] Use struct sctp_sack_info instead [ 127.372011][ T7339] syzkaller0: entered promiscuous mode [ 127.372102][ T7339] syzkaller0: entered allmulticast mode [ 127.437904][ T29] audit: type=1326 audit(1791385040.681:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.6.950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7dfee199 code=0x7ffc0000 [ 127.438309][ T29] audit: type=1326 audit(1791385040.681:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.6.950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7dfee199 code=0x7ffc0000 [ 127.438384][ T29] audit: type=1326 audit(1791385040.681:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.6.950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7dfee199 code=0x7ffc0000 [ 127.493459][ T29] audit: type=1326 audit(1791385040.741:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.6.950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7dfee199 code=0x7ffc0000 [ 127.493547][ T29] audit: type=1326 audit(1791385040.741:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.6.950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d7dfedf02 code=0x7ffc0000 [ 127.493577][ T29] audit: type=1326 audit(1791385040.741:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.6.950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9d7dfedf97 code=0x7ffc0000 [ 127.605116][ T7347] loop6: detected capacity change from 0 to 128 [ 127.608730][ T7282] loop1: detected capacity change from 0 to 8192 [ 127.645344][ T919] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000E/input/input17 [ 127.646999][ T919] hid-generic 0005:FFFD057E:0305.000E: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 127.943298][ T7356] loop8: detected capacity change from 0 to 512 [ 127.965456][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.969293][ T7356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 127.969552][ T7356] System zones: 1-12 [ 127.989019][ T7356] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.951: missing EA_INODE flag [ 127.989058][ T7356] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 127.991682][ T7356] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.951: error while reading EA inode 12 err=-117 [ 127.991720][ T7356] loop8: lost filesystem error report for type 5 error -117 [ 127.998545][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 127.998575][ C0] EXT4-fs (loop8): initial error at time 1791385041: ext4_xattr_inode_iget:437: inode 12 [ 127.998785][ C0] EXT4-fs (loop8): last error at time 1791385041: ext4_xattr_inode_iget:442 [ 128.005154][ T7356] EXT4-fs (loop8): 1 orphan inode deleted [ 128.015461][ T7356] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.145246][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.164301][ T4329] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.181861][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.202981][ T7368] random: crng reseeded on system resumption [ 128.222811][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.258162][ T7374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=7374 comm=syz.8.956 [ 128.295166][ T50] bridge_slave_1: left allmulticast mode [ 128.295191][ T50] bridge_slave_1: left promiscuous mode [ 128.295309][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.296048][ T50] bridge_slave_0: left allmulticast mode [ 128.296065][ T50] bridge_slave_0: left promiscuous mode [ 128.296186][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.453255][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.454399][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.455171][ T50] bond0 (unregistering): Released all slaves [ 128.499628][ T50] hsr_slave_0: left promiscuous mode [ 128.500005][ T50] hsr_slave_1: left promiscuous mode [ 128.500430][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.500446][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.500825][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.500838][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.516241][ T50] veth1_macvtap: left promiscuous mode [ 128.516270][ T50] veth0_macvtap: left promiscuous mode [ 128.516326][ T50] veth1_vlan: left promiscuous mode [ 128.516360][ T50] veth0_vlan: left promiscuous mode [ 128.753390][ T7397] loop1: detected capacity change from 0 to 128 [ 128.951290][ T7397] syz.1.960: attempt to access beyond end of device [ 128.951290][ T7397] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 128.956500][ T7397] syz.1.960: attempt to access beyond end of device [ 128.956500][ T7397] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 129.007053][ T7397] syz.1.960: attempt to access beyond end of device [ 129.007053][ T7397] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 129.023280][ T7397] syz.1.960: attempt to access beyond end of device [ 129.023280][ T7397] loop1: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 129.023388][ T7397] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 129.023809][ T7397] syz.1.960: attempt to access beyond end of device [ 129.023809][ T7397] loop1: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 129.023943][ T7397] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 129.085611][ T7397] syz.1.960: attempt to access beyond end of device [ 129.085611][ T7397] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 129.340263][ T50] team0 (unregistering): Port device team_slave_1 removed [ 129.344765][ T50] team0 (unregistering): Port device team_slave_0 removed [ 129.527131][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 129.617497][ T7411] loop3: detected capacity change from 0 to 512 [ 129.695089][ T7411] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 129.695898][ T7411] System zones: 1-12 [ 129.713496][ T7411] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.965: missing EA_INODE flag [ 129.713537][ T7411] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 129.716231][ T7411] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.965: error while reading EA inode 12 err=-117 [ 129.716362][ T7411] loop3: lost filesystem error report for type 5 error -117 [ 129.718653][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 129.718703][ C1] EXT4-fs (loop3): initial error at time 1791385042: ext4_xattr_inode_iget:437: inode 12 [ 129.718972][ C1] EXT4-fs (loop3): last error at time 1791385042: ext4_xattr_inode_iget:442 [ 129.789155][ T7411] EXT4-fs (loop3): 1 orphan inode deleted [ 129.805743][ T7411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.932858][ T50] IPVS: stop unused estimator thread 0... [ 130.003542][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.127711][ T7439] random: crng reseeded on system resumption [ 130.198402][ T7442] syzkaller0: entered promiscuous mode [ 130.198424][ T7442] syzkaller0: entered allmulticast mode [ 130.276910][ T7394] loop6: detected capacity change from 0 to 8192 [ 130.298586][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 130.298602][ T29] audit: type=1326 audit(1791385043.541:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29d71fe9ce code=0x7ffc0000 [ 130.303310][ T29] audit: type=1326 audit(1791385043.551:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29d71fe9ce code=0x7ffc0000 [ 130.304801][ T29] audit: type=1326 audit(1791385043.551:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29d71fe9ce code=0x7ffc0000 [ 130.306417][ T29] audit: type=1326 audit(1791385043.551:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29d71fe9ce code=0x7ffc0000 [ 130.308450][ T29] audit: type=1326 audit(1791385043.551:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29d71fe9ce code=0x7ffc0000 [ 130.480039][ T29] audit: type=1326 audit(1791385043.731:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29d71fe9ce code=0x7ffc0000 [ 130.481838][ T29] audit: type=1326 audit(1791385043.731:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29d71fe9ce code=0x7ffc0000 [ 130.483074][ T29] audit: type=1326 audit(1791385043.731:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29d71fe9ce code=0x7ffc0000 [ 130.484554][ T29] audit: type=1326 audit(1791385043.731:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29d71fe9ce code=0x7ffc0000 [ 130.486189][ T29] audit: type=1326 audit(1791385043.731:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29d71fe9ce code=0x7ffc0000 [ 130.725325][ T7448] random: crng reseeded on system resumption [ 130.725948][ T7452] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=7452 comm=syz.8.972 [ 130.855969][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.971'. [ 131.212494][ T7299] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.215375][ T7299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.216069][ T7299] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.217952][ T7299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.218921][ T7299] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.256982][ T7299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.257549][ T7299] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.262967][ T7299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.316946][ T7299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.329342][ T7299] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.331506][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.331541][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.334615][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.334657][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.498662][ T7473] loop3: detected capacity change from 0 to 128 [ 131.583229][ T7473] syz.3.976: attempt to access beyond end of device [ 131.583229][ T7473] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 131.585900][ T7473] syz.3.976: attempt to access beyond end of device [ 131.585900][ T7473] loop3: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 131.594780][ T7299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.627424][ T7482] loop1: detected capacity change from 0 to 512 [ 131.640466][ T7473] syz.3.976: attempt to access beyond end of device [ 131.640466][ T7473] loop3: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 131.640556][ T7473] Buffer I/O error on dev loop3, logical block 75, lost async page write [ 131.698449][ T7482] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 131.698829][ T7482] System zones: 1-12 [ 131.722871][ T7482] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.978: missing EA_INODE flag [ 131.722910][ T7482] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 131.724795][ T7482] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.978: error while reading EA inode 12 err=-117 [ 131.724853][ T7482] loop1: lost filesystem error report for type 5 error -117 [ 131.728514][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 131.728540][ C1] EXT4-fs (loop1): initial error at time 1791385044: ext4_xattr_inode_iget:437: inode 12 [ 131.728581][ C1] EXT4-fs (loop1): last error at time 1791385044: ext4_xattr_inode_iget:442 [ 131.806508][ T7482] EXT4-fs (loop1): 1 orphan inode deleted [ 131.826251][ T7482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.834513][ T7502] random: crng reseeded on system resumption [ 132.020945][ T7299] veth0_vlan: entered promiscuous mode [ 132.025912][ T7299] veth1_vlan: entered promiscuous mode [ 132.053019][ T7299] veth0_macvtap: entered promiscuous mode [ 132.055996][ T7299] veth1_macvtap: entered promiscuous mode [ 