last executing test programs: 1m39.746102853s ago: executing program 4 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1700, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) 1m39.581449279s ago: executing program 4 (id=346): syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x141042) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x6d, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}]}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000400)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfa, 0x0, @val=0x80}}}}}}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x1, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) 1m39.516334421s ago: executing program 4 (id=349): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4b0, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa00, 0x10) fsync(r0) r1 = open$dir(&(0x7f0000000080)='./file1\x00', 0x20a00, 0x40) faccessat(r1, &(0x7f0000000100)='./file1\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0x80102) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) memfd_create(&(0x7f00000000c0)='\x00', 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f0000000280), 0x0}, 0x20) 1m39.22571332s ago: executing program 4 (id=350): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e59, &(0x7f0000000080), 0x6, 0x622, &(0x7f0000000180)="$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") r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x5, 0xac5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r8, {0xe, 0xa}, {}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000980)=""/167, &(0x7f0000000a40)=0xa7) io_submit(r11, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r10, 0x0}]) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) write$vga_arbiter(r1, 0x0, 0xd) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000100)=""/61, &(0x7f0000000140)=0x3d) r12 = openat$cgroup(r0, &(0x7f00000007c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r12, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) 1m38.631022379s ago: executing program 4 (id=356): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000a00)={[{@nouid32}, {@errors_remount}, {@dax_never}, {@sysvgroups}, {@grpjquota}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_gt}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") r1 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0x0, 0x558, &(0x7f0000000440)="$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") r2 = socket$inet6(0xa, 0x5, 0x3c3) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x6, @rand_addr=' \x01\x00', 0x1}, 0x1c) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190ec) 1m37.758566687s ago: executing program 4 (id=363): socket$nl_rdma(0x10, 0x3, 0x14) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x4, 0x0, 0xa, 0x21, 0x10000000000}, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x7, 0x6}, 0x0, 0x0, 0x0) 1m37.582771192s ago: executing program 32 (id=363): socket$nl_rdma(0x10, 0x3, 0x14) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x4, 0x0, 0xa, 0x21, 0x10000000000}, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x7, 0x6}, 0x0, 0x0, 0x0) 14.000887421s ago: executing program 2 (id=805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc2c0011800b00010065787468647200001c00028008"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13.73105847s ago: executing program 2 (id=806): openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000100)=0x7, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socket$inet6(0xa, 0x1, 0x0) r2 = io_uring_setup(0x1162, &(0x7f0000002380)={0x0, 0xd1fb, 0x200}) io_uring_setup(0x178e, 0x0) (async) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20900, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1a22de3759501a7e, 0x0, 0x0, 0x3, 0x6, 0x2f0, 0x8001, 0x0, 0x0, 0x0, 0xffffffffdffffffd}, 0x0, 0xff6fbffffffffffb, 0xffffffffffffffff, 0x1) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async) listen(r3, 0x8) syz_ublk_setup_io_uring(0x1e28, &(0x7f0000000340)={0x0, 0x44ee, 0x1000, 0x0, 0xa}, &(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) (async) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) (async) r5 = socket(0x10, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) (async) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000000c0)=0x5) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet(0x2, 0x5, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000003030605000000000000000000020000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) (async) socket(0x10, 0x2, 0x0) 13.473319348s ago: executing program 2 (id=807): r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000340)=""/163, 0xa3}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4008744b, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = dup2(r3, r3) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000b40)=ANY=[@ANYBLOB='h\x00\x00\t'], 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x4080) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x3, r6, 0x10, 0x0, @in6={0xa, 0x4e23, 0x7, @local, 0x9}}}, 0xa0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x1}, 0x102802, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) 7.294225856s ago: executing program 5 (id=831): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff7000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) 6.56402912s ago: executing program 1 (id=835): r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r0, 0x1000006) sendfile(r0, r0, 0x0, 0x100000000) fcntl$addseals(r0, 0x409, 0x7) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000002000000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000041000000b500feff000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a0deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a4dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737371cdf8f681dd7a2685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52d9870cdfb950b139625fa88f5c9088fc9032a5ea07415029c74354f54e37427a4b26e559cd240b7950630d7d4da9cb8d256356bee8c827db43313e75da9c36d0f7bef4fcf23469d8c9104a917959c3bc791a54d1882f532d2597ff50d4a10fe3b80a3d67d3c3dca0dfe0e4eb039df7480542f841313ad2ec26fe7d03829f80c6f3e028d2f4495c3c523929b203048ac9ba20b012c005e36b93eb5a02768503c6c41f50d2a04999bba560f86c7c9a78e4b337983cbdb5d71be3090208a1f7eaa3edc840ea0da5f4cc01f3e87c7566176981a738bcd4dd8b8a137e7a15e57054ebf1d9ba227361be11a7d155054e154364041468e6268ea23e74eacbb5200e2d8f8919402ca20794a29dd986c6593d47b47d5cd70153908a77039a995a44e960ad037f4d2569751eea3ae70fc49f32c30d6be0594bfda189f0be84d1eaf70e0e90223a3c97ade9973e9219c5a2e1c68efe6adf744710eb0ad8e555be26855496bc6b5e13078380230728b1862f0d93397b88ebf5197b61d27b6c555502aed27d2f2b127aeeae41dd4324fad2e7a962"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb08004500007800000000001190780000000000000000000071cd19b570814e200064907802000000030000000100000056805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733467f517bd818d5a4a8d26ae61b4cbf1331ffc21d2e9bfb1eb3c03976ed837b6f876605ac29dcb96a8901e0711afb3db3"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r4 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x61}}, {@minixdf}, {@nomblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@resuid}, {@acl}, {@user_xattr}, {@nodiscard}], [{@flag='ro'}, {@appraise}]}, 0x1, 0xbc8, &(0x7f0000003400)="$eJzs3M1rXWUaAPDnnHy3mbnpMAzT2TTDMLQwzG3aIWVaBqYdOrgRFHQrNKQ3JeT2gyRSk2Zxo/+AqGvBjaAWpQu77kbBrRutW4sLoUhsFEQ0cu5Hctvcm6TtTU7a/H7w5rzvfc497/PkkJz3hdwEsGcNZ1/SiIMRcS6JKNRfTyOit9rrj6jUzlteWhj/cWlhPImVlRe+SyKJiHtLC+ONayX14/76oD8iPv9fEn94bf28M3PzU2Plcmm6Pj46e/HK0Zm5+X9OXhy7ULpQunTsxL9Hj4+eGDk52rFaf/r69M0f/vrMN5Wf3//l+vdvvpvE6Risx5rrqFf92IZjePV70qw7IsY6cP3doKteT3OdSfcmb0q3OSkAANpKm9Zwf4pCdMXa4q0Qn3yRa3IAAABAR6x0RawAAAAAT7nE/h8AAACeco2/A7i3tDDeaPn+RcLOunsmIoZq9S/XWy3SHZXqsT96ImLfvSSaP9aa1N722IYj4s5XJz/KWrT4HPJ2qyxGxJ9b3f+kWv9Q/ZPQD9afRsRIB+YffmD8JNV/ugPz510/AHvTrTO1B9n651+6uv6JFs+/7hbPrkeR9/Ovsf5bXrf+W6u/q7n+52rRbP33/BbnuPbe21fbxbL6/3Pz/x82WjZ/dnzswrbo7mLEX7pb1Z+s1p+0Wf+e2+IchV+vltrF8q5/5Z2Iw9G6/oZk4/9PdHRislwaqX1tOcfiZ6MftJs/7/qz+7+vTf2b3f8r912p/T/1eens2RvtYpvXn37bm7xY7fXWX3llbHZ2+lhEb/Ls+tePb1xv45zGNbL6j/xt45//VvVnvxMq9e9DVvli/ZiNX107peq/1699vFH92d4vz/t//hHv/+tbnOPvn75xpF2sef+btWz+O0ltLwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADWlEDEaSFiMiqfbTtFiM2B8Rf4x9afnyzOw/Ji6/fOl8FosYip50YrJcGomIQm2cZONj1f7a+PgD439FxIGIeKswUB0Xxy+Xz+ddPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKv2R8RgJGkxItKIWC6kabGYd1YAAABAxw3lnQAAAACw7ez/AQAA4Oln/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA2O3Do1u0kIiqnBqot01uP9eSaGbDd0rwTAHLTtYVzBnYgD2DndeedAJCbh9zjb2W5ADxhkk3i/W0jfR3PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDd6/DBW7eTiKicGqi2TG891tPyHYd2MDtgO6V5JwDkpmujYPfO5QHsPD/isHe13uMDe0mySbx/7ZzK/ZG+bcsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN1nsNqStBgRabWfpsVixO8iYih6konJcmkkIn4fEV8WevqycV/eSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBxM3PzU2PlcmlaJ8/OSteuSEMn106yO9KodfL+zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB5m5uanxsrl0vRM3pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeZuZm58aK5dL01vo3HiYk5s6edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+fgsAAP//E2oOhA==") ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x160e731e}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8080c61) 6.381349506s ago: executing program 2 (id=836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x98, 0x10, 0x401, 0x4000, 0x25dfdbfd, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2000000, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x6c}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xd}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x98}}, 0x0) 6.329457797s ago: executing program 0 (id=837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x9a54a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 6.310096598s ago: executing program 0 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair(0x21, 0x6, 0x800, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r4 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000020601020000000000000000000000000900021e73797a30000000000900020073797a30000000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r6 = dup(r4) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(0xffffffffffffffff, 0x0, r6, 0x0, 0x7, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 6.305242238s ago: executing program 2 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$tipc(0x1e, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x29880400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0xb2) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r4, 0x0}]) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x6) fchdir(r6) creat(&(0x7f0000000040)='./file0\x00', 0x11f) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@allocspi={0x110, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in6=@private2, @in=@remote, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@migrate={0x4, 0x1b}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x110}}, 0x4808) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r1, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}}, 0x0) 5.474322674s ago: executing program 2 (id=841): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3a, 0x6, 0x0, 0x0, 0x0, 0x8, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_bp={&(0x7f0000000300)}, 0x108020, 0x3e, 0x0, 0x4, 0x5, 0x7ffdfffc, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) 5.281988741s ago: executing program 0 (id=842): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x11, 0xa, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b52, 0xf080, 0xc, 0x8c}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') pread64(r1, &(0x7f0000000280)=""/184, 0xb8, 0x5) 5.168994644s ago: executing program 0 (id=844): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) socket(0x2, 0x80805, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000000)=[r9]) 4.070855149s ago: executing program 0 (id=845): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000240)={0x1}) 3.993895522s ago: executing program 0 (id=847): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff7000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) 3.305256774s ago: executing program 3 (id=850): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x2008042, &(0x7f0000000040), 0x1, 0x571, &(0x7f0000000780)="$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") open(&(0x7f0000000000)='.\x00', 0x0, 0x33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 3.12505748s ago: executing program 3 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e700"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$tipc(0x1e, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x29880400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0xb2) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r4, 0x0}]) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x6) fchdir(r6) creat(&(0x7f0000000040)='./file0\x00', 0x11f) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@allocspi={0x110, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in6=@private2, @in=@remote, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@migrate={0x4, 0x1b}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x110}}, 0x4808) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r1, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}}, 0x0) 2.732142272s ago: executing program 3 (id=852): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000200), 0x2f) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000300)=r5) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.894526169s ago: executing program 1 (id=853): syz_open_dev$usbfs(0x0, 0xb, 0x141042) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)}, &(0x7f0000000140)=0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x800744, &(0x7f0000000300)={[{@data_err_ignore}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nobh}, {@errors_remount}, {@nodiscard}, {@grpid}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x100) r1 = inotify_init1(0x0) r2 = gettid() inotify_rm_watch(0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000c22000), 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2, 0x4) syz_ublk_setup_io_uring(0x5fae, &(0x7f0000000100)={0x0, 0x9b28, 0x400, 0xfffffffd, 0x3c2, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x78) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x795, &(0x7f0000000740)="$eJzs3c9rHGUfAPDvbDdJ37Tv27zwwtt6CggaKN2YGlsFDxUPIlgo6Nk2bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP0DPHqSlalqMeJDIbHbTTbObbtJstmU/H5j2eWZm9zvfeebHk51hJoCeNZz+k4k4EhHvJxGHauOTiOirlrIRp9bmW1leyqdDEqurr/6WVOe5s7yUj4bPpA7UKocj4tt3Io5mNsZM5ysvLE5PFIuFudq40crMxdHywuKxCzMTU4WpwuyJsfHx4yefOXli93L944fFgzc/eOnJL0799fb/r7/3XRKn4mBtWmMeu2U4hmvrpC9dhRu8GG/udriuSrq9AOxIumvuW9vL40iSlrPdXiQAoMPSXugqANBjEud/AOgx9d8B7iwv5etDd3+R2Fu3XoiI/Wv5169vrk3J1q7Z7a9eBx28k2y4MpJExNAuxB+OiE+/ev1aOkSHrkMCNPPWlYg4NzS8+fifbLpnYbueamOe4Xvq6/F/7HvA6MD9fJ32f55t1v/LrPd/okn/Z6DJvrsTLff/dZkbuxCmpbT/93zDvW0rDfnXDO2r1f5d7fP1JecvFAvpse0/ETESfQNpfWyLGCO3/77dalpj/+/3D9/4LI2f/n93jsyN7MDGz0xOVCYeJOdGt65EPJZtln+y3v5Ji/7vmTZjvPzcu5+0mpbmn+ZbHzbn31mrVyOeaNr+d+9oS7a8P3G0ujmM1jeKJr78+ePBVvEb2z8dVpaXVpOIa7ufaXNp+w+2zv+nwxFDG+7XLG8/xvdXD33TalqT/PP1v4XWrG3/9dbI1rb//uS1ar2/Nv7yRKUyNxbRn7yyefzxu99Wr9fnT/Mfebz5/r/V9p/2Ts61mX/25q+f7zz/zkrzn9x6+7+n/bdfuL4yva9V/Pbaf7xaGqmNaef41+4CPsi6AwAAAAAAAAAAAAAAAAAAAAAAAIB2ZSLiYCSZ3Ho5k8nl1t7h/b8YzBRL5crR86X52cmovit7KPoy9UddHmp4HupY7Xn49frxe+pPR8R/I+KjgX9V67l8qTgZXjYMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMPhQIv3/6d+Gej20gEAHbO/2wsAAOw5538A6D3O/wDQe5z/AaD3OP8DQO9x/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDzpw+nQ6rfy4v5dP65KWF+enSpWOThfJ0bmY+n8uX5i7mpkqlqWIhly/N3O/7iqXSxfGYnb88WimUK6PlhcWzM6X52crZCzMTU4Wzhb49yQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtqe8sDg9USwW5hQegUK21moPy/LsqJCpJ7FXQfs7lcVDsDI7V+jiQQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgEfJPAAAA//83AiJa") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") syz_emit_ethernet(0x32, &(0x7f0000000400)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfa, 0x0, @val=0x80}}}}}}}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x1, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) 