last executing test programs: 1m10.771228723s ago: executing program 0 (id=70): unshare(0x24020400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x63}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2b1) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00'], 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x10, 0x0, &(0x7f00000001c0)="630b008646dc3f0adf33c9f7b986f6ec", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1m8.003603282s ago: executing program 0 (id=83): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000ffff26bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500140012800b00010065727370616e00000400028009000100000000000000000096214a01ce7f1daaa0e25ac655f34dac41c8cd6b556307c28f04ef0b6abe6d074b3cec7316b212974ae51bc56ed504cb0e6c71e895fcfe1d1d2b5d968643803f4b32904bc55734d101e14f854ec3d7c6dbdafbf32e750f16db9cb178db25ac6966589e2b06d5a45a21bc5e073928dd1feca03aef690f5ecf12732e873070652733ff2b7fa8582a58435e48a528a5db04ec3115eca840e1f0eeab46d1cc380cc067b738764f81f9a2b70f27294b6800a5b664fd74e00c2b0b3d6e37b920d4"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/40, 0x28) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000001c0)={[{@nodiscard}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@nojournal_checksum}, {@acl}, {@nobarrier}]}, 0x43, 0x4fe, &(0x7f0000002400)="$eJzs3E9oHNUfAPDvbJIm6Z9f8+uvv2pr1dQqBotJm1bbgyAVBQ8KYgX1GJK01KaNJCnYUnULUo9S8C4evXrwql6KeBK81qMghSK9tAriyOzOJJvNbv5usq35fGCzb978ee/tmzf75r3sBLBp9Wd/kmr4ZkTsjIhS/Qb91bd7d64kEeXRKKfpqd+Tym5371wZLTbNDxPb8oWBUkTpk2RuRY3pS5fPjUxMjE/ly0Mz598fmr50+dmzPXnMiRPHjh45/vzwcysvVIP0snLd3ffR5P69r757/fXRziK+SK22HK3SH/2NslLxVKsTa7MdNeGks40ZYUWy8z+rrq5K+98ZHbFY5ZU3MGfAekvTNO1uvrqc1ru6IAZ4YCXR7hwA7VF80Wf3v8WrUUdgy/p0P9ru9snqDVBW7nv5K+LxSmQxDtJVd3/bSv0R8U75zy+yV6zTOAQAQK3vThY9wbr+X191ZuSvizdezN7/k8+h9EXEfyNiV0T8LyJ2R8T/I2JPRDwUEQ/XHb8jItJF0q8fbZ5Nf3YSqnSrRUVtKOv/vVCd26rp/83LQF9HvrQjougwjx/OP5OB6Oo+fXZi/MgiaXz/8s+fNVtX2//LXln6RV8wz8etzroBurGRmZFVF7jO7asR+zrry590RiSzdZNExN6I2NfkGI3uDfpqwmef+Wr/7ELX/O2WLn9F2nAerQXzTOmXEU9X678c8+p/LsVk3vzk+ZEz42fGLwzPzk8O9cTE+OGh7Cw43DCNH3+69kaz9Jcs/ze/1u/yyvFvT+Uta+2y+t9ac/5HMX87V/6+JCKZna+dXnka1375tOk9zWrP/y3JW5Vwce59MDIzM3UkYkvy2sL44bl9i+XsPcrV8g8cbNz+d+X7ZJ/EIxGRncSPRsRjUb1DzPJ+ICKeiIiDi5T/h5eefG/15V9fWfnH6q5/1ZqfV/9z8/XNAkk+N1iN6a1d1XHuwM0/mlw8llf/xyqhgTxm4fUvy2Ey7xLRLKfFt10W83dLPkEAAAC4/5UiYnvNWNL2KJUGB6tjQLtja2licnrm0OnJixfGsnURfdFVKka6quPBXUkx/tlXszxct3w0Hzf+vKO3sjw4Ojkx1taSA9sqbT4pDUa83VHT/jO/tWaIGbif+b0WbF6Ltf+sE7/n+gZmBthQy//+v/HhumYE2HA17b/ZL/zLq/i/L+AB4P4fmLP0g35cM+DBl2rLsKmtqP0f8hBA+DfpjDdnw9WfPadp+nEbMwRsGP1/2JSW/F1/o0Cy3I3T7saremLhxtGz+AE7YjVZnZrubZDWcgM9EbGqRBsFsp5VK46z4kDvavYqnqbQdJsoreyA3dGaOj29xk+jPDV9Zs8aTv4mz5XI/1e+1TX49Vra6ZoCbbkcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtNw/AQAA//9j898Y") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x9, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendto$inet(r3, &(0x7f0000001140)="45038515c90fee6a3fc9f6d5fc93674a6fd36aca91c886727cd904f3c6e5b3f5e0925626f2e2ad3ab597166a603ccef9a6771a518b61101ff21d63007fff041393f269bc4cb4f47c7969e16f39568ee78de38cbcf7ce53be7defcd589db8025cef7d54afe28bf2092d34523cbd5a1d46bbcacac573aa41fb222e3021225c6140c6043d0de2e9393b57f910fcc99cffd874ea6a1da4ded63d910a8e8410cb12420f6c8ee15af5dd0347afedf08b442e0724a0507c2f9c4f102dc7c914c975e10985f170cb09188f8b970cb9ac337e63a0ab117bc2dd5b0fb9e71a03ed5ce99663b8511076ed6034657d5b4b6c2fd9c8b808a869f6baf4041448282621064d72af5182c69004264e139e0ab6a2feeb8aa9b63661ea145ce4742fb80163041cae0b45c0c558ce1f67f91b9c5739d479fdb1eb3e6bb4df0bacca149674124838b5739fccba6e3059670b538efffb68d49f8c4f88ad835316515b4d0f8ed9f0c67b4603d099bf7ed49c9e2de1c98deebe03042a6f9aff4fc5e5b85e2081fe7e8527889c1ed28c5478994c66e09b376c5e48d4567917d558c704ffaa2cfedc0b350ee86d71e8883bcf3b6dc3d58bced04300e344f0bb132f1dcda4df22aae11e005345e3c051c9585549b8778665f41b9f193c2a414f780531f6ae783747a91642dc32b31f4002f24ec136ede6468296b413eea61699b69e933c3952af70381570bab9a7b3ef3bc3f300c47c00609d718747146761a9efdc6c27f4c903072a820b1795e7256d1b0be87efd778fa72f679eacf9d19cdcfef522b518837e7277861372a35d078171f611e0a8a0f3a9b3cfdf301b6b6e3d8d97cc0be84d4a60bdfb43a8e58fd59d76934180902444e48a6c5811eb1a6d9b2b880447197731d48f72a1b4e49781968ce1fd009a50758ae23b4c7ecdffb66f5eee65978c69c9e11a377172dcc7c035638a4d447e688b9c3732991d9bcbfa2ee0568e8eb95c912d2886d39ff060999f9e9e2227fad8325e673b3b470f10ad86c57399506be7a7a788507cdfe040684f31613e6c4da888341145151b501d1e3de4e0c98b53417b6b574ea8f7225b34f8f3ac7b9684e8409ffb7d4377df59f8301fd712042e8b45152a125390cc05d72db3086bf8be0083b03aa8e6acc2a762e84b771ba265177a7c0419fd01654ae113c95f29883373cfeba1504fcc7a4cc6fe3c65fa2629d1c615af01418e819e31fe41b3e5e0aaf203ec5fa885ed5f1bf1c0b2d377b5b04825a8e8a71a6356abe0c6694beffe62b6ce6ba9086f53a022023676988ec81530c487d21af0c01d9ab925a0b75570eb1a69c549efd7fdc16574448879dba8918df6648dfeaee0206c65b9acb5f32cbb9a261e1be68ad7ca5ffb98ef6383db861b5a31dcec62c4e32de23ada3d0de6b74c83df13e798513659583da7f8653e167aa7653f4653fe89c206a778b41c364f28cc493c9a4f8c3c1316482810792076a69221befcd0895aa0aac1887421ca7bb4f13a30c92b90bb0e545032e4fe1a70f5482cc67d841960e1e765da9939528f4c5dfd13b92ceca87be398b25c9c63dbe2e40800110a08732e3b01c12f66bea329326387374856f6e34821dbaddadaa9adfa2e6f6bc01bd484890dcb9b51742c3ff0550f87531434f388debb8c000782e02846f2bc7a13b0a7a4732c8778366809da7756b24b0c2b8bd746bc6dc33dbe357b27c08d97bc8d9703ebd7cafa6cccd57281d1e51099fa8e079141b0fc0da4ed6fb590bd9a6e6e4bf6887aec641e2bfba53c6c296b30c39a9d412840d5994f802d9d1685597518f68fbbc7f43ce4a7a216de97d864efc983f0e6fd0642d593e055f5d00f3a3fecd5b3b4e74a3773f8a804f95dfa43df9908266f3521c58cb2225c7a8aada90bd1235d86b171514bc3f9295971dc98d5367f1fcc45a3258c930bb7b44cbbb04f47dd74d7442df3204b1b82df854489ea616b5f5ad9d333944ae83f5c76dbc8155cce10fb2946a699db2d5d34d7551882c2366cd485e63db78ca7bcf56e0c89b95e1606523ee515347b52ccc9964188f55f76a6e0d926aea1082f1e8a799841cdab5d8a18faa24d6d30c222dad0467af7d77e57b5be4e7faab4f27d5b28ec496644da5471dc31af5ec3735918be00103a9171826c2008b47a4ef08278575ce988ca7dbf3df97db1c1b3b946778cee821bda8c3a1834a39cce719d07a4dd45b8845b2f3d9c9bf133fe70b9fe71dc5ae7049fe86ea2186a25bd8e52d9e1e6bfbe270d7c4301ad42077cd935026f6123fedf652961057e17af68c66a5e69a0c5da21983c26978162da74b46054f34f9b48ed625e259ce8bd4e69c6dd3d40db56cee48a0b2de7cffa9eaf493c227026a16b8324b11e42e02861168e235924b25c6e7964aa9b476ebe38cd03e9a5cfae9bf9313442aeb8afda48f0165f5accdba149fc249a78670f3fe551cb3a93a6c1c1ee37b0f37e66c6d57cf71a2af0914690624e7b618c235010c3aceaa5488ce27c007d59ccb90ffddd39313febb94bd43913c1e235e4aef3993f1d832868d82ba2691414a1c37caabcbb70f72ee1070424aa10b2dd7712e22e0f69a3e41fd989eddeb31262c07e4d97fed7ecdf6f8e2e77c955509570e88f7d8951b9348f450a51ef82c2abbd6b4182dc57fd06d318f5bb9816d6f4e429f9bbfb560bdc49f54104b4a4a58823239ec3386d550a5625028adb34c215120de71f314611cbd79a3a1f3667ecb07b6209948750d1a5b6ad1dcfad3ca78137d0b33174240fb87ccb004a32a5f88376e1eb944bccd8bb9ef18b5fea410fa91af3e6a2fb930c993fe011648baa6883f5513b43d4303a0b97098189d74a06c0eea8ac6d6e5724785fc7e75f132485e83611098ec74f54a69ab6996b355f94601ef7f51211b4840bb54f8c5d2f72388915bdd5a23b474ca1b2e1716c6f14729fbabe1ef829ec321909b14d7e1b828e0a93366162d9c45c214047c6d254238d66d39db0fdf6c14a45f82e8e3fb25bc7d20190f143f7d7423bade7a2f3dab9ff81e8b6e9f3449011437e600778d673a3110c18cc96896df41380273bfa880fd3e225bf14d1c2a827537b3280ea8e7a1c30b82b780dddc099ebadbe5af94744e32fb129a510116085d31518d01bae12650886b6e7639a3a8e6d211c90da6ccae11e1bf843c608ff2d2daeee8dd34c4d9f354602b1340cc1714ad91b37df4815b6956ac44cd9f21d6c5c7bbdabec0dfbfb2402ced00d83fd7a7d9d112455d878cf2130a4d0425ccb39f9764851939d6aa24218ced23d032814dfd890f0d559530cb0f025fdbaf30682e04774a35fa42007f00581949aef441722ab5041b0cd97e31b2de346240fc36aa4ae23c4c650aeef4776d17ae92e35ad0490cd67a2009590ab81f52a30617a00aa14d88a0c08ef5bc3fe9372a5633bbff24a8284b18889501b23ee47dbff2d5213ec0a1519ad9b729461725613a8ae8897e2aaa94a40df0f8d1847a8015f96f52930b7104a7b09efa19bf3ac81680e6758ec0ad36832840649318072e2baa617d8636320457f12530542b9bb7c345d0a8352b17868080e63b1422d22e27b1e8d49e5143a6d4735c632f87359d32ac4c2230a998d5828b47c33f4b600453292b6f6499d5c56fbd0fb46031c381b0e3586d7eb02a83cd4ac13bc35fe70cdd110c153bfe9f47c80c1d702022b68d1ea2d1219e9c9fd7aaaaae0f699b2ee02f213bd77ea92af55d45380192d37720e74636a055b488efa26e40e0e3f6be48b9db34062531c2a9714381ea66956976578ad1cb28c8545fa207b8f15811c8b9c929555c9a49801a0331793e452845120a05c4f925bb3dd693c3b014631116f4dd4f3f380c571ea5ca507b2111d0a8b9fd8a1d2a210d3abea047b8bd85785e6f0117a52e5b9f382aadcd6951362fe16fc50aeb998ff9e5da95552f578c4568a7e255bb186b5d29b06e2253e1bdcba3bffa214093a073f0e81b22b64785b9d846b34af98d83bdab43c6a8ebd03e9dc1a9b7fc100d813da78c920ddee173e47e2411b3b6234c578d5f48973e15abee6337d8f435a9b6ef6c83d92365742c74e055bef578a8dd794b50b75a6cfe3c469c071006c915a880ee887cda474b1befd79ced9ad5de14dacdb2c64c92726dd11a9e7b4b29218f244f284ea21e90ecb67118b6bfb8e64262fe5e91a286b949715b77be0a9b80119e648cf381732c1c798a960e40a00feb520792d172c837818abfb9e8282f7834d2c13ebf136b33306473aec19d84ce67b9bdfb4da5f3e896bca2a4a2cd16c9c683da50b332df1b902aada1629a2c2a6a214b70b44c8e656eb1b6a332cadf293315f1cdbe6f2b2576385bb9a96983d3af2178a898aa1ccff6c071fed7a9c0884e20f43e7c071d7ef835bbfd4419699633b331ff7db73e230d0fac3169f25bfb5e63de0de02ec252388e0c9ae9b1c8c3fb0a964107258684fb621222f1fb17b942664eddebff2d9c499c5aff204b663daf8e565e357c9ea77cdf71888035f8548e3f5e8afd978855c254ddf7af876055102e7c17245c123eb3a3439fcb97d14772d24a98f94fa1f04478518a98e9e20a393c83b1d22b9315ff83aa71dc34e0f5b46441aa012263bc2e3fc379951c3e44ba078c328240fdc1c8a9eadb39a368bd86bc095002f6975c0a5f766bcdf819a11356aded922c711433d53ca7a7279341e59807df447460e17685a683f261f2eb7041bbbc2e29803d061ee24933c693a4e0d9e028e041579248452f73167cc82c17865b91fbd56843aed9a570f82fb2f980199dc744ad0eca6875b78e87150ab74888244c303410802ddc3e06cc2a557937fbe2a163bd7d1c4ed3a8c57dfb789b66edba0586c7df5c3a0b4602eb3058e76b471ae85c046e029bfaf3833c466944bc0b9ea7222bad2444358cb6fbd52117448cb2553a99d04eb3a3f8f2854430bec0ce3301f3563dde36e07f7181620f9a9b27c4f08c1966aef5c720880ca21305d0821707f69394c18d48de4eb4be4dcd78f92fcae490d1ea7849b2919ae289ab20850aaaf299bfd0cd65c7247669882b3f77d3916f15489d9dce7b3af857277e93fd3ad9521cabe27c363f9eac11ea37be41806adf895cc0a189cdb3e6c884fb6e9ed52dced439fe5eeaf9d2302d469eaff1e70ed4caf0f87e4c8b081b245a1d1adb9a4213d3027d7c1f28ea49664e4dcd4a45e2bb6b5986b87985d770400df49ab0948b5b807d73dcb0c2806f3e83c6cc6b2c261c9436c791e6088a1c54d68caaad46889f9a377b02382c6d859831b7b89a197ec5e48de5a250d07668c4a92c21daddb97ac11ecba0c5d6eaed9cfd83251f9c1ef110f2877a91efafccf79faf18e1760a7d1ac0e37e675fb0ce050691353f1d049f7ef957266b407dc625135debf500542706df959dbbd98e297c3a0c8d7b1e03eaa48a04592ee0601e6873b167c329b5bd022b48213830477fe94cebd2d5974bfbb5d8ca223fafc4baea66943f3a8402bbdd4b256a9c5507574f761bb777eed8245630344dd556c7da59ce59e54def892b55ef34ddaaf4222fbe664fb522baeeb674b488f322931b5c4c41ce9f88f6740c4ba86fa5aac2c9ae03f4fede7ad974ccb312b5c90c33d90d375aab5d180d180b84e7e5a1376700b9cf4e66a638648b359e649ff0c9c6b382805f8a3fdcd659b2d664abc1e0679ca0ce3dd128048c4166f7dd6daf598b44e666386470df2522d6d07d2c92c094cae015ef0af623c9d21eeb2d6cee71fa9c072759b2acc3d63f304ca34d9ca3223c52f73c57eaae4a4aedf7458", 