132.075571][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.076793][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.260592][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.289278][ T129] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.289323][ T129] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.289375][ T129] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.289411][ T129] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.367922][ T7526] sctp: [Deprecated]: syz.5.938 (pid 7526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.367922][ T7526] Use struct sctp_sack_info instead [ 132.399221][ T7473] syz.3.976: attempt to access beyond end of device [ 132.399221][ T7473] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 132.568403][ T7529] loop3: detected capacity change from 0 to 164 [ 132.596888][ T7529] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 132.598343][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.983'. [ 132.642963][ T7526] team0: Device gtp0 is of different type [ 132.655444][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.983'. [ 132.707443][ T7531] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 132.876285][ T7535] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=7535 comm=syz.8.984 [ 133.014172][ T7504] loop6: detected capacity change from 0 to 8192 [ 133.054121][ T7539] netlink: 'syz.8.985': attribute type 19 has an invalid length. [ 133.281067][ T7549] netlink: 296 bytes leftover after parsing attributes in process `syz.8.989'. [ 133.353597][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 133.587147][ T7561] loop1: detected capacity change from 0 to 1024 [ 133.598039][ T7561] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 133.615491][ T7561] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.993: lblock 2 mapped to illegal pblock 2 (length 1) [ 133.615558][ T7561] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 133.615685][ T7561] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.993: lblock 0 mapped to illegal pblock 48 (length 1) [ 133.615721][ T7561] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 133.615837][ T7561] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.993: Failed to acquire dquot type 0 [ 133.615862][ T7561] loop1: lost filesystem error report for type 5 error -117 [ 133.615960][ T7561] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 133.615977][ T7561] loop1: lost filesystem error report for type 5 error -117 [ 133.616067][ T7561] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.993: mark_inode_dirty error [ 133.616102][ T7561] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 133.616228][ T7561] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 133.616255][ T7561] EXT4-fs (loop1): 1 orphan inode deleted [ 133.616634][ T7561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.628961][ T42] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.629441][ T42] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 134.019000][ T7572] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=7572 comm=syz.6.996 [ 134.226386][ T7575] sctp: [Deprecated]: syz.3.997 (pid 7575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.226386][ T7575] Use struct sctp_sack_info instead [ 134.302828][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.303309][ T3311] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 134.303338][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 134.303439][ T3311] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 134.303457][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 134.303523][ T3311] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 134.303549][ T3311] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 134.303754][ T3311] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 134.303782][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 134.338130][ T7581] gretap1: entered promiscuous mode [ 134.461991][ T7589] loop5: detected capacity change from 0 to 512 [ 134.485351][ T7589] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 134.485498][ T7589] System zones: 1-12 [ 134.490687][ T7589] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.1000: missing EA_INODE flag [ 134.490746][ T7589] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 134.492658][ T7589] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1000: error while reading EA inode 12 err=-117 [ 134.492695][ T7589] loop5: lost filesystem error report for type 5 error -117 [ 134.494078][ T7589] EXT4-fs (loop5): 1 orphan inode deleted [ 134.500138][ T7589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.658904][ T7299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.687313][ T7599] random: crng reseeded on system resumption [ 134.770335][ T7612] loop3: detected capacity change from 0 to 256 [ 134.859868][ T7618] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=7618 comm=syz.3.1011 [ 134.910599][ T7620] syzkaller0: entered promiscuous mode [ 134.910620][ T7620] syzkaller0: entered allmulticast mode [ 134.912620][ T7622] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1014'. [ 134.919067][ T7622] loop5: detected capacity change from 0 to 512 [ 134.919363][ T7622] EXT4-fs: Ignoring removed i_version option [ 134.919381][ T7622] EXT4-fs: Ignoring removed nobh option [ 134.929757][ T7622] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 134.931849][ T7622] EXT4-fs (loop5): 1 truncate cleaned up [ 134.932216][ T7622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.023279][ T7299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.175708][ T7642] FAULT_INJECTION: forcing a failure. [ 135.175708][ T7642] name fail_futex, interval 1, probability 0, space 0, times 0 [ 135.175739][ T7642] CPU: 1 UID: 0 PID: 7642 Comm: syz.5.1021 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.175863][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.175877][ T7642] Call Trace: [ 135.175883][ T7642] [ 135.175889][ T7642] __dump_stack+0x1d/0x30 [ 135.175969][ T7642] dump_stack_lvl+0x95/0xd0 [ 135.176039][ T7642] dump_stack+0x15/0x1b [ 135.176063][ T7642] should_fail_ex+0x262/0x280 [ 135.176094][ T7642] should_fail+0xb/0x20 [ 135.176186][ T7642] get_futex_key+0x12d/0xb10 [ 135.176232][ T7642] futex_wait_setup+0x49/0x3e0 [ 135.176252][ T7642] ? __cgroup_account_cputime+0x83/0xa0 [ 135.176279][ T7642] ? update_se+0xc1/0x3b0 [ 135.176368][ T7642] __futex_wait+0xa9/0x260 [ 135.176392][ T7642] ? __pfx_futex_wake_mark+0x10/0x10 [ 135.176419][ T7642] futex_wait+0x98/0x1c0 [ 135.176472][ T7642] do_futex+0x391/0x460 [ 135.176506][ T7642] __se_sys_futex+0x2f6/0x370 [ 135.176541][ T7642] __x64_sys_futex+0x78/0x90 [ 135.176606][ T7642] x64_sys_call+0x22e2/0x2550 [ 135.176697][ T7642] do_syscall_64+0x112/0x360 [ 135.176727][ T7642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.176758][ T7642] RIP: 0033:0x7f01cf12e199 [ 135.176776][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.176798][ T7642] RSP: 002b:00007f01cdb870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.176821][ T7642] RAX: ffffffffffffffda RBX: 00007f01cf3b5fa8 RCX: 00007f01cf12e199 [ 135.176887][ T7642] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f01cf3b5fa8 [ 135.176903][ T7642] RBP: 00007f01cf3b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 135.176983][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.176997][ T7642] R13: 00007f01cf3b6038 R14: 00007fffcfdc6150 R15: 00007fffcfdc6238 [ 135.177017][ T7642] [ 135.213779][ T7644] random: crng reseeded on system resumption [ 135.241449][ T7650] loop3: detected capacity change from 0 to 256 [ 135.386374][ T7656] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1026'. [ 135.390907][ T7657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=7657 comm=syz.5.1027 [ 135.406680][ T7656] loop1: detected capacity change from 0 to 512 [ 135.407003][ T7656] EXT4-fs: Ignoring removed i_version option [ 135.407084][ T7656] EXT4-fs: Ignoring removed nobh option [ 135.419403][ T7656] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.427908][ T7656] EXT4-fs (loop1): 1 truncate cleaned up [ 135.428387][ T7656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.441009][ T29] kauditd_printk_skb: 747 callbacks suppressed [ 135.441025][ T29] audit: type=1400 audit(1791385048.691:7223): avc: denied { write } for pid=7654 comm="syz.1.1026" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.444000][ T29] audit: type=1400 audit(1791385048.691:7224): avc: denied { write } for pid=7654 comm="syz.1.1026" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.495318][ T29] audit: type=1326 audit(1791385048.741:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d723e199 code=0x7ffc0000 [ 135.496740][ T29] audit: type=1326 audit(1791385048.741:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d723e199 code=0x7ffc0000 [ 135.497972][ T29] audit: type=1326 audit(1791385048.741:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29d723e199 code=0x7ffc0000 [ 135.498059][ T29] audit: type=1326 audit(1791385048.741:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d723e199 code=0x7ffc0000 [ 135.503307][ T29] audit: type=1326 audit(1791385048.741:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d723e199 code=0x7ffc0000 [ 135.503646][ T29] audit: type=1326 audit(1791385048.751:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d723e199 code=0x7ffc0000 [ 135.503881][ T29] audit: type=1326 audit(1791385048.751:7231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d723e199 code=0x7ffc0000 [ 135.504025][ T29] audit: type=1326 audit(1791385048.751:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d723e199 code=0x7ffc0000 [ 135.566152][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.727323][ T7667] random: crng reseeded on system resumption [ 135.840196][ T7675] Restarting kernel threads ... [ 135.844753][ T7675] Done restarting kernel threads. [ 135.996503][ T7687] loop1: detected capacity change from 0 to 256 [ 136.075108][ T7694] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1040'. [ 136.088751][ T7694] loop6: detected capacity change from 0 to 512 [ 136.090635][ T7694] EXT4-fs: Ignoring removed i_version option [ 136.090657][ T7694] EXT4-fs: Ignoring removed nobh option [ 136.205427][ T7694] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 136.230839][ T7694] EXT4-fs (loop6): 1 truncate cleaned up [ 136.231231][ T7694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.281285][ T7685] random: crng reseeded on system resumption [ 136.351236][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.065129][ T7703] loop6: detected capacity change from 0 to 512 [ 137.078597][ T7703] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.078662][ T7703] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.227467][ T7709] netlink: 296 bytes leftover after parsing attributes in process `syz.5.1043'. [ 137.387152][ T7689] loop3: detected capacity change from 0 to 8192 [ 137.857035][ T7720] ip_tables: iptables: counters copy to user failed while replacing table [ 137.994618][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.071871][ T7730] FAULT_INJECTION: forcing a failure. [ 138.071871][ T7730] name failslab, interval 1, probability 0, space 0, times 0 [ 138.071941][ T7730] CPU: 1 UID: 0 PID: 7730 Comm: syz.6.1049 Not tainted syzkaller #0 PREEMPT(lazy) [ 138.071991][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.072046][ T7730] Call