1.361487266s ago: executing program 3 (id=854): socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff00000000000000000000000000000000020001000000000000000000ce91912f030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) close(0x3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r1, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) syz_usb_disconnect(0xffffffffffffffff) 967.215689ms ago: executing program 1 (id=855): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x2, 0xc}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x2003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000640)="37c2b0525faeaeb0683b05bd5e5c1edd2168714b7de123c3e118450af8e7f6742ddcbf1130b806e1843a6b3303f4459f39f8f7d20bbc78e38aedc4b139a8ab7424a92f45ba4ba2fc8aaeee39df2e3be422198c2c5b95f04684ea7ae37577b83baa32dde3e82151a0eff0f68af83f54cdb86d50938eedb205a511e1b72d7781cbec5483c11bad51ec56d4c6ce9f836a680ddcd2", 0x93) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x5dbf55a0bedd96d8, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ppoll(&(0x7f0000000200)=[{r4, 0x400}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3486b0de040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000001c0)=0x6, 0x4) shutdown(r4, 0x1) setsockopt$sock_attach_bpf(r3, 0x84, 0xd, &(0x7f0000000480), 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc2, 0xfd, 0x0, 0x0, 0x0, 0x7, 0x10507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x539, 0x1, @perf_bp={0x0, 0x9}, 0x106250, 0x1000, 0x20da, 0x2, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) 681.724178ms ago: executing program 5 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x20003, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, 0x0) write$cgroup_subtree(r11, 0x0, 0x16) 542.284933ms ago: executing program 1 (id=857): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x9, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[], 0x0) 497.646234ms ago: executing program 5 (id=858): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x1, 0x2, 0x1}}, 0x26) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], [0xff, 0x0, 0x0, 0xffffff00], 'erspan0\x00', 'wg0\x00', {0xff}, {}, 0x3a, 0x4, 0x1, 0x29}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x0, 0x0, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'ip6erspan0\x00', 'gre0\x00', {}, {0xff}, 0x2e, 0x5, 0x4, 0x2d}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x19, "9d4ca5c5f894cfee2d8aa51a559bf989b36f1833f33ad4b270305ff64d9b"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xfc, 0xf, {0xed}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000980)={[{@fat=@umask={'umask', 0x3d, 0xb}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@dots}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ftruncate(0xffffffffffffffff, 0x4a8e) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r7, &(0x7f0000007400)={0x0, 0x0, &(0x7f00000073c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0xc014) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffc0, 0x7b6b9b2bf3aa0dd2) r8 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="810026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000c001600050000ef"], 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r9 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x13, &(0x7f0000001bc0), 0x2) 494.898374ms ago: executing program 3 (id=859): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) 433.056386ms ago: executing program 5 (id=860): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 342.648939ms ago: executing program 5 (id=861): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x2008042, &(0x7f0000000040), 0x1, 0x571, &(0x7f0000000780)="$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") open(&(0x7f0000000000)='.\x00', 0x0, 0x33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 342.180249ms ago: executing program 1 (id=862): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e700"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$tipc(0x1e, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x29880400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0xb2) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r4, 0x0}]) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x6) fchdir(r6) creat(&(0x7f0000000040)='./file0\x00', 0x11f) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@allocspi={0x110, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in6=@private2, @in=@remote, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@migrate={0x4, 0x1b}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x110}}, 0x4808) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r1, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}}, 0x0) 71.359338ms ago: executing program 5 (id=863): socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff00000000000000000000000000000000020001000000000000000000ce91912f030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) close(0x3) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r0, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) syz_usb_disconnect(0xffffffffffffffff) 34.488999ms ago: executing program 3 (id=864): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000840000000700000044140823e000000200000002e00000010000100000000000dc00000000000000000000000700000094040000863900000001000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000200), 0x2f) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000300)=r5) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 1 (id=865): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r7 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, 0x0) epoll_wait(r7, &(0x7f0000000080), 0x0, 0xffffff90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200001a7dcd0b29c5a1a204000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): 14819: ext4_xattr_inode_iget:441: inode 11 [ 146.431712][ C1] EXT4-fs (loop1): last error at time 1779514819: ext4_xattr_inode_iget:441: inode 11 [ 146.529283][ T4571] rdma_op ffff88811b19fd80 conn xmit_rdma 0000000000000000 [ 146.564390][ T4571] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.570790][ T4567] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 146.595486][ T4567] EXT4-fs (loop1): 1 orphan inode deleted [ 146.608549][ T4567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.728235][ T28] audit: type=1400 audit(1779514819.318:336): avc: denied { write } for pid=4566 comm="syz.1.277" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.838513][ T4573] netlink: 84 bytes leftover after parsing attributes in process `syz.4.279'. [ 146.857918][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 146.880625][ T28] audit: type=1400 audit(1779514819.518:337): avc: denied { watch } for pid=4572 comm="syz.4.279" path="/51" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 146.920248][ T4576] netlink: 59 bytes leftover after parsing attributes in process `syz.0.280'. [ 147.648566][ T4584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 147.938766][ T4587] loop4: detected capacity change from 0 to 512 [ 148.146259][ T4587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.264676][ T4587] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.277196][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.120351][ T4606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 150.152716][ T4608] loop1: detected capacity change from 0 to 256 [ 150.300072][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.501306][ T4611] loop4: detected capacity change from 0 to 512 [ 150.540625][ T4611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.556802][ T4611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.617630][ T4611] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.631236][ T28] audit: type=1400 audit(1779514823.278:338): avc: denied { write } for pid=4610 comm="syz.4.291" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.681189][ T28] audit: type=1400 audit(1779514823.328:339): avc: denied { write } for pid=4610 comm="syz.4.291" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.717407][ T28] audit: type=1400 audit(1779514823.328:340): avc: denied { remove_name } for pid=4610 comm="syz.4.291" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.788221][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.797369][ T28] audit: type=1400 audit(1779514823.328:341): avc: denied { rmdir } for pid=4610 comm="syz.4.291" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 150.888904][ T4622] loop2: detected capacity change from 0 to 512 [ 150.903996][ T4622] EXT4-fs: Ignoring removed oldalloc option [ 150.910269][ T4622] EXT4-fs: Ignoring removed nobh option [ 150.921324][ T4622] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.296: iget: bad extra_isize 90 (inode size 256) [ 150.952497][ T4622] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 150.952958][ T4622] EXT4-fs (loop2): Remounting filesystem read-only [ 150.962166][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 150.962190][ C1] EXT4-fs (loop2): initial error at time 1779514823: ext4_xattr_inode_iget:441: inode 11 [ 150.962228][ C1] EXT4-fs (loop2): last error at time 1779514823: ext4_xattr_inode_iget:441: inode 11 [ 151.084826][ T4622] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 151.143538][ T4622] EXT4-fs (loop2): 1 orphan inode deleted [ 151.149994][ T4622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.456152][ T28] audit: type=1400 audit(1779514824.098:342): avc: denied { write } for pid=4621 comm="syz.2.296" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.045235][ T4637] netlink: 80 bytes leftover after parsing attributes in process `syz.1.299'. [ 152.104122][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.178779][ T4641] loop1: detected capacity change from 0 to 512 [ 152.205303][ T4641] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 152.247392][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 152.248692][ T4641] loop1: detected capacity change from 0 to 512 [ 152.313732][ T4641] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 152.427039][ T4650] SELinux: policydb magic number 0x34747865 does not match expected magic number 0xf97cff8c [ 152.436808][ T4649] netlink: 'syz.4.298': attribute type 10 has an invalid length. [ 152.453430][ T4650] SELinux: failed to load policy [ 152.491611][ T4649] veth0_macvtap: left promiscuous mode [ 152.549750][ T4652] loop1: detected capacity change from 0 to 256 [ 152.955755][ T4654] loop1: detected capacity change from 0 to 1764 [ 152.962528][ T4654] iso9660: Bad value for 'gid' [ 152.967421][ T4654] iso9660: Bad value for 'gid' [ 153.151230][ T4657] loop1: detected capacity change from 0 to 512 [ 153.166246][ T4657] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 153.249155][ T4657] loop1: detected capacity change from 0 to 1024 [ 153.266758][ T4657] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 153.381751][ T4658] SELinux: policydb magic number 0x34747865 does not match expected magic number 0xf97cff8c [ 153.415300][ T4658] SELinux: failed to load policy [ 153.769913][ T4670] loop2: detected capacity change from 0 to 512 [ 153.787063][ T4670] ext4: Unknown parameter 'nouser_xattr' [ 153.871896][ T4675] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 153.903649][ T28] audit: type=1400 audit(1779514826.548:343): avc: denied { setopt } for pid=4667 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.931446][ T4675] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 153.988052][ T4675] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 154.018885][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 154.074295][ T4681] SELinux: policydb magic number 0x34747865 does not match expected magic number 0xf97cff8c [ 154.074305][ T4679] tipc: Started in network mode [ 154.101520][ T4681] SELinux: failed to load policy [ 154.114760][ T4679] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 154.132905][ T4679] tipc: Enabled bearer , priority 10 [ 154.362900][ T4688] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.397986][ T4688] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 154.424271][ T4688] EXT4-fs (loop2): orphan cleanup on readonly fs [ 154.445081][ T4688] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 154.475617][ T28] audit: type=1400 audit(1779514827.128:344): avc: denied { mount } for pid=4690 comm="syz.3.317" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 154.485043][ T4688] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 154.546553][ T28] audit: type=1400 audit(1779514827.178:345): avc: denied { remount } for pid=4690 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 154.600082][ T4688] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 154.621948][ T4688] EXT4-fs (loop2): 1 truncate cleaned up [ 154.633543][ T4688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.740307][ T28] audit: type=1400 audit(1779514827.388:346): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 154.968068][ T4704] netlink: 36 bytes leftover after parsing attributes in process `syz.3.321'. [ 154.988265][ T4704] vfat: Unknown parameter 'bridge0' [ 154.994433][ T28] audit: type=1400 audit(1779514827.648:347): avc: denied { write } for pid=4703 comm="syz.3.321" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 155.038088][ T28] audit: type=1400 audit(1779514827.648:348): avc: denied { block_suspend } for pid=4705 comm="syz.0.322" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.124486][ T3378] tipc: Node number set to 8432298 [ 155.152077][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.180352][ T4710] xt_hashlimit: size too large, truncated to 1048576 [ 155.268493][ T4717] set_capacity_and_notify: 5 callbacks suppressed [ 155.268513][ T4717] loop2: detected capacity change from 0 to 256 [ 155.763509][ T4729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 155.926069][ T28] audit: type=1400 audit(1779514828.578:349): avc: denied { setattr } for pid=4737 comm="syz.3.332" path="socket:[10737]" dev="sockfs" ino=10737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.927226][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 156.117990][ T4736] loop1: detected capacity change from 0 to 512 [ 156.118376][ T4735] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.202860][ T4741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 156.304509][ T4736] EXT4-fs: Ignoring removed oldalloc option [ 156.372316][ T4736] EXT4-fs: Ignoring removed nobh option [ 156.447700][ T4743] loop4: detected capacity change from 0 to 256 [ 156.479541][ T4736] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.331: iget: bad extra_isize 90 (inode size 256) [ 156.598198][ T4736] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 156.598884][ T4736] EXT4-fs (loop1): Remounting filesystem read-only [ 156.608167][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 156.608184][ C0] EXT4-fs (loop1): initial error at time 1779514829: ext4_xattr_inode_iget:441: inode 11 [ 156.608208][ C0] EXT4-fs (loop1): last error at time 1779514829: ext4_xattr_inode_iget:441: inode 11 [ 156.727821][ T4736] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 156.786827][ T4736] EXT4-fs (loop1): 1 orphan inode deleted [ 156.804887][ T4736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.942355][ T4753] loop3: detected capacity change from 0 to 512 [ 156.962750][ T4753] EXT4-fs: Ignoring removed oldalloc option [ 156.975656][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.995306][ T4753] EXT4-fs: Ignoring removed nobh option [ 157.005087][ T4755] loop4: detected capacity change from 0 to 256 [ 157.018478][ T4753] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.335: iget: bad extra_isize 90 (inode size 256) [ 157.065721][ T4753] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.065931][ T4753] EXT4-fs (loop3): Remounting filesystem read-only [ 157.075185][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 157.075210][ C0] EXT4-fs (loop3): initial error at time 1779514829: ext4_xattr_inode_iget:441: inode 11 [ 157.075241][ C0] EXT4-fs (loop3): last error at time 1779514829: ext4_xattr_inode_iget:441: inode 11 [ 157.110229][ T4753] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 157.127157][ T4753] EXT4-fs (loop3): 1 orphan