0x1000, 0x4011, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r4 = syz_io_uring_setup(0x3731, &(0x7f0000000240)={0x0, 0xabf4, 0x8000, 0x0, 0x32}, &(0x7f00000001c0), &(0x7f0000000540)) ioctl$FITHAW(r0, 0xc0045878) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x800ce90, 0x10, 0x2000005, 0x40004333, 0x0, r4}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket(0x2, 0x6, 0x3) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) lseek(r8, 0x10001, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="020500090e00000000000000ffdbdf2505000600000000000a004e220000000920010000000000000000000000000000178000000000000002000100000004d500010401000000000500200000000100000000000000000000ffffac1414bbb22d0000000000000000000000000000000c1b439341ceb474fd2327b4b78bed4c02135db2f664d06c80cca2bfd1e47653a505943e322c324fd3f351a685ebab8eca45f6e6892efe9a58326fe0825b0f1fc9be397287b7dbcf834d7ea866660b92071b045702d2bab8646f35e37be8f123a148581e0ca83519e2b9a4e45797fab19e46df2d4dccfc9c8856c19e94e24c8ba0a8"], 0x70}}, 0x0) 1m7.524407576s ago: executing program 0 (id=85): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) unshare(0x22020400) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001b40), 0x8100, 0x0) ioctl$TIOCSBRK(r4, 0x5427) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request={0x11, 0x0, 0x0, 0x8}}}}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = io_uring_setup(0x1beb, &(0x7f0000000140)={0x0, 0x8ab7, 0x1000, 0x0, 0x7a}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000e, 0x110, r7, 0x0) 1m7.25595574s ago: executing program 0 (id=87): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000002000000850000002f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010007"], 0x70}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={0x0, 0x929000a, 0xa, 0x1}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x30, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x18d2d35cec3654, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)={[{@utf8}, {@uid}, {@map_normal}, {@nocompress}, {@showassoc}, {@map_acorn}, {@map_normal}, {@block={'block', 0x3d, 0x800}}, {@utf8}, {@map_off}, {@dmode={'dmode', 0x3d, 0x9fbc}}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa1a, &(0x7f0000000380)="$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") 1m7.230347051s ago: executing program 32 (id=87): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000002000000850000002f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010007"], 0x70}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={0x0, 0x929000a, 0xa, 0x1}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x30, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x18d2d35cec3654, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)={[{@utf8}, {@uid}, {@map_normal}, {@nocompress}, {@showassoc}, {@map_acorn}, {@map_normal}, {@block={'block', 0x3d, 0x800}}, {@utf8}, {@map_off}, {@dmode={'dmode', 0x3d, 0x9fbc}}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa1a, &(0x7f0000000380)="$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") 8.37174085s ago: executing program 5 (id=288): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002000000000000000000000000000000010000000a000000090002008d"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x3, 0x5}, 0x0) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4010, r3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x6, 0x1, @thr={0x0, 0x0}}, 0x0) io_setup(0x3, &(0x7f0000008240)) fchdir(r2) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x35b}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0xc, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(r5, r5, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 6.97961261s ago: executing program 5 (id=291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000002000000850000002f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010007"], 0x70}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={0x0, 0x929000a, 0xa, 0x1}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x30, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x18d2d35cec3654, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)={[{@utf8}, {@uid}, {@map_normal}, {@nocompress}, {@showassoc}, {@map_acorn}, {@map_normal}, {@block={'block', 0x3d, 0x800}}, {@utf8}, {@map_off}, {@dmode={'dmode', 0x3d, 0x9fbc}}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa1a, &(0x7f0000000380)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r7 = fspick(r6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000040)='map=off', &(0x7f0000000180)='./file0\x00', r5) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 5.407819599s ago: executing program 3 (id=297): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x4}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x557c96d0fefea758) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r5, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0x1d, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe5) r8 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, 0x0, &(0x7f0000000a40)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r9}, 0x0, &(0x7f00000008c0)}, 0x20) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000400)=ANY=[@ANYBLOB="2d7069648e8e9651abb094e93dab9903840d887320"], 0x6) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r3, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@setlink={0x38, 0x13, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0xf0ff, r5, 0x41014}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_OPERSTATE={0x5, 0x10, 0x40}, @IFLA_EVENT={0x8, 0x2c, 0x9}]}, 0x38}}, 0x20040000) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) syz_io_uring_setup(0x4e5a, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x161}, &(0x7f0000000140), &(0x7f0000000000)) 5.261069036s ago: executing program 2 (id=299): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc008810, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21}, &(0x7f0000000000)) 4.757534151s ago: executing program 4 (id=301): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r1, 0x1ff, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, @in6={0xa, 0x4e23, 0x100, @remote, 0x8}}}, 0x118) flock(r0, 0xa) close(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000240)={0x1bb800, {0x5, 0x2, 0x42e6, 0x9, 0x1}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000009) r3 = syz_open_dev$MSR(&(0x7f0000000a80), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000b00)=0xf, 0x1) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000b40)=0x5) recvmmsg(r4, &(0x7f0000003c00)=[{{&(0x7f0000000b80)=@x25, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/147, 0x93}, {&(0x7f0000000cc0)=""/79, 0x4f}], 0x2, &(0x7f0000000d80)=""/117, 0x75}, 0x9a0e}, {{&(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000e80)=""/165, 0xa5}, {&(0x7f0000000f40)=""/232, 0xe8}, {&(0x7f0000001040)=""/128, 0x80}, {&(0x7f00000010c0)=""/253, 0xfd}, {&(0x7f00000011c0)=""/244, 0xf4}, {&(0x7f00000012c0)}, {&(0x7f0000001300)=""/247, 0xf7}, {&(0x7f0000001400)=""/149, 0x95}, {&(0x7f00000014c0)=""/103, 0x67}], 0x9, 0xfffffffffffffffc}, 0x2}, {{&(0x7f0000001600)=@sco, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001680)=""/94, 0x5e}, {&(0x7f0000001700)=""/153, 0x99}], 0x2, &(0x7f0000001800)=""/229, 0xe5}, 0x2000000}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001980)=""/184, 0xb8}, {&(0x7f0000001a40)=""/32, 0x20}, {&(0x7f0000001a80)=""/202, 0xca}, {&(0x7f0000001b80)=""/114, 0x72}, {&(0x7f0000001c00)=""/125, 0x7d}, {&(0x7f0000001c80)=""/177, 0xb1}, {&(0x7f0000001d40)=""/59, 0x3b}, {&(0x7f0000001d80)=""/164, 0xa4}, {&(0x7f0000001e40)=""/168, 0xa8}, {&(0x7f0000001f00)=""/39, 0x27}], 0xa, &(0x7f0000002000)=""/152, 0x98}, 0xf21}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002140)=""/116, 0x74}, {&(0x7f00000021c0)=""/208, 0xd0}, {&(0x7f00000022c0)=""/17, 0x11}, {&(0x7f0000002300)=""/197, 0xc5}, {&(0x7f0000002400)=""/22, 0x16}, {&(0x7f0000002440)=""/231, 0xe7}], 0x6, &(0x7f00000025c0)=""/142, 0x8e}, 0x8}, {{&(0x7f0000002680)=@nfc, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002700)=""/220, 0xdc}, {&(0x7f0000002800)=""/164, 0xa4}, {&(0x7f00000028c0)=""/219, 0xdb}, {&(0x7f00000029c0)=""/93, 0x5d}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/213, 0xd5}, {&(0x7f0000003b40)=""/29, 0x1d}], 0x7}, 0xffffff40}], 0x6, 0x40004000, &(0x7f0000003d80)) getsockname$unix(r5, &(0x7f0000003dc0)=@abs, &(0x7f0000003e40)=0x6e) pwritev2(r3, &(0x7f00000040c0)=[{&(0x7f0000003e80)="123386d63a3281eeff05a663b767c2af179c3e02765b11241f78b63181147a3754103993fc6306e1f47876da212fc31d841e88d3e38d8205b2c0e231330d437d75665e05ff929ed30fa98e8cf7d4e5c33e83a79bbe910553c9061703827d6c30a114449475544346a6a9d552c443cb84683d450d1c230be0ec0eefe14c6703cda345ea5d2b8c7d3eab0cad80e7a4215f27479be02a69f758587b500f118fea4db23785ee5f4976963ad38969d13fa68d1ec04d9bef887d8a38244e3c4ea62bdee5e5ad4a57c915b52587e22136895ef8a3c31e2ac547fcd378188bb4ca91bcf752d9f1df70e42044d32a731d7282aacf06ff", 0xf2}, {&(0x7f0000003f80)="9c3863924c2310f06aeebd87887ce973968333407f5dcdf5b0b3ecddf36a90b01bb38995560d4beca03edb0b2a625b633c0183777676b40add700c65a178821f96afdde7d6699cd55d32aef9ec86999c4258d911330b84ba07ec7f9def91", 0x5e}, {&(0x7f0000004000)="ec900cc99ba05bf140122cc2c099e1bb76763bf4923eec5d3351853f84cccf096a9c958fb6b2c85514f5429d7bd6bb3bb0396e03bf70fe320d85c98b0848ddc46b7a4ba000dffaf87e965764b83058a7d1ce19ee4973bc387c287f82d08e89c6c0d5cf8f6d1c14232524bda36d4ef29f07b96faef866c4a937e3b8c706f0c322f87e2725d960fca13aaf00df325ecfa6e6a5f4043f7c950e2908f5e0de3dadb905bcf724d566d0faf62fb8d73b373d0949fe0e", 0xb3}], 0x3, 0x4, 0x7f, 0x10) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f0000004100)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, r2, 0xb0273000) fstat(r5, &(0x7f0000004180)) r6 = add_key$keyring(&(0x7f00000044c0), &(0x7f0000004500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r6, &(0x7f0000004540)='trusted\x00', &(0x7f0000004580)='\x1b]\x00') listen(r0, 0x8001) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000045c0)={0x1a, ""/26}) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000004640)={'batadv_slave_1\x00', @link_local}) 4.756003581s ago: executing program 5 (id=302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x4, 0x0, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x4, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0x7, 0x2, 0x800, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0x0, 0x8, 0x1, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) 4.59321502s ago: executing program 5 (id=303): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc008810, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21}, &(0x7f0000000000)) 4.543862422s ago: executing program 3 (id=304): mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "98"}]}], {0x14}}, 0x94}}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x9, 0x0, 0x200008a, 0x0, 0x0, 0x2000000}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 