Trace: [ 138.072053][ T7730] [ 138.072110][ T7730] __dump_stack+0x1d/0x30 [ 138.072134][ T7730] dump_stack_lvl+0x95/0xd0 [ 138.072154][ T7730] dump_stack+0x15/0x1b [ 138.072173][ T7730] should_fail_ex+0x262/0x280 [ 138.072224][ T7730] ? do_getname+0x2e/0x1c0 [ 138.072245][ T7730] should_failslab+0x8c/0xb0 [ 138.072282][ T7730] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 138.072328][ T7730] ? do_getname+0x2e/0x1c0 [ 138.072390][ T7730] do_getname+0x2e/0x1c0 [ 138.072415][ T7730] __se_sys_linkat+0x2f/0x1d0 [ 138.072446][ T7730] __x64_sys_linkat+0x67/0x80 [ 138.072549][ T7730] x64_sys_call+0x21e5/0x2550 [ 138.072579][ T7730] do_syscall_64+0x112/0x360 [ 138.072659][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.072685][ T7730] RIP: 0033:0x7f9d7dfee199 [ 138.072703][ T7730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.072767][ T7730] RSP: 002b:00007f9d7ca47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 138.072795][ T7730] RAX: ffffffffffffffda RBX: 00007f9d7e275fa0 RCX: 00007f9d7dfee199 [ 138.072811][ T7730] RDX: ffffffffffffff9c RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 138.072824][ T7730] RBP: 00007f9d7ca47090 R08: 0000000000001000 R09: 0000000000000000 [ 138.072836][ T7730] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 138.072938][ T7730] R13: 00007f9d7e276038 R14: 00007f9d7e275fa0 R15: 00007ffeb55a3bd8 [ 138.073019][ T7730] [ 139.165580][ T7745] sctp: [Deprecated]: syz.3.1055 (pid 7745) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.165580][ T7745] Use struct sctp_sack_info instead [ 139.457729][ T7728] loop8: detected capacity change from 0 to 8192 [ 139.691278][ T7762] loop3: detected capacity change from 0 to 512 [ 139.714849][ T7762] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 139.714915][ T7762] System zones: 1-12 [ 139.718220][ T7762] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.1061: missing EA_INODE flag [ 139.718247][ T7762] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 139.718332][ T7762] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1061: error while reading EA inode 12 err=-117 [ 139.718466][ T7762] loop3: lost filesystem error report for type 5 error -117 [ 139.718501][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 139.718519][ C1] EXT4-fs (loop3): initial error at time 1791385052: ext4_xattr_inode_iget:437: inode 12 [ 139.718554][ C1] EXT4-fs (loop3): last error at time 1791385052: ext4_xattr_inode_iget:437: inode 12 [ 139.718736][ T7762] EXT4-fs (loop3): 1 orphan inode deleted [ 139.719203][ T7762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.728807][ T7762] syzkaller0: entered promiscuous mode [ 139.728828][ T7762] syzkaller0: entered allmulticast mode [ 139.750995][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1058'. [ 140.509662][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.727073][ T7782] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=7782 comm=syz.1.1066 [ 141.191458][ T7757] loop8: detected capacity change from 0 to 8192 [ 141.200050][ T7787] loop6: detected capacity change from 0 to 512 [ 141.394227][ T7787] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 141.396600][ T7787] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.1067: corrupted in-inode xattr: e_value size too large [ 141.396633][ T7787] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.398502][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 141.398522][ C0] EXT4-fs (loop6): initial error at time 1791385054: ext4_iget_extra_inode:5210: inode 15 [ 141.398516][ T7787] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1067: couldn't read orphan inode 15 (err -117) [ 141.398553][ C0] EXT4-fs (loop6): last error at time 1791385054: ext4_iget_extra_inode:5210: inode 15 [ 141.398575][ T7787] loop6: lost filesystem error report for type 5 error -117 [ 141.399263][ T7787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.524588][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 141.524604][ T29] audit: type=1400 audit(1791385054.651:7317): avc: denied { write } for pid=7784 comm="syz.6.1067" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.524635][ T29] audit: type=1400 audit(1791385054.751:7318): avc: denied { map } for pid=7784 comm="syz.6.1067" path="/192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpuset.effective_mems" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 141.738978][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.789764][ T7799] sctp: [Deprecated]: syz.3.1073 (pid 7799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.789764][ T7799] Use struct sctp_sack_info instead [ 141.922585][ T7811] loop1: detected capacity change from 0 to 764 [ 141.990533][ T7811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1077'. [ 142.038800][ T7823] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=7823 comm=syz.1.1080 [ 142.106609][ T7815] random: crng reseeded on system resumption [ 142.121900][ T7828] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1082'. [ 142.125265][ T7819] random: crng reseeded on system resumption [ 142.651593][ T7850] loop5: detected capacity change from 0 to 764 [ 142.844549][ T7850] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1090'. [ 143.026828][ T29] audit: type=1400 audit(1791385056.271:7319): avc: denied { watch } for pid=7854 comm="syz.5.1092" path="/18" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 143.066427][ T7857] loop5: detected capacity change from 0 to 512 [ 143.117363][ T7857] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 143.336295][ T7868] loop1: detected capacity change from 0 to 1024 [ 143.345495][ T7868] EXT4-fs: Ignoring removed oldalloc option [ 143.345572][ T7868] EXT4-fs: Ignoring removed orlov option [ 143.512504][ T7845] loop6: detected capacity change from 0 to 8192 [ 143.577954][ T7857] EXT4-fs (loop5): 1 truncate cleaned up [ 143.578584][ T7857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.606124][ T7868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.606182][ T7868] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.642743][ T29] audit: type=1400 audit(1791385056.891:7320): avc: denied { append } for pid=7867 comm="syz.1.1096" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.664840][ T7872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=7872 comm=syz.6.1097 [ 143.691365][ T7857] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 143.691488][ T7857] syzkaller0: linktype set to 270 [ 143.696062][ T29] audit: type=1400 audit(1791385056.941:7321): avc: denied { write } for pid=7867 comm="syz.1.1096" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.696090][ T7868] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1096: bg 0: block 112: padding at end of block bitmap is not set [ 143.750480][ T7868] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.1096: lblock 0 mapped to illegal pblock 0 (length 1) [ 143.753082][ T7868] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.1096: lblock 0 mapped to illegal pblock 0 (length 1) [ 143.761464][ T7868] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.1096: lblock 0 mapped to illegal pblock 0 (length 1) [ 143.768647][ T29] audit: type=1400 audit(1791385057.011:7322): avc: denied { ioctl } for pid=7867 comm="syz.1.1096" path="/221/file1/file1" dev="loop1" ino=15 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.787773][ T7299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.866900][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.394404][ T7885] loop6: detected capacity change from 0 to 764 [ 144.488304][ T7885] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1102'. [ 144.510679][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 144.551887][ T29] audit: type=1326 audit(1791385057.801:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7dfee199 code=0x7ffc0000 [ 144.551932][ T29] audit: type=1326 audit(1791385057.801:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7dfee199 code=0x7ffc0000 [ 144.551969][ T29] audit: type=1326 audit(1791385057.801:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7dfee199 code=0x7ffc0000 [ 144.551998][ T29] audit: type=1326 audit(1791385057.801:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9d7dfee199 code=0x7ffc0000 [ 145.821585][ T7882] loop5: detected capacity change from 0 to 8192 [ 146.436933][ T7908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1959 sclass=netlink_route_socket pid=7908 comm=syz.3.1109 [ 146.517835][ T7910] loop1: detected capacity change from 0 to 8192 [ 146.605500][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 146.605520][ T29] audit: type=1326 audit(1791385059.561:7488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d7dfae9ce code=0x7ffc0000 [ 146.605631][ T29] audit: type=1326 audit(1791385059.571:7489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d7dfae9ce code=0x7ffc0000 [ 146.605722][ T29] audit: type=1326 audit(1791385059.571:7490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d7dfae9ce code=0x7ffc0000 [ 146.605752][ T29] audit: type=1326 audit(1791385059.571:7491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d7dfae9ce code=0x7ffc0000 [ 146.605781][ T29] audit: type=1326 audit(1791385059.571:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d7dfae9ce code=0x7ffc0000 [ 146.605836][ T29] audit: type=1326 audit(1791385059.581:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d7dfae9ce code=0x7ffc0000 [ 146.605921][ T29] audit: type=1326 audit(1791385059.621:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d7dfae9ce code=0x7ffc0000 [ 146.605950][ T29] audit: type=1326 audit(1791385059.621:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d7dfae9ce code=0x7ffc0000 [ 146.605980][ T29] audit: type=1326 audit(1791385059.621:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d7dfae9ce code=0x7ffc0000 [ 146.606015][ T29] audit: type=1326 audit(1791385059.621:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.1105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d7dfae9ce code=0x7ffc0000 [ 146.922267][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1110'. [ 146.927762][ T7920] random: crng reseeded on system resumption [ 146.992199][ T7924] sctp: [Deprecated]: syz.3.1115 (pid 7924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.992199][ T7924] Use struct sctp_sack_info instead [ 147.061370][ T3416] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000F/input/input18 [ 147.062235][ T3416] hid-generic 0005:FFFD057E:0305.000F: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 147.112525][ T7926] Restarting kernel threads ... [ 147.117145][ T7926] Done restarting kernel threads. [ 147.233805][ T7920] syzkaller0: entered promiscuous mode [ 147.233843][ T7920] syzkaller0: entered allmulticast mode [ 147.316217][ T7937] loop8: detected capacity change from 0 to 512 [ 147.335832][ T7937] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 147.335910][ T7937] EXT4-fs (loop8): orphan cleanup on readonly fs [ 147.336440][ T7937] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.336654][ T7937] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 147.337552][ T7937] EXT4-fs error (device loop8): __ext4_iget:5592: inode #16: block 127754: comm syz.8.1118: invalid block [ 147.337692][ T7937] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.338230][ T7937] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.1118: couldn't read orphan inode 16 (err -117) [ 147.338290][ T7937] loop8: lost filesystem error report for type 5 error -117 [ 147.338581][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 147.338638][ C1] EXT4-fs (loop8): initial error at time 1791385060: __ext4_iget:5592: inode 16: block 127754 [ 147.338819][ C1] EXT4-fs (loop8): last error at time 1791385060: ext4_orphan_get:1408 [ 147.342568][ T7937] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.455331][ T7949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1122'. [ 147.459699][ T7947] syzkaller0: entered promiscuous mode [ 147.459718][ T7947] syzkaller0: entered allmulticast mode [ 147.463675][ T7949] loop1: detected capacity change from 0 to 512 [ 147.486160][ T4329] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.522624][ T7949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.522733][ T7949] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.557439][ T7955] loop8: detected capacity change from 0 to 1024 [ 147.557805][ T7955] EXT4-fs: Ignoring removed nobh option [ 147.571286][ T7955] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #3: comm syz.8.1124: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 147.571331][ T7955] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.571427][ T7955] EXT4-fs error (device loop8): ext4_quota_enable:7263: comm syz.8.1124: Bad quota inode: 3, type: 0 [ 147.571450][ T7955] loop8: lost filesystem error report for type 5 error -117 [ 147.571498][ T7955] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 147.571624][ T7955] EXT4-fs (loop8): mount failed [ 147.640776][ T7955] netlink: 'syz.8.1124': attribute type 1 has an invalid length. [ 147.640879][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1124'. [ 147.672861][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.717112][ T7969] loop8: detected capacity change from 0 to 1024 [ 147.720728][ T7969] EXT4-fs: Ignoring removed nobh option [ 147.720767][ T7969] EXT4-fs: Ignoring removed bh option [ 147.749555][ T7969] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.755703][ T7969] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.817835][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1128'. [ 147.865048][ T7982] FAULT_INJECTION: forcing a failure. [ 147.865048][ T7982] name failslab, interval 1, probability 0, space 0, times 0 [ 147.865077][ T7982] CPU: 1 UID: 0 PID: 7982 Comm: syz.3.1133 Not tainted syzkaller #0 PREEMPT(lazy) [ 147.865174][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.865189][ T7982] Call Trace: [ 147.865197][ T7982] [ 147.865206][ T7982] __dump_stack+0x1d/0x30 [ 147.865262][ T7982] dump_stack_lvl+0x95/0xd0 [ 147.865288][ T7982] dump_stack+0x15/0x1b [ 147.865311][ T7982] should_fail_ex+0x262/0x280 [ 147.865342][ T7982] ? __break_lease+0x112/0x1580 [ 147.865375][ T7982] should_failslab+0x8c/0xb0 [ 147.865411][ T7982] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 147.865518][ T7982] ? __break_lease+0x112/0x1580 [ 147.865566][ T7982] __break_lease+0x112/0x1580 [ 147.865597][ T7982] ? selinux_file_open+0x2e8/0x330 [ 147.865629][ T7982] do_dentry_open+0x974/0xa60 [ 147.865719][ T7982] vfs_open+0x37/0x1e0 [ 147.865746][ T7982] path_openat+0xc01/0x10d0 [ 147.865783][ T7982] ? kstrtouint+0x76/0xc0 [ 147.865871][ T7982] do_file_open+0x16c/0x290 [ 147.865916][ T7982] do_sys_openat2+0xa0/0x130 [ 147.865946][ T7982] __x64_sys_creat+0x65/0x90 [ 147.865980][ T7982] x64_sys_call+0xea6/0x2550 [ 147.866053][ T7982] do_syscall_64+0x112/0x360 [ 147.866083][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.866109][ T7982] RIP: 0033:0x7fb9fb57e199 [ 147.866125][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.866200][ T7982] RSP: 002b:00007fb9f9fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 147.866218][ T7982] RAX: ffffffffffffffda RBX: 00007fb9fb805fa0 RCX: 00007fb9fb57e199 [ 147.866230][ T7982] RDX: 0000000000000000 RSI: 0000000000000110 RDI: 00002000000000c0 [ 147.866244][ T7982] RBP: 00007fb9f9fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.866259][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.866272][ T7982] R13: 00007fb9fb806038 R14: 00007fb9fb805fa0 R15: 00007fff280cfe38 [ 147.866364][ T7982] [ 147.883192][ T7985] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1134'. [ 148.698224][ T8001] random: crng reseeded on system resumption [ 148.875686][ T8001] syzkaller0: entered promiscuous mode [ 148.875947][ T8001] syzkaller0: entered allmulticast mode [ 148.941133][ T8014] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1145'. [ 149.159422][ T8016] loop8: detected capacity change from 0 to 128 [ 149.271631][ T8016] syz.8.1146: attempt to access beyond end of device [ 149.271631][ T8016] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 149.295746][ T8016] syz.8.1146: attempt to access beyond end of device [ 149.295746][ T8016] loop8: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 149.519131][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1148'. [ 149.526311][ T8020] syz.8.1146: attempt to access beyond end of device [ 149.526311][ T8020] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 149.529650][ T7987] loop3: detected capacity change from 0 to 8192 [ 149.754464][ T8037] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=8037 comm=syz.8.1153 [ 150.479366][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1162'. [ 150.643647][ T8066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1157'. [ 150.698201][ T8070] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1167'. [ 150.918523][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 151.599525][ T8072] loop3: detected capacity change from 0 to 128 [ 151.633247][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 151.633264][ T29] audit: type=1326 audit(1791385064.851:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb9fb53e9ce code=0x7ffc0000 [ 151.636287][ T29] audit: type=1326 audit(1791385064.881:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb9fb53e9ce code=0x7ffc0000 [ 151.730611][ T29] audit: type=1326 audit(1791385064.971:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb9fb57d007 code=0x7ffc0000 [ 151.767737][ T29] audit: type=1326 audit(1791385064.981:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb9fb57f40a code=0x7ffc0000 [ 151.834808][ T8090] loop1: detected capacity change from 0 to 512 [ 151.881925][ T8090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.881991][ T8090] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.888038][ T29] audit: type=1400 audit(1791385065.131:7948): avc: denied { write } for pid=8089 comm="syz.1.1174" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.900085][ T8045] loop5: detected capacity change from 0 to 8192 [ 151.949246][ T29] audit: type=1326 audit(1791385065.201:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9fb53e9ce code=0x7ffc0000 [ 151.955048][ T29] audit: type=1326 audit(1791385065.201:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb9fb57c5d7 code=0x7ffc0000 [ 152.073841][ T8096] FAULT_INJECTION: forcing a failure. [ 152.073841][ T8096] name fail_futex, interval 1, probability 0, space 0, times 0 [ 152.073908][ T8096] CPU: 0 UID: 0 PID: 8096 Comm: syz.8.1175 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.073937][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.073952][ T8096] Call Trace: [ 152.073958][ T8096] [ 152.073966][ T8096] __dump_stack+0x1d/0x30 [ 152.073996][ T8096] dump_stack_lvl+0x95/0xd0 [ 152.074095][ T8096] dump_stack+0x15/0x1b [ 152.074116][ T8096] should_fail_ex+0x262/0x280 [ 152.074149][ T8096] should_fail+0xb/0x20 [ 152.074206][ T8096] get_futex_key+0x12d/0xb10 [ 152.074238][ T8096] ? xa_store+0x3e/0x50 [ 152.074270][ T8096] futex_wake+0x89/0x400 [ 152.074370][ T8096] do_futex+0x3f8/0x460 [ 152.074408][ T8096] __se_sys_futex+0x2f6/0x370 [ 152.074481][ T8096] __x64_sys_futex+0x78/0x90 [ 152.074518][ T8096] x64_sys_call+0x22e2/0x2550 [ 152.074604][ T8096] do_syscall_64+0x112/0x360 [ 152.074701][ T8096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.074779][ T8096] RIP: 0033:0x7f7a67e7e199 [ 152.074797][ T8096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.074819][ T8096] RSP: 002b:00007f7a668d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.074841][ T8096] RAX: ffffffffffffffda RBX: 00007f7a68105fa8 RCX: 00007f7a67e7e199 [ 152.074932][ T8096] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7a68105fac [ 152.074948][ T8096] RBP: 00007f7a68105fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 152.074964][ T8096] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 152.074978][ T8096] R13: 00007f7a68106038 R14: 00007ffde9bd7060 R15: 00007ffde9bd7148 [ 152.074999][ T8096] [ 152.220134][ T29] audit: type=1326 audit(1791385065.201:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9fb53e9ce code=0x7ffc0000 [ 152.220169][ T29] audit: type=1326 audit(1791385065.261:7952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9fb57de2b code=0x7ffc0000 [ 152.220277][ T29] audit: type=1326 audit(1791385065.261:7953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb9fb53e9ce code=0x7ffc0000 [ 152.444742][ T8090] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 152.472499][ T8114] loop6: detected capacity change from 0 to 512 [ 152.492390][ T8114] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 152.495339][ T8114] EXT4-fs (loop6): 1 truncate cleaned up [ 152.495777][ T8114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.567872][ T8120] loop3: detected capacity change from 0 to 764 [ 152.589208][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.642702][ T8120] __nla_validate_parse: 3 callbacks suppressed [ 152.642797][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1184'. [ 152.769660][ T8132] loop3: detected capacity change from 0 to 256 [ 152.786156][ T8132] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 152.786185][ T8132] FAT-fs (loop3): Filesystem has been set read-only [ 152.786247][ T8132] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 152.786668][ T8132] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 152.855975][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1183'. [ 153.374699][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.576747][ T8126] loop1: detected capacity change from 0 to 4096 [ 153.715611][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1193'. [ 153.749385][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1194'. [ 153.818451][ T8126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.951633][ T8157] FAULT_INJECTION: forcing a failure. [ 153.951633][ T8157] name failslab, interval 1, probability 0, space 0, times 0 [ 153.951821][ T8157] CPU: 0 UID: 0 PID: 8157 Comm: syz.8.1197 Not tainted syzkaller #0 PREEMPT(lazy) [ 153.951849][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.951874][ T8157] Call Trace: [ 153.951882][ T8157] [ 153.951892][ T8157] __dump_stack+0x1d/0x30 [ 153.951921][ T8157] dump_stack_lvl+0x95/0xd0 [ 153.951946][ T8157] dump_stack+0x15/0x1b [ 153.951980][ T8157] should_fail_ex+0x262/0x280 [ 153.952118][ T8157] ? __register_sysctl_table+0x7a0/0xbe0 [ 153.952198][ T8157] should_failslab+0x8c/0xb0 [ 153.952230][ T8157] __kmalloc_noprof+0xd0/0x4d0 [ 153.952259][ T8157] ? __register_sysctl_table+0x7a0/0xbe0 [ 153.952284][ T8157] __register_sysctl_table+0x7a0/0xbe0 [ 153.952331][ T8157] setup_ipc_sysctls+0x894/0x8d0 [ 153.952434][ T8157] copy_ipcs+0x297/0x460 [ 153.952461][ T8157] create_new_namespaces+0x121/0x420 [ 153.952575][ T8157] unshare_nsproxy_namespaces+0x115/0x150 [ 153.952620][ T8157] ksys_unshare+0x42b/0x710 [ 153.952710][ T8157] __x64_sys_unshare+0x1f/0x30 [ 153.952742][ T8157] x64_sys_call+0x1e33/0x2550 [ 153.952768][ T8157] do_syscall_64+0x112/0x360 [ 153.952823][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.952849][ T8157] RIP: 0033:0x7f7a67e7e199 [ 153.952867][ T8157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.952926][ T8157] RSP: 002b:00007f7a668d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 153.952946][ T8157] RAX: ffffffffffffffda RBX: 00007f7a68105fa0 RCX: 00007f7a67e7e199 [ 153.952963][ T8157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040480 [ 153.952978][ T8157] RBP: 00007f7a67f158e0 R08: 0000000000000000 R09: 0000000000000000 [ 153.952992][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.953027][ T8157] R13: 00007f7a68106038 R14: 00007f7a68105fa0 R15: 00007ffde9bd7148 [ 153.953048][ T8157] [ 153.954975][ T8157] sysctl could not get directory: /kernel -12 [ 154.254528][ T8126] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.1186: corrupted inode contents [ 154.285106][ T8126] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #15: comm syz.1.1186: mark_inode_dirty error [ 154.313224][ T8126] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.1186: corrupted inode contents [ 154.314616][ T8126] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.1186: mark_inode_dirty error [ 154.315855][ T8126] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.1186: corrupted inode contents [ 154.317794][ T8126] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.1186: mark_inode_dirty error [ 154.382123][ T8126] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.1186: corrupted inode contents [ 154.382351][ T8126] EXT4-fs error (device loop1): ext4_truncate:4721: inode #15: comm syz.1.1186: mark_inode_dirty error [ 154.382477][ T8126] EXT4-fs error (device loop1) in ext4_setattr:6247: Corrupt filesystem [ 154.458824][ T8163] loop5: detected capacity change from 0 to 512 [ 154.493599][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.499365][ T8168] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=8168 comm=syz.3.1201 [ 154.503367][ T8163] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.590414][ T8161] loop8: detected capacity change from 0 to 512 [ 155.028614][ T8161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 155.029022][ T8161] System zones: 1-12 [ 155.055778][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'. [ 155.069463][ T8161] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.1198: missing EA_INODE flag [ 155.069502][ T8161] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 155.070637][ T8161] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.1198: error while reading EA inode 12 err=-117 [ 155.070675][ T8161] loop8: lost filesystem error report for type 5 error -117 [ 155.072041][ T8161] EXT4-fs (loop8): 1 orphan inode deleted [ 155.129677][ T8161] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.235067][ T8161] syzkaller0: entered promiscuous mode [ 155.235281][ T8161] syzkaller0: entered allmulticast mode [ 155.316390][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1204'. [ 155.391105][ T8183] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1205'. [ 155.411003][ T8183] loop1: detected capacity change from 0 to 512 [ 155.455953][ T8183] EXT4-fs: Ignoring removed i_version option [ 155.455979][ T8183] EXT4-fs: Ignoring removed nobh option [ 155.471083][ T8183] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.472322][ T8183] EXT4-fs (loop1): 1 truncate cleaned up [ 155.474730][ T8183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.539708][ T8163] EXT4-fs (loop5): 1 truncate cleaned up [ 155.540258][ T8163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.593908][ T4329] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.661354][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.690135][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.690498][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.805052][ T8194] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 155.814486][ T8194] EXT4-fs (loop3): 1 truncate cleaned up [ 155.814913][ T8194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.839553][ T8191] random: crng reseeded on system resumption [ 155.957711][ T7299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.216745][ T8206] random: crng reseeded on system resumption [ 156.308646][ T8209] sctp: [Deprecated]: syz.8.1214 (pid 8209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.308646][ T8209] Use struct sctp_sack_info instead [ 156.389619][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.440339][ T8217] sg_write: data in/out 286720/136 bytes for SCSI command 0x0-- guessing data in; [ 156.440339][ T8217] program syz.3.1215 not setting count and/or reply_len properly [ 156.441641][ T3388] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0010/input/input19 [ 156.444740][ T3388] hid-generic 0005:FFFD057E:0305.0010: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 156.484814][ T8209] team0: Device gtp0 is of different type [ 156.541707][ T8215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 156.541888][ T8215] System zones: 1-12 [ 156.562042][ T8215] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.1216: missing EA_INODE flag [ 156.562081][ T8215] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 156.563003][ T8215] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1216: error while reading EA inode 12 err=-117 [ 156.563146][ T8215] loop6: lost filesystem error report for type 5 error -117 [ 156.564140][ T8215] EXT4-fs (loop6): 1 orphan inode deleted [ 156.581278][ T8215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.598082][ T8212] syz.5.1210: attempt to access beyond end of device [ 156.598082][ T8212] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 156.617978][ T8212] syz.5.1210: attempt to access beyond end of device [ 156.617978][ T8212] loop5: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 156.658473][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 156.658525][ T29] audit: type=1326 audit(1791385069.881:8241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.5.1210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cf12e199 code=0x7ffc0000 [ 156.658557][ T29] audit: type=1326 audit(1791385069.901:8243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.5.1210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cf12e199 code=0x7ffc0000 [ 156.658707][ T29] audit: type=1326 audit(1791385069.901:8242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.5.1210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cf12e199 code=0x7ffc0000 [ 156.659838][ T29] audit: type=1326 audit(1791385069.911:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.5.1210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cf12e199 code=0x7ffc0000 [ 156.659947][ T29] audit: type=1326 audit(1791385069.911:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.5.1210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cf12e199 code=0x7ffc0000 [ 156.853963][ T8215] syzkaller0: entered promiscuous mode [ 156.854132][ T8215] syzkaller0: entered allmulticast mode [ 156.929776][ T29] audit: type=1326 audit(1791385070.171:8246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.5.1210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01cf12e199 code=0x7ffc0000 [ 156.998164][ T29] audit: type=1326 audit(1791385070.231:8247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.5.1210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cf12e199 code=0x7ffc0000 [ 157.043388][ T29] audit: type=1326 audit(1791385070.291:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.5.1210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cf12e199 code=0x7ffc0000 [ 157.087184][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.087761][ T29] audit: type=1326 audit(1791385070.331:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.5.1210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cf12e199 code=0x7ffc0000 [ 157.140264][ T29] audit: type=1326 audit(1791385070.391:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.5.1210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cf12e199 code=0x7ffc0000 [ 157.177979][ T8234] set_capacity_and_notify: 5 callbacks suppressed [ 157.177994][ T8234] loop1: detected capacity change from 0 to 512 [ 157.214919][ T8234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.214996][ T8234] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.304230][ T8234] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 157.361274][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.427512][ T8212] syz.5.1210: attempt to access beyond end of device [ 157.427512][ T8212] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 157.483361][ T8239] loop6: detected capacity change from 0 to 512 [ 157.483992][ T8239] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 157.486048][ T8239] EXT4-fs (loop6): 1 truncate cleaned up [ 157.486448][ T8239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.685261][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'. [ 157.734158][ T8251] random: crng reseeded on system resumption [ 157.871250][ T8246] loop3: detected capacity change from 0 to 512 [ 158.581322][ T8226] loop8: detected capacity change from 0 to 8192 [ 159.240523][ T8246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 159.240803][ T8246] System zones: 1-12 [ 159.245045][ T8246] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.1224: missing EA_INODE flag [ 159.245085][ T8246] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 159.246448][ T8246] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1224: error while reading EA inode 12 err=-117 [ 159.246487][ T8246] loop3: lost filesystem error report for type 5 error -117 [ 159.248169][ T8246] EXT4-fs (loop3): 1 orphan inode deleted [ 159.248521][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 159.248540][ C0] EXT4-fs (loop3): initial error at time 1791385072: ext4_xattr_inode_iget:437: inode 12 [ 159.248570][ C0] EXT4-fs (loop3): last error at time 1791385072: ext4_xattr_inode_iget:442 [ 159.384113][ T8246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.444232][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.501662][ T8264] loop6: detected capacity change from 0 to 512 [ 159.524539][ T8261] sctp: [Deprecated]: syz.8.1229 (pid 8261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.524539][ T8261] Use struct sctp_sack_info instead [ 159.584238][ T8264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.584307][ T8264] ext4 filesystem being mounted at /222/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.593154][ T3406] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0011/input/input20 [ 159.593889][ T3406] hid-generic 0005:FFFD057E:0305.0011: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 159.639677][ T8264] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1227'. [ 159.701112][ T8261] team0: Device gtp0 is of different type [ 159.754863][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1227'. [ 159.755823][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1227'. [ 159.842373][ T8273] loop5: detected capacity change from 0 to 512 [ 159.859515][ T8281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1230'. [ 159.911493][ T8273] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 159.911773][ T8273] System zones: 1-12 [ 159.913279][ T8283] syzkaller0: entered promiscuous mode [ 159.913313][ T8283] syzkaller0: entered allmulticast mode [ 159.915891][ T8273] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.1231: missing EA_INODE flag [ 159.915922][ T8273] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 159.918022][ T8273] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1231: error while reading EA inode 12 err=-117 [ 159.918100][ T8273] loop5: lost filesystem error report for type 5 error -117 [ 159.918587][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 159.918619][ C0] EXT4-fs (loop5): initial error at time 1791385073: ext4_xattr_inode_iget:437: inode 12 [ 159.918723][ C0] EXT4-fs (loop5): last error at time 1791385073: ext4_xattr_inode_iget:442 [ 160.010631][ T8273] EXT4-fs (loop5): 1 orphan inode deleted [ 160.036184][ T8273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.107057][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1232'. [ 160.108848][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.285696][ T8297] syzkaller0: entered promiscuous mode [ 160.285732][ T8297] syzkaller0: entered allmulticast mode [ 160.360309][ T7299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.389958][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.440903][ T8305] random: crng reseeded on system resumption [ 160.452382][ T8307] loop3: detected capacity change from 0 to 764 [ 160.510165][ T8311] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1239'. [ 160.531299][ T8311] loop5: detected capacity change from 0 to 512 [ 160.531636][ T8311] EXT4-fs: Ignoring removed i_version option [ 160.531706][ T8311] EXT4-fs: Ignoring removed nobh option [ 160.556914][ T8311] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 160.581894][ T8311] EXT4-fs (loop5): 1 truncate cleaned up [ 160.582481][ T8311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.637966][ T7299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.713652][ T8305] Restarting kernel threads ... [ 160.725834][ T8305] Done restarting kernel threads. [ 160.782432][ T8323] loop5: detected capacity change from 0 to 512 [ 160.802667][ T8323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.802837][ T8323] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.805974][ T8323] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 160.847772][ T7299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.027726][ T8333] sctp: [Deprecated]: syz.3.1246 (pid 8333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.027726][ T8333] Use struct sctp_sack_info instead [ 161.084189][ T8337] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1247'. [ 161.104672][ T8337] loop1: detected capacity change from 0 to 512 [ 161.105006][ T8337] EXT4-fs: Ignoring removed i_version option [ 161.105027][ T8337] EXT4-fs: Ignoring removed nobh option [ 161.108182][ T3416] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0012/input/input21 [ 161.109159][ T3416] hid-generic 0005:FFFD057E:0305.0012: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 161.111388][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1244'. [ 161.135360][ T8337] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.155572][ T8337] EXT4-fs (loop1): 1 truncate cleaned up [ 161.160197][ T8337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.206078][ T8348] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.206102][ T8348] EXT4-fs: Ignoring removed bh option [ 161.220554][ T8348] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 161.235590][ T8347] fido_id[8347]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 161.252093][ T8331] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 161.252214][ T8331] System zones: 1-12 [ 161.260500][ T8331] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.1245: missing EA_INODE flag [ 161.260600][ T8331] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 161.261093][ T8331] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1245: error while reading EA inode 12 err=-117 [ 161.261233][ T8331] loop6: lost filesystem error report for type 5 error -117 [ 161.262358][ T8331] EXT4-fs (loop6): 1 orphan inode deleted [ 161.273429][ T8331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.331273][ T8348] EXT4-fs (loop8): failed to open journal device unknown-block(0,3) -ENXIO [ 161.398206][ T8331] syzkaller0: entered promiscuous mode [ 161.398333][ T8331] syzkaller0: entered allmulticast mode [ 161.478309][ T8348] mqueue: Unknown parameter '@(^í\'&' [ 161.523519][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.600166][ T8354] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.1248: bad orphan inode 15 [ 161.600277][ T8354] loop8: lost filesystem error report for type 5 error -117 [ 161.601283][ T8354] ext4_test_bit(bit=14, block=5) = 0 [ 161.603462][ T8354] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.649006][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'. [ 161.774356][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.019656][ T8367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.020999][ T8367] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.964037][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 162.964052][ T29] audit: type=1400 audit(1791385076.211:8422): avc: denied { write } for pid=8366 comm="syz.6.1254" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.184519][ T4329] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.194030][ T3873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.317186][ T8380] random: crng reseeded on system resumption [ 163.349244][ T8370] set_capacity_and_notify: 4 callbacks suppressed [ 163.349300][ T8370] loop3: detected capacity change from 0 to 8192 [ 163.850847][ T8391] macsec2: entered promiscuous mode [ 163.872718][ T8392] Restarting kernel threads ... [ 163.872998][ T8392] Done restarting kernel threads. [ 163.962106][ T8392] syzkaller0: entered promiscuous mode [ 163.962129][ T8392] syzkaller0: entered allmulticast mode [ 164.014050][ T8393] loop8: detected capacity change from 0 to 4096 [ 164.079855][ T8397] __nla_validate_parse: 1 callbacks suppressed [ 164.079873][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1264'. [ 164.190456][ T8403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1266'. [ 165.262229][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1262'. [ 165.482132][ T8412] FAULT_INJECTION: forcing a failure. [ 165.482132][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 165.482251][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.3.1269 Not tainted syzkaller #0 PREEMPT(lazy) [ 165.482279][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 165.482293][ T8412] Call Trace: [ 165.482301][ T8412] [ 165.482309][ T8412] __dump_stack+0x1d/0x30 [ 165.482338][ T8412] dump_stack_lvl+0x95/0xd0 [ 165.482362][ T8412] dump_stack+0x15/0x1b [ 165.482442][ T8412] should_fail_ex+0x262/0x280 [ 165.482472][ T8412] ? skb_clone+0x151/0x1f0 [ 165.482500][ T8412] should_failslab+0x8c/0xb0 [ 165.482559][ T8412] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 165.482594][ T8412] ? skb_clone+0x151/0x1f0 [ 165.482618][ T8412] skb_clone+0x151/0x1f0 [ 165.482660][ T8412] nfnetlink_rcv+0x310/0x1740 [ 165.482764][ T8412] ? xas_load+0x413/0x430 [ 165.482791][ T8412] ? __rcu_read_unlock+0x4e/0x70 [ 165.482871][ T8412] ? __account_obj_stock+0x43d/0x720 [ 165.482903][ T8412] ? __rcu_read_unlock+0x4e/0x70 [ 165.482939][ T8412] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 165.483053][ T8412] ? security_inode_alloc+0x37/0x100 [ 165.483133][ T8412] ? should_failslab+0x8c/0xb0 [ 165.483197][ T8412] ? kmem_cache_alloc_noprof+0x197/0x3f0 [ 165.483231][ T8412] ? security_inode_alloc+0x37/0x100 [ 165.483267][ T8412] ? selinux_inode_alloc_security+0x103/0x130 [ 165.483337][ T8412] ? ktime_get_coarse_real_ts64_mg+0x187/0x1a0 [ 165.483375][ T8412] ? set_normalized_timespec64+0xe0/0x110 [ 165.483416][ T8412] ? inode_doinit_with_dentry+0x98/0x7b0 [ 165.483472][ T8412] ? inode_set_ctime_current+0x65b/0x8f0 [ 165.483548][ T8412] ? selinux_nlmsg_lookup+0x9b/0x870 [ 165.483592][ T8412] netlink_unicast+0x5a9/0x680 [ 165.483627][ T8412] netlink_sendmsg+0x5be/0x6f0 [ 165.483718][ T8412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.483743][ T8412] ____sys_sendmsg+0x532/0x580 [ 165.483770][ T8412] ___sys_sendmsg+0x195/0x1e0 [ 165.483811][ T8412] __x64_sys_sendmsg+0xd4/0x160 [ 165.483842][ T8412] x64_sys_call+0x22ab/0x2550 [ 165.483871][ T8412] do_syscall_64+0x112/0x360 [ 165.483901][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.483991][ T8412] RIP: 0033:0x7fb9fb57e199 [ 165.484009][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.484029][ T8412] RSP: 002b:00007fb9f9fd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.484052][ T8412] RAX: ffffffffffffffda RBX: 00007fb9fb805fa0 RCX: 00007fb9fb57e199 [ 165.484083][ T8412] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 165.484098][ T8412] RBP: 00007fb9f9fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.484113][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.484128][ T8412] R13: 00007fb9fb806038 R14: 00007fb9fb805fa0 R15: 00007fff280cfe38 [ 165.484149][ T8412] [ 165.760176][ T8388] loop6: detected capacity change from 0 to 8192 [ 166.108733][ T29] audit: type=1326 audit(1791385079.331:8423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8383 comm="syz.5.1262" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01cf12e199 code=0x0 [ 166.157323][ T8415] loop8: detected capacity change from 0 to 512 [ 166.247880][ T8415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.247949][ T8415] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.283903][ T29] audit: type=1400 audit(1791385079.531:8424): avc: denied { write } for pid=8413 comm="syz.8.1268" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.404587][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1270'. [ 166.538797][ T8418] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 166.581186][ T8405] loop1: detected capacity change from 0 to 8192 [ 166.697101][ T4329] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.737388][ T8434] sctp: [Deprecated]: syz.6.1276 (pid 8434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.737388][ T8434] Use struct sctp_sack_info instead [ 166.770138][ T29] audit: type=1400 audit(1791385080.021:8425): avc: denied { mount } for pid=8437 comm="syz.3.1278" name="/" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 166.772219][ T29] audit: type=1400 audit(1791385080.021:8426): avc: denied { search } for pid=8437 comm="syz.3.1278" name="/" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.772256][ T29] audit: type=1400 audit(1791385080.021:8427): avc: denied { search } for pid=8437 comm="syz.3.1278" name="usb_gadget" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.845712][ T8439] usb usb7: usbfs: process 8439 (syz.3.1278) did not claim interface 0 before use [ 166.845824][ T8439] vhci_hcd vhci_hcd.3: default hub control req: 010b v0000 i0000 l0 [ 166.846181][ T29] audit: type=1400 audit(1791385080.071:8428): avc: denied { listen } for pid=8437 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 166.880233][ T3406] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0013/input/input22 [ 166.881326][ T3406] hid-generic 0005:FFFD057E:0305.0013: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 