inode deleted [ 157.139950][ T4753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.151900][ T4759] loop1: detected capacity change from 0 to 256 [ 157.164698][ T4761] loop2: detected capacity change from 0 to 256 [ 157.240879][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.325268][ T4766] loop3: detected capacity change from 0 to 512 [ 157.352858][ T28] audit: type=1400 audit(1779514829.998:350): avc: denied { write } for pid=4767 comm="syz.1.340" path="socket:[10844]" dev="sockfs" ino=10844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.379670][ T4766] EXT4-fs: Ignoring removed oldalloc option [ 157.400561][ T4766] EXT4-fs: Ignoring removed nobh option [ 157.411127][ T28] audit: type=1400 audit(1779514830.038:351): avc: denied { listen } for pid=4767 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.432088][ T28] audit: type=1400 audit(1779514830.048:352): avc: denied { wake_alarm } for pid=4767 comm="syz.1.340" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 157.451330][ T4766] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.341: iget: bad extra_isize 90 (inode size 256) [ 157.474190][ T4766] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.474366][ T4766] EXT4-fs (loop3): Remounting filesystem read-only [ 157.483589][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 157.483612][ C0] EXT4-fs (loop3): initial error at time 1779514830: ext4_xattr_inode_iget:441: inode 11 [ 157.483672][ C0] EXT4-fs (loop3): last error at time 1779514830: ext4_xattr_inode_iget:441: inode 11 [ 157.548688][ T28] audit: type=1400 audit(1779514830.178:353): avc: denied { bind } for pid=4774 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.597019][ T28] audit: type=1400 audit(1779514830.178:354): avc: denied { lock } for pid=4774 comm="syz.2.344" path="socket:[9928]" dev="sockfs" ino=9928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 157.638067][ T4766] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 157.661648][ T4766] EXT4-fs (loop3): 1 orphan inode deleted [ 157.675274][ T4766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.690283][ T4785] loop4: detected capacity change from 0 to 512 [ 157.697224][ T4785] EXT4-fs: Ignoring removed bh option [ 157.718544][ T4785] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 157.738790][ T4785] EXT4-fs (loop4): 1 truncate cleaned up [ 157.748279][ T4785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.772590][ T28] audit: type=1400 audit(1779514830.418:355): avc: denied { write } for pid=4765 comm="syz.3.341" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.903345][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.968565][ T4791] loop4: detected capacity change from 0 to 1024 [ 158.000281][ T4791] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.044247][ T4791] EXT4-fs (loop4): orphan cleanup on readonly fs [ 158.055616][ T4791] Quota error (device loop4): v2_read_file_info: Free block number 131072 out of range (1, 6). [ 158.069143][ T4791] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 158.084329][ T4791] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 158.091172][ T4791] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.350: Freeing blocks not in datazone - block = 0, count = 4096 [ 158.119935][ T4791] loop4: lost filesystem error report for type 5 error -117 [ 158.121953][ T4791] EXT4-fs (loop4): 1 orphan inode deleted [ 158.129343][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 158.129365][ C1] EXT4-fs (loop4): initial error at time 1779514830: ext4_free_blocks:6718 [ 158.129386][ C1] EXT4-fs (loop4): last error at time 1779514830: ext4_free_blocks:6718 [ 158.166089][ T4791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.218280][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.263676][ T28] audit: type=1400 audit(1779514830.918:356): avc: denied { read write } for pid=4790 comm="syz.4.350" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 158.297484][ T4800] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 158.328945][ T28] audit: type=1400 audit(1779514830.918:357): avc: denied { open } for pid=4790 comm="syz.4.350" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 158.390488][ T4800] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 158.470463][ T4800] SELinux: failed to load policy [ 158.541881][ T3304] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /67/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 158.598199][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 158.613926][ T3304] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 158.626935][ T3304] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 158.713736][ T4810] gretap1: entered allmulticast mode [ 158.725384][ T4808] netlink: 160 bytes leftover after parsing attributes in process `syz.3.355'. [ 158.794463][ T4804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.808791][ T4814] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 158.835032][ T4814] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.868704][ T4814] EXT4-fs (loop2): 1 truncate cleaned up [ 158.888929][ T4814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.921365][ T4814] EXT4-fs (loop2): shut down requested (1) [ 159.002480][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.557136][ T4145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.761807][ T4145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.852207][ T4843] FAULT_INJECTION: forcing a failure. [ 159.852207][ T4843] name failslab, interval 1, probability 0, space 0, times 0 [ 159.882756][ T4843] CPU: 1 UID: 0 PID: 4843 Comm: syz.0.367 Not tainted syzkaller #0 PREEMPT(full) [ 159.882795][ T4843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.882812][ T4843] Call Trace: [ 159.882818][ T4843] [ 159.882825][ T4843] __dump_stack+0x1d/0x30 [ 159.882849][ T4843] dump_stack_lvl+0x95/0xd0 [ 159.882931][ T4843] dump_stack+0x15/0x1b [ 159.882957][ T4843] should_fail_ex+0x263/0x280 [ 159.882995][ T4843] should_failslab+0x8c/0xb0 [ 159.883081][ T4843] __kmalloc_cache_node_noprof+0x6b/0x470 [ 159.883128][ T4843] ? avc_has_perm_noaudit+0xab/0x130 [ 159.883166][ T4843] ? __get_vm_area_node+0x106/0x1d0 [ 159.883240][ T4843] __get_vm_area_node+0x106/0x1d0 [ 159.883423][ T4843] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 159.883449][ T4843] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 159.883515][ T4843] ? cred_has_capability+0x224/0x2a0 [ 159.883586][ T4843] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 159.883616][ T4843] __vmalloc_noprof+0xa4/0xf0 [ 159.883710][ T4843] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 159.883734][ T4843] bpf_prog_alloc_no_stats+0x47/0x390 [ 159.883758][ T4843] ? bpf_prog_alloc+0x2a/0x150 [ 159.883851][ T4843] bpf_prog_alloc+0x3c/0x150 [ 159.883881][ T4843] bpf_prog_load+0x50d/0x1030 [ 159.883975][ T4843] ? security_bpf+0x2b/0x90 [ 159.884077][ T4843] __sys_bpf+0x505/0x7e0 [ 159.884182][ T4843] __x64_sys_bpf+0x41/0x50 [ 159.884205][ T4843] x64_sys_call+0x10cb/0x3020 [ 159.884236][ T4843] do_syscall_64+0x12c/0x3b0 [ 159.884275][ T4843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.884343][ T4843] RIP: 0033:0x7fa04d3ace59 [ 159.884362][ T4843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.884384][ T4843] RSP: 002b:00007fa04be07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.884409][ T4843] RAX: ffffffffffffffda RBX: 00007fa04d625fa0 RCX: 00007fa04d3ace59 [ 159.884427][ T4843] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 159.884454][ T4843] RBP: 00007fa04be07090 R08: 0000000000000000 R09: 0000000000000000 [ 159.884470][ T4843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.884485][ T4843] R13: 00007fa04d626038 R14: 00007fa04d625fa0 R15: 00007ffd0f49e3d8 [ 159.884510][ T4843] [ 160.111848][ T4843] syz.0.367: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 160.128915][ T4843] CPU: 0 UID: 0 PID: 4843 Comm: syz.0.367 Not tainted syzkaller #0 PREEMPT(full) [ 160.128960][ T4843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.128972][ T4843] Call Trace: [ 160.128978][ T4843] [ 160.128984][ T4843] __dump_stack+0x1d/0x30 [ 160.129012][ T4843] dump_stack_lvl+0x95/0xd0 [ 160.129037][ T4843] dump_stack+0x15/0x1b [ 160.129135][ T4843] warn_alloc+0x145/0x1c0 [ 160.129159][ T4843] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 160.129195][ T4843] ? cred_has_capability+0x224/0x2a0 [ 160.129230][ T4843] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 160.129355][ T4843] __vmalloc_noprof+0xa4/0xf0 [ 160.129445][ T4843] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 160.129539][ T4843] bpf_prog_alloc_no_stats+0x47/0x390 [ 160.129568][ T4843] ? bpf_prog_alloc+0x2a/0x150 [ 160.129596][ T4843] bpf_prog_alloc+0x3c/0x150 [ 160.129621][ T4843] bpf_prog_load+0x50d/0x1030 [ 160.129737][ T4843] ? security_bpf+0x2b/0x90 [ 160.129759][ T4843] __sys_bpf+0x505/0x7e0 [ 160.129795][ T4843] __x64_sys_bpf+0x41/0x50 [ 160.129821][ T4843] x64_sys_call+0x10cb/0x3020 [ 160.129908][ T4843] do_syscall_64+0x12c/0x3b0 [ 160.129943][ T4843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.129983][ T4843] RIP: 0033:0x7fa04d3ace59 [ 160.130003][ T4843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.130020][ T4843] RSP: 002b:00007fa04be07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.130039][ T4843] RAX: ffffffffffffffda RBX: 00007fa04d625fa0 RCX: 00007fa04d3ace59 [ 160.130053][ T4843] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 160.130111][ T4843] RBP: 00007fa04be07090 R08: 0000000000000000 R09: 0000000000000000 [ 160.130123][ T4843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.130134][ T4843] R13: 00007fa04d626038 R14: 00007fa04d625fa0 R15: 00007ffd0f49e3d8 [ 160.130153][ T4843] [ 160.130177][ T4843] Mem-Info: [ 160.338488][ T4843] active_anon:11022 inactive_anon:2 isolated_anon:0 [ 160.338488][ T4843] active_file:27970 inactive_file:2340 isolated_file:0 [ 160.338488][ T4843] unevictable:0 dirty:486 writeback:0 [ 160.338488][ T4843] slab_reclaimable:3264 slab_unreclaimable:18330 [ 160.338488][ T4843] mapped:33630 shmem:3290 pagetables:5263 [ 160.338488][ T4843] sec_pagetables:0 bounce:0 [ 160.338488][ T4843] kernel_misc_reclaimable:0 [ 160.338488][ T4843] free:1866972 free_pcp:6268 free_cma:0 [ 160.384828][ T4843] Node 0 active_anon:44088kB inactive_anon:8kB active_file:111880kB inactive_file:9360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134520kB dirty:1944kB writeback:0kB shmem:13160kB kernel_stack:3632kB pagetables:21052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 160.429492][ T4843] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.463874][ T4145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.476755][ T4843] lowmem_reserve[]: 0 2878 7857 7857 [ 160.553595][ T4843] Node 0 DMA32 free:2944488kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948012kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 160.593610][ T4843] lowmem_reserve[]: 0 0 4978 4978 [ 160.600898][ T4145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.611529][ T4843] Node 0 Normal free:4512136kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44088kB inactive_anon:8kB active_file:111880kB inactive_file:9360kB unevictable:0kB writepending:1944kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:21584kB local_pcp:11488kB free_cma:0kB [ 160.665136][ T4843] lowmem_reserve[]: 0 0 0 0 [ 160.674614][ T4843] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 160.710731][ T4843] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944488kB [ 160.728748][ T4843] Node 0 Normal: 1250*4kB (UME) 786*8kB (UME) 1143*16kB (UME) 902*32kB (ME) 577*64kB (ME) 204*128kB (UME) 85*256kB (UME) 29*512kB (UM) 12*1024kB (UM) 8*2048kB (UME) 1056*4096kB (UM) = 4512136kB [ 160.748930][ T4843] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 160.758824][ T4843] 33542 total pagecache pages [ 160.788217][ T4843] 2 pages in swap cache [ 160.792722][ T4843] Free swap = 124988kB [ 160.798159][ T4843] Total swap = 124996kB [ 160.802390][ T4843] 2097051 pages RAM [ 160.807313][ T4843] 0 pages HighMem/MovableOnly [ 160.823705][ T4843] 81649 pages reserved [ 160.859678][ T4145] bridge_slave_1: left allmulticast mode [ 160.882914][ T4145] bridge_slave_1: left promiscuous mode [ 160.890640][ T4145] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.908862][ T4145] bridge_slave_0: left allmulticast mode [ 160.930199][ T4145] bridge_slave_0: left promiscuous mode [ 160.953421][ T4145] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.970221][ T4866] set_capacity_and_notify: 5 callbacks suppressed [ 160.970242][ T4866] loop3: detected capacity change from 0 to 512 [ 161.002851][ T4866] EXT4-fs: Ignoring removed oldalloc option [ 161.011933][ T4866] EXT4-fs: Ignoring removed nobh option [ 161.038725][ T4866] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.372: iget: bad extra_isize 90 (inode size 256) [ 161.075066][ T4866] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.076895][ T4866] EXT4-fs (loop3): Remounting filesystem read-only [ 161.086100][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 161.086122][ C1] EXT4-fs (loop3): initial error at time 1779514833: ext4_xattr_inode_iget:441: inode 11 [ 161.086165][ C1] EXT4-fs (loop3): last error at time 1779514833: ext4_xattr_inode_iget:441: inode 11 [ 161.167184][ T4866] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 161.197492][ T4866] EXT4-fs (loop3): 1 orphan inode deleted [ 161.206492][ T4866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.226838][ T4145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.246065][ T4145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.264820][ T4145] bond0 (unregistering): Released all slaves [ 161.274730][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 161.274744][ T28] audit: type=1400 audit(1779514833.928:372): avc: denied { write } for pid=4865 comm="syz.3.372" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.367926][ T4145] hsr_slave_0: left promiscuous mode [ 161.374834][ T4145] hsr_slave_1: left promiscuous mode [ 161.381593][ T4145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.389542][ T4145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.397608][ T4145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.406028][ T4145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.427025][ T4145] veth1_macvtap: left promiscuous mode [ 161.443648][ T4145] veth1_vlan: left promiscuous mode [ 161.449074][ T4145] veth0_vlan: left promiscuous mode [ 161.535628][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.601078][ T4893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.377'. [ 161.614640][ T28] audit: type=1400 audit(1779514834.268:373): avc: denied { write } for pid=4877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.646460][ T4145] team0 (unregistering): Port device team_slave_1 removed [ 161.658897][ T4896] loop3: detected capacity change from 0 to 512 [ 161.679054][ T28] audit: type=1400 audit(1779514834.268:374): avc: denied { create } for pid=4877 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.687718][ T4896] EXT4-fs: Ignoring removed oldalloc option [ 161.717555][ T4145] team0 (unregistering): Port device team_slave_0 removed [ 161.740456][ T4900] loop1: detected capacity change from 0 to 256 [ 161.748566][ T28] audit: type=1400 audit(1779514834.268:375): avc: denied { write } for pid=4877 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3347 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.763862][ T4896] EXT4-fs: Ignoring removed nobh option [ 161.783594][ T28] audit: type=1400 audit(1779514834.268:376): avc: denied { append } for pid=4877 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3347 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.807909][ T28] audit: type=1400 audit(1779514834.378:377): avc: denied { write } for pid=4898 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.830635][ T28] audit: type=1400 audit(1779514834.378:378): avc: denied { unlink } for pid=4898 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3347 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.873262][ T4896] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.376: iget: bad extra_isize 90 (inode size 256) [ 