3.907951164s ago: executing program 1 (id=307): r0 = syz_open_dev$usbmon(&(0x7f0000000200), 0x6, 0x200) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$kcm(0x2, 0x200000000000001, 0x106) pread64(r0, 0x0, 0x0, 0x10000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r2, 0x9, 0x1, 0xfffffffffffffffe, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x40000, {0x1, 0xff}}, 0x18) bind$can_j1939(r4, &(0x7f0000000280)={0x1d, r5, 0x0, {0x0, 0x1, 0x4}, 0xfc}, 0x18) syz_usbip_server_init(0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r7, &(0x7f00000024c0)=""/209, 0xd1, 0xa) close_range(r6, 0xffffffffffffffff, 0x0) 3.907286824s ago: executing program 4 (id=308): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x657, 0x82, 0x1}}) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000180)={0xab000500, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x8, &(0x7f0000000600)) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) (async) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r3, &(0x7f0000000100), 0x1, 0x2b, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff00", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00", @ANYRES32=r0, @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r4) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.79101173s ago: executing program 4 (id=309): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t', @ANYRES32], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) socket$inet_udp(0x2, 0x2, 0x0) 3.79064924s ago: executing program 4 (id=310): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8010, &(0x7f0000000040), 0x15, 0xbd1, &(0x7f0000001f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x2080, 0xe5) syz_emit_ethernet(0x2e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0xfd9, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2800000, &(0x7f0000000400)=ANY=[@ANYRES16=0x0], 0x1, 0x566, &(0x7f0000000580)="$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") write(0xffffffffffffffff, &(0x7f0000000100)="f0d319933f17f81972", 0x9) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 3.653497037s ago: executing program 3 (id=311): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioperm(0x7, 0x81, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_emit_ethernet(0x4e, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740), 0x40000000000024c, 0x40, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) (fail_nth: 4) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x4008054) 3.267324696s ago: executing program 2 (id=312): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) (async) listen(r0, 0x6) (async) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x2, 0x800000e, 0x2, 0xff, 0xffffffff, 0x16}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fcffff1e74019e000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) getpid() (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "7c667758d1a18f1d", "147c828d84e02e279ff1d7419d9e57a2", "c428b11a", "8791a7acc688c6eb"}, 0x28) (async) write$binfmt_elf64(r5, &(0x7f0000000740)=ANY=[], 0xffffff77) (async) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r5}, &(0x7f0000000040), &(0x7f0000000480)) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x1c, 0x0, @void}, 0x10) (async) recvfrom$unix(r2, &(0x7f0000000280)=""/258, 0x102, 0x0, 0x0, 0x0) 3.127657523s ago: executing program 2 (id=313): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x300) 3.040643527s ago: executing program 2 (id=314): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x1e58, 0x13001, 0x0, 0x2ff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = eventfd2(0x10001, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r3, 0x1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0xff, 0xfc, 0xfe, 0xfe, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x2, "5c8d586ba8bd89058fdb9fe5b2ea00"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8, 0xf7, 0xfffffffffffffff7, 0x2}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2404e084}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x1, 0x5, r4, &(0x7f00000001c0)=0x80, &(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x0, 0xc0400, 0x1, {0x0, r5}}) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) io_uring_enter(r0, 0x1, 0x71a3, 0x1, 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000300)=0x4) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0x1000000000000c8, 0x2000000, 0x2, 0x8, 0x4, 0xfffffffffffffffc, 0x5166}) 2.97752914s ago: executing program 5 (id=315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.719860923s ago: executing program 3 (id=316): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000003280)={0x3, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x30}}, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) socket$unix(0x1, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="8233", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b60, 0x0, 0xfffffffffffffdfd) 2.713072733s ago: executing program 3 (id=317): syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc008810, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21}, &(0x7f0000000000)) 2.58498255s ago: executing program 5 (id=318): unshare(0x400) socket$unix(0x1, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = syz_io_uring_setup(0x953, &(0x7f00000002c0)={0x0, 0xb874, 0x8, 0x10000000, 0x379, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0xfffe, @empty}, 0x7ffffffe}}, 0x2e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r7, 0x9, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x147ba, 0x3e82, 0x4a, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001080)={@ifindex, 0xffffffffffffffff, 0x15, 0x6014}, 0x20) msgctl$IPC_SET(0x0, 0x1, 0x0) r8 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) accept4$phonet_pipe(r8, &(0x7f0000000040), &(0x7f0000000140)=0x10, 0x80000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)={0x4, [0x0, 0x4, 0x0, 0x6]}, &(0x7f0000000280)=0xc) 2.440674917s ago: executing program 1 (id=319): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101840, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 2.18764573s ago: executing program 2 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000f00)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x278, 0x278, 0x148, 0x278, 0x148, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'geneve1\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x0, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e0}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth1_to_hsr\x00', 'nr0\x00', {}, {}, 0x5e}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6], 0xfd}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4}}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x5f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x24}, 0x23) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x5, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) 1.875250746s ago: executing program 4 (id=321): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t', @ANYRES32], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) socket$inet_udp(0x2, 0x2, 0x0) 558.678732ms ago: executing program 2 (id=322): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffc0900020073797a30000000000500010006000000050005000a0000000500040000000000140007800800114000"], 0x60}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000026c0)={'gre0\x00', &(0x7f0000002640)={'erspan0\x00', 0x0, 0x7800, 0x10, 0x7, 0x4, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x66, 0x0, 0x9, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r3, 0x0, 0x0, 0x8800000) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 540.523623ms ago: executing program 4 (id=323): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc008810, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21}, &(0x7f0000000000)) 376.70484ms ago: executing program 1 (id=324): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 339.885593ms ago: executing program 1 (id=325): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = epoll_create(0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r4, r3) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000300)={0x30000010}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/19, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a80"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x10, r0, 'id1\x00'}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x170, r8, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x114, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0xd4}, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 137.758543ms ago: executing program 3 (id=326): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r0, 0xc009}], 0x1, 0x1) dup2(r0, r1) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) syz_open_procfs(r2, &(0x7f0000000000)='cmdline\x00') socket$kcm(0xa, 0x3, 0x73) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r4], 0x24}}, 0x4000000) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 43.737427ms ago: executing program 1 (id=327): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000003280)={0x3, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x30}}, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) socket$unix(0x1, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="8233", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b60, 0x0, 0xfffffffffffffdfd) 0s ago: executing program 1 (id=328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x4, 0x0, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x4, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0x7, 0x2, 0x800, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0x0, 0x8, 0x1, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): [ 22.992463][ T28] audit: type=1400 audit(1773928853.247:62): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.029128][ T28] audit: type=1400 audit(1773928853.247:63): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.074224][ T28] audit: type=1400 audit(1773928853.247:64): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.110810][ T28] audit: type=1400 audit(1773928853.247:65): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.140633][ T28] audit: type=1400 audit(1773928853.247:66): avc: denied { read open } for pid=3192 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 28.864916][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 28.864934][ T28] audit: type=1400 audit(1773928859.117:70): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.909619][ T28] audit: type=1400 audit(1773928859.157:71): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.910441][ T3294] cgroup: Unknown subsys name 'net' [ 28.948988][ T28] audit: type=1400 audit(1773928859.207:72): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.100513][ T3294] cgroup: Unknown subsys name 'cpuset' [ 29.111417][ T3294] cgroup: Unknown subsys name 'rlimit' [ 29.246062][ T28] audit: type=1400 audit(1773928859.497:73): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.273058][ T28] audit: type=1400 audit(1773928859.497:74): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.296796][ T28] audit: type=1400 audit(1773928859.497:75): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.321389][ T28] audit: type=1400 audit(1773928859.497:76): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.323010][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.343988][ T28] audit: type=1400 audit(1773928859.507:77): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.378550][ T28] audit: type=1400 audit(1773928859.517:78): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.391766][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.409172][ T28] audit: type=1400 audit(1773928859.517:79): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.631256][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 30.641960][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 30.673965][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 30.720459][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.787194][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.795677][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.804187][ T3308] bridge_slave_0: entered allmulticast mode [ 30.812144][ T3308] bridge_slave_0: entered promiscuous mode [ 30.841940][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.853301][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.862520][ T3310] bridge_slave_0: entered allmulticast mode [ 30.871180][ T3310] bridge_slave_0: entered promiscuous mode [ 30.879023][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.887206][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.895321][ T3308] bridge_slave_1: entered allmulticast mode [ 30.903283][ T3308] bridge_slave_1: entered promiscuous mode [ 30.910318][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 30.920569][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.929757][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.939815][ T3307] bridge_slave_0: entered allmulticast mode [ 30.950705][ T3307] bridge_slave_0: entered promiscuous mode [ 30.961572][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.974785][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.985354][ T3307] bridge_slave_1: entered allmulticast mode [ 30.996802][ T3307] bridge_slave_1: entered promiscuous mode [ 31.007706][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.016626][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.031018][ T3310] bridge_slave_1: entered allmulticast mode [ 31.043820][ T3310] bridge_slave_1: entered promiscuous mode [ 31.115328][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.128075][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.144861][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.158313][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.168456][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.178306][ T3312] bridge_slave_0: entered allmulticast mode [ 31.187093][ T3312] bridge_slave_0: entered promiscuous mode [ 31.199180][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.216521][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.247713][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.260056][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.272678][ T3312] bridge_slave_1: entered allmulticast mode [ 31.283576][ T3312] bridge_slave_1: entered promiscuous mode [ 31.291583][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.324855][ T3308] team0: Port device team_slave_0 added [ 31.356008][ T3308] team0: Port device team_slave_1 added [ 31.376718][ T3307] team0: Port device team_slave_0 added [ 31.385827][ T3307] team0: Port device team_slave_1 added [ 31.393596][ T3310] team0: Port device team_slave_0 added [ 31.405740][ T3310] team0: Port device team_slave_1 added [ 31.426108][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.441032][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.467613][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.477604][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.488425][ T3322] bridge_slave_0: entered allmulticast mode [ 31.495905][ T3322] bridge_slave_0: entered promiscuous mode [ 31.504236][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.514926][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.548495][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.579211][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.591512][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.600121][ T3322] bridge_slave_1: entered allmulticast mode [ 31.610496][ T3322] bridge_slave_1: entered promiscuous mode [ 31.619125][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.628633][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.661214][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.681651][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.691978][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.743054][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.758644][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.768782][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.807007][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.831368][ T3312] team0: Port device team_slave_0 added [ 31.838665][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.846476][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.880072][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.898584][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.906939][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.943273][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.965756][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.978207][ T3312] team0: Port device team_slave_1 added [ 31.991565][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.038685][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.048134][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.081714][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.107148][ T3307] hsr_slave_0: entered promiscuous mode [ 32.118783][ T3307] hsr_slave_1: entered promiscuous mode [ 32.142761][ T3322] team0: Port device team_slave_0 added [ 32.161850][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.174053][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.229910][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.255533][ T3310] hsr_slave_0: entered promiscuous mode [ 32.264483][ T3310] hsr_slave_1: entered promiscuous mode [ 32.273175][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 32.281591][ T3310] Cannot create hsr debugfs directory [ 32.289492][ T3322] team0: Port device team_slave_1 added [ 32.303308][ T3308] hsr_slave_0: entered promiscuous mode [ 32.310999][ T3308] hsr_slave_1: entered promiscuous mode [ 32.318888][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 32.326974][ T3308] Cannot create hsr debugfs directory [ 32.349345][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.359698][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.396754][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.415166][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.425417][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.457364][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.480643][ T3312] hsr_slave_0: entered promiscuous mode [ 32.487615][ T3312] hsr_slave_1: entered promiscuous mode [ 32.495822][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 32.504596][ T3312] Cannot create hsr debugfs directory [ 32.576483][ T3322] hsr_slave_0: entered promiscuous mode [ 32.587675][ T3322] hsr_slave_1: entered promiscuous mode [ 32.598897][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 32.611116][ T3322] Cannot create hsr debugfs directory [ 32.842851][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.861035][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.874337][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.885547][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.920641][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.932372][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.948059][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.964292][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.998972][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.013696][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.028131][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.043572][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.138460][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.153515][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.182568][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.194239][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.239918][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.257949][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.274616][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.302854][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.320734][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.353131][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.388618][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.425019][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.437417][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.461842][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.488598][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.500798][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.515980][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.559278][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.582189][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.608701][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.619994][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.638549][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.651834][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.668567][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.681366][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.720934][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.735376][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.756070][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.787709][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.830229][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.873034][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.890267][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.913920][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.928374][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.947496][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.960387][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.008003][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.020797][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.073733][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.107374][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.295986][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.332504][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.373599][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.401080][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.492206][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.549082][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.708334][ T3310] veth0_vlan: entered promiscuous mode [ 34.732057][ T3308] veth0_vlan: entered promiscuous mode [ 34.744497][ T3310] veth1_vlan: entered promiscuous mode [ 34.776593][ T3308] veth1_vlan: entered promiscuous mode [ 34.819326][ T3322] veth0_vlan: entered promiscuous mode [ 34.838372][ T3312] veth0_vlan: entered promiscuous mode [ 34.856410][ T3312] veth1_vlan: entered promiscuous mode [ 34.870614][ T3322] veth1_vlan: entered promiscuous mode [ 34.882924][ T3310] veth0_macvtap: entered promiscuous mode [ 34.894378][ T3307] veth0_vlan: entered promiscuous mode [ 34.903110][ T3310] veth1_macvtap: entered promiscuous mode [ 34.921174][ T3307] veth1_vlan: entered promiscuous mode [ 34.934537][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.944131][ T3308] veth0_macvtap: entered promiscuous mode [ 34.954270][ T3308] veth1_macvtap: entered promiscuous mode [ 34.963973][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.978565][ T3322] veth0_macvtap: entered promiscuous mode [ 34.996992][ T3322] veth1_macvtap: entered promiscuous mode [ 35.009564][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.024008][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.048293][ T3312] veth0_macvtap: entered promiscuous mode [ 35.059412][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.073970][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.104495][ T3307] veth0_macvtap: entered promiscuous mode [ 35.118351][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.132342][ T3312] veth1_macvtap: entered promiscuous mode [ 35.143661][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.167596][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.184067][ T3307] veth1_macvtap: entered promiscuous mode [ 35.211513][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.234599][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 35.234613][ T28] audit: type=1400 audit(1773928865.487:90): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.YDZATW/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.287513][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.302312][ T28] audit: type=1400 audit(1773928865.487:91): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.332239][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.380799][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.397194][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.407894][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.427234][ T28] audit: type=1400 audit(1773928865.487:92): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.YDZATW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.475699][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.485311][ T28] audit: type=1400 audit(1773928865.487:93): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.543397][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.543461][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.574040][ T28] audit: type=1400 audit(1773928865.487:94): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.YDZATW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.627296][ T28] audit: type=1400 audit(1773928865.487:95): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.YDZATW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 35.670566][ T28] audit: type=1400 audit(1773928865.487:96): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.711874][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.714691][ T28] audit: type=1400 audit(1773928865.537:97): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.737234][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.830800][ T28] audit: type=1400 audit(1773928865.537:98): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=4790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 35.832007][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.877794][ T28] audit: type=1400 audit(1773928865.967:99): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.883663][ T3479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 35.943562][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.002258][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.036305][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.078266][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.129210][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.144669][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.197907][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.239211][ T3481] loop0: detected capacity change from 0 to 8192 [ 36.258175][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.390269][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.601674][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.783852][ C1] hrtimer: interrupt took 57905 ns [ 37.092911][ T3492] Zero length message leads to an empty skb [ 37.263338][ T3492] dummy0 speed is unknown, defaulting to 1000 [ 37.300442][ T3504] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7'. [ 37.316387][ T3492] dummy0 speed is unknown, defaulting to 1000 [ 37.328045][ T3504] syzkaller0: entered promiscuous mode [ 37.338388][ T3504] syzkaller0: entered allmulticast mode [ 37.357691][ T3492] dummy0 speed is unknown, defaulting to 1000 [ 37.475096][ T3492] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.524098][ T3492] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 37.549444][ T3511] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003 [ 37.614561][ T3511] loop4: detected capacity change from 0 to 512 [ 37.631730][ T3492] dummy0 speed is unknown, defaulting to 1000 [ 37.654175][ T3492] dummy0 speed is unknown, defaulting to 1000 [ 37.664145][ T3511] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.700431][ T3492] dummy0 speed is unknown, defaulting to 1000 [ 37.740459][ T3511] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.755777][ T3492] dummy0 speed is unknown, defaulting to 1000 [ 37.805915][ T3492] dummy0 speed is unknown, defaulting to 1000 [ 37.821044][ T3492] dummy0 speed is unknown, defaulting to 1000 [ 37.950242][ T3511] EXT4-fs error (device loop4): __ext4_iget:5378: inode #11: block 2: comm syz.4.8: invalid block [ 37.993795][ T3511] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.994102][ T3511] EXT4-fs (loop4): Remounting filesystem read-only [ 38.013712][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 38.013732][ C1] EXT4-fs (loop4): initial error at time 1773928868: __ext4_iget:5378: inode 11: block 2 [ 38.013790][ C1] EXT4-fs (loop4): last error at time 1773928868: __ext4_iget:5378: inode 11: block 2 [ 38.022178][ T3492] syz.1.6 (3492) used greatest stack depth: 9864 bytes left [ 38.030419][ T3511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.018035][ T3531] hsr0: entered promiscuous mode [ 39.574290][ T3534] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.896448][ T3375] kernel read not supported for file /vcs (pid: 3375 comm: kworker/0:2) [ 42.049440][ T3538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 42.080051][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.159463][ T3540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16'. [ 42.179457][ T3477] syz.0.1 (3477) used greatest stack depth: 9248 bytes left [ 42.199171][ T3478] syz.0.1 (3478) used greatest stack depth: 7048 bytes left [ 42.296426][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 42.296443][ T28] audit: type=1400 audit(1773928872.457:146): avc: denied { firmware_load } for pid=3537 comm="syz.2.14" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 43.135567][ T28] audit: type=1400 audit(1773928872.617:147): avc: denied { create } for pid=3539 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.317820][ T3549] loop1: detected capacity change from 0 to 512 [ 43.364638][ T28] audit: type=1400 audit(1773928872.617:148): avc: denied { allowed } for pid=3539 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.457350][ T3549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.476435][ T28] audit: type=1400 audit(1773928872.617:149): avc: denied { sqpoll } for pid=3539 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.572778][ T3549] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.621969][ T28] audit: type=1400 audit(1773928872.617:150): avc: denied { create } for pid=3539 comm="syz.3.16" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.705849][ T28] audit: type=1400 audit(1773928873.457:151): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.765441][ T3563] Illegal XDP return value 472596513 on prog (id 11) dev syz_tun, expect packet loss! [ 43.787791][ T28] audit: type=1400 audit(1773928873.607:152): avc: denied { setopt } for pid=3551 comm="syz.0.17" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.834364][ T28] audit: type=1400 audit(1773928873.617:153): avc: denied { map } for pid=3550 comm="syz.2.19" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.873724][ T28] audit: type=1400 audit(1773928873.617:154): avc: denied { read write } for pid=3550 comm="syz.2.19" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.928168][ T28] audit: type=1400 audit(1773928873.667:155): avc: denied { connect } for pid=3551 comm="syz.0.17" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.958433][ T3556] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 44.001888][ T3577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25'. [ 44.026285][ T3578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.26'. [ 44.061802][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.090449][ T3579] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 44.106618][ T3579] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 44.190415][ T3579] vhci_hcd vhci_hcd.0: Device attached [ 44.573478][ T3590] loop1: detected capacity change from 0 to 1764 [ 44.846406][ T3375] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 44.873727][ T3580] vhci_hcd: connection closed [ 44.874054][ T3442] vhci_hcd vhci_hcd.2: stop threads [ 44.891501][ T3442] vhci_hcd vhci_hcd.2: release socket [ 45.849583][ T3442] vhci_hcd vhci_hcd.2: disconnect device [ 46.413437][ T3375] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 46.455248][ T3375] usb 5-1: enqueue for inactive port 0 [ 47.447871][ T3375] usb 5-1: enqueue for inactive port 0 [ 47.861196][ T3417] kernel read not supported for file /vcs (pid: 3417 comm: kworker/1:5) [ 48.042804][ T3375] usb 5-1: enqueue for inactive port 0 [ 48.061480][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 48.061495][ T28] audit: type=1400 audit(1773928878.317:176): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 48.170839][ T3598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29'. [ 48.321536][ T3375] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 