166.886178][ T29] audit: type=1400 audit(1791385080.131:8429): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 167.053509][ T8448] sctp: [Deprecated]: syz.1.1279 (pid 8448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.053509][ T8448] Use struct sctp_sack_info instead [ 167.086529][ T3406] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0014/input/input23 [ 167.088200][ T3406] hid-generic 0005:FFFD057E:0305.0014: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 167.189049][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1280'. [ 167.199847][ T29] audit: type=1326 audit(1791385080.441:8430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.8.1280" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a67e7e199 code=0x0 [ 167.283520][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'. [ 167.326848][ T29] audit: type=1326 audit(1791385080.571:8431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8442 comm="syz.3.1282" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9fb57e199 code=0x0 [ 167.415219][ T8434] team0: Device gtp0 is of different type [ 167.693544][ T8448] team0: Device gtp0 is of different type [ 167.730217][ T8458] loop8: detected capacity change from 0 to 764 [ 167.825187][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 167.944214][ T8464] loop1: detected capacity change from 0 to 512 [ 167.967480][ T8434] syz.6.1276 (8434) used greatest stack depth: 9032 bytes left [ 167.981980][ T8464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.982103][ T8464] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.984727][ T29] audit: type=1400 audit(1791385081.231:8432): avc: denied { write } for pid=8463 comm="syz.1.1285" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.041653][ T29] audit: type=1400 audit(1791385081.291:8433): avc: denied { bind } for pid=8463 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.072274][ T29] audit: type=1400 audit(1791385081.321:8434): avc: denied { setopt } for pid=8463 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.902029][ T8478] FAULT_INJECTION: forcing a failure. [ 168.902029][ T8478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.902062][ T8478] CPU: 0 UID: 0 PID: 8478 Comm: syz.6.1290 Not tainted syzkaller #0 PREEMPT(lazy) [ 168.902106][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.902121][ T8478] Call Trace: [ 168.902130][ T8478] [ 168.902139][ T8478] __dump_stack+0x1d/0x30 [ 168.902166][ T8478] dump_stack_lvl+0x95/0xd0 [ 168.902191][ T8478] dump_stack+0x15/0x1b [ 168.902214][ T8478] should_fail_ex+0x262/0x280 [ 168.902274][ T8478] should_fail+0xb/0x20 [ 168.902301][ T8478] should_fail_usercopy+0x1a/0x20 [ 168.902334][ T8478] _copy_to_user+0x20/0xa0 [ 168.902456][ T8478] simple_read_from_buffer+0xb5/0x130 [ 168.902504][ T8478] proc_fail_nth_read+0x10e/0x150 [ 168.902531][ T8478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.902558][ T8478] vfs_read+0x18e/0x7c0 [ 168.902591][ T8478] ? __rcu_read_unlock+0x4e/0x70 [ 168.902737][ T8478] ? __fget_files+0x184/0x1c0 [ 168.902767][ T8478] ? mutex_lock+0x57/0x90 [ 168.902838][ T8478] ksys_read+0xdc/0x1a0 [ 168.902873][ T8478] __x64_sys_read+0x40/0x50 [ 168.902905][ T8478] x64_sys_call+0x2135/0x2550 [ 168.903001][ T8478] do_syscall_64+0x112/0x360 [ 168.903045][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.903109][ T8478] RIP: 0033:0x7f9d7dfae9ce [ 168.903124][ T8478] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.903144][ T8478] RSP: 002b:00007f9d7ca46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.903167][ T8478] RAX: ffffffffffffffda RBX: 00007f9d7ca476c0 RCX: 00007f9d7dfae9ce [ 168.903183][ T8478] RDX: 000000000000000f RSI: 00007f9d7ca470a0 RDI: 0000000000000004 [ 168.903223][ T8478] RBP: 00007f9d7ca47090 R08: 0000000000000000 R09: 0000000000000000 [ 168.903238][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.903253][ T8478] R13: 00007f9d7e276038 R14: 00007f9d7e275fa0 R15: 00007ffeb55a3bd8 [ 168.903275][ T8478] [ 169.147372][ T8445] loop5: detected capacity change from 0 to 8192 [ 170.022407][ T8491] loop6: detected capacity change from 0 to 256 [ 170.033846][ T8491] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.041852][ T8491] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 170.041955][ T8491] FAT-fs (loop6): Filesystem has been set read-only [ 170.042935][ T8491] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264) [ 170.414290][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1300'. [ 170.454761][ T8507] sctp: [Deprecated]: syz.5.1302 (pid 8507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.454761][ T8507] Use struct sctp_sack_info instead [ 170.491602][ T3376] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0015/input/input24 [ 170.530040][ T29] audit: type=1400 audit(1791385083.701:8435): avc: denied { write } for pid=8463 comm="syz.1.1285" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.530141][ T29] audit: type=1326 audit(1791385083.731:8436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.8.1301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a67e7e199 code=0x7ffc0000 [ 170.530166][ T29] audit: type=1326 audit(1791385083.731:8437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.8.1301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a67e7df02 code=0x7ffc0000 [ 170.530310][ T29] audit: type=1326 audit(1791385083.731:8438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.8.1301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7a67e7df97 code=0x7ffc0000 [ 170.530338][ T29] audit: type=1326 audit(1791385083.731:8439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.8.1301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7a67e3ae91 code=0x7ffc0000 [ 170.530367][ T29] audit: type=1326 audit(1791385083.731:8440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.8.1301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7a67e7ef89 code=0x7ffc0000 [ 170.530454][ T29] audit: type=1326 audit(1791385083.731:8441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.8.1301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7a67e3aefb code=0x7ffc0000 [ 170.531066][ T3376] hid-generic 0005:FFFD057E:0305.0015: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 170.631317][ T8476] loop3: detected capacity change from 0 to 8192 [ 170.854046][ T8507] team0: Device gtp0 is of different type [ 170.866844][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.961316][ T8516] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=8516 comm=syz.1.1303 [ 170.983627][ T8505] loop8: detected capacity change from 0 to 128 [ 171.085217][ T8505] syz.8.1301: attempt to access beyond end of device [ 171.085217][ T8505] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 171.115874][ T8505] syz.8.1301: attempt to access beyond end of device [ 171.115874][ T8505] loop8: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 171.182055][ T8505] syz.8.1301: attempt to access beyond end of device [ 171.182055][ T8505] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 171.183095][ T8505] syz.8.1301: attempt to access beyond end of device [ 171.183095][ T8505] loop8: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 171.187068][ T8505] Buffer I/O error on dev loop8, logical block 75, lost async page write [ 171.187348][ T8505] syz.8.1301: attempt to access beyond end of device [ 171.187348][ T8505] loop8: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 171.187548][ T8505] Buffer I/O error on dev loop8, logical block 76, lost async page write [ 171.235491][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 171.248207][ T8505] syz.8.1301: attempt to access beyond end of device [ 171.248207][ T8505] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 171.788473][ T8532] random: crng reseeded on system resumption [ 171.803263][ T8542] loop1: detected capacity change from 0 to 512 [ 171.820517][ T8542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.820559][ T8542] ext4 filesystem being mounted at /262/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.824152][ T8542] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1312'. [ 171.880792][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 171.907702][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 171.937033][ T8549] loop6: detected capacity change from 0 to 128 [ 171.974789][ T8549] syz.6.1313: attempt to access beyond end of device [ 171.974789][ T8549] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 171.975452][ T8549] syz.6.1313: attempt to access beyond end of device [ 171.975452][ T8549] loop6: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 171.976136][ T8549] syz.6.1313: attempt to access beyond end of device [ 171.976136][ T8549] loop6: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 171.976168][ T8549] Buffer I/O error on dev loop6, logical block 75, lost async page write [ 171.976186][ T8549] syz.6.1313: attempt to access beyond end of device [ 171.976186][ T8549] loop6: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 171.976266][ T8549] Buffer I/O error on dev loop6, logical block 76, lost async page write [ 171.977523][ T8549] Buffer I/O error on dev loop6, logical block 87, lost async page write [ 171.977638][ T8549] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 171.982487][ T8549] Buffer I/O error on dev loop6, logical block 91, lost async page write [ 171.982788][ T8549] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 171.996282][ T8549] Buffer I/O error on dev loop6, logical block 103, lost async page write [ 171.996398][ T8549] Buffer I/O error on dev loop6, logical block 104, lost async page write [ 172.156692][ T8563] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1319'. [ 172.170362][ T8563] loop8: detected capacity change from 0 to 512 [ 172.173025][ T8563] EXT4-fs: Ignoring removed i_version option [ 172.173053][ T8563] EXT4-fs: Ignoring removed nobh option [ 172.173283][ T8563] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 172.174716][ T8563] EXT4-fs (loop8): 1 truncate cleaned up [ 172.175112][ T8563] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.233938][ T4329] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.309022][ T8574] ./dev/sda1: Can't lookup blockdev [ 172.867112][ T8583] sctp: [Deprecated]: syz.5.1324 (pid 8583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.867112][ T8583] Use struct sctp_sack_info instead [ 172.908589][ T3416] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0016/input/input25 [ 172.969928][ T3416] hid-generic 0005:FFFD057E:0305.0016: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 173.051384][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1326'. [ 173.163597][ T8583] team0: Device gtp0 is of different type [ 173.247323][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.285946][ T8595] random: crng reseeded on system resumption [ 173.342920][ T8572] loop8: detected capacity change from 0 to 8192 [ 173.633064][ T8603] random: crng reseeded on system resumption [ 173.742440][ T8611] ./dev/sda1: Can't lookup blockdev [ 173.813474][ T8614] loop8: detected capacity change from 0 to 128 [ 173.851873][ T4000] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0017/input/input26 [ 173.854608][ T4000] hid-generic 0005:FFFD057E:0305.0017: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 173.925470][ T8614] FAULT_INJECTION: forcing a failure. [ 173.925470][ T8614] name