161.908367][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 161.919040][ T4896] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.923493][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 161.939134][ C1] EXT4-fs (loop3): initial error at time 1779514834: ext4_xattr_inode_iget:441: inode 11 [ 161.949049][ C1] EXT4-fs (loop3): last error at time 1779514834: ext4_xattr_inode_iget:441: inode 11 [ 161.956778][ T4896] EXT4-fs (loop3): Remounting filesystem read-only [ 161.969410][ T4896] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 161.983733][ T4896] EXT4-fs (loop3): 1 orphan inode deleted [ 161.998671][ T4896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.032982][ T28] audit: type=1400 audit(1779514834.678:379): avc: denied { write } for pid=4895 comm="syz.3.376" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.091955][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.116076][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.136392][ T4831] bridge_slave_0: entered allmulticast mode [ 162.147583][ T4831] bridge_slave_0: entered promiscuous mode [ 162.154643][ T4831] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.161745][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.169502][ T4915] loop2: detected capacity change from 0 to 512 [ 162.180742][ T4831] bridge_slave_1: entered allmulticast mode [ 162.189680][ T4831] bridge_slave_1: entered promiscuous mode [ 162.195379][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.218984][ T4831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.233981][ T4915] ------------[ cut here ]------------ [ 162.239609][ T4915] EA inode 11 i_nlink=2 [ 162.239719][ T4915] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.2.380/4915 [ 162.254716][ T4915] Modules linked in: [ 162.258660][ T4915] CPU: 1 UID: 0 PID: 4915 Comm: syz.2.380 Not tainted syzkaller #0 PREEMPT(full) [ 162.268593][ T4915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.273998][ T4831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.278928][ T4915] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 162.294645][ T4915] Code: 54 58 98 ff 4c 8d 2d 9d 66 5c 05 49 8d 7e 40 e8 f4 17 b6 ff 49 8b 6e 40 4c 89 e7 e8 28 13 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ef 2b d8 03 66 66 66 66 66 66 2e [ 162.314485][ T4915] RSP: 0018:ffffc9000173f778 EFLAGS: 00010246 [ 162.320653][ T4915] RAX: ffff888104d73e00 RBX: ffff88810769c598 RCX: ffffffff81c0db58 [ 162.328909][ T4915] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d41e0 [ 162.336965][ T4915] RBP: 000000000000000b R08: 000188810769c54b R09: 0000000000000000 [ 162.345017][ T4915] R10: ffffc9000173f6a8 R11: 0001c9000173f6a8 R12: ffff88810769c548 [ 162.353111][ T4915] R13: ffffffff871d41e0 R14: ffff88810769c500 R15: 0000000000000001 [ 162.361187][ T4915] FS: 00007f7c3f5866c0(0000) GS:ffff8882ae9f8000(0000) knlGS:0000000000000000 [ 162.370251][ T4915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.376954][ T4915] CR2: 0000560006a00300 CR3: 000000011e70a000 CR4: 00000000003506f0 [ 162.385030][ T4915] Call Trace: [ 162.388425][ T4915] [ 162.391463][ T4915] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 162.397511][ T4915] ? errseq_check+0x2c/0x50 [ 162.402072][ T4915] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 162.407634][ T4915] ? ext4_truncate+0x89f/0xa10 [ 162.412546][ T4915] ext4_evict_inode+0xb16/0xe30 [ 162.420427][ T4915] ? __pfx_ext4_evict_inode+0x10/0x10 [ 162.427233][ T4915] evict+0x2af/0x510 [ 162.431194][ T4915] ? __dquot_initialize+0x146/0x7c0 [ 162.436472][ T4915] iput+0x41a/0x580 [ 162.440313][ T4915] ext4_process_orphan+0x1a9/0x1c0 [ 162.445532][ T4915] ext4_orphan_cleanup+0x69c/0x9f0 [ 162.450694][ T4915] ext4_fill_super+0x3408/0x37c0 [ 162.455735][ T4915] ? set_blocksize+0x14c/0x270 [ 162.460624][ T4915] ? setup_bdev_super+0x30e/0x370 [ 162.465745][ T4915] ? __pfx_ext4_fill_super+0x10/0x10 [ 162.471104][ T4915] get_tree_bdev_flags+0x291/0x300 [ 162.476309][ T4915] ? __pfx_ext4_fill_super+0x10/0x10 [ 162.481660][ T4915] get_tree_bdev+0x1f/0x30 [ 162.486266][ T4915] ext4_get_tree+0x1c/0x30 [ 162.490889][ T4915] vfs_get_tree+0x57/0x1d0 [ 162.495396][ T4915] do_new_mount+0x288/0x8d0 [ 162.500005][ T4915] path_mount+0x4d0/0xbc0 [ 162.504475][ T4915] __se_sys_mount+0x28c/0x2e0 [ 162.509221][ T4915] ? __se_sys_mkdirat+0xa2/0xf0 [ 162.514162][ T4915] ? kmem_cache_free+0xca/0x380 [ 162.519076][ T4915] __x64_sys_mount+0x67/0x80 [ 162.523821][ T4915] x64_sys_call+0x2d61/0x3020 [ 162.528676][ T4915] do_syscall_64+0x12c/0x3b0 [ 162.533360][ T4915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.537128][ T4929] rdma_op ffff888119f02d80 conn xmit_rdma 0000000000000000 [ 162.539361][ T4915] RIP: 0033:0x7f7c40b4e0ca [ 162.551062][ T4915] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.557938][ T4929] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.570795][ T4915] RSP: 002b:00007f7c3f585e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.585760][ T4915] RAX: ffffffffffffffda RBX: 00007f7c3f585ee0 RCX: 00007f7c40b4e0ca [ 162.593969][ T4915] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f7c3f585ea0 [ 162.602003][ T4915] RBP: 00002000000009c0 R08: 00007f7c3f585ee0 R09: 0000000000800718 [ 162.610148][ T4915] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 162.618251][ T4915] R13: 00007f7c3f585ea0 R14: 000000000000048d R15: 0000200000000200 [ 162.622364][ T28] audit: type=1400 audit(1779514835.268:380): avc: denied { write } for pid=4916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.626356][ T4915] [ 162.652281][ T4915] ---[ end trace 0000000000000000 ]--- [ 162.658350][ T4915] EXT4-fs (loop2): 1 orphan inode deleted [ 162.664592][ T4915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.745785][ T28] audit: type=1400 audit(1779514835.388:381): avc: denied { write } for pid=4938 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.807024][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 162.846334][ T4831] team0: Port device team_slave_0 added [ 162.869246][ T4831] team0: Port device team_slave_1 added [ 162.940433][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.963484][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.021901][ T4831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.059486][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.082271][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.153713][ T4831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.307823][ T4831] hsr_slave_0: entered promiscuous mode [ 163.318087][ T4831] hsr_slave_1: entered promiscuous mode [ 163.331870][ T4831] debugfs: 'hsr0' already exists in 'hsr' [ 163.344751][ T4831] Cannot create hsr debugfs directory [ 163.355907][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 163.615110][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.820940][ T4831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.860277][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.901294][ T4831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.932786][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.967432][ T4831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.009833][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.042160][ T4831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.061294][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.082106][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 164.235824][ T5003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.391'. [ 164.394447][ T4831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.437889][ T5007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 164.475608][ T4831] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.497591][ T5003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'. [ 164.638807][ T2795] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.645973][ T2795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.646443][ T2795] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.653698][ T2795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.732510][ T5010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 165.861019][ T5015] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 166.271898][ T5015] loop1: detected capacity change from 0 to 128 [ 166.398247][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.497144][ T5015] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.524051][ T5015] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.665003][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.774895][ T5056] loop1: detected capacity change from 0 to 256 [ 166.789870][ T4831] veth0_vlan: entered promiscuous mode [ 166.823595][ T4831] veth1_vlan: entered promiscuous mode [ 166.862274][ T4831] veth0_macvtap: entered promiscuous mode [ 166.875546][ T4831] veth1_macvtap: entered promiscuous mode [ 166.892812][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.921266][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.949122][ T2795] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.965917][ T2795] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.013814][ T2795] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.035169][ T2795] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.155995][ T5066] loop3: detected capacity change from 0 to 512 [ 167.179650][ T5066] EXT4-fs: Ignoring removed oldalloc option [ 167.202017][ T5066] EXT4-fs: Ignoring removed nobh option [ 167.220108][ T5066] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.404: iget: bad extra_isize 90 (inode size 256) [ 167.240396][ T5069] rdma_op ffff88811dead180 conn xmit_rdma 0000000000000000 [ 167.248087][ T5066] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.249581][ T5066] EXT4-fs (loop3): Remounting filesystem read-only [ 167.258902][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 167.258926][ C1] EXT4-fs (loop3): initial error at time 1779514839: ext4_xattr_inode_iget:441: inode 11 [ 167.258956][ C1] EXT4-fs (loop3): last error at time 1779514839: ext4_xattr_inode_iget:441: inode 11 [ 167.304485][ T5069] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.705647][ T5066] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 167.765009][ T5066] EXT4-fs (loop3): 1 orphan inode deleted [ 167.777754][ T5071] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 167.803322][ T5066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.833623][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.407'. [ 168.033148][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 168.033164][ T28] audit: type=1400 audit(1779514840.678:425): avc: denied { write } for pid=5065 comm="syz.3.404" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.102454][ T5077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.407'. [ 169.857914][ T28] audit: type=1326 audit(1779514842.498:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.0.408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d3ace59 code=0x7ffc0000 [ 169.887781][ T5084] loop5: detected capacity change from 0 to 512 [ 169.952540][ T5084] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 170.014750][ T28] audit: type=1326 audit(1779514842.548:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.0.408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa04d36d68e code=0x7ffc0000 [ 170.107529][ T5084] loop5: detected capacity change from 0 to 512 [ 170.171769][ T28] audit: type=1326 audit(1779514842.548:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.0.408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d3ace59 code=0x7ffc0000 [ 170.271025][ T5084] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 170.291843][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.328977][ T28] audit: type=1326 audit(1779514842.548:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.0.408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d3ace59 code=0x7ffc0000 [ 170.429886][ T5091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'. [ 170.459301][ T5084] loop5: detected capacity change from 0 to 1024 [ 170.480026][ T28] audit: type=1326 audit(1779514842.548:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.0.408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d3ace59 code=0x7ffc0000 [ 170.541981][ T5084] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 170.603570][ T28] audit: type=1326 audit(1779514842.538:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.0.408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d3ace59 code=0x7ffc0000 [ 170.680657][ T5094] loop2: detected capacity change from 0 to 256 [ 170.694464][ T28] audit: type=1326 audit(1779514842.558:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.0.408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d3ace59 code=0x7ffc0000 [ 170.793856][ T28] audit: type=1326 audit(1779514842.558:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.0.408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fa04d3ace59 code=0x7ffc0000 [ 170.848291][ T28] audit: type=1326 audit(1779514842.558:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.0.408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d3ace59 code=0x7ffc0000 [ 170.969917][ T5099] FAULT_INJECTION: forcing a failure. [ 170.969917][ T5099] name failslab, interval 1, probability 0, space 0, times 0 [ 170.986129][ T5101] netlink: 'syz.2.413': attribute type 28 has an invalid length. [ 170.994109][ T5101] netlink: 'syz.2.413': attribute type 3 has an invalid length. [ 171.001846][ T5101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.413'. [ 171.018115][ T5101] netlink: 64 bytes leftover after parsing attributes in process `syz.2.413'. [ 171.027573][ T5099] CPU: 1 UID: 0 PID: 5099 Comm: syz.1.414 Tainted: G W syzkaller #0 PREEMPT(full) [ 171.027612][ T5099] Tainted: [W]=WARN [ 171.027621][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.027712][ T5099] Call Trace: [ 171.027720][ T5099] [ 171.027730][ T5099] __dump_stack+0x1d/0x30 [ 171.027760][ T5099] dump_stack_lvl+0x95/0xd0 [ 171.027787][ T5099] dump_stack+0x15/0x1b [ 171.027869][ T5099] should_fail_ex+0x263/0x280 [ 171.027946][ T5099] should_failslab+0x8c/0xb0 [ 171.027985][ T5099] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 171.028036][ T5099] ? __request_module+0x1df/0x3c0 [ 171.028066][ T5099] ? should_failslab+0x8c/0xb0 [ 171.028105][ T5099] kstrdup+0x3e/0xd0 [ 171.028171][ T5099] __request_module+0x1df/0x3c0 [ 171.028252][ T5099] snd_request_card+0x76/0x90 [ 171.028279][ T5099] client_load_and_use_ptr+0x213/0x5e0 [ 171.028323][ T5099] snd_seq_info_clients_read+0xd1/0x590 [ 171.028357][ T5099] ? __pfx_snd_seq_info_clients_read+0x10/0x10 [ 171.028399][ T5099] snd_info_seq_show+0x81/0xa0 [ 171.028476][ T5099] traverse+0x149/0x3a0 [ 171.028614][ T5099] seq_lseek+0xb5/0x170 [ 171.028648][ T5099] proc_reg_llseek+0x10c/0x180 [ 171.028680][ T5099] __x64_sys_lseek+0xe8/0x160 [ 171.028772][ T5099] x64_sys_call+0x27ec/0x3020 [ 171.028799][ T5099] do_syscall_64+0x12c/0x3b0 [ 171.028870][ T5099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.028894][ T5099] RIP: 0033:0x7ff68e59ce59 [ 171.028980][ T5099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.029003][ T5099] RSP: 002b:00007ff68cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 171.029024][ T5099] RAX: ffffffffffffffda RBX: 00007ff68e815fa0 RCX: 00007ff68e59ce59 [ 171.029107][ T5099] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000003 [ 171.029122][ T5099] RBP: 00007ff68cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.029188][ T5099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.029204][ T5099] R13: 00007ff68e816038 R14: 00007ff68e815fa0 R15: 00007ffcb0a2a428 [ 171.029229][ T5099] [ 171.171122][ T5103] SELinux: policydb magic number 0x34747865 does not match expected magic number 0xf97cff8c [ 171.258161][ T5096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 171.282165][ T5103] SELinux: failed to load policy [ 171.730512][ T5119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 172.120963][ T5117] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 172.332857][ T5130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.422'. [ 172.415500][ T5137] loop2: detected capacity change from 0 to 256 [ 172.443341][ T5137] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.512031][ T5137] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.634966][ T5141] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.644841][ T5144] loop2: detected capacity change from 0 to 164 [ 172.665750][ T5141] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 172.686561][ T5144] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82 [ 172.702405][ T5147] netlink: 14 bytes leftover after parsing attributes in process `syz.0.426'. [ 172.761490][ T5143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.427'. [ 172.808024][ T5147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.872541][ T5147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.904858][ T5159] loop5: detected capacity change from 0 to 512 [ 172.912662][ T5147] bond0 (unregistering): Released all slaves [ 172.957660][ T5159] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 173.027228][ T23] syz1: Port: 1 Link DOWN [ 173.069304][ T5154] loop5: detected capacity change from 0 to 1024 [ 173.109208][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 173.109227][ T28] audit: type=1400 audit(1779514845.758:506): avc: denied { write } for pid=5170 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.144021][ T5154] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 173.283710][ T5159] SELinux: policydb magic number 0x34747865 does not match expected magic number 0xf97cff8c [ 173.311316][ T5182] loop1: detected capacity change from 0 to 256 [ 173.360504][ T5159] SELinux: failed to load policy [ 173.386566][ T28] audit: type=1400 audit(1779514846.038:507): avc: denied { connect } for pid=5181 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 173.495500][ T5187] loop5: detected capacity change from 0 to 512 [ 173.515280][ T5187] EXT4-fs: Ignoring removed oldalloc option [ 173.527935][ T5187] EXT4-fs: Ignoring removed nobh option [ 185.792883][ T5189] loop1: detected capacity change from 0 to 256 [ 185.867469][ T5194] loop5: detected capacity change from 0 to 4096 [ 185.874344][ T28] audit: type=1400 audit(1779515114.579:508): avc: denied { read write } for pid=5190 comm="syz.5.439" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 185.874833][ T5194] EXT4-fs: test_dummy_encryption option not supported [ 185.897742][ T28] audit: type=1400 audit(1779515114.579:509): avc: denied { open } for pid=5190 comm="syz.5.439" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 186.026542][ T5197] loop2: detected capacity change from 0 to 1024 [ 186.065414][ T5197] EXT4-fs: Ignoring removed bh option [ 186.112987][ T5197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 186.165540][ T28] audit: type=1400 audit(1779515114.891:510): avc: denied { bind } for pid=5199 comm="syz.0.441" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.223494][ T5207] netlink: 160 bytes leftover after parsing attributes in process `syz.3.443'. [ 186.275944][ T28] audit: type=1400 audit(1779515115.002:511): avc: denied { ioctl } for pid=5210 comm="syz.1.444" path="socket:[13265]" dev="sockfs" ino=13265 ioctlcmd=0x6f01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.316001][ T5197] netlink: 95 bytes leftover after parsing attributes in process `syz.2.440'. [ 186.347628][ T5197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 186.376472][ T5197] netlink: 'syz.2.440': attribute type 49 has an invalid length. [ 186.422989][ T5213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 186.589468][ T28] audit: type=1400 audit(1779515115.324:512): avc: denied { write } for pid=5190 comm="syz.5.439" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.617912][ T5219] raw_sendmsg: syz.5.439 forgot to set AF_INET. Fix it! [ 186.860009][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 186.925341][ T5226] loop1: detected capacity change from 0 to 512 [ 186.954083][ T5226] EXT4-fs: Ignoring removed oldalloc option [ 186.984859][ T5226] EXT4-fs: Ignoring removed nobh option [ 187.016015][ T5226] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.449: iget: bad extra_isize 90 (inode size 256) [ 187.053144][ T5226] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 187.053318][ T5226] EXT4-fs (loop1): Remounting filesystem read-only [ 187.069086][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 187.069110][ C1] EXT4-fs (loop1): initial error at time 1779515115: ext4_xattr_inode_iget:441: inode 11 [ 187.069157][ C1] EXT4-fs (loop1): last error at time 1779515115: ext4_xattr_inode_iget:441: inode 11 [ 187.185401][ T5226] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 187.216891][ T5226] EXT4-fs (loop1): 1 orphan inode deleted [ 187.235533][ T5226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.268322][ T28] audit: type=1400 audit(1779515115.948:513): avc: denied { ioctl } for pid=5227 comm="syz.5.450" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 187.365735][ T28] audit: type=1400 audit(1779515116.089:514): avc: denied { write } for pid=5225 comm="syz.1.449" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.454414][ T5228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8218 sclass=netlink_route_socket pid=5228 comm=syz.5.450 [ 187.659480][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.707239][ T5248] loop2: detected capacity change from 0 to 256 [ 187.739749][ T5250] loop1: detected capacity change from 0 to 256 [ 187.755100][ T5248] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.773179][ T5250] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.820227][ T5252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.452'. [ 188.044499][ T5254] sctp: [Deprecated]: syz.1.455 (pid 5254) Use of int in maxseg socket option. [ 188.044499][ T5254] Use struct sctp_assoc_value instead [ 188.440054][ T5248] sctp: [Deprecated]: syz.2.454 (pid 5248) Use of int in maxseg socket option. [ 188.440054][ T5248] Use struct sctp_assoc_value instead [ 188.719841][ T5269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 188.739700][ T28] audit: type=1400 audit(1779515117.487:515): avc: denied { write } for pid=5253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.837234][ T28] audit: type=1400 audit(1779515117.588:516): avc: denied { write } for pid=5274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.970386][ T5290] FAULT_INJECTION: forcing a failure. [ 188.970386][ T5290] name failslab, interval 1, probability 0, space 0, times 0 [ 188.998199][ T5290] CPU: 0 UID: 0 PID: 5290 Comm: syz.1.461 Tainted: G W syzkaller #0 PREEMPT(full) [ 188.998303][ T5290] Tainted: [W]=WARN [ 188.998313][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.998330][ T5290] Call Trace: [ 188.998339][ T5290] [ 188.998350][ T5290] __dump_stack+0x1d/0x30 [ 188.998387][ T5290] dump_stack_lvl+0x95/0xd0 [ 188.998450][ T5290] dump_stack+0x15/0x1b [ 188.998499][ T5290] should_fail_ex+0x263/0x280 [ 188.998592][ T5290] ? io_ring_ctx_alloc+0x38/0x670 [ 188.998631][ T5290] should_failslab+0x8c/0xb0 [ 188.998708][ T5290] __kmalloc_cache_noprof+0x5f/0x400 [ 188.998755][ T5290] io_ring_ctx_alloc+0x38/0x670 [ 188.998842][ T5290] ? io_prepare_config+0x5d6/0x600 [ 188.998920][ T5290] io_uring_create+0x50/0x500 [ 188.998972][ T5290] ? memchr_inv+0x30/0x2f0 [ 188.998995][ T5290] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 188.999038][ T5290] __x64_sys_io_uring_setup+0x31/0x40 [ 188.999065][ T5290] x64_sys_call+0x2962/0x3020 [ 188.999155][ T5290] do_syscall_64+0x12c/0x3b0 [ 188.999329][ T5290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.999358][ T5290] RIP: 0033:0x7ff68e59ce59 [ 188.999384][ T5290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.999405][ T5290] RSP: 002b:00007ff68cff7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 188.999453][ T5290] RAX: ffffffffffffffda RBX: 00007ff68e815fa0 RCX: 00007ff68e59ce59 [ 188.999471][ T5290] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 188.999488][ T5290] RBP: 00007ff68cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.999558][ T5290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.999574][ T5290] R13: 00007ff68e816038 R14: 00007ff68e815fa0 R15: 00007ffcb0a2a428 [ 188.999600][ T5290] [ 189.346928][ T5293] loop1: detected capacity change from 0 to 2048 [ 189.425415][ T5289] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.488272][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'. [ 189.572907][ T5293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000001000000 r/w without journal. Quota mode: none. [ 189.604822][ T5293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000001000000. [ 189.652981][ T5293] loop1: detected capacity change from 0 to 512 [ 189.671153][ T28] audit: type=1400 audit(1779515118.423:517): avc: denied { write } for pid=5294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.715353][ T5293] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.740728][ T5293] EXT4-fs (loop1): 1 orphan inode deleted [ 189.751565][ T5293] EXT4-fs (loop1): 1 truncate cleaned up [ 189.776516][ T5293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.192468][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.466'. [ 190.210891][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.340919][ T5322] loop3: detected capacity change from 0 to 256 [ 190.408900][ T5322] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.542926][ T5334] sctp: [Deprecated]: syz.3.467 (pid 5334) Use of int in maxseg socket option. [ 190.542926][ T5334] Use struct sctp_assoc_value instead [ 190.769966][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.466'. [ 191.207332][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 191.207350][ T28] audit: type=1400 audit(1779515119.973:522): avc: denied { read } for pid=5346 comm="syz.3.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 191.234795][ T28] audit: type=1400 audit(1779515119.993:523): avc: denied { read } for pid=5346 comm="syz.3.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 191.325968][ T5350] dvmrp0: entered allmulticast mode [ 191.881419][ T5360] syz.5.471 uses obsolete (PF_INET,SOCK_PACKET) [ 193.398527][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.481'. [ 195.042735][ T5403] netlink: 'syz.5.486': attribute type 10 has an invalid length. [ 195.078541][ T5403] veth0_macvtap: left promiscuous mode [ 195.654473][ T5413] netlink: 160 bytes leftover after parsing attributes in process `syz.1.491'. [ 195.873280][ T5415] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 196.406213][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.495'. [ 197.055059][ T5432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.499'. [ 197.463343][ T5436] netlink: 160 bytes leftover after parsing attributes in process `syz.3.501'. [ 197.759753][ T5443] rdma_op ffff88811bc55980 conn xmit_rdma 0000000000000000 [ 197.783360][ T5443] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.787287][ T28] audit: type=1400 audit(1779515126.580:524): avc: denied { write } for pid=5442 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 197.798486][ T5439] netlink: 160 bytes leftover after parsing attributes in process `syz.1.502'. [ 198.712396][ T5450] FAULT_INJECTION: forcing a failure. [ 198.712396][ T5450] name failslab, interval 1, probability 0, space 0, times 0 [ 198.743155][ T5450] CPU: 1 UID: 0 PID: 5450 Comm: syz.5.506 Tainted: G W syzkaller #0 PREEMPT(full) [ 198.743196][ T5450] Tainted: [W]=WARN [ 198.743205][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.743219][ T5450] Call Trace: [ 198.743226][ T5450] [ 198.743234][ T5450] __dump_stack+0x1d/0x30 [ 198.743258][ T5450] dump_stack_lvl+0x95/0xd0 [ 198.743278][ T5450] dump_stack+0x15/0x1b [ 198.743302][ T5450] should_fail_ex+0x263/0x280 [ 198.743361][ T5450] should_failslab+0x8c/0xb0 [ 198.743476][ T5450] __kmalloc_node_noprof+0xc8/0x550 [ 198.743520][ T5450] ? __vmalloc_node_range_noprof+0x3f2/0x11c0 [ 198.743598][ T5450] __vmalloc_node_range_noprof+0x3f2/0x11c0 [ 198.743628][ T5450] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 198.743709][ T5450] __vmalloc_noprof+0xa4/0xf0 [ 198.743791][ T5450] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 198.743814][ T5450] bpf_prog_alloc_no_stats+0x47/0x390 [ 198.743894][ T5450] ? bpf_prog_alloc+0x2a/0x150 [ 198.743916][ T5450] bpf_prog_alloc+0x3c/0x150 [ 198.743937][ T5450] bpf_prog_load+0x50d/0x1030 [ 198.743982][ T5450] ? security_bpf+0x2b/0x90 [ 198.744052][ T5450] __sys_bpf+0x505/0x7e0 [ 198.744087][ T5450] __x64_sys_bpf+0x41/0x50 [ 198.744108][ T5450] x64_sys_call+0x10cb/0x3020 [ 198.744133][ T5450] do_syscall_64+0x12c/0x3b0 [ 198.744205][ T5450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.744230][ T5450] RIP: 0033:0x7f7edc8ace59 [ 198.744250][ T5450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.744272][ T5450] RSP: 002b:00007f7edb2de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.744298][ T5450] RAX: ffffffffffffffda RBX: 00007f7edcb26090 RCX: 00007f7edc8ace59 [ 198.744316][ T5450] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 198.744336][ T5450] RBP: 00007f7edb2de090 R08: 0000000000000000 R09: 0000000000000000 [ 198.744349][ T5450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.744365][ T5450] R13: 00007f7edcb26128 R14: 00007f7edcb26090 R15: 00007ffd257aac08 [ 198.744390][ T5450] [ 199.233191][ T5450] syz.5.506: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 199.261585][ T5450] CPU: 0 UID: 0 PID: 5450 Comm: syz.5.506 Tainted: G W syzkaller #0 PREEMPT(full) [ 199.261623][ T5450] Tainted: [W]=WARN [ 199.261632][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.261647][ T5450] Call Trace: [ 199.261654][ T5450] [ 199.261736][ T5450] __dump_stack+0x1d/0x30 [ 199.261844][ T5450] dump_stack_lvl+0x95/0xd0 [ 199.261866][ T5450] dump_stack+0x15/0x1b [ 199.261890][ T5450] warn_alloc+0x145/0x1c0 [ 199.261969][ T5450] __vmalloc_node_range_noprof+0x7ef/0x11c0 [ 199.262108][ T5450] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 199.262159][ T5450] __vmalloc_noprof+0xa4/0xf0 [ 199.262185][ T5450] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 199.262227][ T5450] bpf_prog_alloc_no_stats+0x47/0x390 [ 199.262254][ T5450] ? bpf_prog_alloc+0x2a/0x150 [ 199.262277][ T5450] bpf_prog_alloc+0x3c/0x150 [ 199.262303][ T5450] bpf_prog_load+0x50d/0x1030 [ 199.262434][ T5450] ? security_bpf+0x2b/0x90 [ 199.262463][ T5450] __sys_bpf+0x505/0x7e0 [ 199.262503][ T5450] __x64_sys_bpf+0x41/0x50 [ 199.262610][ T5450] x64_sys_call+0x10cb/0x3020 [ 199.262658][ T5450] do_syscall_64+0x12c/0x3b0 [ 199.262700][ T5450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.262728][ T5450] RIP: 0033:0x7f7edc8ace59 [ 199.262747][ T5450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.262826][ T5450] RSP: 002b:00007f7edb2de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.262850][ T5450] RAX: ffffffffffffffda RBX: 00007f7edcb26090 RCX: 00007f7edc8ace59 [ 199.262866][ T5450] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 199.262895][ T5450] RBP: 00007f7edb2de090 R08: 0000000000000000 R09: 0000000000000000 [ 199.262907][ T5450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.263012][ T5450] R13: 00007f7edcb26128 R14: 00007f7edcb26090 R15: 00007ffd257aac08 [ 199.263035][ T5450] [ 199.263151][ T5450] Mem-Info: [ 199.520101][ T5450] active_anon:23608 inactive_anon:10 isolated_anon:0 [ 199.520101][ T5450] active_file:25725 inactive_file:2364 isolated_file:0 [ 199.520101][ T5450] unevictable:0 dirty:243 writeback:0 [ 199.520101][ T5450] slab_reclaimable:3318 slab_unreclaimable:18316 [ 199.520101][ T5450] mapped:33281 shmem:15240 pagetables:5396 [ 199.520101][ T5450] sec_pagetables:0 bounce:0 [ 199.520101][ T5450] kernel_misc_reclaimable:0 [ 199.520101][ T5450] free:1841914 free_pcp:19702 free_cma:0 [ 199.622857][ T5450] Node 0 active_anon:90684kB inactive_anon:40kB active_file:102900kB inactive_file:9456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132492kB dirty:988kB writeback:0kB shmem:57292kB kernel_stack:3808kB pagetables:21688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 199.754887][ T5450] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.857848][ T5462] FAULT_INJECTION: forcing a failure. [ 199.857848][ T5462] name failslab, interval 1, probability 0, space 0, times 0 [ 199.870612][ T28] audit: type=1400 audit(1779515128.661:525): avc: denied { execute } for pid=5461 