last executing test programs: 1m1.218862885s ago: executing program 3 (id=1608): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x2, &(0x7f0000000200)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_destroy(r0) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@delneigh={0x50, 0x1d, 0x800, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x20, 0x11, 0x4}, [@NDA_VNI={0x8, 0x7, 0x2}, @NDA_PORT={0x6, 0x6, 0x4e24}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_VNI={0x8, 0x7, 0xd5}]}, 0x50}}, 0x24008081) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000a4cf00000000000500000a14000000020a01010000018000000000000000003c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000ab4da3ae3357a68aeef83b71fea1932cbbeb105877abd72f61ccd489db4a96b46ca390af52e81fb69b37280419200197d0e4d899569e609fbd9e196a5c91564b7bd17bc6a3172d62444e6495cfb8c90b8387030c0f6c66330a5c982aabdf80fdb08926176e301b73be3ddf24ee8a6ce7341a957bd9c3f0ae8"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x50) init_module(&(0x7f0000000e00)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x2, 0x0, 0x8, 0xc, 0x2, 0x3e, 0x4, 0x0, 0x40, 0x6c, 0xfffffe31, 0x4, 0x38, 0x1, 0x7, 0x305, 0x9}, [{0x7, 0x80, 0xf5bd, 0x8000, 0x1b16, 0x101, 0x0, 0x4}]}, 0x78, 0x0) 59.558044675s ago: executing program 3 (id=1612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mq_open(&(0x7f00000003c0)='ttl\x00', 0x40, 0x16, &(0x7f0000000400)={0x8, 0x3, 0x1, 0x7fff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x408, 0x7) mq_timedreceive(r2, 0x0, 0x0, 0x2, &(0x7f0000000bc0)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4) r4 = socket(0xa, 0x5, 0x0) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) getsockopt$inet_mreqn(r4, 0x0, 0x7, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1, 0x4f4, &(0x7f00000005c0)="$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") r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0xa8341) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000180)) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r7 = syz_open_procfs(r1, &(0x7f0000000400)='stat\x00') pread64(r7, &(0x7f00000001c0)=""/2, 0xfffffec0, 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa0000000000000000000000000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, 0xd, 0x3, 0x3, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x9}, [@typed={0x90, 0x67, 0x0, 0x0, @binary="7de7b30766c6963791ba466f55a32420898d600178a908952500d8853c876dbf887afeddb34e8cea1de0a8d3dbc2ce39f238cf87d14f31997899183ccdc4fa9bc5b865cb817f24d75c6a3df52df2ef5832c3134467de4b4e93666f7fa4650f117771457c45f355e48e479f2b24cb892ef4c0090f44f49bc58994d10ee4b5e752cecb365c802068f0aa8aae11"}, @typed={0x8, 0xbc, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x98, 0x162, 0x0, 0x1, [@generic="62e4e7627457eefacbde0af6959a6fe39554d43ebb7f8094a5b58f6781b5478b10c08033a1aa0250b9330c832db417ef8facd574f1e67376266605d2a7cd747386b005e26a1b003b57cda0c3eb6d008a69bb69af5e5a23df0159a64482e3c493991261320109b378a9e7ee4466992550af584f503215ec0ce51b483c4419d2b1ea4eee9ff53aa5f24fa8da03ec1fed3b2ad53f6d"]}, @generic="9f8a79eb88090944828de512931412c92e38", @generic="0225a2762f0f2071dc2a25ceb09eefc74fef2e424dc62ffb443b5b49da4d86a2a72925bcad2b16d3782f3a9e871b914e6e7840bfdd331851d9d08cedd0c9a181f424996b24ef739f3f982c06b76fa7f3211876de2eb1423ca588c7c100e36ce925e4dff7cf1428eaba095106"]}, 0x1cc}, 0x1, 0x0, 0x0, 0x10}, 0x850) 59.234422213s ago: executing program 3 (id=1613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd6200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000800040044"], 0x30}}, 0x0) 59.091125847s ago: executing program 3 (id=1614): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@dax_never}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101041, 0xf0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) io_uring_setup(0x2e3a, 0x0) syz_clone(0x4000000, 0x0, 0xfffffffffffffc8d, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x169801) writev(r2, &(0x7f0000000200)=[{&(0x7f00000003c0)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 58.642787518s ago: executing program 3 (id=1616): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='prev_state.function ==', 0x16) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x4ae, 0xfffffffffffffffc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 57.120456045s ago: executing program 3 (id=1619): getpgid(0x0) r0 = memfd_create(0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008004) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{0x4, 0x5}, 'port0\x00', 0x22, 0x20000, 0x0, 0xa, 0x4, 0x1, 0x4, 0x0, 0x5, 0xf}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000020000000000001103000000ffffffff02000000000000080200000042005e00"], 0x0, 0x38}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) stat(0x0, &(0x7f0000000040)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0xa000000d}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1, 0xffffffff, 0xfffffffd, 0x6) 41.793788159s ago: executing program 32 (id=1619): getpgid(0x0) r0 = memfd_create(0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008004) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{0x4, 0x5}, 'port0\x00', 0x22, 0x20000, 0x0, 0xa, 0x4, 0x1, 0x4, 0x0, 0x5, 0xf}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000020000000000001103000000ffffffff02000000000000080200000042005e00"], 0x0, 0x38}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) stat(0x0, &(0x7f0000000040)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0xa000000d}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1, 0xffffffff, 0xfffffffd, 0x6) 23.216552963s ago: executing program 2 (id=1739): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1800000016"], 0x18}}, 0x24080) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@orlov}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x302, 0xb91, 0xe0, 0x0, 0x0}) 21.561387993s ago: executing program 2 (id=1745): syz_open_procfs(0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28090000030801010000000000000000000000000c00048008005d14830aabef03400000000005000300060000065ad3b18fb027ae21a918d5e6923491a4b7a8b07103f0a35d8a826251805c2c36f73e36f2b3c333be9bd0800a74c7d25603b36feffc7497b0c39c29283cbb3f70aee9f6c1596c15a77e8750f61a8c85e8ef4a7261c8cec59135b9a3c7f601c12bc370deae02b7e753836ca50863332b0e9f0b4521e260dbbe48c52abeeaf8f7fdf8c5902c557d1133a9f91ac6bb51ac574225f33f47ea4d76941f9ca8073bf8d98664ca84bc34387a2bc8081b7fdb97363e207da7f62c903494e1278783fea5142119160357b458e05aba141af9194e5031327be08e61c7c11ed68f091237b141ac"], 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000015c0)=""/28, 0x1c}, 0x1}, {{&(0x7f0000001600)=@x25, 0x80, &(0x7f0000002780)=[{&(0x7f0000001680)=""/1, 0x1}, {&(0x7f00000016c0)=""/173, 0xad}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x3, &(0x7f0000004080)=""/4106, 0x100a}, 0xfffffff7}, {{&(0x7f00000037c0)=@generic, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}, {&(0x7f0000003900)=""/48, 0x30}, {&(0x7f0000003940)=""/147, 0x93}], 0x3, &(0x7f0000003a40)=""/28, 0x1c}, 0xffffff80}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000003ac0)=""/150, 0x96}, {&(0x7f0000003b80)=""/42, 0x2a}, {&(0x7f0000003bc0)=""/34, 0x22}, {&(0x7f0000003c00)=""/116, 0x74}], 0x5}, 0xffff}, {{&(0x7f0000003d40)=@ax25={{0x3, @rose}, [@bcast, @remote, @rose, @default, @bcast, @remote, @remote, @rose]}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003dc0)=""/176, 0xb0}, {&(0x7f0000003e80)=""/65, 0x41}], 0x2}, 0x6}], 0x5, 0x40000002, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0xc40, 0x8, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003b) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000029) perf_event_open(&(0x7f0000000040)={0x2, 0xd6, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x3, 0x0, 0x3) 19.822692366s ago: executing program 2 (id=1753): syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000015c0)=""/28, 0x1c}, 0x1}, {{&(0x7f0000001600)=@x25, 0x80, &(0x7f0000002780)=[{&(0x7f0000001680)=""/1, 0x1}, {&(0x7f00000016c0)=""/173, 0xad}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x3, &(0x7f0000004080)=""/4106, 0x100a}, 0xfffffff7}, {{&(0x7f00000037c0)=@generic, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}, {&(0x7f0000003900)=""/48, 0x30}, {&(0x7f0000003940)=""/147, 0x93}], 0x3, &(0x7f0000003a40)=""/28, 0x1c}, 0xffffff80}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000003ac0)=""/150, 0x96}, {&(0x7f0000003b80)=""/42, 0x2a}, {&(0x7f0000003bc0)=""/34, 0x22}, {&(0x7f0000003c00)=""/116, 0x74}], 0x5}, 0xffff}, {{&(0x7f0000003d40)=@ax25={{0x3, @rose}, [@bcast, @remote, @rose, @default, @bcast, @remote, @remote, @rose]}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003dc0)=""/176, 0xb0}, {&(0x7f0000003e80)=""/65, 0x41}], 0x2}, 0x6}], 0x5, 0x40000002, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0xc40, 0x8, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r4, 0x402, 0x8000003b) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r5, 0x402, 0x40000029) perf_event_open(&(0x7f0000000040)={0x2, 0xd6, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2d, &(0x7f0000000040), 0x10) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x50000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x3, 0x0, 0x3) 18.491568048s ago: executing program 2 (id=1757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mq_open(&(0x7f00000003c0)='ttl\x00', 0x40, 0x16, &(0x7f0000000400)={0x8, 0x3, 0x1, 0x7fff}) pipe2(&(0x7f0000000040), 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x2, &(0x7f0000000bc0)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4) r3 = socket(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x24020000) getsockopt$inet_mreqn(r3, 0x0, 0x7, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1, 0x4f4, &(0x7f00000005c0)="$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") r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0xa8341) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000180)) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r6 = syz_open_procfs(r1, &(0x7f0000000400)='stat\x00') pread64(r6, &(0x7f00000001c0)=""/2, 0xfffffec0, 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa0000000000000000000000000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, 0xd, 0x3, 0x3, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x9}, [@typed={0x90, 0x67, 0x0, 0x0, @binary="7de7b30766c6963791ba466f55a32420898d600178a908952500d8853c876dbf887afeddb34e8cea1de0a8d3dbc2ce39f238cf87d14f31997899183ccdc4fa9bc5b865cb817f24d75c6a3df52df2ef5832c3134467de4b4e93666f7fa4650f117771457c45f355e48e479f2b24cb892ef4c0090f44f49bc58994d10ee4b5e752cecb365c802068f0aa8aae11"}, @typed={0x8, 0xbc, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x98, 0x162, 0x0, 0x1, [@generic="62e4e7627457eefacbde0af6959a6fe39554d43ebb7f8094a5b58f6781b5478b10c08033a1aa0250b9330c832db417ef8facd574f1e67376266605d2a7cd747386b005e26a1b003b57cda0c3eb6d008a69bb69af5e5a23df0159a64482e3c493991261320109b378a9e7ee4466992550af584f503215ec0ce51b483c4419d2b1ea4eee9ff53aa5f24fa8da03ec1fed3b2ad53f6d"]}, @generic="9f8a79eb88090944828de512931412c92e38", @generic="0225a2762f0f2071dc2a25ceb09eefc74fef2e424dc62ffb443b5b49da4d86a2a72925bcad2b16d3782f3a9e871b914e6e7840bfdd331851d9d08cedd0c9a181f424996b24ef739f3f982c06b76fa7f3211876de2eb1423ca588c7c100e36ce925e4dff7cf1428eaba095106"]}, 0x1cc}, 0x1, 0x0, 0x0, 0x10}, 0x850) 17.60492101s ago: executing program 2 (id=1761): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1800000016"], 0x18}}, 0x24080) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@orlov}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) 15.851547263s ago: executing program 2 (id=1771): getpgid(0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008004) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{0x4, 0x5}, 'port0\x00', 0x22, 0x20000, 0x0, 0xa, 0x4, 0x1, 0x4, 0x0, 0x5, 0xf}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000020000000000001103000000ffffffff02000000000000080200000042005e00"], 0x0, 0x38}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) stat(0x0, &(0x7f0000000040)) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0xa000000d}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1, 0xffffffff, 0xfffffffd, 0x6) 6.113455341s ago: executing program 4 (id=1811): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x408, 0x7) mq_timedreceive(r2, 0x0, 0x0, 0x2, &(0x7f0000000bc0)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4) r4 = socket(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) getsockopt$inet_mreqn(r4, 0x0, 0x7, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1, 0x4f4, &(0x7f00000005c0)="$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") r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0xa8341) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000180)) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r7 = syz_open_procfs(r1, &(0x7f0000000400)='stat\x00') pread64(r7, &(0x7f00000001c0)=""/2, 0xfffffec0, 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa0000000000000000000000000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, 0xd, 0x3, 0x3, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x9}, [@typed={0x90, 0x67, 0x0, 0x0, @binary="7de7b30766c6963791ba466f55a32420898d600178a908952500d8853c876dbf887afeddb34e8cea1de0a8d3dbc2ce39f238cf87d14f31997899183ccdc4fa9bc5b865cb817f24d75c6a3df52df2ef5832c3134467de4b4e93666f7fa4650f117771457c45f355e48e479f2b24cb892ef4c0090f44f49bc58994d10ee4b5e752cecb365c802068f0aa8aae11"}, @typed={0x8, 0xbc, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x98, 0x162, 0x0, 0x1, [@generic="62e4e7627457eefacbde0af6959a6fe39554d43ebb7f8094a5b58f6781b5478b10c08033a1aa0250b9330c832db417ef8facd574f1e67376266605d2a7cd747386b005e26a1b003b57cda0c3eb6d008a69bb69af5e5a23df0159a64482e3c493991261320109b378a9e7ee4466992550af584f503215ec0ce51b483c4419d2b1ea4eee9ff53aa5f24fa8da03ec1fed3b2ad53f6d"]}, @generic="9f8a79eb88090944828de512931412c92e38", @generic="0225a2762f0f2071dc2a25ceb09eefc74fef2e424dc62ffb443b5b49da4d86a2a72925bcad2b16d3782f3a9e871b914e6e7840bfdd331851d9d08cedd0c9a181f424996b24ef739f3f982c06b76fa7f3211876de2eb1423ca588c7c100e36ce925e4dff7cf1428eaba095106"]}, 0x1cc}, 0x1, 0x0, 0x0, 0x10}, 0x850) 5.896821807s ago: executing program 1 (id=1813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x13, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5ca, &(0x7f0000000640)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f00000013c0)={[], [{@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'nojournal_checksum'}}, {@euid_gt}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'syzk\xd13ler0\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}, 0x41, 0x455, &(0x7f0000000d80)="$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") arch_prctl$ARCH_GET_CPUID(0x1011) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa4081, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x4000, 0x5}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) r5 = socket(0x400000000010, 0x3, 0x0) membarrier(0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) setregid(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000004c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000010007110000e015ffc43b1e", @ANYRES32=0x0, @ANYBLOB="020005", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee01, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="040001000000000008000700", @ANYRES16, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100000000000000020000400"], 0x64, 0x2) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB="2c6673757569643d34656637343238322d616436662d306439982d366333542d31653364393465612c736d61636b6673666c6f6f723d4040212d3a232c2d2c686173682c657569643e", @ANYRESDEC=0x0, @ANYBLOB='uA']) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newchain={0x24, 0x64, 0x22, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6, 0x7}, {0x1, 0xf}, {0xffe0, 0x7}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8) 2.811878002s ago: executing program 4 (id=1814): bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) lseek(0xffffffffffffffff, 0xa777, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x5, 0x4, 0xa, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x0, 0x0}) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000a40), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x32a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000900)={0x22801100, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x9) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000a80), 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffa, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x8, 0x0, 0x5, 0x0, 0x40043, 0x10802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x14084, 0x0, 0x0, 0x4, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write(0xffffffffffffffff, &(0x7f00000001c0)='p:s/p ./file0:0\f-', 0x11) 2.744264823s ago: executing program 5 (id=1815): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2.687036995s ago: executing program 0 (id=1816): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@dax_never}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101041, 0xf0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.589052477s ago: executing program 4 (id=1817): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/118, 0x76}], 0x1) 2.4559796s ago: executing program 5 (id=1818): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0xf1ffffffffff, 0x0, 0x48801}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x20000000) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x2d6b, 0x4, 0x6, 0x0, 0x150e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000140)={0x0, "f95f497d32c4be3a5543070190b24d6938a0a35b2d913a9e644c6936a660db5fbc9b6273be683d60a987deef0dd9462257d8f8df67f381d90ca17e50073a4de6", 0x39}, 0x48, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001480)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x24008800) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000580)=""/223) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) sendto$packet(r9, &(0x7f0000000240)='\t', 0x1, 0x100400c1, &(0x7f0000000000)={0x11, 0x8100, r10, 0x1, 0x7, 0x6, @multicast}, 0x14) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 2.406334652s ago: executing program 4 (id=1819): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="d0589f8426066b", 0x7}], 0x2, &(0x7f0000000040)=ANY=[], 0x40}, 0x20000024) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x42) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x125, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000)=r3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0xff09, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00') setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x3, 0x8, 0x1c, 0x5, 0x4, 0x4, 0x9, 0x1, 0x4, 0x7, 0xa, 0x7, 0x6}, 