failslab, interval 1, probability 0, space 0, times 0 [ 173.925508][ T8614] CPU: 1 UID: 0 PID: 8614 Comm: syz.8.1335 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.925581][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 173.925596][ T8614] Call Trace: [ 173.925603][ T8614] [ 173.925612][ T8614] __dump_stack+0x1d/0x30 [ 173.925641][ T8614] dump_stack_lvl+0x95/0xd0 [ 173.925666][ T8614] dump_stack+0x15/0x1b [ 173.925739][ T8614] should_fail_ex+0x262/0x280 [ 173.925768][ T8614] ? do_getname+0x2e/0x1c0 [ 173.925816][ T8614] should_failslab+0x8c/0xb0 [ 173.925877][ T8614] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 173.925906][ T8614] ? do_getname+0x2e/0x1c0 [ 173.925929][ T8614] do_getname+0x2e/0x1c0 [ 173.926079][ T8614] getname_flags+0x1d/0x30 [ 173.926148][ T8614] do_sys_openat2+0x6c/0x130 [ 173.926174][ T8614] __x64_sys_openat+0xf2/0x120 [ 173.926206][ T8614] x64_sys_call+0x1f72/0x2550 [ 173.926359][ T8614] do_syscall_64+0x112/0x360 [ 173.926384][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.926405][ T8614] RIP: 0033:0x7f7a67e7e199 [ 173.926445][ T8614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.926462][ T8614] RSP: 002b:00007f7a668d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.926481][ T8614] RAX: ffffffffffffffda RBX: 00007f7a68105fa0 RCX: 00007f7a67e7e199 [ 173.926494][ T8614] RDX: 0000000000183441 RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 173.926507][ T8614] RBP: 00007f7a668d7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.926521][ T8614] R10: 0000000000000158 R11: 0000000000000246 R12: 0000000000000001 [ 173.926580][ T8614] R13: 00007f7a68106038 R14: 00007f7a68105fa0 R15: 00007ffde9bd7148 [ 173.926598][ T8614] [ 174.113116][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 174.134055][ T8626] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1338'. [ 174.145775][ T8626] loop8: detected capacity change from 0 to 512 [ 174.159253][ T8626] EXT4-fs: Ignoring removed i_version option [ 174.159277][ T8626] EXT4-fs: Ignoring removed nobh option [ 174.161123][ T8626] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 174.175933][ T8626] EXT4-fs (loop8): 1 truncate cleaned up [ 174.176457][ T8626] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.190530][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 174.190544][ T29] audit: type=1400 audit(1791385087.431:8809): avc: denied { write } for pid=8625 comm="syz.8.1338" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.190569][ T29] audit: type=1400 audit(1791385087.431:8810): avc: denied { write } for pid=8625 comm="syz.8.1338" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.202815][ T8635] random: crng reseeded on system resumption [ 174.229218][ T29] audit: type=1400 audit(1791385087.461:8811): avc: denied { write } for pid=8625 comm="syz.8.1338" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.283020][ T4329] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.300423][ T29] audit: type=1400 audit(1791385087.551:8812): avc: denied { connect } for pid=8632 comm="syz.5.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.325710][ T8637] loop5: detected capacity change from 0 to 128 [ 174.345726][ T8635] Restarting kernel threads ... [ 174.347127][ T8635] Done restarting kernel threads. [ 174.356365][ T8640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=8640 comm=syz.8.1343 [ 174.409329][ T8647] ./dev/sda1: Can't lookup blockdev [ 174.610549][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1352'. [ 174.636675][ T29] audit: type=1400 audit(1791385087.881:8813): avc: denied { ioctl } for pid=8655 comm="syz.6.1349" path="socket:[23674]" dev="sockfs" ino=23674 ioctlcmd=0x5866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.701129][ T8669] loop8: detected capacity change from 0 to 512 [ 174.702530][ T8669] EXT4-fs: Ignoring removed i_version option [ 174.702553][ T8669] EXT4-fs: Ignoring removed nobh option [ 174.707468][ T8669] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 174.715431][ T8669] EXT4-fs (loop8): 1 truncate cleaned up [ 174.716025][ T8669] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.717841][ T29] audit: type=1400 audit(1791385087.961:8814): avc: denied { write } for pid=8668 comm="syz.8.1353" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.719951][ T29] audit: type=1400 audit(1791385087.971:8815): avc: denied { write } for pid=8668 comm="syz.8.1353" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.724217][ T8654] random: crng reseeded on system resumption [ 174.736910][ T29] audit: type=1400 audit(1791385087.981:8816): avc: denied { write } for pid=8668 comm="syz.8.1353" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.752364][ T4329] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.780654][ T29] audit: type=1400 audit(1791385088.031:8817): avc: denied { ioctl } for pid=8661 comm="syz.1.1351" path="socket:[23716]" dev="sockfs" ino=23716 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 174.786372][ T29] audit: type=1400 audit(1791385088.031:8818): avc: denied { write } for pid=8661 comm="syz.1.1351" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 174.786775][ T8670] FAULT_INJECTION: forcing a failure. [ 174.786775][ T8670] name failslab, interval 1, probability 0, space 0, times 0 [ 174.786821][ T8670] CPU: 0 UID: 0 PID: 8670 Comm: syz.1.1351 Not tainted syzkaller #0 PREEMPT(lazy) [ 174.786900][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.786913][ T8670] Call Trace: [ 174.786920][ T8670] [ 174.786927][ T8670] __dump_stack+0x1d/0x30 [ 174.786954][ T8670] dump_stack_lvl+0x95/0xd0 [ 174.786977][ T8670] dump_stack+0x15/0x1b [ 174.787024][ T8670] should_fail_ex+0x262/0x280 [ 174.787054][ T8670] ? event_filter_read+0x68/0x1c0 [ 174.787078][ T8670] should_failslab+0x8c/0xb0 [ 174.787112][ T8670] __kmalloc_cache_noprof+0x7a/0x400 [ 174.787196][ T8670] ? event_filter_read+0x68/0x1c0 [ 174.787224][ T8670] ? selinux_file_permission+0x1dc/0x310 [ 174.787252][ T8670] event_filter_read+0x68/0x1c0 [ 174.787276][ T8670] ? __pfx_event_filter_read+0x10/0x10 [ 174.787425][ T8670] vfs_readv+0x417/0x6d0 [ 174.787463][ T8670] do_readv+0xe9/0x210 [ 174.787487][ T8670] __x64_sys_readv+0x45/0x50 [ 174.787507][ T8670] x64_sys_call+0x1b4b/0x2550 [ 174.787605][ T8670] do_syscall_64+0x112/0x360 [ 174.787633][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.787734][ T8670] RIP: 0033:0x7f29d723e199 [ 174.787751][ T8670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.787770][ T8670] RSP: 002b:00007f29d5c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 174.787792][ T8670] RAX: ffffffffffffffda RBX: 00007f29d74c6090 RCX: 00007f29d723e199 [ 174.787807][ T8670] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 000000000000000c [ 174.787873][ T8670] RBP: 00007f29d5c76090 R08: 0000000000000000 R09: 0000000000000000 [ 174.787886][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.787897][ T8670] R13: 00007f29d74c6128 R14: 00007f29d74c6090 R15: 00007fff3de768d8 [ 174.787917][ T8670] [ 175.205778][ T8700] ./dev/sda1: Can't lookup blockdev [ 175.279412][ T8706] loop3: detected capacity change from 0 to 512 [ 175.279879][ T8706] EXT4-fs: Ignoring removed i_version option [ 175.279899][ T8706] EXT4-fs: Ignoring removed nobh option [ 175.280116][ T8706] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.282838][ T8706] EXT4-fs (loop3): 1 truncate cleaned up [ 175.283256][ T8706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.364050][ T8713] loop1: detected capacity change from 0 to 512 [ 175.385129][ T8713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.385191][ T8713] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.436536][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.473477][ T8721] loop3: detected capacity change from 0 to 512 [ 175.486074][ T8721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 175.486155][ T8721] System zones: 1-12 [ 175.486359][ T8721] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.1368: missing EA_INODE flag [ 175.486383][ T8721] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 175.486535][ T8721] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1368: error while reading EA inode 12 err=-117 [ 175.486561][ T8721] loop3: lost filesystem error report for type 5 error -117 [ 175.486646][ T8721] EXT4-fs (loop3): 1 orphan inode deleted [ 175.487388][ T8721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.487437][ T8723] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 175.487524][ T8721] ================================================================== [ 175.487561][ T8721] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 175.487610][ T8721] [ 175.487616][ T8721] write to 0xffffffff895c45b8 of 76 bytes by task 8723 on cpu 0: [ 175.487635][ T8721] vsnprintf+0x2c0/0x8c0 [ 175.487668][ T8721] vscnprintf+0x41/0x90 [ 175.487701][ T8721] printk_sprint+0x30/0x2b0 [ 175.487732][ T8721] vprintk_store+0x57f/0x910 [ 175.487764][ T8721] vprintk_emit+0x1a4/0x610 [ 175.487796][ T8721] vprintk_default+0x26/0x30 [ 175.487830][ T8721] vprintk+0x1d/0x30 [ 175.487852][ T8721] _printk+0x79/0xa0 [ 175.487871][ T8721] __do_replace+0x54f/0x590 [ 175.487890][ T8721] do_ip6t_set_ctl+0x7dd/0x990 [ 175.487909][ T8721] nf_setsockopt+0x199/0x1b0 [ 175.487939][ T8721] ipv6_setsockopt+0x11a/0x130 [ 175.487976][ T8721] rawv6_setsockopt+0x1cc/0x3f0 [ 175.488030][ T8721] sock_common_setsockopt+0x69/0x80 [ 175.488067][ T8721] __sys_setsockopt+0x184/0x200 [ 175.488091][ T8721] __x64_sys_setsockopt+0x64/0x80 [ 175.488116][ T8721] x64_sys_call+0x248f/0x2550 [ 175.488144][ T8721] do_syscall_64+0x112/0x360 [ 175.488168][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.488193][ T8721] [ 175.488199][ T8721] read to 0xffffffff895c45b8 of 8 bytes by task 8721 on cpu 1: [ 175.488217][ T8721] data_push_tail+0x104/0x440 [ 175.488248][ T8721] data_alloc+0x111/0x380 [ 175.488276][ T8721] prb_reserve+0x8e3/0xaf0 [ 175.488305][ T8721] vprintk_store+0x54e/0x910 [ 175.488337][ T8721] vprintk_emit+0x1a4/0x610 [ 175.488369][ T8721] vprintk_default+0x26/0x30 [ 175.488402][ T8721] vprintk+0x1d/0x30 [ 175.488424][ T8721] _printk+0x79/0xa0 [ 175.488442][ T8721] __ext4_msg+0x1aa/0x1c0 [ 175.488476][ T8721] ext4_fill_super+0x2f5f/0x37b0 [ 175.488507][ T8721] get_tree_bdev_flags+0x291/0x300 [ 175.488539][ T8721] get_tree_bdev+0x1f/0x30 [ 175.488569][ T8721] ext4_get_tree+0x1c/0x30 [ 175.488597][ T8721] vfs_get_tree+0x57/0x1d0 [ 175.488625][ T8721] do_new_mount+0x288/0x8d0 [ 175.488645][ T8721] path_mount+0x4ad/0xb90 [ 175.488662][ T8721] __se_sys_mount+0x28c/0x2e0 [ 175.488682][ T8721] __x64_sys_mount+0x67/0x80 [ 175.488702][ T8721] x64_sys_call+0xc3b/0x2550 [ 175.488726][ T8721] do_syscall_64+0x112/0x360 [ 175.488748][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.488769][ T8721] [ 175.488772][ T8721] value changed: 0x3ffffffffffff042 -> 0x6c6261745f367069 [ 175.488783][ T8721] [ 175.488786][ T8721] Reported by Kernel Concurrency Sanitizer on: [ 175.488796][ T8721] CPU: 1 UID: 0 PID: 8721 Comm: syz.3.1368 Not tainted syzkaller #0 PREEMPT(lazy) [ 175.488819][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 175.488830][ T8721] ================================================================== [ 175.605720][ T8713] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 175.647638][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.653695][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.