comm="syz.1.510" path="/124/file0" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.910327][ T5450] lowmem_reserve[]: 0 2878 7857 7857 [ 199.931301][ T5450] Node 0 DMA32 free:2944488kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948012kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 199.994479][ T5462] CPU: 1 UID: 0 PID: 5462 Comm: syz.1.510 Tainted: G W syzkaller #0 PREEMPT(full) [ 199.994582][ T5462] Tainted: [W]=WARN [ 199.994591][ T5462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.994607][ T5462] Call Trace: [ 199.994615][ T5462] [ 199.994624][ T5462] __dump_stack+0x1d/0x30 [ 199.994655][ T5462] dump_stack_lvl+0x95/0xd0 [ 199.994733][ T5462] dump_stack+0x15/0x1b [ 199.994753][ T5462] should_fail_ex+0x263/0x280 [ 199.994784][ T5462] should_failslab+0x8c/0xb0 [ 199.994815][ T5462] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 199.994881][ T5462] ? perf_event_alloc+0x14b/0x1a10 [ 199.994990][ T5462] perf_event_alloc+0x14b/0x1a10 [ 199.995139][ T5462] ? __rcu_read_unlock+0x4e/0x70 [ 199.995167][ T5462] ? __fget_files+0x184/0x1c0 [ 199.995261][ T5462] __se_sys_perf_event_open+0x4b8/0x1270 [ 199.995367][ T5462] __x64_sys_perf_event_open+0x67/0x80 [ 199.995440][ T5462] x64_sys_call+0x2789/0x3020 [ 199.995468][ T5462] do_syscall_64+0x12c/0x3b0 [ 199.995513][ T5462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.995541][ T5462] RIP: 0033:0x7ff68e59ce59 [ 199.995617][ T5462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.995640][ T5462] RSP: 002b:00007ff68cff7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 199.995666][ T5462] RAX: ffffffffffffffda RBX: 00007ff68e815fa0 RCX: 00007ff68e59ce59 [ 199.995739][ T5462] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000a40 [ 199.995753][ T5462] RBP: 00007ff68cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 199.995766][ T5462] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 199.995778][ T5462] R13: 00007ff68e816038 R14: 00007ff68e815fa0 R15: 00007ffcb0a2a428 [ 199.995854][ T5462] [ 200.261042][ T5450] lowmem_reserve[]: 0 0 4978 4978 [ 200.266406][ T5450] Node 0 Normal free:4462288kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48344kB inactive_anon:40kB active_file:102900kB inactive_file:9456kB unevictable:0kB writepending:988kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:66952kB local_pcp:29860kB free_cma:0kB [ 200.303710][ T5450] lowmem_reserve[]: 0 0 0 0 [ 200.308404][ T5450] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.321776][ T5450] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944488kB [ 200.350102][ T5450] Node 0 Normal: 1932*4kB (ME) 1224*8kB (UME) 1047*16kB (UME) 486*32kB (UME) 205*64kB (UME) 150*128kB (UME) 140*256kB (UM) 75*512kB (UM) 49*1024kB (UM) 26*2048kB (UME) 1026*4096kB (UM) = 4462304kB [ 200.384608][ T5450] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 200.397045][ T5450] 31302 total pagecache pages [ 200.401962][ T5450] 2 pages in swap cache [ 200.408560][ T5450] Free swap = 124988kB [ 200.413229][ T5450] Total swap = 124996kB [ 200.417611][ T5450] 2097051 pages RAM [ 200.421803][ T5450] 0 pages HighMem/MovableOnly [ 200.426556][ T5450] 81649 pages reserved [ 200.590660][ T28] audit: type=1400 audit(1779515129.375:526): avc: denied { setattr } for pid=5466 comm="syz.0.513" name="[io_uring]" dev="anon_inodefs" ino=12070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 200.630782][ T5474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5474 comm=syz.5.514 [ 200.684978][ T5474] lo speed is unknown, defaulting to 1000 [ 200.690990][ T5474] lo speed is unknown, defaulting to 1000 [ 200.701250][ T5474] lo speed is unknown, defaulting to 1000 [ 200.709033][ T5474] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 200.795622][ T5474] lo speed is unknown, defaulting to 1000 [ 200.801865][ T5474] lo speed is unknown, defaulting to 1000 [ 200.871422][ T5474] lo speed is unknown, defaulting to 1000 [ 200.877669][ T5474] lo speed is unknown, defaulting to 1000 [ 200.898142][ T28] audit: type=1400 audit(1779515129.717:527): avc: denied { create } for pid=5481 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 200.931299][ T28] audit: type=1400 audit(1779515129.737:528): avc: denied { connect } for pid=5481 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 200.951556][ T5474] lo speed is unknown, defaulting to 1000 [ 201.284505][ T5505] loop1: detected capacity change from 0 to 512 [ 201.293171][ T5505] EXT4-fs: Ignoring removed oldalloc option [ 201.299148][ T5505] EXT4-fs: Ignoring removed nobh option [ 201.355340][ T5505] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.523: iget: bad extra_isize 90 (inode size 256) [ 201.380954][ T5505] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 201.381186][ T5505] EXT4-fs (loop1): Remounting filesystem read-only [ 201.396894][ T5505] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 201.407127][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 201.407158][ C1] EXT4-fs (loop1): initial error at time 1779515130: ext4_xattr_inode_iget:441: inode 11 [ 201.407195][ C1] EXT4-fs (loop1): last error at time 1779515130: ext4_xattr_inode_iget:441: inode 11 [ 201.466328][ T5496] netlink: 32 bytes leftover after parsing attributes in process `syz.2.520'. [ 201.475244][ T5496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'. [ 201.484235][ T5505] EXT4-fs (loop1): 1 orphan inode deleted [ 201.490503][ T5505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.512601][ T28] audit: type=1400 audit(1779515130.300:529): avc: denied { write } for pid=5504 comm="syz.1.523" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.569776][ T5498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.521'. [ 201.578733][ T5498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.521'. [ 201.649209][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.977341][ T28] audit: type=1400 audit(1779515130.782:530): avc: denied { connect } for pid=5524 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 201.996995][ T28] audit: type=1400 audit(1779515130.782:531): avc: denied { write } for pid=5524 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.061490][ T5525] loop3: detected capacity change from 0 to 4096 [ 202.165609][ T5532] netlink: 160 bytes leftover after parsing attributes in process `syz.1.532'. [ 202.176474][ T5525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.260204][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.402471][ T5544] loop1: detected capacity change from 0 to 128 [ 202.652543][ T5544] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.669304][ T5544] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.747927][ T5544] tipc: Started in network mode [ 202.757409][ T5544] tipc: Node identity 72ebc99ce329, cluster identity 4711 [ 202.764671][ T5544] tipc: Enabled bearer , priority 0 [ 202.830278][ T5541] tipc: Disabling bearer [ 202.839008][ T5543] netlink: 32 bytes leftover after parsing attributes in process `syz.3.537'. [ 202.848112][ T5543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 202.985589][ T5553] lo speed is unknown, defaulting to 1000 [ 203.112270][ T28] audit: type=1400 audit(1779515131.948:532): avc: denied { name_connect } for pid=5558 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 203.120358][ T5559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 203.150979][ T28] audit: type=1400 audit(1779515131.978:533): avc: denied { ioctl } for pid=5558 comm="syz.3.541" path="socket:[12251]" dev="sockfs" ino=12251 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.197697][ T28] audit: type=1400 audit(1779515132.028:534): avc: denied { connect } for pid=5558 comm="syz.3.541" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.220010][ T5559] xt_hashlimit: size too large, truncated to 1048576 [ 203.279256][ T5560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=5560 comm=syz.3.541 [ 203.296968][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.337022][ T5562] loop1: detected capacity change from 0 to 256 [ 203.513834][ T5567] sctp: [Deprecated]: syz.0.543 (pid 5567) Use of int in maxseg socket option. [ 203.513834][ T5567] Use struct sctp_assoc_value instead [ 203.913671][ T5582] lo speed is unknown, defaulting to 1000 [ 205.056163][ T28] audit: type=1400 audit(1779515133.857:535): avc: denied { read } for pid=5595 comm="syz.1.553" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.155169][ T5592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.552'. [ 205.164161][ T5592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.552'. [ 205.167064][ T28] audit: type=1400 audit(1779515133.857:536): avc: denied { open } for pid=5595 comm="syz.1.553" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.227784][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.235023][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.264470][ T28] audit: type=1400 audit(1779515133.928:537): avc: denied { ioctl } for pid=5595 comm="syz.1.553" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.279352][ T5600] loop3: detected capacity change from 0 to 256 [ 205.341366][ T5603] loop1: detected capacity change from 0 to 512 [ 205.375411][ T5603] EXT4-fs: Ignoring removed oldalloc option [ 205.407262][ T28] audit: type=1400 audit(1779515134.239:538): avc: denied { accept } for pid=5598 comm="syz.5.555" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.430351][ T5603] EXT4-fs: Ignoring removed nobh option [ 205.489902][ T5603] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.556: iget: bad extra_isize 90 (inode size 256) [ 205.503444][ T5603] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 205.563804][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 205.580906][ C0] EXT4-fs (loop1): initial error at time 1779515134: ext4_xattr_inode_iget:441: inode 11 [ 205.591490][ C0] EXT4-fs (loop1): last error at time 1779515134: ext4_xattr_inode_iget:441: inode 11 [ 205.605189][ T5603] EXT4-fs (loop1): Remounting filesystem read-only [ 205.659269][ T5603] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 205.749608][ T5603] EXT4-fs (loop1): 1 orphan inode deleted [ 205.756329][ T5603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.836338][ T5619] syzkaller0: entered promiscuous mode [ 205.841935][ T5619] syzkaller0: entered allmulticast mode [ 205.932469][ T28] audit: type=1400 audit(1779515134.772:539): avc: denied { write } for pid=5602 comm="syz.1.556" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.470665][ T28] audit: type=1326 audit(1779515135.314:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c9bcce59 code=0x7ffc0000 [ 206.510468][ T5629] FAULT_INJECTION: forcing a failure. [ 206.510468][ T5629] name failslab, interval 1, probability 0, space 0, times 0 [ 206.524607][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.548750][ T28] audit: type=1326 audit(1779515135.355:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c9bcce59 code=0x7ffc0000 [ 206.604474][ T5629] CPU: 1 UID: 0 PID: 5629 Comm: syz.3.565 Tainted: G W syzkaller #0 PREEMPT(full) [ 206.604515][ T5629] Tainted: [W]=WARN [ 206.604522][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.604575][ T5629] Call Trace: [ 206.604584][ T5629] [ 206.604670][ T5629] __dump_stack+0x1d/0x30 [ 206.604701][ T5629] dump_stack_lvl+0x95/0xd0 [ 206.604772][ T5629] dump_stack+0x15/0x1b [ 206.604796][ T5629] should_fail_ex+0x263/0x280 [ 206.604834][ T5629] should_failslab+0x8c/0xb0 [ 206.604945][ T5629] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 206.604981][ T5629] ? sidtab_sid2str_get+0xa0/0x130 [ 206.605008][ T5629] kmemdup_noprof+0x2b/0x70 [ 206.605089][ T5629] sidtab_sid2str_get+0xa0/0x130 [ 206.605114][ T5629] security_sid_to_context_core+0x1eb/0x2e0 [ 206.605143][ T5629] security_sid_to_context+0x27/0x40 [ 206.605175][ T5629] selinux_lsmprop_to_secctx+0x67/0xf0 [ 206.605208][ T5629] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 206.605281][ T5629] audit_log_subj_ctx+0xa4/0x3e0 [ 206.605314][ T5629] ? skb_put+0xa9/0xf0 [ 206.605362][ T5629] audit_log_task_context+0x48/0x70 [ 206.605421][ T5629] audit_log_task+0xf3/0x250 [ 206.605446][ T5629] audit_seccomp+0x60/0x100 [ 206.605466][ T5629] ? __seccomp_filter+0x8db/0x1350 [ 206.605496][ T5629] __seccomp_filter+0x8ec/0x1350 [ 206.605527][ T5629] ? __rcu_read_unlock+0x4e/0x70 [ 206.605587][ T5629] ? __fget_files+0x184/0x1c0 [ 206.605609][ T5629] ? mutex_lock+0x57/0x90 [ 206.605631][ T5629] ? mutex_unlock+0x4e/0x90 [ 206.605657][ T5629] __secure_computing+0x81/0x150 [ 206.605759][ T5629] do_syscall_64+0xce/0x3b0 [ 206.605791][ T5629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.605819][ T5629] RIP: 0033:0x7f94c9bcce59 [ 206.605850][ T5629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.605868][ T5629] RSP: 002b:00007f94c8627028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d2 [ 206.605887][ T5629] RAX: ffffffffffffffda RBX: 00007f94c9e45fa0 RCX: 00007f94c9bcce59 [ 206.605904][ T5629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.605920][ T5629] RBP: 00007f94c8627090 R08: 0000000000000000 R09: 0000000000000000 [ 206.605932][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.606037][ T5629] R13: 00007f94c9e46038 R14: 00007f94c9e45fa0 R15: 00007ffcaeae5f08 [ 206.606058][ T5629] [ 206.876405][ T5633] loop1: detected capacity change from 0 to 256 [ 206.964148][ T5637] __nla_validate_parse: 2 callbacks suppressed [ 206.964165][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 207.699996][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 207.960061][ T5650] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 208.198069][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 208.198098][ T28] audit: type=1326 audit(1779515137.052:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f94c9bcce59 code=0x7ffc0000 [ 208.652045][ T5655] lo speed is unknown, defaulting to 1000 [ 208.810314][ T5664] lo speed is unknown, defaulting to 1000 [ 209.584136][ T5681] lo speed is unknown, defaulting to 1000 [ 209.714416][ T5686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.585'. [ 210.359828][ T5698] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 210.730154][ T5707] lo speed is unknown, defaulting to 1000 [ 210.913841][ T5716] FAULT_INJECTION: forcing a failure. [ 210.913841][ T5716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.950070][ T5717] lo speed is unknown, defaulting to 1000 [ 210.950069][ T5716] CPU: 1 UID: 0 PID: 5716 Comm: syz.3.595 Tainted: G W syzkaller #0 PREEMPT(full) [ 210.950183][ T5716] Tainted: [W]=WARN [ 210.950219][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.950268][ T5716] Call Trace: [ 210.950275][ T5716] [ 210.950301][ T5716] __dump_stack+0x1d/0x30 [ 210.950434][ T5716] dump_stack_lvl+0x95/0xd0 [ 210.950558][ T5716] dump_stack+0x15/0x1b [ 210.950619][ T5716] should_fail_ex+0x263/0x280 [ 210.950707][ T5716] should_fail+0xb/0x20 [ 210.950842][ T5716] should_fail_usercopy+0x1a/0x20 [ 210.950965][ T5716] _copy_from_user+0x1c/0xb0 [ 210.951088][ T5716] map_update_elem+0x3fa/0x6d0 [ 210.951181][ T5716] __sys_bpf+0x5e1/0x7e0 [ 210.951275][ T5716] __x64_sys_bpf+0x41/0x50 [ 210.951359][ T5716] x64_sys_call+0x10cb/0x3020 [ 210.951434][ T5716] do_syscall_64+0x12c/0x3b0 [ 210.951539][ T5716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.951641][ T5716] RIP: 0033:0x7f94c9bcce59 [ 210.951707][ T5716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.951866][ T5716] RSP: 002b:00007f94c8627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.951930][ T5716] RAX: ffffffffffffffda RBX: 00007f94c9e45fa0 RCX: 00007f94c9bcce59 [ 210.951973][ T5716] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000002 [ 210.952021][ T5716] RBP: 00007f94c8627090 R08: 0000000000000000 R09: 0000000000000000 [ 210.952064][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.952106][ T5716] R13: 00007f94c9e46038 R14: 00007f94c9e45fa0 R15: 00007ffcaeae5f08 [ 210.952227][ T5716] [ 211.356360][ T5726] netlink: 'syz.0.593': attribute type 10 has an invalid length. [ 211.364661][ T5726] veth0_macvtap: left promiscuous mode [ 211.771357][ T5724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 212.608963][ T28] audit: type=1326 audit(1779515141.482:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.603" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68e59ce59 