48.457305][ T3603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31'. [ 50.501797][ T3612] 9p: Bad value for 'rfdno' [ 51.701735][ T3623] loop2: detected capacity change from 0 to 1024 [ 52.017638][ T3629] loop3: detected capacity change from 0 to 256 [ 52.078572][ T3623] ======================================================= [ 52.078572][ T3623] WARNING: The mand mount option has been deprecated and [ 52.078572][ T3623] and is ignored by this kernel. Remove the mand [ 52.078572][ T3623] option from the mount to silence this warning. [ 52.078572][ T3623] ======================================================= [ 52.141811][ T28] audit: type=1400 audit(1773928882.327:177): avc: denied { create } for pid=3630 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.352906][ T28] audit: type=1400 audit(1773928882.397:178): avc: denied { setopt } for pid=3630 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.394896][ T3633] loop0: detected capacity change from 0 to 8192 [ 52.499419][ T28] audit: type=1400 audit(1773928882.487:179): avc: denied { ioctl } for pid=3630 comm="syz.1.38" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.606309][ T3623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.691400][ T28] audit: type=1400 audit(1773928882.487:180): avc: denied { map } for pid=3630 comm="syz.1.38" path="/proc/sys/net/ipv4/vs/cache_bypass" dev="proc" ino=5185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 52.734650][ T28] audit: type=1400 audit(1773928882.987:181): avc: denied { setattr } for pid=3621 comm="syz.2.35" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.855659][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.046710][ T3639] loop1: detected capacity change from 0 to 8192 [ 53.384784][ T3642] FAULT_INJECTION: forcing a failure. [ 53.384784][ T3642] name failslab, interval 1, probability 0, space 0, times 1 [ 53.449328][ T3642] CPU: 1 UID: 0 PID: 3642 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT(full) [ 53.449354][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.449377][ T3642] Call Trace: [ 53.449383][ T3642] [ 53.449391][ T3642] __dump_stack+0x1d/0x30 [ 53.449557][ T3642] dump_stack_lvl+0x95/0xd0 [ 53.449591][ T3642] dump_stack+0x15/0x1b [ 53.449751][ T3642] should_fail_ex+0x263/0x280 [ 53.449779][ T3642] ? alloc_pipe_info+0xad/0x340 [ 53.449797][ T3642] should_failslab+0x8c/0xb0 [ 53.449817][ T3642] __kmalloc_cache_noprof+0x5f/0x410 [ 53.449841][ T3642] alloc_pipe_info+0xad/0x340 [ 53.449944][ T3642] splice_direct_to_actor+0x591/0x670 [ 53.450027][ T3642] ? kstrtouint_from_user+0xa8/0xf0 [ 53.450051][ T3642] ? __pfx_direct_splice_actor+0x10/0x10 [ 53.450080][ T3642] ? avc_policy_seqno+0x15/0x30 [ 53.450176][ T3642] ? selinux_file_permission+0x1f2/0x690 [ 53.450244][ T3642] do_splice_direct+0x119/0x1a0 [ 53.450278][ T3642] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 53.450306][ T3642] do_sendfile+0x382/0x650 [ 53.450336][ T3642] __x64_sys_sendfile64+0x105/0x150 [ 53.450441][ T3642] x64_sys_call+0x2dc4/0x3020 [ 53.450473][ T3642] do_syscall_64+0x12c/0x370 [ 53.450499][ T3642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.450711][ T3642] RIP: 0033:0x7f365f9ec799 [ 53.450735][ T3642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.450752][ T3642] RSP: 002b:00007f365e43f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 53.450772][ T3642] RAX: ffffffffffffffda RBX: 00007f365fc65fa0 RCX: 00007f365f9ec799 [ 53.450786][ T3642] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 53.450843][ T3642] RBP: 00007f365e43f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.450855][ T3642] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 53.450867][ T3642] R13: 00007f365fc66038 R14: 00007f365fc65fa0 R15: 00007ffc4e099548 [ 53.450887][ T3642] [ 53.879942][ T3649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.43'. [ 53.949256][ T3652] syzkaller1: entered promiscuous mode [ 53.967082][ T28] audit: type=1400 audit(1773928884.197:182): avc: denied { ioctl } for pid=3648 comm="syz.2.40" path="socket:[5229]" dev="sockfs" ino=5229 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.995838][ T3655] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 54.004943][ T3655] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.007786][ T3652] syzkaller1: entered allmulticast mode [ 54.199707][ T3655] vhci_hcd vhci_hcd.0: Device attached [ 54.409834][ T23] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 54.494114][ T23] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 54.996491][ T3656] vhci_hcd: connection reset by peer [ 55.014195][ T30] vhci_hcd vhci_hcd.0: stop threads [ 55.020656][ T30] vhci_hcd vhci_hcd.0: release socket [ 55.029739][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 55.109364][ T3663] loop2: detected capacity change from 0 to 8192 [ 56.005020][ T3403] kernel read not supported for file /vcs (pid: 3403 comm: kworker/0:4) [ 56.027950][ T3671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.48'. [ 57.775905][ T3679] process 'syz.0.49' launched '/dev/fd/3' with NULL argv: empty string added [ 57.790043][ T28] audit: type=1400 audit(1773928888.027:183): avc: denied { execute } for pid=3674 comm="syz.0.49" dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.830406][ T28] audit: type=1400 audit(1773928888.067:184): avc: denied { execute_no_trans } for pid=3674 comm="syz.0.49" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.931144][ T3644] syz.1.43 (3644) used greatest stack depth: 6896 bytes left [ 57.996521][ T3686] loop2: detected capacity change from 0 to 1024 [ 58.048161][ T28] audit: type=1400 audit(1773928888.287:185): avc: denied { read } for pid=3681 comm="syz.3.51" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.115331][ T3686] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.272350][ T3694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=3694 comm=syz.3.54 [ 58.327243][ T3418] kernel read not supported for file /vcs (pid: 3418 comm: kworker/0:5) [ 58.385449][ T3686] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #3: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.458700][ T3694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 58.506234][ T3686] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.506640][ T3686] Quota error (device loop2): write_blk: dquota write failed [ 58.516875][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 58.516893][ C0] EXT4-fs (loop2): initial error at time 1773928888: ext4_map_blocks:818: inode 3: block 3 [ 58.516935][ C0] EXT4-fs (loop2): last error at time 1773928888: ext4_map_blocks:818: inode 3: block 3 [ 58.759453][ T3707] loop3: detected capacity change from 0 to 256 [ 59.045888][ T3686] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3 [ 59.119762][ T28] audit: type=1400 audit(1773928888.287:186): avc: denied { open } for pid=3681 comm="syz.3.51" path="/dev/input/event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.131601][ T3686] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 59.176570][ T3705] loop4: detected capacity change from 0 to 8192 [ 59.273765][ T3686] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.50: Failed to acquire dquot type 0 [ 59.298466][ T3710] loop1: detected capacity change from 0 to 512 [ 59.360148][ T3686] loop2: lost filesystem error report for type 5 error -117 [ 59.360284][ T3686] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1) [ 59.466656][ T3712] loop1: detected capacity change from 0 to 512 [ 59.495827][ T3686] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.495982][ T3686] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 59.657158][ T3686] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.50: Failed to acquire dquot type 0 [ 59.732732][ T3686] loop2: lost filesystem error report for type 5 error -117 [ 59.735768][ T3686] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.50: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.879905][ T23] usb 1-1: enqueue for inactive port 0 [ 59.885891][ T23] usb 1-1: enqueue for inactive port 0 [ 59.909749][ T28] audit: type=1400 audit(1773928888.287:187): avc: denied { ioctl } for pid=3681 comm="syz.3.51" path="/dev/input/event3" dev="devtmpfs" ino=246 ioctlcmd=0x451b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.949727][ T3686] loop2: lost filesystem error report for type 5 error -117 [ 59.979718][ T28] audit: type=1326 audit(1773928888.337:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ed7ac799 code=0x7ffc0000 [ 59.990819][ T3686] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1) [ 60.016230][ T23] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 60.079712][ T28] audit: type=1326 audit(1773928888.337:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f28ed7ac799 code=0x7ffc0000 [ 60.091775][ T3686] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.255927][ T3686] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 60.283447][ T3723] 9p: Bad value for 'rfdno' [ 60.356506][ T3686] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.50: Failed to acquire dquot type 0 [ 60.412942][ T3686] loop2: lost filesystem error report for type 5 error -117 [ 60.413994][ T3686] EXT4-fs (loop2): 1 orphan inode deleted [ 60.459601][ T3686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.776628][ T3725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.63'. [ 60.904025][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.099673][ T28] audit: type=1326 audit(1773928888.337:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ed7ac799 code=0x7ffc0000 [ 61.117339][ T3731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'. [ 61.907381][ T28] audit: type=1326 audit(1773928888.337:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28ed7ac799 code=0x7ffc0000 [ 62.218982][ T3744] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.397903][ T3746] loop2: detected capacity change from 0 to 256 [ 63.966923][ T3750] loop3: detected capacity change from 0 to 128 [ 63.988890][ T3750] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.067170][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 64.067187][ T28] audit: type=1400 audit(1773928894.317:225): avc: denied { connect } for pid=3751 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.210769][ T28] audit: type=1400 audit(1773928894.317:226): avc: denied { write } for pid=3751 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.292091][ T28] audit: type=1400 audit(1773928894.317:227): avc: denied { read } for pid=3751 comm="syz.4.69" path="socket:[5339]" dev="sockfs" ino=5339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.365526][ T28] audit: type=1400 audit(1773928894.517:228): avc: denied { write } for pid=3753 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 64.430127][ T3764] loop1: detected capacity change from 0 to 8192 [ 64.457585][ T30] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.798885][ T3773] loop2: detected capacity change from 0 to 1764 [ 65.110812][ T3776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.75'. [ 