0xe) syz_emit_ethernet(0x9e, &(0x7f0000000280)=ANY=[@ANYRES8=r4], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r5, &(0x7f00000029c0)=[{&(0x7f0000002200)=""/175, 0xaf}], 0x1, 0x20007c, 0x8001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e4, 0x0) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x2) 2.357022173s ago: executing program 0 (id=1820): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10eccc, 0x200000000000003, 0x101, 0x5, 0x6, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x200000102ffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x2345, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0x20d9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x0, 0x1, 0x3}}}, 0x118) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) 2.04803341s ago: executing program 1 (id=1821): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @empty, 0xb}, 0x1c) listen(r0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) close(0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x7dfc9a88bbf6917f, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 2.038024321s ago: executing program 0 (id=1831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x13, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5ca, &(0x7f0000000640)="$eJzs3W+IHGcdB/Df7N2l+XM1f2zV1tichtpA6O3lcgmJ+MIS/9Sa1Irii1AIR257F7J3e+Y20NsKtvhGFETwjQhCxb6wIhrIm0qp7YsW3ygo9Q8VjQEVRChaKYigrszuznXbTnLBu9vRm88HZu+ZZ/buefaW787MzjMzAZTWWPqQRIxGxOWI2Nmdff0Txro/WocvzaVTEu32J/+SdJ43c/jSXPbU7Pd2pA/DEVsjYs+JJPaPvLndpeXW+el6vXahN19tzi9Wl5Zbd5+bn56tzdYWjhybOj55dOrY1Pq91omfbL/1j3fef/WJ5//+z2/86uj30v6O9pb1v471MhZjvf/JSOzuqx9OIu5b78YKMtR9q+POvrpkuMAOccPa7T3fTd+/t0bE/k7+d8ZQdN+8l55+8G874xf3Ft1HYOO0M/mLX2kDm1alsw2cVMYjoluuVMbHu9vwt8T2Sr2x1Dz4UOPiwkx3W3lXjFQeOlevTfT2FXbFSJLOH+qUX5uffMP84YjONvAXhrZ15sfPNuozg/6wAzpGI65c/szZLTvekP8/DXXzD2xeaf5//sJTz6blV4eK7g0wSGn+v/Pq/MdC/qF05B/KS/6hvOQfykv+obzkH8pL/qG85B/KS/6hvOQfyivL/wOnTsUDp061W73z3xcas+fOzy0en5wYn794dvxs48Li+GyjMds5Y2d+9b9bbzQWD03GxYerzdpSs7q03Doz37i40DzTOa//TC3nUgBAAU5f3Xrf7n3PvZRExKPv29aZUlt6y2UVNrd2O4miz0EGimHXH8rLpdqgvOzjA8kqy7dea0F9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6jft/3dx3766JiHhLRPx4aOSm7F5fwP+V1+3qj0ZcufKtT1dX7sOtoHCDhWxf8H+lPwobUSjmQwoYnNdCX3RPgKLMHL40l02DavOZ2UG1BOR5+Z7uIKA0963e1F0yvHJsYGSDxgntviN9/MFvHz8wN5RO0fsc2oCmgByPPhYR78hb/yedYwO7es/b031a3BIRt0bE2yLi7Wts+2ufiBiLF2r9dfIPg3Oj+b8tItLV9e0R8c6I2BsR71pj2z+7nOb/l9v66+QfyuGzzxfdA6AoH32q6B4ARTltjAGU1rcfKboHQFGe/n7RPQCK8uUXi+4BlNtz90TERN7xv0rneH9mpHddwJt61wLYFhHbI2JH7xzCm3vnCO7sO2a4mjMfjxiLO37YX+f4HwxONv6v9abxf5WV8X9DEbFvDW088/7RL+XVT+9N8//EI9n4v3RK28/GAmZcowg2xsuPRdyem/9kZcxvEmlOI979X7Yx9rmrT+bVv3h/+ndHfrpa/oGN0f5mxHsjP/+ZtFRtzi9Wl5Zbd3fu4z1bWzhybOr45NGpY1PVziVCqtmFQnKc/OsrB/PqfzOZ5v/rR+QfipGu/7dfI//92//vWUMbJ776xdN59aO/T/O/99nr57/y5y3Jpzrz2X0JHp5uNi8citiSnFypb2f1k2voKGxyWUayDKX5P7A/f/9/T+930vX/iYj4YC9n/4qIf0fEhyLiwxHxkYi49zptfuWu2at59b97Ms3/4+et/6EYaf5nVln/pz//sYY2Dh740efz6j+wL83/+K//cPLB4XSSfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID1t7TcOj9dr9cubGCh6NcIAAAAAAAAZfGfAAAA//9vXDE5") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f00000013c0)={[], [{@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'nojournal_checksum'}}, {@euid_gt}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'syzk\xd13ler0\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}, 0x41, 0x455, &(0x7f0000000d80)="$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") arch_prctl$ARCH_GET_CPUID(0x1011) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa4081, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x4000, 0x5}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) r5 = socket(0x400000000010, 0x3, 0x0) membarrier(0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) setregid(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000004c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000010007110000e015ffc43b1e", @ANYRES32=0x0, @ANYBLOB="020005", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee01, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="040001000000000008000700", @ANYRES16, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100000000000000020000400"], 0x64, 0x2) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB="2c6673757569643d34656637343238322d616436662d306439982d366333542d31653364393465612c736d61636b6673666c6f6f723d4040212d3a232c2d2c686173682c657569643e", @ANYRESDEC=0x0, @ANYBLOB='uA']) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newchain={0x24, 0x64, 0x22, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6, 0x7}, {0x1, 0xf}, {0xffe0, 0x7}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8) 1.911235744s ago: executing program 5 (id=1822): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10eccc, 0x200000000000003, 0x101, 0x5, 0x6, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x200000102ffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x2345, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0x20d9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x0, 0x1, 0x3}}}, 0x118) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) 1.477775244s ago: executing program 5 (id=1823): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mq_open(&(0x7f00000003c0)='ttl\x00', 0x40, 0x16, &(0x7f0000000400)={0x8, 0x3, 0x1, 0x7fff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x408, 0x7) mq_timedreceive(r2, 0x0, 0x0, 0x2, &(0x7f0000000bc0)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4) r4 = socket(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) getsockopt$inet_mreqn(r4, 0x0, 0x7, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1, 0x4f4, &(0x7f00000005c0)="$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") r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0xa8341) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000180)) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r6 = syz_open_procfs(r1, &(0x7f0000000400)='stat\x00') pread64(r6, &(0x7f00000001c0)=""/2, 0xfffffec0, 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa0000000000000000000000000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, 0xd, 0x3, 0x3, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x9}, [@typed={0x90, 0x67, 0x0, 0x0, @binary="7de7b30766c6963791ba466f55a32420898d600178a908952500d8853c876dbf887afeddb34e8cea1de0a8d3dbc2ce39f238cf87d14f31997899183ccdc4fa9bc5b865cb817f24d75c6a3df52df2ef5832c3134467de4b4e93666f7fa4650f117771457c45f355e48e479f2b24cb892ef4c0090f44f49bc58994d10ee4b5e752cecb365c802068f0aa8aae11"}, @typed={0x8, 0xbc, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x98, 0x162, 0x0, 0x1, [@generic="62e4e7627457eefacbde0af6959a6fe39554d43ebb7f8094a5b58f6781b5478b10c08033a1aa0250b9330c832db417ef8facd574f1e67376266605d2a7cd747386b005e26a1b003b57cda0c3eb6d008a69bb69af5e5a23df0159a64482e3c493991261320109b378a9e7ee4466992550af584f503215ec0ce51b483c4419d2b1ea4eee9ff53aa5f24fa8da03ec1fed3b2ad53f6d"]}, @generic="9f8a79eb88090944828de512931412c92e38", @generic="0225a2762f0f2071dc2a25ceb09eefc74fef2e424dc62ffb443b5b49da4d86a2a72925bcad2b16d3782f3a9e871b914e6e7840bfdd331851d9d08cedd0c9a181f424996b24ef739f3f982c06b76fa7f3211876de2eb1423ca588c7c100e36ce925e4dff7cf1428eaba095106"]}, 0x1cc}, 0x1, 0x0, 0x0, 0x10}, 0x850) 1.471598934s ago: executing program 4 (id=1824): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x408, 0x7) mq_timedreceive(r2, 0x0, 0x0, 0x2, &(0x7f0000000bc0)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4) r4 = socket(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) getsockopt$inet_mreqn(r4, 0x0, 0x7, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1, 0x4f4, &(0x7f00000005c0)="$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") r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0xa8341) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000180)) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r7 = syz_open_procfs(r1, &(0x7f0000000400)='stat\x00') pread64(r7, &(0x7f00000001c0)=""/2, 0xfffffec0, 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa0000000000000000000000000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, 0xd, 0x3, 0x3, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x9}, [@typed={0x90, 0x67, 0x0, 0x0, @binary="7de7b30766c6963791ba466f55a32420898d600178a908952500d8853c876dbf887afeddb34e8cea1de0a8d3dbc2ce39f238cf87d14f31997899183ccdc4fa9bc5b865cb817f24d75c6a3df52df2ef5832c3134467de4b4e93666f7fa4650f117771457c45f355e48e479f2b24cb892ef4c0090f44f49bc58994d10ee4b5e752cecb365c802068f0aa8aae11"}, @typed={0x8, 0xbc, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x98, 0x162, 0x0, 0x1, [@generic="62e4e7627457eefacbde0af6959a6fe39554d43ebb7f8094a5b58f6781b5478b10c08033a1aa0250b9330c832db417ef8facd574f1e67376266605d2a7cd747386b005e26a1b003b57cda0c3eb6d008a69bb69af5e5a23df0159a64482e3c493991261320109b378a9e7ee4466992550af584f503215ec0ce51b483c4419d2b1ea4eee9ff53aa5f24fa8da03ec1fed3b2ad53f6d"]}, @generic="9f8a79eb88090944828de512931412c92e38", @generic="0225a2762f0f2071dc2a25ceb09eefc74fef2e424dc62ffb443b5b49da4d86a2a72925bcad2b16d3782f3a9e871b914e6e7840bfdd331851d9d08cedd0c9a181f424996b24ef739f3f982c06b76fa7f3211876de2eb1423ca588c7c100e36ce925e4dff7cf1428eaba095106"]}, 0x1cc}, 0x1, 0x0, 0x0, 0x10}, 0x850) 1.361240437s ago: executing program 1 (id=1825): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) 1.190935031s ago: executing program 1 (id=1826): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {}, 0x40}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x70bd2d, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r4}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 1.145842542s ago: executing program 4 (id=1827): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x40000000000009, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x6, r0, 'id1\x00'}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000001c0)={0x0, 0x6, 0x85}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000005c0)={r2, 0x100000000, 0x4, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1f, 0x5, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@nat={'nat\x00', 0x1b, 0x5, 0x5d0, 0x430, 0x430, 0xffffffff, 0x218, 0x218, 0x500, 0x500, 0xffffffff, 0x500, 0x500, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x4, 0x5}, {0x2, 0x6, 0x5}, 0x7fffffff}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x105c13cb5d0263fb, 0x82081d301b76ee36], [0x0, 0xff000000, 0xff, 0xff000000], 'geneve0\x00', '\x00', {}, {}, 0x32, 0xd2, 0x3, 0x42}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0xe0, 0x40}}, @common=@ipv6header={{0x28}, {0x60, 0x6, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xc, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@remote, @icmp_id=0x65, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xe}, @local, [0x0, 0xff, 0xff000000, 0xffffffff], [0xffffff00, 0xff, 0x0, 0xff000000], 'bond_slave_0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x3c, 0xf9, 0x1, 0x6}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@local, [0xffffff00, 0xffffffff, 0xff, 0xff000000], @ipv4=@local, [0xff, 0xff000000, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0x0, 0xffffffff, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}, [0xffffffff, 0xff000000, 0xff, 0xff000000], 0x1, 0x7e, 0x2e, 0x4e24, 0x4e23, 0x4e21, 0x4e22, 0x4, 0x1}, 0x81, 0x1011}}, @common=@unspec=@physdev={{0x68}, {'batadv_slave_0\x00', {0xff}, 'pim6reg0\x00', {0xff}, 0x8, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@empty, @icmp_id=0x67, @gre_key=0x4}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'team_slave_1\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x2b, 0x2b, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = fsopen(&(0x7f0000000180)='bpf\x00', 0x1) r5 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60042, 0x0) sendfile(r7, r7, &(0x7f0000000040)=0x3, 0x2fe0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r8, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r10, &(0x7f00000025c0)={0xfc, {"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", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x6) fsmount(r4, 0x0, 0x86) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000010c0)=ANY=[@ANYBLOB="04010000100007000040000000000000ff0200000000000000000001e0000002000001000000000000458e004e20000afc000000000000a00200000000000000da452355d95d59781c3c93c9f5c43daf0542f40100000082d1efa1875e8f01f6f726", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffff64010101000000002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000000000000000000000000001000000000010000000000000000000000000010000000000000000000000000000000000400002000000000000300000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002fe340000000000000014000e00fe8000000000000000000000000000bb"], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 873.593799ms ago: executing program 0 (id=1828): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 781.064681ms ago: executing program 5 (id=1829): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mq_open(&(0x7f00000003c0)='ttl\x00', 0x40, 0x16, &(0x7f0000000400)={0x8, 0x3, 0x1, 0x7fff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x408, 0x7) mq_timedreceive(r2, 0x0, 0x0, 0x2, &(0x7f0000000bc0)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4) r4 = socket(0xa, 0x5, 0x0) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) getsockopt$inet_mreqn(r4, 0x0, 0x7, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1, 0x4f4, &(0x7f00000005c0)="$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") r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0xa8341) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000180)) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r7 = syz_open_procfs(r1, &(0x7f0000000400)='stat\x00') pread64(r7, &(0x7f00000001c0)=""/2, 0xfffffec0, 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa0000000000000000000000000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, 0xd, 0x3, 0x3, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x9}, [@typed={0x90, 0x67, 0x0, 0x0, @binary="7de7b30766c6963791ba466f55a32420898d600178a908952500d8853c876dbf887afeddb34e8cea1de0a8d3dbc2ce39f238cf87d14f31997899183ccdc4fa9bc5b865cb817f24d75c6a3df52df2ef5832c3134467de4b4e93666f7fa4650f117771457c45f355e48e479f2b24cb892ef4c0090f44f49bc58994d10ee4b5e752cecb365c802068f0aa8aae11"}, @typed={0x8, 0xbc, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x98, 0x162, 0x0, 0x1, [@generic="62e4e7627457eefacbde0af6959a6fe39554d43ebb7f8094a5b58f6781b5478b10c08033a1aa0250b9330c832db417ef8facd574f1e67376266605d2a7cd747386b005e26a1b003b57cda0c3eb6d008a69bb69af5e5a23df0159a64482e3c493991261320109b378a9e7ee4466992550af584f503215ec0ce51b483c4419d2b1ea4eee9ff53aa5f24fa8da03ec1fed3b2ad53f6d"]}, @generic="9f8a79eb88090944828de512931412c92e38", @generic="0225a2762f0f2071dc2a25ceb09eefc74fef2e424dc62ffb443b5b49da4d86a2a72925bcad2b16d3782f3a9e871b914e6e7840bfdd331851d9d08cedd0c9a181f424996b24ef739f3f982c06b76fa7f3211876de2eb1423ca588c7c100e36ce925e4dff7cf1428eaba095106"]}, 0x1cc}, 0x1, 0x0, 0x0, 0x10}, 0x850) 662.119374ms ago: executing program 33 (id=1771): getpgid(0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008004) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{0x4, 0x5}, 'port0\x00', 0x22, 0x20000, 0x0, 0xa, 0x4, 0x1, 0x4, 0x0, 0x5, 0xf}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000020000000000001103000000ffffffff02000000000000080200000042005e00"], 0x0, 0x38}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) stat(0x0, &(0x7f0000000040)) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0xa000000d}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1, 0xffffffff, 0xfffffffd, 0x6) 606.855245ms ago: executing program 0 (id=1832): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10eccc, 0x200000000000003, 0x101, 0x5, 0x6, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x200000102ffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x2345, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0x20d9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x0, 0x1, 0x3}}}, 0x118) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) 605.933216ms ago: executing program 1 (id=1833): bpf$MAP_CREATE(0x0, 0x0, 0x0) 413.49677ms ago: executing program 0 (id=1834): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10eccc, 0x200000000000003, 0x101, 0x5, 0x6, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x200000102ffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x2345, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0x20d9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x0, 0x1, 0x3}}}, 0x118) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) 361.017231ms ago: executing program 1 (id=1835): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x4000010) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24080) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@orlov}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x302, 0xb91, 0xe0, 0x0, 0x0}) 0s ago: executing program 5 (id=1836): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="d0589f8426066b", 0x7}], 0x2, &(0x7f0000000040)=ANY=[], 0x40}, 0x20000024) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x42) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x125, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xff09, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00') setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x3, 0x8, 0x1c, 0x5, 0x4, 0x4, 0x9, 0x1, 0x4, 0x7, 0xa, 0x7, 0x6}, 0xe) syz_emit_ethernet(0x9e, &(0x7f0000000280)=ANY=[@ANYRES8=r6], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r7, &(0x7f00000029c0)=[{&(0x7f0000002200)=""/175, 0xaf}], 0x1, 0x20007c, 0x8001) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448e4, 0x0) getsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x2) kernel console output (not intermixed with test programs): 9 00 ac 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d7 ab 01 00 90 90 90 90 90 90 90 90 90 90 [ 196.156780][ T8530] RSP: 0018:ffffc90011a9be90 EFLAGS: 00050202 [ 196.156802][ T8530] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000011f80 [ 196.156904][ T8530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 196.156920][ T8530] RBP: 0000000000000000 R08: 0001ffff86e5a7c3 R09: 0000000000000000 [ 196.156932][ T8530] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 196.156943][ T8530] R13: ffffffff86e5a780 R14: 0000000000000000 R15: 0000200000012000 [ 196.156970][ T8530] __se_sys_getresgid+0xb8/0x130 [ 196.157031][ T8530] __x64_sys_getresgid+0x43/0x50 [ 196.157118][ T8530] x64_sys_call+0x22f8/0x2550 [ 196.157144][ T8530] do_syscall_64+0x112/0x360 [ 196.157186][ T8530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.157232][ T8530] RIP: 0033:0x7fbdf70fe0d9 [ 196.157251][ T8530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.157269][ T8530] RSP: 002b:00007fbdf5b57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 196.157320][ T8530] RAX: ffffffffffffffda RBX: 00007fbdf7385fa0 RCX: 00007fbdf70fe0d9 [ 196.157337][ T8530] RDX: 0000200000012000 RSI: 0000200000011fc0 RDI: 0000200000011f80 [ 196.157354][ T8530] RBP: 00007fbdf5b57090 R08: 0000000000000000 R09: 0000000000000000 [ 196.157370][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.157386][ T8530] R13: 00007fbdf7386038 R14: 00007fbdf7385fa0 R15: 00007ffe4e2cab28 [ 196.157412][ T8530] [ 196.157466][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.541887][ T8537] __nla_validate_parse: 2 callbacks suppressed [ 196.541906][ T8537] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1343'. [ 196.655391][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.673014][ T8546] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.725754][ T8546] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.963260][ T8558] ip6t_srh: unknown srh invflags 4000 [ 196.969068][ T8558] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 196.976690][ T8558] SELinux: failed to load policy [ 197.079198][ T8558] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 197.337844][ T8554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.536337][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 197.598867][ T37] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.611853][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.777054][ T8614] set_capacity_and_notify: 10 callbacks suppressed [ 197.777076][ T8614] loop1: detected capacity change from 0 to 512 [ 197.818693][ T8614] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 197.830075][ T8614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 197.857968][ T8614] System zones: 0-1, 15-15, 18-18, 34-34 [ 197.877985][ T8620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1360'. [ 197.890288][ T8614] EXT4-fs (loop1): orphan cleanup on readonly fs [ 197.906973][ T8614] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 197.973801][ T8614] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 197.996785][ T8614] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1357: bad orphan inode 16 [ 198.006885][ T8614] loop1: lost filesystem error report for type 5 error -117 [ 198.017048][ T8614] ext4_test_bit(bit=15, block=18) = 1 [ 198.029760][ T8614] is_bad_inode(inode)=0 [ 198.034118][ T8614] NEXT_ORPHAN(inode)=0 [ 198.038195][ T8614] max_ino=32 [ 198.041416][ T8614] i_nlink=2 [ 198.045065][ T8614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.112471][ T8614] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 198.136725][ T8632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1365'. [ 198.148210][ T8634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1365'. [ 198.157986][ T8614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 198.168841][ T8637] SELinux: policydb magic number 0x3474002e does not match expected magic number 0xf97cff8c [ 198.337116][ T8637] SELinux: failed to load policy [ 198.351615][ T8636] FAULT_INJECTION: forcing a failure. [ 198.351615][ T8636] name failslab, interval 1, probability 0, space 0, times 0 [ 198.586670][ T8634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1365'. [ 198.695103][ T8636] CPU: 0 UID: 0 PID: 8636 Comm: syz.4.1366 Not tainted syzkaller #0 PREEMPT(lazy) [ 198.695206][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.695221][ T8636] Call Trace: [ 198.695229][ T8636] [ 198.695240][ T8636] __dump_stack+0x1d/0x30 [ 198.695271][ T8636] dump_stack_lvl+0x95/0xd0 [ 198.695298][ T8636] dump_stack+0x15/0x1b [ 198.695336][ T8636] should_fail_ex+0x262/0x280 [ 198.695410][ T8636] should_failslab+0x8c/0xb0 [ 198.695441][ T8636] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 198.695512][ T8636] ? security_inode_alloc+0x37/0x100 [ 198.695713][ T8636] ? security_inode_alloc+0x37/0x100 [ 198.695802][ T8636] ? sock_alloc_inode+0x1/0xf0 [ 198.695838][ T8636] security_inode_alloc+0x37/0x100 [ 198.695994][ T8636] inode_init_always_gfp+0x495/0x4e0 [ 198.696031][ T8636] ? __pfx_sock_alloc_inode+0x10/0x10 [ 198.696143][ T8636] alloc_inode+0x58/0x170 [ 198.696180][ T8636] __sock_create+0x121/0x580 [ 198.696211][ T8636] ? mutex_lock+0x57/0x90 [ 198.696344][ T8636] ? mutex_unlock+0x4e/0x90 [ 198.696394][ T8636] ? fput+0x91/0xc0 [ 198.696430][ T8636] __sys_socket+0xaf/0x180 [ 198.696509][ T8636] __x64_sys_socket+0x3f/0x50 [ 198.696546][ T8636] x64_sys_call+0x246e/0x2550 [ 198.696578][ T8636] do_syscall_64+0x112/0x360 [ 198.696684][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.696711][ T8636] RIP: 0033:0x7faf8fc6e0d9 [ 198.696735][ T8636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.696796][ T8636] RSP: 002b:00007faf8e6c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 198.696895][ T8636] RAX: ffffffffffffffda RBX: 00007faf8fef5fa0 RCX: 00007faf8fc6e0d9 [ 198.696912][ T8636] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 198.696946][ T8636] RBP: 00007faf8e6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 198.696961][ T8636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.696977][ T8636] R13: 00007faf8fef6038 R14: 00007faf8fef5fa0 R15: 00007ffc3d5d7498 [ 198.697026][ T8636] [ 198.697054][ T8636] socket: no more sockets [ 198.809653][ T8634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1365'. [ 198.935899][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1367'. [ 199.385394][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 199.385411][ T28] audit: type=1400 audit(1787368725.706:3605): avc: denied { getopt } for pid=8666 comm="syz.3.1376" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.387777][ T8664] FAULT_INJECTION: forcing a failure. [ 199.387777][ T8664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.425044][ T8664] CPU: 0 UID: 0 PID: 8664 Comm: syz.4.1375 Not tainted syzkaller #0 PREEMPT(lazy) [ 199.425080][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.425098][ T8664] Call Trace: [ 199.425108][ T8664] [ 199.425119][ T8664] __dump_stack+0x1d/0x30 [ 199.425152][ T8664] dump_stack_lvl+0x95/0xd0 [ 199.425206][ T8664] dump_stack+0x15/0x1b [ 199.425305][ T8664] should_fail_ex+0x262/0x280 [ 199.425360][ T8664] should_fail+0xb/0x20 [ 199.425447][ T8664] should_fail_usercopy+0x1a/0x20 [ 199.425507][ T8664] _copy_to_user+0x20/0xa0 [ 199.425535][ T8664] simple_read_from_buffer+0xb5/0x130 [ 199.425574][ T8664] proc_fail_nth_read+0x10e/0x150 [ 199.425638][ T8664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.425680][ T8664] vfs_read+0x18e/0x7c0 [ 199.425751][ T8664] ? __rcu_read_unlock+0x4e/0x70 [ 199.425787][ T8664] ? __fget_files+0x184/0x1c0 [ 199.425829][ T8664] ? mutex_lock+0x57/0x90 [ 199.425865][ T8664] ksys_read+0xdc/0x1a0 [ 199.425920][ T8664] __x64_sys_read+0x40/0x50 [ 199.425952][ T8664] x64_sys_call+0x2135/0x2550 [ 199.425983][ T8664] do_syscall_64+0x112/0x360 [ 199.426036][ T8664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.426068][ T8664] RIP: 0033:0x7faf8fc2e90e [ 199.426090][ T8664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 199.426115][ T8664] RSP: 002b:00007faf8e6c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.426145][ T8664] RAX: ffffffffffffffda RBX: 00007faf8e6c76c0 RCX: 00007faf8fc2e90e [ 199.426162][ T8664] RDX: 000000000000000f RSI: 00007faf8e6c70a0 RDI: 0000000000000008 [ 199.426186][ T8664] RBP: 00007faf8e6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 199.426208][ T8664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.426260][ T8664] R13: 00007faf8fef6038 R14: 00007faf8fef5fa0 R15: 00007ffc3d5d7498 [ 199.426287][ T8664] [ 199.689159][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.801985][ T28] audit: type=1400 audit(1787368726.126:3606): avc: denied { setopt } for pid=8684 comm="syz.1.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.831899][ T28] audit: type=1400 audit(1787368726.126:3607): avc: denied { write } for pid=8684 comm="syz.1.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.860141][ T8685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.868645][ T8685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.874842][ T28] audit: type=1400 audit(1787368726.186:3608): avc: denied { read write } for pid=8684 comm="syz.1.1381" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.930902][ T28] audit: type=1400 audit(1787368726.186:3609): avc: denied { open } for pid=8684 comm="syz.1.1381" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.986887][ T28] audit: type=1400 audit(1787368726.186:3610): avc: denied { ioctl } for pid=8684 comm="syz.1.1381" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.163014][ T8702] xt_CT: No such helper "netbios-ns" [ 200.357585][ T8710] loop0: detected capacity change from 0 to 1024 [ 200.422372][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 200.497801][ T8716] FAULT_INJECTION: forcing a failure. [ 200.497801][ T8716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.510947][ T8716] CPU: 1 UID: 0 PID: 8716 Comm: syz.3.1387 Not tainted syzkaller #0 PREEMPT(lazy) [ 200.510975][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.510990][ T8716] Call Trace: [ 200.510996][ T8716] [ 200.511003][ T8716] __dump_stack+0x1d/0x30 [ 200.511026][ T8716] dump_stack_lvl+0x95/0xd0 [ 200.511118][ T8716] dump_stack+0x15/0x1b [ 200.511143][ T8716] should_fail_ex+0x262/0x280 [ 200.511184][ T8716] should_fail+0xb/0x20 [ 200.511224][ T8716] should_fail_usercopy+0x1a/0x20 [ 200.511309][ T8716] _copy_from_user+0x1c/0xb0 [ 200.511327][ T8716] xt_copy_counters+0x100/0x2d0 [ 200.511367][ T8716] do_ip6t_set_ctl+0x153/0x990 [ 200.511423][ T8716] ? kstrtoull+0x111/0x140 [ 200.511449][ T8716] ? __rcu_read_unlock+0x4e/0x70 [ 200.511514][ T8716] nf_setsockopt+0x199/0x1b0 [ 200.511548][ T8716] ipv6_setsockopt+0x11a/0x130 [ 200.511595][ T8716] tcp_setsockopt+0x98/0xb0 [ 200.511623][ T8716] sock_common_setsockopt+0x69/0x80 [ 200.511663][ T8716] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 200.511779][ T8716] __sys_setsockopt+0x184/0x200 [ 200.511852][ T8716] __x64_sys_setsockopt+0x64/0x80 [ 200.511873][ T8716] x64_sys_call+0x248f/0x2550 [ 200.511902][ T8716] do_syscall_64+0x112/0x360 [ 200.511946][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.511979][ T8716] RIP: 0033:0x7fbdf70fe0d9 [ 200.511993][ T8716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.512012][ T8716] RSP: 002b:00007fbdf5b15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 200.512031][ T8716] RAX: ffffffffffffffda RBX: 00007fbdf7386180 RCX: 00007fbdf70fe0d9 [ 200.512047][ T8716] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000009 [ 200.512064][ T8716] RBP: 00007fbdf5b15090 R08: 0000000000000048 R09: 0000000000000000 [ 200.512130][ T8716] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 200.512143][ T8716] R13: 00007fbdf7386218 R14: 00007fbdf7386180 R15: 00007ffe4e2cab28 [ 200.512245][ T8716] [ 200.819062][ T28] audit: type=1400 audit(1787368726.816:3611): avc: denied { create } for pid=8707 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 200.887221][ T28] audit: type=1400 audit(1787368726.816:3612): avc: denied { ioctl } for pid=8707 comm="syz.3.1387" path="socket:[19892]" dev="sockfs" ino=19892 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 200.958211][ T28] audit: type=1400 audit(1787368726.816:3613): avc: denied { getopt } for pid=8707 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 201.068752][ T8710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.190307][ T28] audit: type=1400 audit(1787368727.506:3614): avc: denied { getopt } for pid=8726 comm="syz.4.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 201.210235][ T8725] loop2: detected capacity change from 0 to 1024 [ 201.211715][ T8730] loop3: detected capacity change from 0 to 1024 [ 201.260664][ T8730] EXT4-fs: Ignoring removed orlov option [ 201.274539][ T8730] EXT4-fs: Ignoring removed orlov option [ 201.329109][ T8730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.330253][ T8725] EXT4-fs: Ignoring removed orlov option [ 201.346933][ T8725] EXT4-fs: Ignoring removed orlov option [ 201.649406][ T8725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.670615][ T8725] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1392: deleted inode referenced: 15 [ 201.712830][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.723170][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.801599][ T8750] FAULT_INJECTION: forcing a failure. [ 201.801599][ T8750] name failslab, interval 1, probability 0, space 0, times 0 [ 201.839239][ T8754] loop1: detected capacity change from 0 to 128 [ 201.847032][ T8750] CPU: 1 UID: 0 PID: 8750 Comm: syz.3.1398 Not tainted syzkaller #0 PREEMPT(lazy) [ 201.847064][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.847078][ T8750] Call Trace: [ 201.847084][ T8750] [ 201.847091][ T8750] __dump_stack+0x1d/0x30 [ 201.847176][ T8750] dump_stack_lvl+0x95/0xd0 [ 201.847197][ T8750] dump_stack+0x15/0x1b [ 201.847256][ T8750] should_fail_ex+0x262/0x280 [ 201.847462][ T8750] should_failslab+0x8c/0xb0 [ 201.847495][ T8750] __kmalloc_noprof+0xd4/0x4c0 [ 201.847527][ T8750] ? bpf_test_init+0x86/0x130 [ 201.847557][ T8750] ? bpf_test_init+0x86/0x130 [ 201.847636][ T8750] bpf_test_init+0x86/0x130 [ 201.847731][ T8750] bpf_prog_test_run_skb+0x271/0x11b0 [ 201.847808][ T8750] ? terminate_walk+0x1bf/0x200 [ 201.847849][ T8750] ? _parse_integer_limit+0x177/0x1a0 [ 201.847954][ T8750] ? __rcu_read_unlock+0x4e/0x70 [ 201.847991][ T8750] ? __fget_files+0x184/0x1c0 [ 201.848080][ T8750] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 201.848113][ T8750] bpf_prog_test_run+0x208/0x340 [ 201.848143][ T8750] __sys_bpf+0x8da/0xc30 [ 201.848176][ T8750] ? vfs_write+0x800/0x9a0 [ 201.848274][ T8750] __x64_sys_bpf+0x69/0x80 [ 201.848307][ T8750] x64_sys_call+0xf26/0x2550 [ 201.848330][ T8750] do_syscall_64+0x112/0x360 [ 201.848362][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.848461][ T8750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.848558][ T8750] RIP: 0033:0x7fbdf70fe0d9 [ 201.848650][ T8750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.848798][ T8750] RSP: 002b:00007fbdf5b57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.848861][ T8750] RAX: ffffffffffffffda RBX: 00007fbdf7385fa0 RCX: 00007fbdf70fe0d9 [ 201.848920][ T8750] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 000000000000000a [ 201.849018][ T8750] RBP: 00007fbdf5b57090 R08: 0000000000000000 R09: 0000000000000000 [ 201.849059][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.849107][ T8750] R13: 00007fbdf7386038 R14: 00007fbdf7385fa0 R15: 00007ffe4e2cab28 [ 201.849168][ T8750] [ 202.109342][ T8754] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.140740][ T8754] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.242794][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.410094][ T8774] loop1: detected capacity change from 0 to 128 [ 202.471516][ T8774] syz.1.1404: attempt to access beyond end of device [ 202.471516][ T8774] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 202.485269][ T8774] syz.1.1404: attempt to access beyond end of device [ 202.485269][ T8774] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 202.499244][ T8774] syz.1.1404: attempt to access beyond end of device [ 202.499244][ T8774] loop1: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 202.520676][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 202.533776][ T8774] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 202.564572][ T8774] syz.1.1404: attempt to access beyond end of device [ 202.564572][ T8774] loop1: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 202.578256][ T8774] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 202.671525][ T8774] syz.1.1404: attempt to access beyond end of device [ 202.671525][ T8774] loop1: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 202.707973][ T8774] syz.1.1404: attempt to access beyond end of device [ 202.707973][ T8774] loop1: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 202.721652][ T8774] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 202.730174][ T8774] syz.1.1404: attempt to access beyond end of device [ 202.730174][ T8774] loop1: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 202.743836][ T8774] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 202.752446][ T8774] syz.1.1404: attempt to access beyond end of device [ 202.752446][ T8774] loop1: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 202.813268][ T8774] syz.1.1404: attempt to access beyond end of device [ 202.813268][ T8774] loop1: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 202.880634][ T8774] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 202.893456][ T8774] syz.1.1404: attempt to access beyond end of device [ 202.893456][ T8774] loop1: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 202.962044][ T8774] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 203.010616][ T8774] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 203.019320][ T8774] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 203.076019][ T8774] Buffer I/O error on dev loop1, logical block 107, lost async page write [ 203.102060][ T8774] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 203.190488][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 203.470166][ T8809] loop0: detected capacity change from 0 to 164 [ 203.482024][ T8809] usb usb7: usbfs: process 8809 (syz.0.1420) did not claim interface 0 before use [ 203.657108][ T8820] loop0: detected capacity change from 0 to 512 [ 203.721626][ T8820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.842542][ T8834] loop3: detected capacity change from 0 to 512 [ 203.884623][ T8834] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 203.932530][ T8834] EXT4-fs (loop3): mount failed [ 203.958343][ T8822] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.1424: iget: checksum invalid [ 204.005951][ T8832] loop4: detected capacity change from 0 to 1024 [ 204.032257][ T8832] EXT4-fs: Ignoring removed orlov option [ 204.038073][ T8832] EXT4-fs: Ignoring removed orlov option [ 204.102640][ T8832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.182686][ T8832] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1427: deleted inode referenced: 15 [ 204.199645][ T8845] loop2: detected capacity change from 0 to 1024 [ 204.233874][ T8820] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 204.383121][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.529116][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.574037][ T8845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.655767][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 204.655785][ T28] audit: type=1400 audit(1787368730.976:3625): avc: denied { write } for pid=8844 comm="syz.2.1430" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.767635][ T8864] loop0: detected capacity change from 0 to 1024 [ 204.786945][ T8864] EXT4-fs: Ignoring removed orlov option [ 204.826840][ T8864] EXT4-fs: Ignoring removed orlov option [ 204.830782][ T8856] loop1: detected capacity change from 0 to 1024 [ 204.852158][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.866262][ T8864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.900804][ T28] audit: type=1400 audit(1787368731.226:3626): avc: denied { setopt } for pid=8872 comm="syz.2.