code=0x7ffc0000 [ 212.675315][ T28] audit: type=1326 audit(1779515141.482:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.603" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68e59ce59 code=0x7ffc0000 [ 212.758286][ T28] audit: type=1326 audit(1779515141.512:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.603" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff68e59ce59 code=0x7ffc0000 [ 212.807527][ T28] audit: type=1326 audit(1779515141.512:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.603" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68e59ce59 code=0x7ffc0000 [ 212.837542][ T28] audit: type=1326 audit(1779515141.512:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.603" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68e59ce59 code=0x7ffc0000 [ 212.865392][ T28] audit: type=1326 audit(1779515141.482:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.603" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68e59ce59 code=0x7ffc0000 [ 212.892679][ T28] audit: type=1326 audit(1779515141.512:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.603" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68e59ce59 code=0x7ffc0000 [ 212.920668][ T28] audit: type=1326 audit(1779515141.512:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.603" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68e59ce59 code=0x7ffc0000 [ 212.946047][ T5748] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.962377][ T28] audit: type=1326 audit(1779515141.512:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.603" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68e59ce59 code=0x7ffc0000 [ 213.202525][ T5757] loop3: detected capacity change from 0 to 128 [ 213.538580][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.608'. [ 213.580985][ T5757] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.593780][ T5757] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.885581][ T5768] loop2: detected capacity change from 0 to 256 [ 214.173067][ T5773] mmap: syz.1.616 (5773) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 214.187529][ T5776] netlink: 44 bytes leftover after parsing attributes in process `syz.0.615'. [ 214.201495][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.208818][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.223334][ T5776] netlink: 44 bytes leftover after parsing attributes in process `syz.0.615'. [ 214.396997][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.469712][ T5787] lo speed is unknown, defaulting to 1000 [ 214.475829][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.619'. [ 214.495746][ T5789] loop3: detected capacity change from 0 to 512 [ 214.533344][ T5789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.581639][ T5789] ext4 filesystem being mounted at /140/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.717705][ T5797] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 214.738616][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 214.738636][ T28] audit: type=1400 audit(1779515143.601:618): avc: denied { read } for pid=5788 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.898486][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'. [ 215.323947][ T5809] lo speed is unknown, defaulting to 1000 [ 215.348561][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.571648][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.635'. [ 215.994892][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.635'. [ 217.269257][ T5855] FAULT_INJECTION: forcing a failure. [ 217.269257][ T5855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.282571][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz.0.643 Tainted: G W syzkaller #0 PREEMPT(full) [ 217.282607][ T5855] Tainted: [W]=WARN [ 217.282614][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.282637][ T5855] Call Trace: [ 217.282675][ T5855] [ 217.282685][ T5855] __dump_stack+0x1d/0x30 [ 217.282715][ T5855] dump_stack_lvl+0x95/0xd0 [ 217.282741][ T5855] dump_stack+0x15/0x1b [ 217.282765][ T5855] should_fail_ex+0x263/0x280 [ 217.282817][ T5855] should_fail+0xb/0x20 [ 217.282896][ T5855] should_fail_usercopy+0x1a/0x20 [ 217.282980][ T5855] _copy_from_user+0x1c/0xb0 [ 217.283054][ T5855] ___sys_sendmsg+0xc1/0x1e0 [ 217.283159][ T5855] __x64_sys_sendmsg+0xd4/0x160 [ 217.283188][ T5855] x64_sys_call+0x194c/0x3020 [ 217.283289][ T5855] do_syscall_64+0x12c/0x3b0 [ 217.283354][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.283408][ T5855] RIP: 0033:0x7fa04d3ace59 [ 217.283423][ T5855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.283441][ T5855] RSP: 002b:00007fa04be07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.283461][ T5855] RAX: ffffffffffffffda RBX: 00007fa04d625fa0 RCX: 00007fa04d3ace59 [ 217.283476][ T5855] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 000000000000000a [ 217.283493][ T5855] RBP: 00007fa04be07090 R08: 0000000000000000 R09: 0000000000000000 [ 217.283581][ T5855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.283596][ T5855] R13: 00007fa04d626038 R14: 00007fa04d625fa0 R15: 00007ffd0f49e3d8 [ 217.283627][ T5855] [ 217.323154][ T5860] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 219.355167][ T5867] lo speed is unknown, defaulting to 1000 [ 219.521779][ T5871] lo speed is unknown, defaulting to 1000 [ 219.644985][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 219.934150][ T5882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'. [ 220.370591][ T5884] lo speed is unknown, defaulting to 1000 [ 220.460600][ T5886] netlink: 232 bytes leftover after parsing attributes in process `syz.5.652'. [ 220.944612][ T5904] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 221.283899][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 221.726746][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 221.922248][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.662'. [ 222.487301][ T5916] netlink: 232 bytes leftover after parsing attributes in process `syz.3.663'. [ 222.505756][ T5910] lo speed is unknown, defaulting to 1000 [ 222.931501][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.662'. [ 223.064207][ T5927] netlink: 160 bytes leftover after parsing attributes in process `syz.3.665'. [ 223.220988][ T5934] lo speed is unknown, defaulting to 1000 [ 223.301172][ T5937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.668'. [ 223.782642][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.790135][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.341239][ T5955] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.578284][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.585620][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.032945][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.041422][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.084089][ T5978] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.113718][ T5979] __nla_validate_parse: 4 callbacks suppressed [ 225.113744][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 225.225679][ T5979] 9p: Bad value for 'wfdno' [ 225.266193][ T5974] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.391525][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 225.436322][ T5986] netlink: 232 bytes leftover after parsing attributes in process `syz.2.686'. [ 226.589616][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'. [ 226.720561][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.688'. [ 226.770968][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.014646][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.227571][ T4160] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.236511][ T4160] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.321487][ T4160] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.330638][ T4160] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.479494][ T6012] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.791491][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.695'. [ 227.824005][ T6018] lo speed is unknown, defaulting to 1000 [ 228.094562][ T6019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6019 comm=syz.1.692 [ 228.629842][ T6027] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 228.643957][ T6028] loop2: detected capacity change from 0 to 512 [ 228.680883][ T6028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.729016][ T6028] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.760745][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.773469][ T6034] loop3: detected capacity change from 0 to 256 [ 228.868586][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 228.940315][ T28] audit: type=1400 audit(1779515157.864:619): avc: denied { create } for pid=6041 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 229.025517][ T28] audit: type=1400 audit(1779515157.884:620): avc: denied { sys_admin } for pid=6041 comm="syz.1.703" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 229.122268][ T6042] capability: warning: `syz.1.703' uses deprecated v2 capabilities in a way that may be insecure [ 229.227722][ T6051] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 230.683459][ T6072] vlan0: entered promiscuous mode [ 230.778372][ T6080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.716'. [ 230.793203][ T6082] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 230.811161][ T6084] loop1: detected capacity change from 0 to 256 [ 230.820132][ T6080] xt_hashlimit: size too large, truncated to 1048576 [ 230.928087][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.935762][ T6087] bridge0: port 2(bridge_slave_1) entered listening state [ 230.943572][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.951095][ T6087] bridge0: port 1(bridge_slave_0) entered listening state [ 231.055102][ T10] lo speed is unknown, defaulting to 1000 [ 231.394574][ T6093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.720'. [ 231.410128][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.418328][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.520684][ T6098] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.649806][ T6095] lo speed is unknown, defaulting to 1000 [ 232.755641][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.5.731'. [ 232.968919][ T6134] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 232.994063][ T6136] netlink: 44 bytes leftover after parsing attributes in process `syz.3.735'. [ 233.073059][ T6132] lo speed is unknown, defaulting to 1000 [ 233.111126][ T28] audit: type=1400 audit(1779515162.057:621): avc: denied { write } for pid=6138 comm="syz.3.736" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 233.230695][ T6148] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 233.425997][ T6155] netlink: 160 bytes leftover after parsing attributes in process `syz.5.743'. [ 233.702979][ T6165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.744'. [ 233.735267][ T6165] lo speed is unknown, defaulting to 1000 [ 233.807788][ T28] audit: type=1400 audit(1779515162.639:622): avc: denied { create } for pid=6156 comm="syz.5.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 233.955725][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 234.276322][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'. [ 235.611802][ T6184] netlink: 160 bytes leftover after parsing attributes in process `syz.2.754'. [ 235.633612][ T6187] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.028406][ T6196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.757'. [ 236.062278][ T6196] lo speed is unknown, defaulting to 1000 [ 236.241193][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.758'. [ 236.819462][ T6200] netlink: 232 bytes leftover after parsing attributes in process `syz.2.759'. [ 236.841409][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.760'. [ 237.390534][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.760'. [ 237.786619][ T6207] loop2: detected capacity change from 0 to 256 [ 237.805427][ T6207] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.926312][ T6207] sctp: [Deprecated]: syz.2.761 (pid 6207) Use of int in maxseg socket option. [ 237.926312][ T6207] Use struct sctp_assoc_value instead [ 237.942276][ T6209] netlink: 160 bytes leftover after parsing attributes in process `syz.5.762'. [ 237.998627][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.764'. [ 238.123456][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.765'. [ 238.217693][ T6221] vti0: entered promiscuous mode [ 238.222762][ T6221] vti0: entered allmulticast mode [ 239.025159][ T6236] netlink: 232 bytes leftover after parsing attributes in process `syz.3.772'. [ 239.055072][ T6238] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 239.084419][ T28] audit: type=1400 audit(1779515168.045:623): avc: denied { bind } for pid=6239 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 239.145438][ T6240] 9p: Bad value for 'rfdno' [ 239.152373][ T28] audit: type=1400 audit(1779515168.075:624): avc: denied { ioctl } for pid=6227 comm="syz.2.769" path="socket:[17190]" dev="sockfs" ino=17190 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 239.177023][ T28] audit: type=1400 audit(1779515168.115:625): avc: denied { mounton } for pid=6239 comm="syz.3.773" path="/172/file0" dev="tmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 239.204420][ T6245] netlink: 160 bytes leftover after parsing attributes in process `syz.0.775'. [ 239.245875][ T28] audit: type=1400 audit(1779515168.145:626): avc: denied { setattr } for pid=6239 comm="syz.3.773" path="/newroot/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 239.325125][ T6250] xt_hashlimit: size too large, truncated to 1048576 [ 239.358600][ T6252] loop3: detected capacity change from 0 to 256 [ 239.392235][ T6252] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.599337][ T6252] sctp: [Deprecated]: syz.3.778 (pid 6252) Use of int in maxseg socket option. [ 239.599337][ T6252] Use struct sctp_assoc_value instead [ 239.690947][ T28] audit: type=1400 audit(1779515168.657:627): avc: denied { setopt } for pid=6260 comm="syz.5.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.736634][ T28] audit: type=1400 audit(1779515168.657:628): avc: denied { ioctl } for pid=6260 comm="syz.5.781" path="socket:[17244]" dev="sockfs" ino=17244 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.764518][ T28] audit: type=1400 audit(1779515168.697:629): avc: denied { getopt } for pid=6260 comm="syz.5.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 241.029096][ T6288] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.106067][ T6291] __nla_validate_parse: 5 callbacks suppressed [ 241.106087][ T6291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.788'. [ 241.142838][ T6291] lo speed is unknown, defaulting to 1000 [ 241.207228][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 241.897521][ T28] audit: type=1400 audit(1779515170.843:630): avc: denied { bind } for pid=6297 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.353924][ T6303] lo speed is unknown, defaulting to 1000 [ 242.522523][ T6312] FAULT_INJECTION: forcing a failure. [ 242.522523][ T6312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.565094][ T6312] CPU: 0 UID: 0 PID: 6312 Comm: syz.5.799 Tainted: G W syzkaller #0 PREEMPT(full) [ 242.565161][ T6312] Tainted: [W]=WARN [ 242.565171][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.565187][ T6312] Call Trace: [ 242.565196][ T6312] [ 242.565207][ T6312] __dump_stack+0x1d/0x30 [ 242.565236][ T6312] dump_stack_lvl+0x95/0xd0 [ 242.565269][ T6312] dump_stack+0x15/0x1b [ 242.565294][ T6312] should_fail_ex+0x263/0x280 [ 242.565324][ T6312] should_fail+0xb/0x20 [ 242.565403][ T6312] should_fail_usercopy+0x1a/0x20 [ 242.565441][ T6312] _copy_from_user+0x1c/0xb0 [ 242.565484][ T6312] kstrtouint_from_user+0x69/0xf0 [ 242.565518][ T6312] ? 