65.639575][ T3778] loop0: detected capacity change from 0 to 8192 [ 66.046766][ T3763] syz.1.71 (3763) used greatest stack depth: 5880 bytes left [ 66.195778][ T3785] loop1: detected capacity change from 0 to 256 [ 66.571210][ T3789] loop2: detected capacity change from 0 to 512 [ 66.604235][ T3787] loop4: detected capacity change from 0 to 1764 [ 66.637589][ T28] audit: type=1400 audit(1773928896.887:229): avc: denied { read write } for pid=3790 comm="syz.0.81" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.705047][ T3789] EXT4-fs (loop2): invalid inodes per group: 0 [ 66.705047][ T3789] [ 66.742957][ T3791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 66.753752][ T3789] loop2: detected capacity change from 0 to 512 [ 66.770199][ T28] audit: type=1400 audit(1773928896.887:230): avc: denied { open } for pid=3790 comm="syz.0.81" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.809999][ T28] audit: type=1400 audit(1773928896.937:231): avc: denied { ioctl } for pid=3790 comm="syz.0.81" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.841574][ T3789] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 66.866678][ T3803] loop0: detected capacity change from 0 to 512 [ 66.887664][ T3803] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.83: invalid indirect mapped block 4294967295 (level 1) [ 66.910684][ T3803] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.910806][ T3803] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.83: invalid indirect mapped block 4294967295 (level 1) [ 66.920648][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 66.920677][ C0] EXT4-fs (loop0): initial error at time 1773928897: ext4_free_branches:1023: inode 11 [ 66.920700][ C0] EXT4-fs (loop0): last error at time 1773928897: ext4_free_branches:1023: inode 11 [ 67.009824][ T3803] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.010338][ T3803] EXT4-fs (loop0): 2 truncates cleaned up [ 67.028500][ T3803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.109844][ T28] audit: type=1400 audit(1773928897.357:232): avc: denied { mounton } for pid=3801 comm="syz.0.83" path="/17/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.157776][ T28] audit: type=1400 audit(1773928897.367:233): avc: denied { mount } for pid=3801 comm="syz.0.83" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 67.190795][ T28] audit: type=1400 audit(1773928897.367:234): avc: denied { remount } for pid=3801 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 67.238323][ T3310] EXT4-fs error (device loop0): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 67.266855][ T3310] EXT4-fs error (device loop0): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 67.514208][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.527489][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.603001][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.685368][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.762618][ T3817] dummy0 speed is unknown, defaulting to 1000 [ 67.774970][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.842093][ T3817] chnl_net:caif_netlink_parms(): no params data found [ 67.897003][ T12] bridge_slave_1: left allmulticast mode [ 67.903633][ T12] bridge_slave_1: left promiscuous mode [ 67.910254][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.920010][ T12] bridge_slave_0: left allmulticast mode [ 67.926278][ T12] bridge_slave_0: left promiscuous mode [ 67.933213][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.012560][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.024582][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.037522][ T12] bond0 (unregistering): Released all slaves [ 68.069726][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.078189][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.087912][ T3817] bridge_slave_0: entered allmulticast mode [ 68.099384][ T3817] bridge_slave_0: entered promiscuous mode [ 68.107814][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.115612][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.123857][ T3817] bridge_slave_1: entered allmulticast mode [ 68.136709][ T3817] bridge_slave_1: entered promiscuous mode [ 68.154178][ T3817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.165937][ T3817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.190044][ T3817] team0: Port device team_slave_0 added [ 68.198194][ T3817] team0: Port device team_slave_1 added [ 68.217284][ T3817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.225951][ T3817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.255971][ T3817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.308517][ T12] hsr_slave_0: left promiscuous mode [ 68.314641][ T12] hsr_slave_1: left promiscuous mode [ 68.328043][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.338054][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.349203][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.361961][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.376014][ T12] veth1_macvtap: left promiscuous mode [ 68.383818][ T12] veth0_macvtap: left promiscuous mode [ 68.391705][ T12] veth1_vlan: left promiscuous mode [ 68.399296][ T12] veth0_vlan: left promiscuous mode [ 68.667865][ T12] team0 (unregistering): Port device team_slave_1 removed [ 68.687259][ T12] team0 (unregistering): Port device team_slave_0 removed [ 68.770793][ T3817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.779468][ T3817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.817279][ T3817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.874533][ T3817] hsr_slave_0: entered promiscuous mode [ 68.882438][ T3817] hsr_slave_1: entered promiscuous mode [ 68.890585][ T3817] debugfs: 'hsr0' already exists in 'hsr' [ 68.897030][ T3817] Cannot create hsr debugfs directory [ 69.963440][ T3847] loop1: detected capacity change from 0 to 1764 [ 69.990237][ T3796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.995615][ T3854] loop3: detected capacity change from 0 to 1764 [ 71.028722][ T3817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.099169][ T3856] loop2: detected capacity change from 0 to 1764 [ 72.076505][ T3817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.638280][ T3817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.723728][ T3817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.904576][ T3874] netlink: 55 bytes leftover after parsing attributes in process `syz.2.96'. [ 73.008952][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 73.008976][ T28] audit: type=1400 audit(1773928903.257:237): avc: denied { write } for pid=3862 comm="syz.1.95" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.091299][ T3488] kernel read not supported for file /vcs (pid: 3488 comm: kworker/1:6) [ 73.135792][ T3874] loop2: detected capacity change from 0 to 512 [ 73.167628][ T3888] loop3: detected capacity change from 0 to 512 [ 73.297954][ T3874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.321809][ T3888] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.97: bad orphan inode 13 [ 73.360547][ T3817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.385245][ T3888] loop3: lost filesystem error report for type 5 error -117 [ 73.385702][ T3888] ext4_test_bit(bit=12, block=4) = 1 [ 73.394652][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 73.394674][ C1] EXT4-fs (loop3): initial error at time 1773928903: ext4_orphan_get:1417 [ 73.394694][ C1] EXT4-fs (loop3): last error at time 1773928903: ext4_orphan_get:1417 [ 73.609796][ T3874] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.632079][ T3817] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.659413][ T28] audit: type=1400 audit(1773928903.907:238): avc: denied { add_name } for pid=3870 comm="syz.2.96" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.685099][ T3874] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #4: comm syz.2.96: corrupted inode contents [ 73.706491][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.716052][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.728532][ T3874] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #4: comm syz.2.96: mark_inode_dirty error [ 73.743664][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.752333][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.760908][ T28] audit: type=1400 audit(1773928903.907:239): avc: denied { create } for pid=3870 comm="syz.2.96" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 73.784078][ T3888] is_bad_inode(inode)=0 [ 73.789133][ T3874] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #4: comm syz.2.96: corrupted inode contents [ 73.802568][ T3888] NEXT_ORPHAN(inode)=0 [ 73.807199][ T3888] max_ino=32 [ 73.815506][ T3888] i_nlink=1 [ 73.835253][ T3817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.849348][ T3874] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #4: comm syz.2.96: mark_inode_dirty error [ 73.864770][ T3888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.883382][ T3817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.898297][ T3874] Quota error (device loop2): write_blk: dquota write failed [ 73.910315][ T28] audit: type=1400 audit(1773928904.167:240): avc: denied { create } for pid=3886 comm="syz.3.97" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.910331][ T3888] EXT4-fs warning (device loop3): dx_probe:813: inode #2: comm syz.3.97: Hash code is SIPHASH, but hash not in dirent [ 73.956089][ T3874] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 73.984618][ T3874] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 74.005263][ T3874] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.96: Failed to acquire dquot type 1 [ 74.022301][ T3888] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.97: Corrupt directory, running e2fsck is recommended [ 74.108007][ T3817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.135948][ T3908] tipc: Started in network mode [ 74.155352][ T3908] tipc: Node identity 4, cluster identity 4711 [ 74.177933][ T3908] tipc: Node number set to 4 [ 74.194031][ T3888] EXT4-fs warning (device loop3): dx_probe:813: inode #2: comm syz.3.97: Hash code is SIPHASH, but hash not in dirent [ 74.223617][ T3888] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.97: Corrupt directory, running e2fsck is recommended [ 74.279097][ T3888] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.97: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 74.447065][ T3817] veth0_vlan: entered promiscuous mode [ 74.456899][ T28] audit: type=1400 audit(1773928904.207:241): avc: denied { module_request } for pid=3817 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.483620][ T28] audit: type=1400 audit(1773928904.377:242): avc: denied { bpf } for pid=3886 comm="syz.3.97" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.483764][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.512905][ T3817] veth1_vlan: entered promiscuous mode [ 74.519856][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.535364][ T28] audit: type=1400 