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 204.928145][ T28] audit: type=1400 audit(1787368731.246:3627): avc: denied { ioctl } for pid=8872 comm="syz.2.1438" path="socket:[21296]" dev="sockfs" ino=21296 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.963390][ T8857] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1434: deleted inode referenced: 15 [ 204.978834][ T8856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.030036][ T8881] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1440'. [ 205.068983][ T28] audit: type=1400 audit(1787368731.396:3628): avc: denied { write } for pid=8854 comm="syz.1.1435" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.131966][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.374594][ T8890] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1442'. [ 205.532779][ T8890] loop2: detected capacity change from 0 to 512 [ 205.543770][ T8890] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 205.614243][ T12] IPVS: starting estimator thread 0... [ 205.681986][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.718618][ T8891] IPVS: using max 1920 ests per chain, 96000 per kthread [ 205.732046][ T28] audit: type=1400 audit(1787368732.056:3629): avc: denied { write } for pid=8896 comm="syz.4.1444" name="functions" dev="configfs" ino=4819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 205.757508][ T8900] FAULT_INJECTION: forcing a failure. [ 205.757508][ T8900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.787106][ T28] audit: type=1400 audit(1787368732.056:3630): avc: denied { add_name } for pid=8896 comm="syz.4.1444" name="uvc.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 205.828421][ T28] audit: type=1400 audit(1787368732.056:3631): avc: denied { create } for pid=8896 comm="syz.4.1444" name="uvc.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 205.870537][ T8900] CPU: 0 UID: 0 PID: 8900 Comm: syz.4.1444 Not tainted syzkaller #0 PREEMPT(lazy) [ 205.870602][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.870620][ T8900] Call Trace: [ 205.870628][ T8900] [ 205.870638][ T8900] __dump_stack+0x1d/0x30 [ 205.870684][ T8900] dump_stack_lvl+0x95/0xd0 [ 205.870711][ T8900] dump_stack+0x15/0x1b [ 205.870776][ T8900] should_fail_ex+0x262/0x280 [ 205.870816][ T8900] should_fail+0xb/0x20 [ 205.870851][ T8900] should_fail_usercopy+0x1a/0x20 [ 205.870928][ T8900] strncpy_from_user+0x27/0x250 [ 205.871014][ T8900] do_getname+0x59/0x1c0 [ 205.871102][ T8900] __se_sys_mkdirat+0x21/0xf0 [ 205.871135][ T8900] __x64_sys_mkdirat+0x43/0x50 [ 205.871230][ T8900] x64_sys_call+0x368/0x2550 [ 205.871308][ T8900] do_syscall_64+0x112/0x360 [ 205.871352][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.871380][ T8900] RIP: 0033:0x7faf8fc6e0d9 [ 205.871418][ T8900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.871442][ T8900] RSP: 002b:00007faf8e6a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 205.871467][ T8900] RAX: ffffffffffffffda RBX: 00007faf8fef6090 RCX: 00007faf8fc6e0d9 [ 205.871485][ T8900] RDX: 00000000000001ff RSI: 0000200000000280 RDI: ffffffffffffff9c [ 205.871501][ T8900] RBP: 00007faf8e6a6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.871518][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.871594][ T8900] R13: 00007faf8fef6128 R14: 00007faf8fef6090 R15: 00007ffc3d5d7498 [ 205.871619][ T8900] [ 206.186204][ T8908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1449'. [ 206.372049][ T8920] loop4: detected capacity change from 0 to 1024 [ 206.379411][ T8920] EXT4-fs: Ignoring removed orlov option [ 206.385155][ T8920] EXT4-fs: Ignoring removed orlov option [ 206.396541][ T8925] loop1: detected capacity change from 0 to 1024 [ 206.403398][ T8925] EXT4-fs: Ignoring removed orlov option [ 206.409108][ T8925] EXT4-fs: Ignoring removed orlov option [ 206.416543][ T28] audit: type=1400 audit(1787368732.736:3632): avc: denied { write } for pid=8916 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.550303][ T8925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.568359][ T8920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.582597][ T8927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.595064][ T8925] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1456: deleted inode referenced: 15 [ 206.609363][ T8920] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1453: deleted inode referenced: 15 [ 206.634314][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.665253][ T28] audit: type=1400 audit(1787368732.986:3633): avc: denied { write } for pid=8926 comm="syz.2.1455" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.689162][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.750422][ T8940] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1458'. [ 206.817603][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.959367][ T8956] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 206.969377][ T8954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.984201][ T8956] EXT4-fs (loop2): 1 truncate cleaned up [ 206.990836][ T8954] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 1803188595: comm syz.0.1463: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 207.009298][ T8954] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 207.009455][ T8954] EXT4-fs (loop0): Remounting filesystem read-only [ 207.010238][ T8956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.018747][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 207.018765][ C0] EXT4-fs (loop0): initial error at time 1787368733: ext4_map_blocks:790: inode 15: block 1803188595 [ 207.054658][ C0] EXT4-fs (loop0): last error at time 1787368733: ext4_map_blocks:790: inode 15: block 1803188595 [ 207.067480][ T8954] EXT4-fs (loop0): mount failed [ 207.092453][ T8960] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 207.148807][ T8960] EXT4-fs (loop1): 1 truncate cleaned up [ 207.155782][ T8956] FAULT_INJECTION: forcing a failure. [ 207.155782][ T8956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.170408][ T8956] CPU: 0 UID: 0 PID: 8956 Comm: syz.2.1465 Not tainted syzkaller #0 PREEMPT(lazy) [ 207.170494][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.170512][ T8956] Call Trace: [ 207.170520][ T8956] [ 207.170530][ T8956] __dump_stack+0x1d/0x30 [ 207.170571][ T8956] dump_stack_lvl+0x95/0xd0 [ 207.170600][ T8956] dump_stack+0x15/0x1b [ 207.170646][ T8956] should_fail_ex+0x262/0x280 [ 207.170686][ T8956] should_fail+0xb/0x20 [ 207.170721][ T8956] should_fail_usercopy+0x1a/0x20 [ 207.170782][ T8956] _copy_from_user+0x1c/0xb0 [ 207.170820][ T8956] do_handle_open+0x6d/0x7c0 [ 207.170935][ T8956] __x64_sys_open_by_handle_at+0x44/0x50 [ 207.170971][ T8956] x64_sys_call+0x1395/0x2550 [ 207.171031][ T8956] do_syscall_64+0x112/0x360 [ 207.171077][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.171104][ T8956] RIP: 0033:0x7f36fefee0d9 [ 207.171148][ T8956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.171173][ T8956] RSP: 002b:00007f36fda47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 207.171199][ T8956] RAX: ffffffffffffffda RBX: 00007f36ff275fa0 RCX: 00007f36fefee0d9 [ 207.171215][ T8956] RDX: 0000000000320000 RSI: 0000200000000040 RDI: 0000000000000004 [ 207.171228][ T8956] RBP: 00007f36fda47090 R08: 0000000000000000 R09: 0000000000000000 [ 207.171240][ T8956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.171252][ T8956] R13: 00007f36ff276038 R14: 00007f36ff275fa0 R15: 00007ffe18f83d78 [ 207.171316][ T8956] [ 207.171930][ T28] audit: type=1400 audit(1787368733.496:3634): avc: denied { read } for pid=8955 comm="syz.2.1465" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 207.173539][ T8960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.454388][ T8967] EXT4-fs: Ignoring removed orlov option [ 207.460194][ T8967] EXT4-fs: Ignoring removed orlov option [ 207.491595][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.498291][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.676423][ T8969] bond1: (slave vlan2): making interface the new active one [ 207.698105][ T8967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.712324][ T8969] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 207.744100][ T876] bond_slave_0: entered promiscuous mode [ 207.749942][ T876] bond_slave_1: entered promiscuous mode [ 207.770562][ T8967] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1469: deleted inode referenced: 15 [ 207.903710][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.935781][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1478'. [ 207.977349][ T8991] FAULT_INJECTION: forcing a failure. [ 207.977349][ T8991] name failslab, interval 1, probability 0, space 0, times 0 [ 208.031042][ T8991] CPU: 0 UID: 0 PID: 8991 Comm: syz.0.1478 Not tainted syzkaller #0 PREEMPT(lazy) [ 208.031078][ T8991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.031095][ T8991] Call Trace: [ 208.031102][ T8991] [ 208.031130][ T8991] __dump_stack+0x1d/0x30 [ 208.031161][ T8991] dump_stack_lvl+0x95/0xd0 [ 208.031242][ T8991] dump_stack+0x15/0x1b [ 208.031270][ T8991] should_fail_ex+0x262/0x280 [ 208.031314][ T8991] should_failslab+0x8c/0xb0 [ 208.031346][ T8991] kmem_cache_alloc_node_noprof+0x86/0x3f0 [ 208.031400][ T8991] ? __alloc_skb+0x2e0/0x6f0 [ 208.031522][ T8991] ? __alloc_skb+0x2e0/0x6f0 [ 208.031561][ T8991] ? avc_has_perm+0x101/0x190 [ 208.031633][ T8991] __alloc_skb+0x2e0/0x6f0 [ 208.031677][ T8991] ? __alloc_skb+0x209/0x6f0 [ 208.031711][ T8991] netlink_alloc_large_skb+0xbf/0xf0 [ 208.031776][ T8991] netlink_sendmsg+0x40c/0x6f0 [ 208.031824][ T8991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.031943][ T8991] ____sys_sendmsg+0x532/0x580 [ 208.031978][ T8991] ___sys_sendmsg+0x195/0x1e0 [ 208.032043][ T8991] __x64_sys_sendmsg+0xd4/0x160 [ 208.032073][ T8991] x64_sys_call+0x22ab/0x2550 [ 208.032109][ T8991] do_syscall_64+0x112/0x360 [ 208.032156][ T8991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.032257][ T8991] RIP: 0033:0x7f3b937be0d9 [ 208.032278][ T8991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.032308][ T8991] RSP: 002b:00007f3b92217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.032335][ T8991] RAX: ffffffffffffffda RBX: 00007f3b93a45fa0 RCX: 00007f3b937be0d9 [ 208.032355][ T8991] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000004 [ 208.032432][ T8991] RBP: 00007f3b92217090 R08: 0000000000000000 R09: 0000000000000000 [ 208.032450][ T8991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.032467][ T8991] R13: 00007f3b93a46038 R14: 00007f3b93a45fa0 R15: 00007fff9e585ff8 [ 208.032489][ T8991] [ 208.034579][ T8995] netlink: 'syz.4.1477': attribute type 21 has an invalid length. [ 208.272031][ T9002] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1483'. [ 208.273230][ T8973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.500743][ T9015] set_capacity_and_notify: 7 callbacks suppressed [ 208.500784][ T9015] loop0: detected capacity change from 0 to 1024 [ 208.540738][ T9015] EXT4-fs: Ignoring removed orlov option [ 208.546563][ T9015] EXT4-fs: Ignoring removed orlov option [ 208.623389][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.667927][ T9013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.702836][ T9015] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1487: deleted inode referenced: 15 [ 208.838226][ T9034] loop1: detected capacity change from 0 to 1024 [ 208.848821][ T9034] EXT4-fs: Ignoring removed orlov option [ 208.854546][ T9034] EXT4-fs: Ignoring removed orlov option [ 208.923053][ T9045] FAULT_INJECTION: forcing a failure. [ 208.923053][ T9045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.955647][ T9034] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1490: deleted inode referenced: 15 [ 208.968103][ T9045] CPU: 0 UID: 0 PID: 9045 Comm: syz.2.1496 Not tainted syzkaller #0 PREEMPT(lazy) [ 208.968136][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.968154][ T9045] Call Trace: [ 208.968163][ T9045] [ 208.968212][ T9045] __dump_stack+0x1d/0x30 [ 208.968245][ T9045] dump_stack_lvl+0x95/0xd0 [ 208.968303][ T9045] dump_stack+0x15/0x1b [ 208.968331][ T9045] should_fail_ex+0x262/0x280 [ 208.968389][ T9045] should_fail+0xb/0x20 [ 208.968427][ T9045] should_fail_usercopy+0x1a/0x20 [ 208.968471][ T9045] strncpy_from_user+0x27/0x250 [ 208.968578][ T9045] path_setxattrat+0xeb/0x320 [ 208.968659][ T9045] __x64_sys_fsetxattr+0x6b/0x80 [ 208.968708][ T9045] x64_sys_call+0x1a88/0x2550 [ 208.968743][ T9045] do_syscall_64+0x112/0x360 [ 208.968849][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.968879][ T9045] RIP: 0033:0x7f36fefee0d9 [ 208.968900][ T9045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.968923][ T9045] RSP: 002b:00007f36fda47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 208.969027][ T9045] RAX: ffffffffffffffda RBX: 00007f36ff275fa0 RCX: 00007f36fefee0d9 [ 208.969047][ T9045] RDX: 0000200000000240 RSI: 0000200000000080 RDI: 0000000000000003 [ 208.969066][ T9045] RBP: 00007f36fda47090 R08: 0000000000000003 R09: 0000000000000000 [ 208.969150][ T9045] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 208.969212][ T9045] R13: 00007f36ff276038 R14: 00007f36ff275fa0 R15: 00007ffe18f83d78 [ 208.969240][ T9045] [ 209.228637][ T9056] loop3: detected capacity change from 0 to 1024 [ 209.240439][ T9059] loop2: detected capacity change from 0 to 1024 [ 209.513900][ T9064] loop1: detected capacity change from 0 to 1024 [ 209.536659][ T9064] EXT4-fs: Ignoring removed orlov option [ 209.554647][ T9064] EXT4-fs: Ignoring removed orlov option [ 209.601310][ T9082] loop2: detected capacity change from 0 to 512 [ 209.646729][ T9082] EXT4-fs: dax option not supported [ 209.732786][ T9064] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1504: deleted inode referenced: 15 [ 209.925843][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 209.925862][ T28] audit: type=1400 audit(1787368736.246:3642): avc: denied { append } for pid=9077 comm="syz.4.1506" name="001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 209.997161][ T9095] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1510'. [ 210.019645][ T9086] vhci_hcd vhci_hcd.1: default hub control req: 400f v0015 i0001 l0 [ 210.552099][ T28] audit: type=1400 audit(1787368736.866:3643): avc: denied { kexec_image_load } for pid=9102 comm="syz.0.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 210.782653][ T28] audit: type=1400 audit(1787368737.056:3644): avc: denied { bind } for pid=9102 comm="syz.0.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.299290][ T9119] loop3: detected capacity change from 0 to 1024 [ 211.399867][ T9122] loop2: detected capacity change from 0 to 1024 [ 211.491418][ T9126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1520'. [ 211.539544][ T9126] FAULT_INJECTION: forcing a failure. [ 211.539544][ T9126] name failslab, interval 1, probability 0, space 0, times 0 [ 211.552245][ T9126] CPU: 0 UID: 0 PID: 9126 Comm: syz.4.1520 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.552340][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.552352][ T9126] Call Trace: [ 211.552359][ T9126] [ 211.552369][ T9126] __dump_stack+0x1d/0x30 [ 211.552470][ T9126] dump_stack_lvl+0x95/0xd0 [ 211.552497][ T9126] dump_stack+0x15/0x1b [ 211.552524][ T9126] should_fail_ex+0x262/0x280 [ 211.552565][ T9126] should_failslab+0x8c/0xb0 [ 211.552660][ T9126] kmem_cache_alloc_node_noprof+0x86/0x3f0 [ 211.552694][ T9126] ? __alloc_skb+0x2e0/0x6f0 [ 211.552734][ T9126] ? __alloc_skb+0x2e0/0x6f0 [ 211.552843][ T9126] ? avc_has_perm+0x101/0x190 [ 211.552885][ T9126] __alloc_skb+0x2e0/0x6f0 [ 211.552969][ T9126] ? __alloc_skb+0x209/0x6f0 [ 211.553028][ T9126] netlink_alloc_large_skb+0xbf/0xf0 [ 211.553066][ T9126] netlink_sendmsg+0x40c/0x6f0 [ 211.553117][ T9126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.553154][ T9126] ____sys_sendmsg+0x532/0x580 [ 211.553340][ T9126] ___sys_sendmsg+0x195/0x1e0 [ 211.553426][ T9126] __x64_sys_sendmsg+0xd4/0x160 [ 211.553462][ T9126] x64_sys_call+0x22ab/0x2550 [ 211.553497][ T9126] do_syscall_64+0x112/0x360 [ 211.553667][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.553699][ T9126] RIP: 0033:0x7faf8fc6e0d9 [ 211.553721][ T9126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.553826][ T9126] RSP: 002b:00007faf8e6c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.553904][ T9126] RAX: ffffffffffffffda RBX: 00007faf8fef5fa0 RCX: 00007faf8fc6e0d9 [ 211.553923][ T9126] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000004 [ 211.553942][ T9126] RBP: 00007faf8e6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.553960][ T9126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.554037][ T9126] R13: 00007faf8fef6038 R14: 00007faf8fef5fa0 R15: 00007ffc3d5d7498 [ 211.554064][ T9126] [ 211.872841][ T9124] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 211.880372][ T9137] loop0: detected capacity change from 0 to 1024 [ 211.914411][ T9137] EXT4-fs: Ignoring removed orlov option [ 211.920302][ T9137] EXT4-fs: Ignoring removed orlov option [ 211.958564][ T28] audit: type=1400 audit(1787368738.276:3645): avc: denied { write } for pid=9121 comm="syz.2.1518" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.980316][ T28] audit: type=1400 audit(1787368738.286:3646): avc: denied { write } for pid=9117 comm="syz.3.1517" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.157503][ T9154] loop1: detected capacity change from 0 to 1024 [ 212.197548][ T9154] EXT4-fs: Ignoring removed orlov option [ 212.203344][ T9154] EXT4-fs: Ignoring removed orlov option [ 212.323152][ T9152] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1521: deleted inode referenced: 15 [ 212.350115][ T9154] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1526: deleted inode referenced: 15 [ 212.379739][ T9162] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1528'. [ 212.640035][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 212.649308][ T28] audit: type=1400 audit(1787368738.956:3647): avc: denied { connect } for pid=9170 comm="syz.1.1530" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.742406][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'. [ 212.991573][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'. [ 213.001734][ T9187] FAULT_INJECTION: forcing a failure. [ 213.001734][ T9187] name failslab, interval 1, probability 0, space 0, times 0 [ 213.014529][ T9187] CPU: 0 UID: 0 PID: 9187 Comm: syz.1.1536 Not tainted syzkaller #0 PREEMPT(lazy) [ 213.014572][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.014583][ T9187] Call Trace: [ 