0xffffffff81000000 [ 242.565604][ T6312] ? selinux_file_permission+0x1e1/0x320 [ 242.565638][ T6312] proc_fail_nth_write+0x50/0x160 [ 242.565744][ T6312] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 242.565782][ T6312] vfs_write+0x269/0x9f0 [ 242.565815][ T6312] ? __rcu_read_unlock+0x4e/0x70 [ 242.565843][ T6312] ? __fget_files+0x184/0x1c0 [ 242.565902][ T6312] ? mutex_lock+0x57/0x90 [ 242.565933][ T6312] ksys_write+0xdc/0x1a0 [ 242.565970][ T6312] __x64_sys_write+0x40/0x50 [ 242.566008][ T6312] x64_sys_call+0x27e1/0x3020 [ 242.566069][ T6312] do_syscall_64+0x12c/0x3b0 [ 242.566336][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.566365][ T6312] RIP: 0033:0x7f7edc86d68e [ 242.566385][ T6312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.566408][ T6312] RSP: 002b:00007f7edb2fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.566439][ T6312] RAX: ffffffffffffffda RBX: 00007f7edb2ff6c0 RCX: 00007f7edc86d68e [ 242.566457][ T6312] RDX: 0000000000000001 RSI: 00007f7edb2ff0a0 RDI: 0000000000000003 [ 242.566474][ T6312] RBP: 00007f7edb2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 242.566490][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.566506][ T6312] R13: 00007f7edcb26038 R14: 00007f7edcb25fa0 R15: 00007ffd257aac08 [ 242.566552][ T6312] [ 243.005383][ T6317] netlink: 160 bytes leftover after parsing attributes in process `syz.2.801'. [ 243.117598][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.804'. [ 243.253059][ T6328] netlink: 'syz.1.802': attribute type 10 has an invalid length. [ 243.265610][ T6328] veth0_macvtap: left promiscuous mode [ 243.372193][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.805'. [ 243.778114][ T6337] rdma_op ffff888105289980 conn xmit_rdma 0000000000000000 [ 243.797096][ T6337] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.198311][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'. [ 244.228780][ T6352] lo speed is unknown, defaulting to 1000 [ 245.042366][ T6357] lo speed is unknown, defaulting to 1000 [ 245.591242][ T6364] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.916334][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 245.924146][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 245.984667][ T6366] netlink: 160 bytes leftover after parsing attributes in process `syz.0.814'. [ 246.155953][ T6370] FAULT_INJECTION: forcing a failure. [ 246.155953][ T6370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.191818][ T6370] CPU: 0 UID: 0 PID: 6370 Comm: syz.0.816 Tainted: G W syzkaller #0 PREEMPT(full) [ 246.191869][ T6370] Tainted: [W]=WARN [ 246.191878][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.191891][ T6370] Call Trace: [ 246.191897][ T6370] [ 246.191903][ T6370] __dump_stack+0x1d/0x30 [ 246.191933][ T6370] dump_stack_lvl+0x95/0xd0 [ 246.192017][ T6370] dump_stack+0x15/0x1b [ 246.192145][ T6370] should_fail_ex+0x263/0x280 [ 246.192308][ T6370] should_fail+0xb/0x20 [ 246.192341][ T6370] should_fail_usercopy+0x1a/0x20 [ 246.192379][ T6370] _copy_from_user+0x1c/0xb0 [ 246.192461][ T6370] memdup_user+0x5e/0xd0 [ 246.192498][ T6370] strndup_user+0x68/0xb0 [ 246.192590][ T6370] __se_sys_mount+0x4d/0x2e0 [ 246.192639][ T6370] ? fput+0x8f/0xc0 [ 246.192665][ T6370] ? ksys_write+0x194/0x1a0 [ 246.192699][ T6370] __x64_sys_mount+0x67/0x80 [ 246.192741][ T6370] x64_sys_call+0x2d61/0x3020 [ 246.192848][ T6370] do_syscall_64+0x12c/0x3b0 [ 246.192886][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.192914][ T6370] RIP: 0033:0x7fa04d3ace59 [ 246.192934][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.192960][ T6370] RSP: 002b:00007fa04be07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 246.193017][ T6370] RAX: ffffffffffffffda RBX: 00007fa04d625fa0 RCX: 00007fa04d3ace59 [ 246.193061][ T6370] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 246.193083][ T6370] RBP: 00007fa04be07090 R08: 0000200000000180 R09: 0000000000000000 [ 246.193101][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.193113][ T6370] R13: 00007fa04d626038 R14: 00007fa04d625fa0 R15: 00007ffd0f49e3d8 [ 246.193131][ T6370] [ 246.428132][ T6376] SELinux: failed to load policy [ 246.476443][ T28] audit: type=1400 audit(1779515175.455:631): avc: denied { checkpoint_restore } for pid=6372 comm="syz.1.818" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 246.826761][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz.5.820'. [ 246.851420][ T6392] lo speed is unknown, defaulting to 1000 [ 246.951469][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.823'. [ 247.705577][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 248.121627][ T6401] netlink: 160 bytes leftover after parsing attributes in process `syz.0.825'. [ 248.185657][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.824'. [ 249.799852][ T6418] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 249.885867][ T6416] loop1: detected capacity change from 0 to 128 [ 250.228074][ T6426] loop1: detected capacity change from 0 to 512 [ 250.249258][ T6426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.327583][ T6426] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.833: corrupted inode contents [ 250.339464][ T6426] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 250.340909][ T6426] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 250.365325][ T6426] loop1: lost filesystem error report for type 5 error -117 [ 250.375482][ T6426] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.833: corrupted inode contents [ 250.389026][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 250.389046][ C0] EXT4-fs (loop1): initial error at time 1779515179: ext4_do_update_inode:5690: inode 15 [ 250.389071][ C0] EXT4-fs (loop1): last error at time 1779515179: ext4_orphan_del:303 [ 250.450880][ T6426] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 250.454854][ T6426] EXT4-fs error (device loop1): ext4_evict_inode:315: inode #15: comm syz.1.833: mark_inode_dirty error [ 250.468782][ T6432] loop3: detected capacity change from 0 to 512 [ 250.476406][ T28] audit: type=1400 audit(1779515179.444:632): avc: denied { read } for pid=6419 comm="syz.0.830" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 250.512906][ T6426] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 250.513084][ T6426] EXT4-fs (loop1): 1 orphan inode deleted [ 250.528595][ T6426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.540975][ T28] audit: type=1400 audit(1779515179.444:633): avc: denied { open } for pid=6419 comm="syz.0.830" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 250.564457][ T28] audit: type=1400 audit(1779515179.444:634): avc: denied { ioctl } for pid=6419 comm="syz.0.830" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 250.604355][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.652006][ T6432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.664647][ T6432] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.804315][ T6440] netlink: 160 bytes leftover after parsing attributes in process `syz.0.837'. [ 250.818971][ T6442] vlan0: entered promiscuous mode [ 250.962026][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.137884][ T6452] loop3: detected capacity change from 0 to 512 [ 251.149308][ T6452] EXT4-fs: Ignoring removed oldalloc option [ 251.156467][ T6452] EXT4-fs: Ignoring removed nobh option [ 251.276006][ T6452] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.840: iget: bad extra_isize 90 (inode size 256) [ 251.289337][ T6452] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 251.292791][ T6452] EXT4-fs (loop3): Remounting filesystem read-only [ 251.308771][ T6452] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 251.318948][ T6452] EXT4-fs (loop3): 1 orphan inode deleted [ 251.348560][ T6452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.746579][ T28] audit: type=1400 audit(1779515180.717:635): avc: denied { write } for pid=6451 comm="syz.3.840" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.796565][ T6455] loop1: detected capacity change from 0 to 4096 [ 251.806667][ T6455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.820671][ T6455] ext4: Unknown parameter 'appraise' [ 252.003574][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.024726][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.844'. [ 252.309519][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 253.647924][ T6477] netlink: 160 bytes leftover after parsing attributes in process `syz.3.848'. [ 253.831941][ T6482] loop3: detected capacity change from 0 to 512 [ 253.888317][ T6482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.917947][ T6482] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.991447][ T6438] loop1: detected capacity change from 0 to 512 [ 254.011075][ T6438] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 254.044888][ T6438] EXT4-fs (loop1): 1 truncate cleaned up [ 254.053316][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.076304][ T6438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.210252][ T28] audit: type=1400 audit(1779515183.213:636): avc: denied { write } for pid=6437 comm="syz.1.835" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.516201][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.852'. [ 254.696527][ T6493] xt_hashlimit: size too large, truncated to 1048576 [ 255.286866][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.472108][ T6497] loop1: detected capacity change from 0 to 512 [ 255.494474][ T6497] EXT4-fs: Ignoring removed oldalloc option [ 255.523492][ T6497] EXT4-fs: Ignoring removed nobh option [ 255.568778][ T6497] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.853: iget: bad extra_isize 90 (inode size 256) [ 255.583598][ T6497] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 255.583857][ T6497] EXT4-fs (loop1): Remounting filesystem read-only [ 255.593701][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 255.593727][ C0] EXT4-fs (loop1): initial error at time 1779515184: ext4_xattr_inode_iget:441: inode 11 [ 255.593768][ C0] EXT4-fs (loop1): last error at time 1779515184: ext4_xattr_inode_iget:441: inode 11 [ 255.793978][ T6497] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 255.922835][ T6497] EXT4-fs (loop1): 1 orphan inode deleted [ 255.953372][ T6497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.021261][ T28] audit: type=1400 audit(1779515185.017:637): avc: denied { write } for pid=6496 comm="syz.1.853" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.199957][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.267745][ T6503] loop1: detected capacity change from 0 to 256 [ 256.300217][ T6503] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.414650][ T6504] sctp: [Deprecated]: syz.1.855 (pid 6504) Use of int in maxseg socket option. [ 256.414650][ T6504] Use struct sctp_assoc_value instead [ 256.774261][ T6522] netlink: 220 bytes leftover after parsing attributes in process `syz.5.860'. [ 256.793297][ T6522] tc_dump_action: action bad kind [ 257.322659][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.864'. [ 257.331826][ T6533] loop1: detected capacity change from 0 to 1024 [ 257.349890][ T6533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 257.364473][ T6533] System zones: 0-1, 3-36 [ 257.385817][ T6533] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.865: bad orphan inode 134217728 [ 257.397635][ T6533] loop1: lost filesystem error report for type 5 error -117 [ 257.399632][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 257.414337][ C0] EXT4-fs (loop1): initial error at time 1779515186: ext4_orphan_get:1423 [ 257.423554][ C0] EXT4-fs (loop1): last error at time 1779515186: ext4_orphan_get:1423 [ 257.433281][ T6533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.449822][ T28] audit: type=1400 audit(1779515186.450:638): avc: denied { write } for pid=6532 comm="syz.1.865" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.458374][ T6536] xt_hashlimit: size too large, truncated to 1048576 [ 257.492042][ T28] audit: type=1400 audit(1779515186.500:639): avc: denied { read open } for pid=6532 comm="syz.1.865" path="/187/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 257.515027][ T28] audit: type=1400 audit(1779515186.500:640): avc: denied { write } for pid=6532 comm="syz.1.865" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 257.930556][ T6533] ================================================================== [ 257.938730][ T6533] BUG: KCSAN: data-race in filemap_read / filemap_read [ 257.945656][ T6533] [ 257.948015][ T6533] write to 0xffff88811d3d78e0 of 8 bytes by task 6534 on cpu 1: [ 257.955761][ T6533] filemap_read+0x98d/0xa10 [ 257.960320][ T6533] generic_file_read_iter+0x79/0x330 [ 257.965658][ T6533] ext4_file_read_iter+0x1cc/0x290 [ 257.970819][ T6533] copy_splice_read+0x471/0x6c0 [ 257.975730][ T6533] splice_direct_to_actor+0x28f/0x670 [ 257.981150][ T6533] do_splice_direct+0x119/0x1a0 [ 257.986056][ T6533] do_sendfile+0x382/0x650 [ 257.990509][ T6533] __x64_sys_sendfile64+0x105/0x150 [ 257.995734][ T6533] x64_sys_call+0x2dc4/0x3020 [ 258.000534][ T6533] do_syscall_64+0x12c/0x3b0 [ 258.005168][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.011096][ T6533] [ 258.013440][ T6533] write to 0xffff88811d3d78e0 of 8 bytes by task 6533 on cpu 0: [ 258.021096][ T6533] filemap_read+0x98d/0xa10 [ 258.025646][ T6533] generic_file_read_iter+0x79/0x330 [ 258.030981][ T6533] ext4_file_read_iter+0x1cc/0x290 [ 258.036132][ T6533] copy_splice_read+0x471/0x6c0 [ 258.041017][ T6533] splice_direct_to_actor+0x28f/0x670 [ 258.046436][ T6533] do_splice_direct+0x119/0x1a0 [ 258.051328][ T6533] do_sendfile+0x382/0x650 [ 258.055786][ T6533] __x64_sys_sendfile64+0x105/0x150 [ 258.061020][ T6533] x64_sys_call+0x2dc4/0x3020 [ 258.065741][ T6533] do_syscall_64+0x12c/0x3b0 [ 258.070388][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.076327][ T6533] [ 258.078673][ T6533] value changed: 0x0000000000000219 -> 0x000000000000021a [ 258.085812][ T6533] [ 258.088161][ T6533] Reported by Kernel Concurrency Sanitizer on: [ 258.094336][ T6533] CPU: 0 UID: 0 PID: 6533 Comm: syz.1.865 Tainted: G W syzkaller #0 PREEMPT(full) [ 258.105135][ T6533] Tainted: [W]=WARN [ 258.108956][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.119133][ T6533] ================================================================== [ 258.194522][ T6534] ================================================================== [ 258.202706][ T6534] BUG: KCSAN: data-race in filemap_read / filemap_read [ 258.209631][ T6534] [ 258.211981][ T6534] write to 0xffff88811d3d78e0 of 8 bytes by task 6533 on cpu 0: [ 258.219627][ T6534] filemap_read+0x98d/0xa10 [ 258.224175][ T6534] generic_file_read_iter+0x79/0x330 [ 258.229499][ T6534] ext4_file_read_iter+0x1cc/0x290 [ 258.234664][ T6534] copy_splice_read+0x471/0x6c0 [ 258.239590][ T6534] splice_direct_to_actor+0x28f/0x670 [ 258.245001][ T6534] do_splice_direct+0x119/0x1a0 [ 258.249897][ T6534] do_sendfile+0x382/0x650 [ 258.254340][ T6534] __x64_sys_sendfile64+0x105/0x150 [ 258.259574][ T6534] x64_sys_call+0x2dc4/0x3020 [ 258.264296][ T6534] do_syscall_64+0x12c/0x3b0 [ 258.268938][ T6534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.274868][ T6534] [ 258.277225][ T6534] read to 0xffff88811d3d78e0 of 8 bytes by task 6534 on cpu 1: [ 258.284802][ T6534] filemap_read+0x6f/0xa10 [ 258.289273][ T6534] generic_file_read_iter+0x79/0x330 [ 258.294607][ T6534] ext4_file_read_iter+0x1cc/0x290 [ 258.299781][ T6534] copy_splice_read+0x471/0x6c0 [ 258.304680][ T6534] splice_direct_to_actor+0x28f/0x670 [ 258.310102][ T6534] do_splice_direct+0x119/0x1a0 [ 258.315003][ T6534] do_sendfile+0x382/0x650 [ 258.319452][ T6534] __x64_sys_sendfile64+0x105/0x150 [ 258.324690][ T6534] x64_sys_call+0x2dc4/0x3020 [ 258.329449][ T6534] do_syscall_64+0x12c/0x3b0 [ 258.334075][ T6534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.339991][ T6534] [ 258.342326][ T6534] value changed: 0x0000000000000229 -> 0x000000000000022a [ 258.349455][ T6534] [ 258.351790][ T6534] Reported by Kernel Concurrency Sanitizer on: [ 258.357992][ T6534] CPU: 1 UID: 0 PID: 6534 Comm: syz.1.865 Tainted: G W syzkaller #0 PREEMPT(full) [ 258.368825][ T6534] Tainted: [W]=WARN [ 258.372655][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.382734][ T6534] ================================================================== [ 258.525669][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.251795][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.259456][ C0] bridge0: topology change detected, propagating [ 261.266424][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.274128][ C0] bridge0: topology change detected, propagating