213.014590][ T9187] [ 213.014597][ T9187] __dump_stack+0x1d/0x30 [ 213.014642][ T9187] dump_stack_lvl+0x95/0xd0 [ 213.014706][ T9187] dump_stack+0x15/0x1b [ 213.014725][ T9187] should_fail_ex+0x262/0x280 [ 213.014784][ T9187] ? __get_vm_area_node+0x125/0x1f0 [ 213.014811][ T9187] should_failslab+0x8c/0xb0 [ 213.014843][ T9187] __kmalloc_cache_node_noprof+0x81/0x400 [ 213.014873][ T9187] ? __get_vm_area_node+0x125/0x1f0 [ 213.014991][ T9187] __get_vm_area_node+0x125/0x1f0 [ 213.015040][ T9187] __vmalloc_node_range_noprof+0x26b/0x1040 [ 213.015067][ T9187] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 213.015169][ T9187] ? __d_rehash+0x124/0x1d0 [ 213.015194][ T9187] ? avc_has_perm_noaudit+0xa3/0x120 [ 213.015270][ T9187] ? avc_has_perm+0x101/0x190 [ 213.015302][ T9187] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 213.015400][ T9187] __vmalloc_noprof+0xa4/0xf0 [ 213.015433][ T9187] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 213.015476][ T9187] bpf_prog_alloc_no_stats+0x47/0x390 [ 213.015526][ T9187] ? bpf_prog_alloc+0x2a/0x150 [ 213.015659][ T9187] bpf_prog_alloc+0x3c/0x150 [ 213.015782][ T9187] bpf_prog_load+0x54b/0x1060 [ 213.015844][ T9187] ? avc_has_perm_noaudit+0xa3/0x120 [ 213.015948][ T9187] ? vfs_write+0x800/0x9a0 [ 213.015971][ T9187] __sys_bpf+0xbae/0xc30 [ 213.016009][ T9187] ? vfs_write+0x800/0x9a0 [ 213.016040][ T9187] ? vfs_write+0x800/0x9a0 [ 213.016077][ T9187] __x64_sys_bpf+0x69/0x80 [ 213.016140][ T9187] x64_sys_call+0xf26/0x2550 [ 213.016173][ T9187] do_syscall_64+0x112/0x360 [ 213.016214][ T9187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.016264][ T9187] RIP: 0033:0x7f80576ae0d9 [ 213.016316][ T9187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.016335][ T9187] RSP: 002b:00007f80560c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.016359][ T9187] RAX: ffffffffffffffda RBX: 00007f8057936180 RCX: 00007f80576ae0d9 [ 213.016377][ T9187] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 213.016447][ T9187] RBP: 00007f80560c5090 R08: 0000000000000000 R09: 0000000000000000 [ 213.016460][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.016472][ T9187] R13: 00007f8057936218 R14: 00007f8057936180 R15: 00007ffe2c70b238 [ 213.016495][ T9187] [ 213.016528][ T9187] syz.1.1536: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 213.282903][ T9187] CPU: 0 UID: 0 PID: 9187 Comm: syz.1.1536 Not tainted syzkaller #0 PREEMPT(lazy) [ 213.282935][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.282949][ T9187] Call Trace: [ 213.282956][ T9187] [ 213.282964][ T9187] __dump_stack+0x1d/0x30 [ 213.283008][ T9187] dump_stack_lvl+0x95/0xd0 [ 213.283028][ T9187] dump_stack+0x15/0x1b [ 213.283108][ T9187] warn_alloc+0x146/0x1c0 [ 213.283137][ T9187] __vmalloc_node_range_noprof+0x293/0x1040 [ 213.283215][ T9187] ? __d_rehash+0x124/0x1d0 [ 213.283317][ T9187] ? avc_has_perm_noaudit+0xa3/0x120 [ 213.283355][ T9187] ? avc_has_perm+0x101/0x190 [ 213.283391][ T9187] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 213.283469][ T9187] __vmalloc_noprof+0xa4/0xf0 [ 213.283494][ T9187] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 213.283554][ T9187] bpf_prog_alloc_no_stats+0x47/0x390 [ 213.283667][ T9187] ? bpf_prog_alloc+0x2a/0x150 [ 213.283710][ T9187] bpf_prog_alloc+0x3c/0x150 [ 213.283783][ T9187] bpf_prog_load+0x54b/0x1060 [ 213.283808][ T9187] ? avc_has_perm_noaudit+0xa3/0x120 [ 213.283919][ T9187] ? vfs_write+0x800/0x9a0 [ 213.283940][ T9187] __sys_bpf+0xbae/0xc30 [ 213.283966][ T9187] ? vfs_write+0x800/0x9a0 [ 213.283988][ T9187] ? vfs_write+0x800/0x9a0 [ 213.284012][ T9187] __x64_sys_bpf+0x69/0x80 [ 213.284109][ T9187] x64_sys_call+0xf26/0x2550 [ 213.284154][ T9187] do_syscall_64+0x112/0x360 [ 213.284204][ T9187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.284304][ T9187] RIP: 0033:0x7f80576ae0d9 [ 213.284323][ T9187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.284342][ T9187] RSP: 002b:00007f80560c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.284364][ T9187] RAX: ffffffffffffffda RBX: 00007f8057936180 RCX: 00007f80576ae0d9 [ 213.284479][ T9187] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 213.284493][ T9187] RBP: 00007f80560c5090 R08: 0000000000000000 R09: 0000000000000000 [ 213.284506][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.284544][ T9187] R13: 00007f8057936218 R14: 00007f8057936180 R15: 00007ffe2c70b238 [ 213.284569][ T9187] [ 213.284612][ T9187] Mem-Info: [ 213.505428][ T9187] active_anon:15837 inactive_anon:1219 isolated_anon:0 [ 213.505428][ T9187] active_file:2965 inactive_file:24886 isolated_file:0 [ 213.505428][ T9187] unevictable:0 dirty:388 writeback:0 [ 213.505428][ T9187] slab_reclaimable:3314 slab_unreclaimable:16590 [ 213.505428][ T9187] mapped:38373 shmem:8904 pagetables:1166 [ 213.505428][ T9187] sec_pagetables:0 bounce:0 [ 213.505428][ T9187] kernel_misc_reclaimable:0 [ 213.505428][ T9187] free:1865948 free_pcp:8333 free_cma:0 [ 213.550758][ T9187] Node 0 active_anon:63348kB inactive_anon:4876kB active_file:11860kB inactive_file:99544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153492kB dirty:1552kB writeback:0kB shmem:35616kB kernel_stack:3584kB pagetables:4664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 213.581413][ T9187] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.611175][ T9187] lowmem_reserve[]: 0 2877 7856 7856 [ 213.616617][ T9187] Node 0 DMA32 free:2943504kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947028kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 213.647950][ T9187] lowmem_reserve[]: 0 0 4978 4978 [ 213.653132][ T9187] Node 0 Normal free:4504928kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63348kB inactive_anon:4876kB active_file:11860kB inactive_file:99544kB unevictable:0kB writepending:1552kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:29816kB local_pcp:28108kB free_cma:0kB [ 213.686517][ T9187] lowmem_reserve[]: 0 0 0 0 [ 213.691189][ T9187] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.704149][ T9187] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943504kB [ 213.720424][ T9187] Node 0 Normal: 30*4kB (UM) 315*8kB (UM) 575*16kB (UME) 25*32kB (UM) 22*64kB (UME) 163*128kB (UM) 135*256kB (UME) 59*512kB (UM) 26*1024kB (UM) 14*2048kB (UME) 1062*4096kB (UM) = 4504928kB [ 213.727988][ T28] audit: type=1400 audit(1787368740.046:3648): avc: denied { write } for pid=9179 comm="syz.2.1535" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.739273][ T9187] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 213.739300][ T9187] 36754 total pagecache pages [ 213.774945][ T9187] 3 pages in swap cache [ 213.779128][ T9187] Free swap = 124812kB [ 213.783318][ T9187] Total swap = 124996kB [ 213.787495][ T9187] 2097051 pages RAM [ 213.791349][ T9187] 0 pages HighMem/MovableOnly [ 213.796044][ T9187] 81895 pages reserved [ 213.886578][ T9196] FAULT_INJECTION: forcing a failure. [ 213.886578][ T9196] name failslab, interval 1, probability 0, space 0, times 0 [ 213.899472][ T9196] CPU: 0 UID: 0 PID: 9196 Comm: syz.4.1537 Not tainted syzkaller #0 PREEMPT(lazy) [ 213.899577][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.899590][ T9196] Call Trace: [ 213.899596][ T9196] [ 213.899603][ T9196] __dump_stack+0x1d/0x30 [ 213.899629][ T9196] dump_stack_lvl+0x95/0xd0 [ 213.899741][ T9196] dump_stack+0x15/0x1b [ 213.899766][ T9196] should_fail_ex+0x262/0x280 [ 213.899805][ T9196] should_failslab+0x8c/0xb0 [ 213.899829][ T9196] kmem_cache_alloc_node_noprof+0x86/0x3f0 [ 213.899919][ T9196] ? __alloc_skb+0x2e0/0x6f0 [ 213.899951][ T9196] ? __alloc_skb+0x2e0/0x6f0 [ 213.900044][ T9196] __alloc_skb+0x2e0/0x6f0 [ 213.900086][ T9196] ? __alloc_skb+0x209/0x6f0 [ 213.900128][ T9196] netlink_alloc_large_skb+0xbf/0xf0 [ 213.900165][ T9196] netlink_sendmsg+0x40c/0x6f0 [ 213.900204][ T9196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.900245][ T9196] ____sys_sendmsg+0x532/0x580 [ 213.900304][ T9196] ___sys_sendmsg+0x195/0x1e0 [ 213.900346][ T9196] __x64_sys_sendmsg+0xd4/0x160 [ 213.900379][ T9196] x64_sys_call+0x22ab/0x2550 [ 213.900437][ T9196] do_syscall_64+0x112/0x360 [ 213.900540][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.900569][ T9196] RIP: 0033:0x7faf8fc6e0d9 [ 213.900607][ T9196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.900652][ T9196] RSP: 002b:00007faf8e6c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.900671][ T9196] RAX: ffffffffffffffda RBX: 00007faf8fef5fa0 RCX: 00007faf8fc6e0d9 [ 213.900723][ T9196] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 213.900738][ T9196] RBP: 00007faf8e6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.900753][ T9196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.900769][ T9196] R13: 00007faf8fef6038 R14: 00007faf8fef5fa0 R15: 00007ffc3d5d7498 [ 213.900792][ T9196] [ 214.141132][ T9199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1541'. [ 214.231535][ T9202] set_capacity_and_notify: 2 callbacks suppressed [ 214.231555][ T9202] loop1: detected capacity change from 0 to 512 [ 214.244579][ T9202] EXT4-fs: dax option not supported [ 214.277107][ T28] audit: type=1400 audit(1787368740.596:3649): avc: denied { create } for pid=9207 comm="syz.3.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 214.430127][ T9218] loop0: detected capacity change from 0 to 1024 [ 214.552355][ T9218] EXT4-fs: Ignoring removed orlov option [ 214.558162][ T9218] EXT4-fs: Ignoring removed orlov option [ 214.607460][ T9217] ip6t_srh: unknown srh invflags 4000 [ 214.614921][ T9217] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 214.622562][ T9217] SELinux: failed to load policy [ 214.695633][ T9217] loop3: detected capacity change from 0 to 512 [ 214.705023][ T9212] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1544: deleted inode referenced: 15 [ 214.781306][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 214.802449][ T9217] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 214.812683][ T9223] loop4: detected capacity change from 0 to 1024 [ 214.819385][ T9223] EXT4-fs: Ignoring removed orlov option [ 214.825164][ T9223] EXT4-fs: Ignoring removed orlov option [ 214.999976][ T28] audit: type=1400 audit(1787368741.326:3650): avc: denied { lock } for pid=9232 comm="syz.1.1552" path="socket:[22159]" dev="sockfs" ino=22159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 215.160863][ T9241] loop0: detected capacity change from 0 to 1024 [ 215.256557][ T28] audit: type=1400 audit(1787368741.566:3651): avc: denied { write } for pid=9237 comm="syz.2.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 215.334992][ T9223] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1547: deleted inode referenced: 15 [ 215.370518][ T28] audit: type=1400 audit(1787368741.696:3652): avc: denied { write } for pid=9240 comm="syz.0.1550" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.633126][ T9254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1555'. [ 215.793939][ T9256] ip6t_srh: unknown srh invflags 4000 [ 215.860683][ T9257] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 215.868919][ T9257] SELinux: failed to load policy [ 215.962348][ T9259] loop2: detected capacity change from 0 to 512 [ 216.005557][ T9259] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.012071][ T9259] EXT4-fs: dax option not supported [ 216.046074][ T9256] loop4: detected capacity change from 0 to 512 [ 216.073621][ T9264] loop0: detected capacity change from 0 to 512 [ 216.144240][ T9264] EXT4-fs: dax option not supported [ 216.157321][ T9256] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 216.280550][ T9266] loop1: detected capacity change from 0 to 1024 [ 216.287209][ T9266] EXT4-fs: Ignoring removed orlov option [ 216.292988][ T9266] EXT4-fs: Ignoring removed orlov option [ 216.348939][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1561'. [ 216.537735][ T28] audit: type=1400 audit(1787368742.856:3653): avc: denied { mount } for pid=9275 comm="syz.4.1562" name="/" dev="rpc_pipefs" ino=22238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 216.691857][ T28] audit: type=1400 audit(1787368743.016:3654): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 216.750556][ T9287] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1565'. [ 216.773052][ T28] audit: type=1400 audit(1787368743.096:3655): avc: denied { mount } for pid=9285 comm="syz.4.1565" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 216.798689][ T9287] openvswitch: netlink: Message has 6 unknown bytes. [ 216.823195][ T9290] loop2: detected capacity change from 0 to 1024 [ 216.891520][ T9295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1566'. [ 216.903305][ T9266] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1560: deleted inode referenced: 15 [ 216.914633][ T28] audit: type=1400 audit(1787368743.226:3656): avc: denied { write } for pid=9283 comm="syz.2.1564" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.257804][ T9305] netlink: 'syz.3.1571': attribute type 4 has an invalid length. [ 217.269023][ T9308] No source specified [ 217.372791][ T9309] netlink: 'syz.3.1571': attribute type 4 has an invalid length. [ 217.649992][ T9318] EXT4-fs: dax option not supported [ 218.384788][ T9331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1578'. [ 218.568169][ T9335] EXT4-fs: Ignoring removed orlov option [ 218.574733][ T9335] EXT4-fs: Ignoring removed orlov option [ 218.586402][ T9338] EXT4-fs: Ignoring removed orlov option [ 218.595097][ T9337] EXT4-fs: Ignoring removed orlov option [ 218.600896][ T9337] EXT4-fs: Ignoring removed orlov option [ 218.610734][ T9338] EXT4-fs: Ignoring removed orlov option [ 218.770138][ T28] audit: type=1400 audit(1787368745.076:3657): avc: denied { write } for pid=9332 comm="syz.4.1580" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.881436][ T28] audit: type=1400 audit(1787368745.146:3658): avc: denied { write } for pid=9332 comm="syz.4.1580" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.939338][ T28] audit: type=1400 audit(1787368745.146:3659): avc: denied { write } for pid=9327 comm="syz.3.1577" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.057681][ T9337] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1581: deleted inode referenced: 15 [ 219.298761][ T9358] set_capacity_and_notify: 4 callbacks suppressed [ 219.298781][ T9358] loop1: detected capacity change from 0 to 512 [ 219.312291][ T9358] EXT4-fs: dax option not supported [ 219.456669][ T9363] loop0: detected capacity change from 0 to 164 [ 219.499669][ T9363] usb usb7: usbfs: process 9363 (syz.0.1588) did not claim interface 0 before use [ 219.604421][ T9365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1589'. [ 219.626789][ T9365] syzkaller0: entered promiscuous mode [ 219.632391][ T9365] syzkaller0: entered allmulticast mode [ 219.929257][ T9377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1591'. [ 219.990837][ T9374] loop2: detected capacity change from 0 to 1024 [ 220.005080][ T9374] loop2: detected capacity change from 0 to 512 [ 220.014737][ T9374] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 220.029377][ T9374] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.1587: corrupted inode contents [ 220.041240][ T9374] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.042024][ T9374] EXT4-fs error (device loop2): ext4_dirty_inode:6731: inode #11: comm syz.2.1587: mark_inode_dirty error [ 220.051193][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 220.051210][ C0] EXT4-fs (loop2): initial error at time 1787368746: mb_free_blocks:2049: inode 11: block 64 [ 220.051248][ C0] EXT4-fs (loop2): last error at time 1787368746: ext4_do_update_inode:5801: inode 11 [ 220.088905][ T9374] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.112205][ T9374] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1587: invalid indirect mapped block 1 (level 1) [ 220.134695][ T9374] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.137462][ T9374] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.1587: corrupted inode contents [ 220.158481][ T9374] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.161328][ T9374] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 220.179066][ T9374] loop2: lost filesystem error report for type 5 error -117 [ 220.179747][ T9374] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.1587: corrupted inode contents [ 220.198970][ T9374] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.201972][ T9374] EXT4-fs error (device loop2): ext4_truncate:4721: inode #11: comm syz.2.1587: mark_inode_dirty error [ 220.222195][ T9374] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.223733][ T9374] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 220.241792][ T9374] loop2: lost filesystem error report for type 5 error -117 [ 220.244815][ T9379] bridge_slave_0: left allmulticast mode [ 220.257852][ T9374] EXT4-fs (loop2): 1 truncate cleaned up [ 220.328534][ T9379] bridge_slave_0: left promiscuous mode [ 220.346354][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.373706][ T9379] bridge_slave_1: left allmulticast mode [ 220.380012][ T9379] bridge_slave_1: left promiscuous mode [ 220.393292][ T9379] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.416760][ T9384] loop1: detected capacity change from 0 to 1024 [ 220.441794][ T9384] EXT4-fs: Ignoring removed orlov option [ 220.447688][ T9384] EXT4-fs: Ignoring removed orlov option [ 220.516515][ T9379] bond0: (slave bond_slave_0): Releasing backup interface [ 220.751413][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 220.751431][ T28] audit: type=1400 audit(1787368747.076:3664): avc: denied { write } for pid=9383 comm="syz.1.1593" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.799646][ T9379] bond0: (slave bond_slave_1): Releasing backup interface [ 220.843378][ T28] audit: type=1400 audit(1787368747.076:3665): avc: denied { write } for pid=9383 comm="syz.1.1593" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.903247][ T9379] team0: Port device team_slave_0 removed [ 220.915724][ T9379] team0: Port device team_slave_1 removed [ 220.922763][ T9379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.949742][ T9379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.967080][ T9379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.988550][ T9379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.005795][ T9379] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 221.239804][ T9406] ip6t_srh: unknown srh invflags 4000 [ 221.305437][ T9404] loop0: detected capacity change from 0 to 164 [ 221.315222][ T9401] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 221.322821][ T9401] SELinux: failed to load policy [ 221.337778][ T9412] ip6t_srh: unknown srh invflags 4000 [ 221.367136][ T9412] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 221.374761][ T9412] SELinux: failed to load policy [ 221.387811][ T9406] loop3: detected capacity change from 0 to 512 [ 221.399873][ T9412] loop4: detected capacity change from 0 to 512 [ 221.485515][ T9406] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 221.520619][ T28] audit: type=1400 audit(1787368747.846:3666): avc: denied { mounton } for pid=9398 comm="syz.0.1596" path="/327/file0" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 221.548388][ T9399] usb usb7: usbfs: process 9399 (syz.0.1596) did not claim interface 0 before use [ 221.656910][ T9412] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 221.904482][ T28] audit: type=1400 audit(1787368748.226:3667): avc: denied { map } for pid=9402 comm="syz.1.1597" path="socket:[22776]" dev="sockfs" ino=22776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 221.916787][ T9419] loop3: detected capacity change from 0 to 1024 [ 222.016088][ T9422] loop0: detected capacity change from 0 to 1024 [ 222.113846][ T9422] EXT4-fs: Ignoring removed orlov option [ 222.149032][ T9422] EXT4-fs: Ignoring removed orlov option [ 222.155839][ T9419] EXT4-fs mount: 41 callbacks suppressed [ 222.155858][ T9419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.254267][ T28] audit: type=1400 audit(1787368748.576:3668): avc: denied { write } for pid=9417 comm="syz.3.1601" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.342325][ T9429] usb usb7: usbfs: process 9429 (syz.4.1604) did not claim interface 0 before use [ 222.419463][ T9422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.433952][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.485288][ T28] audit: type=1400 audit(1787368748.806:3669): avc: denied { read } for pid=9444 comm="syz.4.1609" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 222.511565][ T28] audit: type=1400 audit(1787368748.806:3670): avc: denied { open } for pid=9444 comm="syz.4.1609" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 222.542649][ T28] audit: type=1400 audit(1787368748.856:3671): avc: denied { ioctl } for pid=9444 comm="syz.4.1609" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 222.711256][ T9422] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1602: deleted inode referenced: 15 [ 222.730693][ T9450] EXT4-fs: Ignoring removed orlov option [ 222.736555][ T9450] EXT4-fs: Ignoring removed orlov option [ 222.785467][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 222.864156][ T9450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.879499][ T9450] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1610: deleted inode referenced: 15 [ 222.980116][ T9459] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1611'. [ 223.026843][ T28] audit: type=1400 audit(1787368749.346:3672): avc: denied { append } for pid=9453 comm="syz.1.1611" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 223.051141][ T9459] sg_write: data in/out 811008/132 bytes for SCSI command 0x20-- guessing data in; [ 223.051141][ T9459] program syz.1.1611 not setting count and/or reply_len properly [ 223.214494][ T9463] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 223.841717][ T9460] Invalid ELF header type: 2 != 1 [ 223.847538][ T28] audit: type=1400 audit(1787368750.166:3673): avc: denied { module_load } for pid=9446 comm="syz.3.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 224.215462][ T9466] usb usb7: usbfs: process 9466 (syz.3.1612) did not claim interface 0 before use [ 224.617598][ T9472] set_capacity_and_notify: 4 callbacks suppressed [ 224.617621][ T9472] loop3: detected capacity change from 0 to 512 [ 224.645725][ T9472] EXT4-fs: dax option not supported [ 226.159241][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.213917][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.458873][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1618'. [ 226.539857][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'. [ 226.800494][ T9491] ip6t_srh: unknown srh invflags 4000 [ 226.887426][ T9491] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 226.922609][ T9491] SELinux: failed to load policy [ 226.971909][ T9492] loop1: detected capacity change from 0 to 1024 [ 227.056506][ T9492] EXT4-fs: Ignoring removed orlov option [ 227.062256][ T9492] EXT4-fs: Ignoring removed orlov option [ 227.140235][ T9491] loop2: detected capacity change from 0 to 512 [ 227.152571][ T9496] loop4: detected capacity change from 0 to 164 [ 227.173009][ T9501] loop0: detected capacity change from 0 to 512 [ 227.194230][ T9491] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 227.246183][ T9496] usb usb7: usbfs: process 9496 (syz.4.1623) did not claim interface 0 before use [ 227.256768][ T9501] EXT4-fs: dax option not supported [ 227.380251][ T9492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.673032][ T9507] ip6t_srh: unknown srh invflags 4000 [ 227.711429][ T9492] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1620: deleted inode referenced: 15 [ 227.730613][ T9507] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 227.820194][ T9507] SELinux: failed to load policy [ 228.033332][ T9507] loop4: detected capacity change from 0 to 512 [ 228.055858][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.108935][ T9507] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 228.312516][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 228.328150][ T9516] loop0: detected capacity change from 0 to 512 [ 228.374963][ T9516] EXT4-fs: dax option not supported [ 228.730214][ T9518] loop1: detected capacity change from 0 to 1024 [ 228.762732][ T9518] EXT4-fs: Ignoring removed orlov option [ 228.768575][ T9518] EXT4-fs: Ignoring removed orlov option [ 228.964760][ T9518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.997232][ T9518] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1628: deleted inode referenced: 15 [ 229.213318][ T9534] ip6t_srh: unknown srh invflags 4000 [ 229.220162][ T9534] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 229.227913][ T9534] SELinux: failed to load policy [ 229.396246][ T9536] loop4: detected capacity change from 0 to 512 [ 229.481550][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.513949][ T9536] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 229.896128][ T9538] loop0: detected capacity change from 0 to 164 [ 230.256171][ T9544] loop4: detected capacity change from 0 to 512 [ 230.262946][ T9545] loop1: detected capacity change from 0 to 1024 [ 230.325544][ T9545] EXT4-fs: Ignoring removed orlov option [ 230.370318][ T9545] EXT4-fs: Ignoring removed orlov option [ 230.459340][ T9547] loop2: detected capacity change from 0 to 1024 [ 230.500506][ T9545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.517174][ T9547] EXT4-fs: Ignoring removed orlov option [ 230.522989][ T9547] EXT4-fs: Ignoring removed orlov option [ 230.634080][ T9544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.772219][ T28] audit: type=1400 audit(1787368757.096:3674): avc: denied { write } for pid=9541 comm="syz.1.1633" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.876998][ T9553] ip6t_srh: unknown srh invflags 4000 [ 230.890332][ T9553] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 230.903078][ T28] audit: type=1400 audit(1787368757.206:3675): avc: denied { write } for pid=9541 comm="syz.1.1633" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.909449][ T9547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.960351][ T9553] SELinux: failed to load policy [ 231.153017][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.222992][ T9547] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1636: deleted inode referenced: 15 [ 231.366844][ T9544] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 231.378277][ T9558] loop0: detected capacity change from 0 to 512 [ 231.492539][ T9558] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 231.512463][ T9544] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.1635: iget: checksum invalid [ 231.831956][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'. [ 231.888697][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.091377][ T9567] FAULT_INJECTION: forcing a failure. [ 232.091377][ T9567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.175772][ T9567] CPU: 0 UID: 0 PID: 9567 Comm: syz.1.1640 Not tainted syzkaller #0 PREEMPT(lazy) [ 232.175816][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.175835][ T9567] Call Trace: [ 232.175846][ T9567] [ 232.175859][ T9567] __dump_stack+0x1d/0x30 [ 232.175920][ T9567] dump_stack_lvl+0x95/0xd0 [ 232.175952][ T9567] dump_stack+0x15/0x1b [ 232.176030][ T9567] should_fail_ex+0x262/0x280 [ 232.176095][ T9567] should_fail+0xb/0x20 [ 232.176135][ T9567] should_fail_usercopy+0x1a/0x20 [ 232.176182][ T9567] _copy_to_user+0x20/0xa0 [ 232.176286][ T9567] simple_read_from_buffer+0xb5/0x130 [ 232.176378][ T9567] proc_fail_nth_read+0x10e/0x150 [ 232.176417][ T9567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.176475][ T9567] vfs_read+0x18e/0x7c0 [ 232.176496][ T9567] ? __rcu_read_unlock+0x4e/0x70 [ 232.176600][ T9567] ? __fget_files+0x184/0x1c0 [ 232.176649][ T9567] ? mutex_lock+0x57/0x90 [ 232.176745][ T9567] ksys_read+0xdc/0x1a0 [ 232.176781][ T9567] __x64_sys_read+0x40/0x50 [ 232.176861][ T9567] x64_sys_call+0x2135/0x2550 [ 232.176921][ T9567] do_syscall_64+0x112/0x360 [ 232.176968][ T9567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.176992][ T9567] RIP: 0033:0x7f805766e90e [ 232.177011][ T9567] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.177114][ T9567] RSP: 002b:00007f8056106fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.177147][ T9567] RAX: ffffffffffffffda RBX: 00007f80561076c0 RCX: 00007f805766e90e [ 232.177170][ T9567] RDX: 000000000000000f RSI: 00007f80561070a0 RDI: 0000000000000004 [ 232.177190][ T9567] RBP: 00007f8056107090 R08: 0000000000000000 R09: 0000000000000000 [ 232.177214][ T9567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.177230][ T9567] R13: 00007f8057936038 R14: 00007f8057935fa0 R15: 00007ffe2c70b238 [ 232.177253][ T9567] [ 232.588786][ T9573] loop0: detected capacity change from 0 to 512 [ 232.628946][ T9573] EXT4-fs: dax option not supported [ 233.493165][ T9578] loop0: detected capacity change from 0 to 1024 [ 233.618316][ T9578] EXT4-fs: Ignoring removed orlov option [ 233.624506][ T9578] EXT4-fs: Ignoring removed orlov option [ 233.745105][ T9583] loop1: detected capacity change from 0 to 1024 [ 233.754933][ T9583] EXT4-fs: Ignoring removed orlov option [ 233.760676][ T9583] EXT4-fs: Ignoring removed orlov option [ 233.770839][ T9578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.896817][ T9583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.968313][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.206115][ T9583] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1645: deleted inode referenced: 15 [ 234.367322][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.434311][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.549538][ T9590] loop2: detected capacity change from 0 to 1024 [ 234.556523][ T9590] EXT4-fs: Ignoring removed orlov option [ 234.562287][ T9590] EXT4-fs: Ignoring removed orlov option [ 234.661968][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.779682][ T9590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.908997][ T28] audit: type=1400 audit(1787368761.226:3676): avc: denied { write } for pid=9589 comm="syz.2.1646" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.956476][ T28] audit: type=1400 audit(1787368761.266:3677): avc: denied { write } for pid=9589 comm="syz.2.1646" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.159849][ T9596] loop4: detected capacity change from 0 to 164 [ 235.217215][ T9596] usb usb7: usbfs: process 9596 (syz.4.1647) did not claim interface 0 before use [ 235.320246][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1650'. [ 235.460104][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.636468][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1651'. [ 235.688625][ T9609] loop4: detected capacity change from 0 to 512 [ 235.702817][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1651'. [ 235.719112][ T9609] EXT4-fs: dax option not supported [ 236.248489][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'. [ 236.758508][ T9629] loop4: detected capacity change from 0 to 1024 [ 236.765936][ T9633] loop1: detected capacity change from 0 to 512 [ 236.814445][ T9629] EXT4-fs: Ignoring removed orlov option [ 236.842560][ T9629] EXT4-fs: Ignoring removed orlov option [ 237.201112][ T9629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.261772][ T9633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.559807][ T9629] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1659: deleted inode referenced: 15 [ 237.821899][ T9642] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.1657: iget: checksum invalid [ 239.522014][ T9633] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 239.739095][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.767488][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.320715][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1662'. [ 240.333614][ T9648] netlink: 'syz.0.1664': attribute type 3 has an invalid length. [ 240.372518][ T28] audit: type=1400 audit(1787368766.696:3678): avc: denied { ioctl } for pid=9647 comm="syz.0.1664" path="socket:[23967]" dev="sockfs" ino=23967 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 240.397969][ T9648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1664'. [ 240.455545][ T9652] netlink: 'syz.0.1664': attribute type 39 has an invalid length. [ 240.580016][ T28] audit: type=1400 audit(1787368766.906:3679): avc: denied { mount } for pid=9647 comm="syz.0.1664" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 240.623521][ T9648] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 240.633842][ T9654] loop1: detected capacity change from 0 to 1024 [ 240.648847][ T28] audit: type=1400 audit(1787368766.926:3680): avc: denied { read write } for pid=9647 comm="syz.0.1664" name="control" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 240.702266][ T9651] loop4: detected capacity change from 0 to 512 [ 240.733479][ T9654] EXT4-fs: Ignoring removed orlov option [ 240.739349][ T9654] EXT4-fs: Ignoring removed orlov option [ 240.819180][ T9651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.968809][ T28] audit: type=1400 audit(1787368766.926:3681): avc: denied { open } for pid=9647 comm="syz.0.1664" path="/339/dev/mapper/control" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 240.968886][ T28] audit: type=1400 audit(1787368766.926:3682): avc: denied { ioctl } for pid=9647 comm="syz.0.1664" path="/339/dev/mapper/control" dev="devtmpfs" ino=249 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 240.968939][ T28] audit: type=1400 audit(1787368767.176:3683): avc: denied { write } for pid=9647 comm="syz.0.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.020558][ T9654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.020790][ T9655] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 241.032868][ T9655] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.1661: iget: checksum invalid [ 241.039371][ T28] audit: type=1400 audit(1787368767.356:3684): avc: denied { write } for pid=9653 comm="syz.1.1665" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.042712][ T28] audit: type=1400 audit(1787368767.366:3685): avc: denied { write } for pid=9653 comm="syz.1.1665" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.076819][ T28] audit: type=1400 audit(1787368767.376:3686): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 241.415259][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.701181][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'. [ 242.040142][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.307843][ T9678] loop1: detected capacity change from 0 to 1024 [ 242.314800][ T9678] EXT4-fs: Ignoring removed orlov option [ 242.320699][ T9678] EXT4-fs: Ignoring removed orlov option [ 242.395964][ T28] audit: type=1400 audit(1787368768.686:3687): avc: denied { mounton } for pid=9682 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 242.425746][ T9681] loop4: detected capacity change from 0 to 512 [ 242.439582][ T9681] EXT4-fs: dax option not supported [ 242.502332][ T9678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.759720][ T9691] loop0: detected capacity change from 0 to 1024 [ 242.766804][ T9691] EXT4-fs: Ignoring removed orlov option [ 242.772582][ T9691] EXT4-fs: Ignoring removed orlov option [ 242.867842][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.925316][ T9691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.297607][ T9703] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 243.643932][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.239878][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'. [ 244.579341][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 244.845256][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1681'. [ 245.129943][ T9682] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.169067][ T9682] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.216113][ T9682] bridge_slave_0: entered allmulticast mode [ 245.328022][ T9682] bridge_slave_0: entered promiscuous mode [ 245.481815][ T9682] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.510886][ T9682] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.532842][ T9731] loop0: detected capacity change from 0 to 1024 [ 245.547036][ T9682] bridge_slave_1: entered allmulticast mode [ 245.581385][ T9682] bridge_slave_1: entered promiscuous mode [ 245.796276][ T9731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.893110][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 245.893132][ T28] audit: type=1400 audit(1787368772.216:3692): avc: denied { write } for pid=9729 comm="syz.0.1683" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.056738][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 246.173247][ T9682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.185774][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1687'. [ 246.203225][ T9682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.234785][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.344776][ T9682] team0: Port device team_slave_0 added [ 246.452048][ T9682] team0: Port device team_slave_1 added [ 246.577973][ T9755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1689'. [ 246.601754][ T9682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.608791][ T9682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.634893][ T9682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.656188][ T9682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.663199][ T9682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.702783][ T9757] loop1: detected capacity change from 0 to 1024 [ 246.743225][ T9757] EXT4-fs: Ignoring removed orlov option [ 246.786833][ T9757] EXT4-fs: Ignoring removed orlov option [ 246.800718][ T9682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.893779][ T9682] hsr_slave_0: entered promiscuous mode [ 246.901856][ T9682] hsr_slave_1: entered promiscuous mode [ 246.908845][ T9682] debugfs: 'hsr0' already exists in 'hsr' [ 246.914671][ T9682] Cannot create hsr debugfs directory [ 247.032395][ T9757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.120215][ T9763] loop0: detected capacity change from 0 to 164 [ 247.185975][ T9763] usb usb7: usbfs: process 9763 (syz.0.1692) did not claim interface 0 before use [ 247.219533][ T9768] loop2: detected capacity change from 0 to 512 [ 247.274118][ T9768] EXT4-fs: dax option not supported [ 247.473973][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1694'. [ 247.513957][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.533253][ T9776] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1695'. [ 248.125906][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'. [ 248.234284][ T9682] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.417902][ T9682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.441127][ T28] audit: type=1400 audit(1787368774.766:3693): avc: denied { connect } for pid=9779 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 248.505425][ T9682] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.828728][ T9682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.908271][ T9682] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 249.068206][ T9682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 249.208439][ T9682] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 249.471141][ T9805] loop0: detected capacity change from 0 to 1024 [ 249.483835][ T9808] loop1: detected capacity change from 0 to 164 [ 249.559804][ T9805] EXT4-fs: Ignoring removed orlov option [ 249.638180][ T9811] loop4: detected capacity change from 0 to 1024 [ 249.642687][ T9805] EXT4-fs: Ignoring removed orlov option [ 249.686698][ T9808] usb usb7: usbfs: process 9808 (syz.1.1704) did not claim interface 0 before use [ 249.702921][ T9811] EXT4-fs: Ignoring removed orlov option [ 249.743617][ T9682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 249.827954][ T9811] EXT4-fs: Ignoring removed orlov option [ 250.453691][ T9805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.558062][ T9811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.720732][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.777950][ T9811] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1703: deleted inode referenced: 15 [ 251.270464][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1707'. [ 252.175495][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.411564][ T9837] loop0: detected capacity change from 0 to 1024 [ 252.445417][ T9837] EXT4-fs: Ignoring removed orlov option [ 252.586132][ T28] audit: type=1326 audit(1787368778.896:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.4.1712" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8fc6e0d9 code=0x7ffc0000 [ 252.626423][ T9841] loop4: detected capacity change from 0 to 256 [ 252.665026][ T9837] EXT4-fs: Ignoring removed orlov option [ 252.672127][ T28] audit: type=1326 audit(1787368778.896:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.4.1712" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8fc6e0d9 code=0x7ffc0000 [ 252.723893][ T9841] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.735804][ T9682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.759200][ T28] audit: type=1326 audit(1787368778.896:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.4.1712" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8fc6e0d9 code=0x7ffc0000 [ 252.782782][ T9837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.787088][ T28] audit: type=1326 audit(1787368778.896:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.4.1712" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8fc6e0d9 code=0x7ffc0000 [ 252.828075][ T28] audit: type=1326 audit(1787368778.896:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.4.1712" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faf8fc6e0d9 code=0x7ffc0000 [ 252.854451][ T28] audit: type=1326 audit(1787368778.896:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.4.1712" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faf8fc6de42 code=0x7ffc0000 [ 252.940330][ T28] audit: type=1326 audit(1787368778.896:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.4.1712" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faf8fc2e90e code=0x7ffc0000 [ 253.003338][ T28] audit: type=1326 audit(1787368778.946:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.4.1712" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7faf8fc6df07 code=0x7ffc0000 [ 253.036799][ T9682] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.085297][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.092418][ T9692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.169252][ T9837] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1710: deleted inode referenced: 15 [ 253.199476][ T28] audit: type=1326 audit(1787368778.946:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.4.1712" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf8fc2e90e code=0x7ffc0000 [ 253.239465][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.246727][ T9692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.311571][ T28] audit: type=1326 audit(1787368778.946:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.4.1712" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf8fc6dd6b code=0x7ffc0000 [ 253.438591][ T9841] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 253.448634][ T9841] FAT-fs (loop4): Filesystem has been set read-only [ 253.467202][ T9852] loop1: detected capacity change from 0 to 1024 [ 253.581455][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.697717][ T9852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.141412][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.638407][ T9874] loop1: detected capacity change from 0 to 1024 [ 254.712075][ T9874] EXT4-fs: Ignoring removed orlov option [ 254.717985][ T9874] EXT4-fs: Ignoring removed orlov option [ 254.953431][ T9874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.985378][ T9878] loop2: detected capacity change from 0 to 1024 [ 255.039614][ T9878] EXT4-fs: Ignoring removed orlov option [ 255.189212][ T9878] EXT4-fs: Ignoring removed orlov option [ 255.284718][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.295433][ T9682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.517741][ T9878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.794674][ T9892] loop1: detected capacity change from 0 to 1024 [ 255.841623][ T9892] EXT4-fs: Ignoring removed orlov option [ 255.903261][ T9892] EXT4-fs: Ignoring removed orlov option [ 255.994244][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.034331][ T9892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.127318][ T9892] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1721: deleted inode referenced: 15 [ 256.517740][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.061515][ T9918] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1726'. [ 257.151651][ T9897] loop0: detected capacity change from 0 to 8192 [ 257.233866][ T9897] vfat: Unknown parameter '·' [ 257.251072][ T9920] loop1: detected capacity change from 0 to 512 [ 257.282238][ T9920] EXT4-fs: dax option not supported [ 257.295834][ T9682] veth0_vlan: entered promiscuous mode [ 257.320776][ T9682] veth1_vlan: entered promiscuous mode [ 257.698448][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 257.698470][ T28] audit: type=1400 audit(1787368783.946:3848): avc: denied { setopt } for pid=9896 comm="syz.0.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.796849][ T9929] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1728'. [ 257.876139][ T9929] FAULT_INJECTION: forcing a failure. [ 257.876139][ T9929] name failslab, interval 1, probability 0, space 0, times 0 [ 257.897848][ T9682] veth0_macvtap: entered promiscuous mode [ 257.979628][ T9929] CPU: 0 UID: 0 PID: 9929 Comm: syz.2.1728 Not tainted syzkaller #0 PREEMPT(lazy) [ 257.979688][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.979717][ T9929] Call Trace: [ 257.979730][ T9929] [ 257.979744][ T9929] __dump_stack+0x1d/0x30 [ 257.979778][ T9929] dump_stack_lvl+0x95/0xd0 [ 257.979811][ T9929] dump_stack+0x15/0x1b [ 257.979897][ T9929] should_fail_ex+0x262/0x280 [ 257.980002][ T9929] ? sctp_add_bind_addr+0x71/0x1e0 [ 257.980041][ T9929] should_failslab+0x8c/0xb0 [ 257.980143][ T9929] __kmalloc_cache_noprof+0x7b/0x3f0 [ 257.980253][ T9929] ? sctp_add_bind_addr+0x71/0x1e0 [ 257.980292][ T9929] sctp_add_bind_addr+0x71/0x1e0 [ 257.980369][ T9929] sctp_copy_local_addr_list+0x1b4/0x250 [ 257.980413][ T9929] sctp_copy_one_addr+0x7f/0x280 [ 257.980471][ T9929] sctp_bind_addr_copy+0x79/0x290 [ 257.980541][ T9929] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 257.980579][ T9929] sctp_connect_new_asoc+0x1c3/0x3a0 [ 257.980624][ T9929] sctp_sendmsg+0x105f/0x1d00 [ 257.980796][ T9929] ? __pfx_sctp_sendmsg+0x10/0x10 [ 257.980904][ T9929] inet_sendmsg+0xc5/0xd0 [ 257.980933][ T9929] ? __pfx_inet_sendmsg+0x10/0x10 [ 257.980969][ T9929] ____sys_sendmsg+0x4e8/0x580 [ 257.981008][ T9929] ___sys_sendmsg+0x195/0x1e0 [ 257.981058][ T9929] __x64_sys_sendmsg+0xd4/0x160 [ 257.981093][ T9929] x64_sys_call+0x22ab/0x2550 [ 257.981130][ T9929] do_syscall_64+0x112/0x360 [ 257.981194][ T9929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.981231][ T9929] RIP: 0033:0x7f36fefee0d9 [ 257.981303][ T9929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.981331][ T9929] RSP: 002b:00007f36fda47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.981438][ T9929] RAX: ffffffffffffffda RBX: 00007f36ff275fa0 RCX: 00007f36fefee0d9 [ 257.981459][ T9929] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 257.981490][ T9929] RBP: 00007f36fda47090 R08: 0000000000000000 R09: 0000000000000000 [ 257.981511][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.981531][ T9929] R13: 00007f36ff276038 R14: 00007f36ff275fa0 R15: 00007ffe18f83d78 [ 257.981560][ T9929] [ 258.300744][ T9682] veth1_macvtap: entered promiscuous mode [ 258.420826][ T9932] loop1: detected capacity change from 0 to 164 [ 258.467665][ T9932] usb usb7: usbfs: process 9932 (syz.1.1729) did not claim interface 0 before use [ 258.505194][ T9935] loop2: detected capacity change from 0 to 1024 [ 258.592945][ T9935] EXT4-fs: Ignoring removed orlov option [ 258.598838][ T9935] EXT4-fs: Ignoring removed orlov option [ 258.639186][ T9939] loop4: detected capacity change from 0 to 1024 [ 258.721038][ T9939] EXT4-fs: Ignoring removed orlov option [ 258.726956][ T9939] EXT4-fs: Ignoring removed orlov option [ 258.749544][ T9935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.813572][ T9682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.833502][ T9682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.848380][ T9939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.024435][ T9935] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1730: deleted inode referenced: 15 [ 259.047155][ T9939] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1732: deleted inode referenced: 15 [ 259.091060][ T28] audit: type=1400 audit(1787368785.406:3849): avc: denied { mounton } for pid=9682 comm="syz-executor" path="/root/syzkaller.BDbhIi/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 259.157286][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.248897][ T55] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.258653][ T55] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.267395][ T55] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.277939][ T28] audit: type=1400 audit(1787368785.406:3850): avc: denied { mount } for pid=9682 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 259.304994][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.494421][ T28] audit: type=1400 audit(1787368785.416:3851): avc: denied { mounton } for pid=9682 comm="syz-executor" path="/root/syzkaller.BDbhIi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 259.513247][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.706586][ T28] audit: type=1400 audit(1787368785.416:3852): avc: denied { mounton } for pid=9682 comm="syz-executor" path="/root/syzkaller.BDbhIi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 259.907091][ T9956] loop2: detected capacity change from 0 to 1024 [ 259.916849][ T9956] EXT4-fs: Ignoring removed orlov option [ 259.922653][ T9956] EXT4-fs: Ignoring removed orlov option [ 259.933318][ T9953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1735'. [ 259.969495][ T28] audit: type=1400 audit(1787368785.416:3853): avc: denied { create } for pid=9948 comm="syz.1.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 260.080853][ T28] audit: type=1400 audit(1787368785.496:3854): avc: denied { mounton } for pid=9682 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 260.133437][ T9956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.197580][ T9956] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1734: deleted inode referenced: 15 [ 260.230108][ T9961] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1736'. [ 260.319382][ T28] audit: type=1400 audit(1787368785.496:3855): avc: denied { mount } for pid=9682 comm="syz-executor" name="/" dev="gadgetfs" ino=4473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 260.330073][ T9965] loop1: detected capacity change from 0 to 1024 [ 260.424964][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.439654][ T28] audit: type=1400 audit(1787368785.596:3856): avc: denied { create } for pid=9948 comm="syz.1.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 260.526738][ T9965] EXT4-fs: Ignoring removed orlov option [ 260.557131][ T9972] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1740'. [ 260.565374][ T28] audit: type=1400 audit(1787368785.596:3857): avc: denied { ioctl } for pid=9948 comm="syz.1.1733" path="socket:[24679]" dev="sockfs" ino=24679 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 260.601917][ T9965] EXT4-fs: Ignoring removed orlov option [ 260.977769][ T9965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.324996][ T9965] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1738: deleted inode referenced: 15 [ 261.372376][ T9983] loop2: detected capacity change from 0 to 1024 [ 261.465234][ T9983] EXT4-fs: Ignoring removed orlov option [ 261.471090][ T9983] EXT4-fs: Ignoring removed orlov option [ 261.664481][ T9988] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1741'. [ 261.681065][ T9983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.804432][ T9983] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1739: deleted inode referenced: 15 [ 261.920527][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.008622][ T9996] loop4: detected capacity change from 0 to 256 [ 262.031335][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.432443][T10005] loop0: detected capacity change from 0 to 1024 [ 262.496043][T10005] EXT4-fs: Ignoring removed orlov option [ 262.501895][T10005] EXT4-fs: Ignoring removed orlov option [ 262.623743][T10005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.672354][T10005] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1746: deleted inode referenced: 15 [ 262.837173][T10011] loop1: detected capacity change from 0 to 1024 [ 262.907547][T10015] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1748'. [ 263.039057][T10011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.112740][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.147572][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 263.147588][ T28] audit: type=1326 audit(1787368789.466:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.5.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abe75e0d9 code=0x7ffc0000 [ 263.200054][ T28] audit: type=1326 audit(1787368789.466:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.5.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abe75e0d9 code=0x7ffc0000 [ 263.325125][ T28] audit: type=1326 audit(1787368789.496:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.5.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abe75e0d9 code=0x7ffc0000 [ 263.373690][T10022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.455470][ T28] audit: type=1326 audit(1787368789.506:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.5.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abe75e0d9 code=0x7ffc0000 [ 263.506834][T10022] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 263.547785][T10022] audit: backlog limit exceeded [ 263.601784][ T28] audit: type=1326 audit(1787368789.506:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.5.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abe75e0d9 code=0x7ffc0000 [ 263.648458][T10028] loop0: detected capacity change from 0 to 1024 [ 263.709655][ T28] audit: type=1326 audit(1787368789.506:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.5.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5abe71e90e code=0x7ffc0000 [ 263.745160][T10028] EXT4-fs: Ignoring removed orlov option [ 263.751011][T10028] EXT4-fs: Ignoring removed orlov option [ 263.895234][ T28] audit: type=1326 audit(1787368789.506:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.5.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abe75e0d9 code=0x7ffc0000 [ 263.963389][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.972795][T10032] loop4: detected capacity change from 0 to 1024 [ 264.100700][T10028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.500648][T10032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.594652][T10028] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1750: deleted inode referenced: 15 [ 264.861798][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.911033][T10045] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1764'. [ 264.928680][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.373824][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 265.413850][T10059] loop0: detected capacity change from 0 to 512 [ 265.420879][T10053] loop4: detected capacity change from 0 to 1024 [ 265.428876][T10059] EXT4-fs: dax option not supported [ 265.446667][T10058] loop2: detected capacity change from 0 to 164 [ 265.468670][T10053] EXT4-fs: Ignoring removed orlov option [ 265.538477][T10053] EXT4-fs: Ignoring removed orlov option [ 265.845558][T10053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.950854][T10056] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1754: deleted inode referenced: 15 [ 266.216198][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.256051][T10068] loop2: detected capacity change from 0 to 1024 [ 266.262957][T10068] EXT4-fs: Ignoring removed orlov option [ 266.268734][T10068] EXT4-fs: Ignoring removed orlov option [ 266.363905][T10072] loop0: detected capacity change from 0 to 1024 [ 266.370910][T10072] EXT4-fs: Ignoring removed orlov option [ 266.376761][T10072] EXT4-fs: Ignoring removed orlov option [ 266.386685][T10075] loop5: detected capacity change from 0 to 512 [ 266.415304][T10075] EXT4-fs: dax option not supported [ 266.659483][T10068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.682207][T10072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.878688][T10072] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1760: deleted inode referenced: 15 [ 266.882370][T10081] loop1: detected capacity change from 0 to 1024 [ 266.946676][T10068] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1761: deleted inode referenced: 15 [ 267.101568][T10081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.462037][T10095] loop4: detected capacity change from 0 to 1764 [ 267.489668][T10095] ISOFS: Bad logical zone size 1280 [ 267.616503][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.626737][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.775242][T10068] syz.2.1761 (10068) used greatest stack depth: 9592 bytes left [ 267.798699][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.904465][T10099] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1770'. [ 268.192722][T10101] usb usb7: usbfs: process 10101 (syz.5.1772) did not claim interface 0 before use [ 268.314938][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 268.496416][T10114] EXT4-fs: dax option not supported [ 268.918176][T10124] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1777'. [ 269.072522][T10125] set_capacity_and_notify: 2 callbacks suppressed [ 269.072616][T10125] loop5: detected capacity change from 0 to 1024 [ 269.086122][T10125] EXT4-fs: Ignoring removed orlov option [ 269.091993][T10125] EXT4-fs: Ignoring removed orlov option [ 269.249837][T10128] loop4: detected capacity change from 0 to 512 [ 269.444693][T10125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.713704][T10128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.723077][T10125] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.1778: deleted inode referenced: 15 [ 270.156278][T10127] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.1776: iget: checksum invalid [ 271.848473][T10128] EXT4-fs: error -4 creating inode table initialization thread [ 271.931967][T10128] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 272.000239][ T9682] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.271384][T10142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1781'. [ 272.298975][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'. [ 272.353581][T10142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1781'. [ 272.789781][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.009031][T10154] loop0: detected capacity change from 0 to 1024 [ 273.016210][T10154] EXT4-fs: Ignoring removed orlov option [ 273.021945][T10154] EXT4-fs: Ignoring removed orlov option [ 273.040887][T10153] loop4: detected capacity change from 0 to 164 [ 273.131539][T10157] loop5: detected capacity change from 0 to 512 [ 273.138669][T10153] usb usb7: usbfs: process 10153 (syz.4.1785) did not claim interface 0 before use [ 273.153797][T10154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.168058][T10157] EXT4-fs: dax option not supported [ 273.381509][T10159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1786'. [ 273.516299][T10154] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1787: deleted inode referenced: 15 [ 274.115780][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.223988][T10175] loop5: detected capacity change from 0 to 1024 [ 274.255250][T10175] EXT4-fs: Ignoring removed orlov option [ 274.306239][T10175] EXT4-fs: Ignoring removed orlov option [ 274.514204][T10180] loop1: detected capacity change from 0 to 512 [ 274.570102][T10175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.699873][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 274.699889][ T28] audit: type=1400 audit(1787368801.016:3960): avc: denied { write } for pid=10173 comm="syz.5.1792" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.763048][T10180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.770051][ T28] audit: type=1400 audit(1787368801.036:3961): avc: denied { write } for pid=10173 comm="syz.5.1792" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.932113][T10187] syzkaller0: entered promiscuous mode [ 274.938125][T10187] syzkaller0: entered allmulticast mode [ 275.202313][T10180] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 275.252360][T10190] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.1795: iget: checksum invalid [ 275.331977][ T9682] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.600928][T10197] loop4: detected capacity change from 0 to 164 [ 275.664982][T10197] usb usb7: usbfs: process 10197 (syz.4.1799) did not claim interface 0 before use [ 276.059468][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.127770][T10206] loop4: detected capacity change from 0 to 1024 [ 276.139893][T10206] EXT4-fs: Ignoring removed orlov option [ 276.145798][T10206] EXT4-fs: Ignoring removed orlov option [ 276.161210][T10208] ip6t_srh: unknown srh invflags 4000 [ 276.263613][T10208] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 276.271504][T10208] SELinux: failed to load policy [ 276.307951][T10211] loop5: detected capacity change from 0 to 512 [ 276.335727][T10211] EXT4-fs: dax option not supported [ 276.377498][T10208] loop0: detected capacity change from 0 to 512 [ 276.400748][T10206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.420458][T10208] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 276.452893][T10206] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1801: deleted inode referenced: 15 [ 276.731560][T10219] loop5: detected capacity change from 0 to 1024 [ 276.738509][T10219] EXT4-fs: Ignoring removed orlov option [ 276.744341][T10219] EXT4-fs: Ignoring removed orlov option [ 276.828339][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.079699][T10219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.216975][T10219] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.1806: deleted inode referenced: 15 [ 277.358905][T10228] loop1: detected capacity change from 0 to 164 [ 277.477682][T10228] usb usb7: usbfs: process 10228 (syz.1.1807) did not claim interface 0 before use [ 277.527410][ T9682] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.705481][T10238] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1810'. [ 277.937403][T10237] loop4: detected capacity change from 0 to 164 [ 278.054225][T10237] usb usb7: usbfs: process 10237 (syz.4.1811) did not claim interface 0 before use [ 278.064657][T10245] loop1: detected capacity change from 0 to 512 [ 278.191192][T10245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.446259][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1810'. [ 278.586420][T10245] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.1813: iget: checksum invalid [ 280.839871][T10243] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 281.151573][T10253] loop0: detected capacity change from 0 to 512 [ 281.158685][T10253] EXT4-fs: dax option not supported [ 281.605313][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.811543][T10268] loop0: detected capacity change from 0 to 512 [ 281.825265][T10267] syzkaller0: entered promiscuous mode [ 281.852172][T10267] syzkaller0: entered allmulticast mode [ 281.892333][T10268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.146758][T10268] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 282.157842][T10268] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.1831: iget: checksum invalid [ 282.413651][T10275] loop4: detected capacity change from 0 to 164 [ 282.439540][T10275] usb usb7: usbfs: process 10275 (syz.4.1824) did not claim interface 0 before use [ 282.454074][T10278] loop5: detected capacity change from 0 to 164 [ 282.600666][T10278] usb usb7: usbfs: process 10278 (syz.5.1823) did not claim interface 0 before use [ 282.639468][T10283] x_tables: duplicate underflow at hook 1 [ 282.747817][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.919446][ T28] audit: type=1400 audit(1787368809.246:3962): avc: denied { mount } for pid=10282 comm="syz.4.1827" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 283.012214][T10283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1827'. [ 283.177367][T10293] loop5: detected capacity change from 0 to 164 [ 283.261275][T10293] usb usb7: usbfs: process 10293 (syz.5.1829) did not claim interface 0 before use [ 283.519971][T10303] loop1: detected capacity change from 0 to 1024 [ 283.550680][T10303] EXT4-fs: Ignoring removed orlov option [ 283.556706][T10303] EXT4-fs: Ignoring removed orlov option [ 283.656008][T10303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.976082][T10303] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1835: deleted inode referenced: 15 [ 284.233074][ T9488] ================================================================== [ 284.241227][ T9488] BUG: KCSAN: data-race in __rb_reserve_next / ring_buffer_iter_peek [ 284.249356][ T9488] [ 284.251703][ T9488] write to 0xffff88811dd0a000 of 8 bytes by task 9682 on cpu 1: [ 284.259360][ T9488] __rb_reserve_next+0x5e9/0x6c0 [ 284.264343][ T9488] ring_buffer_lock_reserve+0x6b3/0x860 [ 284.269941][ T9488] trace_event_buffer_lock_reserve+0x14a/0x300 [ 284.276137][ T9488] trace_event_buffer_reserve+0x120/0x180 [ 284.281893][ T9488] trace_event_raw_event_sys_enter+0x6b/0x1f0 [ 284.288018][ T9488] trace_syscall_enter+0xc4/0x110 [ 284.293080][ T9488] do_syscall_64+0x295/0x360 [ 284.297710][ T9488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.303661][ T9488] [ 284.306038][ T9488] read to 0xffff88811dd0a000 of 8 bytes by task 9488 on cpu 0: [ 284.313609][ T9488] ring_buffer_iter_peek+0x265/0xb10 [ 284.318949][ T9488] __find_next_entry+0x1a9/0x420 [ 284.323931][ T9488] s_next+0x10e/0x370 [ 284.327941][ T9488] traverse+0x1c1/0x3b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 284.332128][ T9488] seq_read_iter+0x7dc/0x8f0 [ 284.336754][ T9488] do_iter_readv_writev+0x4f6/0x5a0 [ 284.341989][ T9488] vfs_readv+0x1e8/0x6d0 [ 284.346283][ T9488] __se_sys_preadv2+0xfc/0x1c0 [ 284.351084][ T9488] __x64_sys_preadv2+0x67/0x80 [ 284.355895][ T9488] x64_sys_call+0x1dc5/0x2550 [ 284.360617][ T9488] do_syscall_64+0x112/0x360 [ 284.365289][ T9488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.371217][ T9488] [ 284.373568][ T9488] value changed: 0x000000422156409a -> 0x000000422e30973d [ 284.380708][ T9488] [ 284.383056][ T9488] Reported by Kernel Concurrency Sanitizer on: [ 284.389236][ T9488] CPU: 0 UID: 0 PID: 9488 Comm: syz.3.1619 Not tainted syzkaller #0 PREEMPT(lazy) [ 284.398572][ T9488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.408657][ T9488] ================================================================== [ 284.410077][ T28] audit: type=1400 audit(1787368810.616:3963): avc: denied { write } for pid=3285 comm="syz-executor" path="pipe:[2567]" dev="pipefs" ino=2567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 285.739271][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.269052][ T4580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.674050][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.863637][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.936110][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.181397][ T30] bridge_slave_1: left allmulticast mode [ 287.187161][ T30] bridge_slave_1: left promiscuous mode [ 287.193637][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.226861][ T30] bridge_slave_0: left allmulticast mode [ 287.234466][ T30] bridge_slave_0: left promiscuous mode [ 287.251195][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.275333][ T30] pimreg: left allmulticast mode [ 287.595319][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.643415][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.677024][ T30] bond0 (unregistering): Released all slaves [ 287.691105][ T30] bond1 (unregistering): Released all slaves [ 287.802281][ T30] hsr_slave_0: left promiscuous mode [ 287.818448][ T28] audit: type=1400 audit(1787368814.136:3964): avc: denied { write } for pid=10323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.841947][ T30] hsr_slave_1: left promiscuous mode [ 287.858132][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.880975][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.913149][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.932568][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.978609][ T28] audit: type=1400 audit(1787368814.296:3965): avc: denied { write } for pid=10334 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.013134][ T30] veth1_macvtap: left promiscuous mode [ 288.025075][ T30] veth0_macvtap: left promiscuous mode [ 288.040157][ T30] veth1_vlan: left promiscuous mode [ 288.048968][ T30] veth0_vlan: left promiscuous mode [ 288.473174][ T30] team0 (unregistering): Port device team_slave_1 removed [ 288.509267][ T30] team0 (unregistering): Port device team_slave_0 removed [ 288.661369][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 289.004281][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.086440][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.165732][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.205307][ T28] audit: type=1400 audit(1787368815.526:3966): avc: denied { write } for pid=10337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.256212][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.394482][ T28] audit: type=1400 audit(1787368815.716:3967): avc: denied { write } for pid=10348 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.424600][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.501996][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.531487][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 289.575772][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.641779][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.812665][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.911870][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.040323][ T28] audit: type=1400 audit(1787368816.366:3968): avc: denied { write } for pid=10351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.147781][ T28] audit: type=1400 audit(1787368816.466:3969): avc: denied { write } for pid=10362 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.340457][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.360550][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 290.414699][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.576409][ T30] bridge_slave_1: left allmulticast mode [ 290.590088][ T30] bridge_slave_1: left promiscuous mode [ 290.610185][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.624959][ T30] bridge_slave_0: left allmulticast mode [ 290.631645][ T30] bridge_slave_0: left promiscuous mode [ 290.641051][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.667136][ T30] bridge_slave_1: left allmulticast mode [ 290.673059][ T30] bridge_slave_1: left promiscuous mode [ 290.690262][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.713182][ T30] bridge_slave_0: left allmulticast mode [ 290.730091][ T30] bridge_slave_0: left promiscuous mode [ 290.735853][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.757244][ T30] pimreg: left allmulticast mode [ 290.772645][ T30] bridge_slave_1: left allmulticast mode [ 290.779143][ T30] bridge_slave_1: left promiscuous mode [ 290.785012][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.817969][ T30] bridge_slave_0: left allmulticast mode [ 290.829903][ T30] bridge_slave_0: left promiscuous mode [ 290.850162][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.862820][ T30] pimreg: left allmulticast mode [ 290.922459][ T30] bond_slave_0: left promiscuous mode [ 290.927959][ T30] bond_slave_1: left promiscuous mode [ 291.346763][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.381350][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.410412][ T30] bond0 (unregistering): Released all slaves [ 291.533183][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.572583][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.601562][ T30] bond0 (unregistering): Released all slaves [ 291.739904][ T30] bond1 (unregistering): (slave vlan2): Releasing active interface [ 291.765041][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.784513][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.798247][ T30] bond0 (unregistering): Released all slaves [ 291.822932][ T30] bond1 (unregistering): Released all slaves [ 292.214862][ T30] hsr_slave_0: left promiscuous mode [ 292.246441][ T30] hsr_slave_1: left promiscuous mode [ 292.279710][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.305124][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.326029][ T28] audit: type=1400 audit(1787368818.646:3970): avc: denied { write } for pid=10366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.354140][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.395245][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.456961][ T28] audit: type=1400 audit(1787368818.776:3971): avc: denied { write } for pid=10377 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.534973][ T30] hsr_slave_0: left promiscuous mode [ 292.565266][ T30] hsr_slave_1: left promiscuous mode [ 292.595587][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.621011][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.659058][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.691838][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.758434][ T30] hsr_slave_0: left promiscuous mode [ 292.768149][ T30] hsr_slave_1: left promiscuous mode [ 292.795239][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.803806][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.833354][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.858992][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.200457][ T30] veth1_macvtap: left promiscuous mode [ 293.206093][ T30] veth0_macvtap: left promiscuous mode [ 293.230184][ T30] veth1_vlan: left promiscuous mode [ 293.235574][ T30] veth0_vlan: left promiscuous mode [ 293.247450][ T30] veth1_macvtap: left promiscuous mode [ 293.260152][ T30] veth0_macvtap: left promiscuous mode [ 293.270219][ T30] veth1_vlan: left promiscuous mode [ 293.288544][ T30] veth0_vlan: left promiscuous mode [ 293.304598][ T30] veth1_macvtap: left promiscuous mode [ 293.311544][ T30] veth0_macvtap: left promiscuous mode [ 293.338894][ T30] veth1_vlan: left promiscuous mode [ 293.344423][ T30] veth0_vlan: left promiscuous mode [ 294.131851][ T30] team0 (unregistering): Port device team_slave_1 removed [ 294.150722][ T30] team0 (unregistering): Port device team_slave_0 removed