audit(1773928904.387:243): avc: denied { getopt } for pid=3886 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.614525][ T3817] veth0_macvtap: entered promiscuous mode [ 74.648886][ T3817] veth1_macvtap: entered promiscuous mode [ 74.703502][ T3817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.747098][ T3817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.778049][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.795375][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.826341][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.848983][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.914560][ T3971] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 74.921707][ T3971] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.933536][ T3971] vhci_hcd vhci_hcd.0: Device attached [ 75.110590][ T3403] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 75.180021][ T3403] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 75.687537][ T3972] vhci_hcd: connection reset by peer [ 75.700140][ T12] vhci_hcd vhci_hcd.3: stop threads [ 75.719705][ T12] vhci_hcd vhci_hcd.3: release socket [ 75.747338][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 75.811289][ T3986] syzkaller0: entered promiscuous mode [ 75.863989][ T3986] syzkaller0: entered allmulticast mode [ 76.295581][ T3993] loop1: detected capacity change from 0 to 1764 [ 76.566112][ T3995] loop3: detected capacity change from 0 to 1764 [ 77.604066][ T4003] loop3: detected capacity change from 0 to 1764 [ 78.257240][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 78.257255][ T28] audit: type=1400 audit(1773928908.507:247): avc: denied { block_suspend } for pid=4004 comm="syz.2.108" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.449974][ T28] audit: type=1400 audit(1773928909.697:248): avc: denied { map } for pid=4011 comm="syz.4.110" path="socket:[6727]" dev="sockfs" ino=6727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.499655][ T28] audit: type=1400 audit(1773928909.737:249): avc: denied { read } for pid=4011 comm="syz.4.110" path="socket:[6727]" dev="sockfs" ino=6727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.527567][ T28] audit: type=1400 audit(1773928909.777:250): avc: denied { bind } for pid=4007 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.572234][ T28] audit: type=1400 audit(1773928909.807:251): avc: denied { setopt } for pid=4007 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.608060][ T28] audit: type=1400 audit(1773928909.857:252): avc: denied { create } for pid=4014 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.646134][ T4017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.112'. [ 79.663451][ T28] audit: type=1400 audit(1773928909.857:253): avc: denied { ioctl } for pid=4014 comm="syz.4.111" path="socket:[6045]" dev="sockfs" ino=6045 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.698416][ T4008] netlink: 64 bytes leftover after parsing attributes in process `syz.1.109'. [ 79.712172][ T28] audit: type=1400 audit(1773928909.857:254): avc: denied { bind } for pid=4014 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.720903][ T4019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 79.734480][ T28] audit: type=1400 audit(1773928909.917:255): avc: denied { map } for pid=4016 comm="syz.2.112" path="socket:[6058]" dev="sockfs" ino=6058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 79.771326][ T28] audit: type=1326 audit(1773928909.917:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.2.112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff20114c799 code=0x0 [ 79.892212][ T4026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 79.964015][ T4029] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 79.971060][ T4029] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.009827][ T4029] vhci_hcd vhci_hcd.0: Device attached [ 80.538163][ T4043] loop2: detected capacity change from 0 to 256 [ 80.759778][ T4030] vhci_hcd: connection reset by peer [ 80.793703][ T30] vhci_hcd vhci_hcd.3: stop threads [ 80.809695][ T30] vhci_hcd vhci_hcd.3: release socket [ 80.817445][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 80.906017][ T4053] loop2: detected capacity change from 0 to 1764 [ 81.356734][ T4062] netlink: 292 bytes leftover after parsing attributes in process `syz.5.124'. [ 81.453711][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 81.465296][ T3417] hid-generic 0007:0009:1000.0001: unknown main item tag 0x0 [ 81.497701][ T3417] hid-generic 0007:0009:1000.0001: unknown main item tag 0x0 [ 81.643594][ T3417] hid-generic 0007:0009:1000.0001: unknown main item tag 0x0 [ 81.663311][ T3417] hid-generic 0007:0009:1000.0001: unknown main item tag 0x0 [ 81.679707][ T3417] hid-generic 0007:0009:1000.0001: unknown main item tag 0x0 [ 81.696889][ T3417] hid-generic 0007:0009:1000.0001: unknown main item tag 0x0 [ 81.716217][ T3417] hid-generic 0007:0009:1000.0001: unknown main item tag 0x0 [ 81.735531][ T3417] hid-generic 0007:0009:1000.0001: unknown main item tag 0x0 [ 81.752713][ T3417] hid-generic 0007:0009:1000.0001: unknown main item tag 0x0 [ 81.778255][ T3417] hid-generic 0007:0009:1000.0001: unknown main item tag 0x0 [ 81.803134][ T3417] hid-generic 0007:0009:1000.0001: hidraw0: HID v10.00 Device [syz0] on syz1 [ 81.893165][ T4072] syzkaller0: entered promiscuous mode [ 81.899249][ T4072] syzkaller0: entered allmulticast mode [ 82.508469][ T4089] loop1: detected capacity change from 0 to 8192 [ 82.656658][ T4113] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 82.666542][ T4113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 82.693292][ T4113] vhci_hcd vhci_hcd.0: Device attached [ 82.869675][ T3389] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 82.929713][ T3389] usb 5-1: new full-speed USB device number 3 using vhci_hcd [ 83.215003][ T4127] loop4: detected capacity change from 0 to 512 [ 83.259047][ T4127] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.289834][ T4127] EXT4-fs (loop4): Invalid default hash set in the superblock [ 83.422127][ T4114] vhci_hcd: connection reset by peer [ 83.427943][ T3442] vhci_hcd vhci_hcd.2: stop threads [ 83.449755][ T3442] vhci_hcd vhci_hcd.2: release socket [ 83.458018][ T3442] vhci_hcd vhci_hcd.2: disconnect device [ 83.773560][ T4183] syzkaller0: entered promiscuous mode [ 83.789719][ T4183] syzkaller0: entered allmulticast mode [ 83.946785][ T4204] loop2: detected capacity change from 0 to 128 [ 84.254738][ T4238] loop2: detected capacity change from 0 to 1764 [ 85.225092][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 85.225114][ T28] audit: type=1400 audit(1773928915.477:274): avc: denied { bind } for pid=4292 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.412318][ T4298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 85.850381][ T4298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.146'. [ 85.888453][ T4306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.148'. [ 85.901531][ T3403] usb 7-1: enqueue for inactive port 0 [ 85.908360][ T28] audit: type=1400 audit(1773928915.527:275): avc: denied { create } for pid=4290 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.931892][ T28] audit: type=1400 audit(1773928915.527:276): avc: denied { ioctl } for pid=4290 comm="syz.1.144" path="socket:[7315]" dev="sockfs" ino=7315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.969903][ T3403] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 85.989694][ T28] audit: type=1400 audit(1773928916.007:277): avc: denied { connect } for pid=4290 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.027993][ T4318] syzkaller0: entered promiscuous mode [ 86.040332][ T4318] syzkaller0: entered allmulticast mode [ 86.047436][ T28] audit: type=1400 audit(1773928916.007:278): avc: denied { write } for pid=4290 comm="syz.1.144" path="socket:[7315]" dev="sockfs" ino=7315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.095533][ T28] audit: type=1326 audit(1773928916.057:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.5.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63385cc799 code=0x7ffc0000 [ 86.125376][ T28] audit: type=1326 audit(1773928916.057:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.5.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63385cc799 code=0x7ffc0000 [ 86.170016][ T4323] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 86.177171][ T4323] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 86.208178][ T4323] vhci_hcd vhci_hcd.0: Device attached [ 86.253004][ T28] audit: type=1326 audit(1773928916.067:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.5.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63385cc799 code=0x7ffc0000 [ 86.352112][ T28] audit: type=1326 audit(1773928916.067:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.5.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63385cc799 code=0x7ffc0000 [ 86.442668][ T28] audit: type=1326 audit(1773928916.067:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.5.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f63385cc799 code=0x7ffc0000 [ 86.848423][ T4366] Cannot find del_set index 0 as target [ 86.925452][ T4325] vhci_hcd: connection closed [ 86.925616][ T56] vhci_hcd vhci_hcd.2: stop threads [ 86.937418][ T56] vhci_hcd vhci_hcd.2: release socket [ 86.945216][ T56] vhci_hcd vhci_hcd.2: disconnect device [ 87.595846][ T4374] loop3: detected capacity change from 0 to 1764 [ 87.897542][ T35] kernel read not supported for file /vcs (pid: 35 comm: kworker/1:1) [ 88.887748][ T3389] usb 5-1: enqueue for inactive port 0 [ 88.911902][ T3389] usb 5-1: enqueue for inactive port 0 [ 89.782658][ T3389] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 89.952720][ T4398] syzkaller0: entered promiscuous mode [ 89.979570][ T4398] syzkaller0: entered allmulticast mode [ 90.163955][ T4404] 9p: Bad value for 'rfdno' [ 90.196484][ T4401] loop3: detected capacity change from 0 to 8192 [ 90.976906][ T4415] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.984552][ T4415] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.140444][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.159158][ T4423] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 91.165878][ T4423] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.194353][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.222419][ T4423] vhci_hcd vhci_hcd.0: Device attached [ 91.327187][ T108] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.346266][ T108] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.383571][ T108] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.412868][ T108] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.771291][ T4435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 91.869799][ T4432] 9p: Bad value for 'rfdno' [ 91.877288][ T3396] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 91.895053][ T4424] vhci_hcd: connection closed [ 91.895240][ T56] vhci_hcd vhci_hcd.3: stop threads [ 91.906982][ T56] vhci_hcd vhci_hcd.3: release socket [ 91.945629][ T56] vhci_hcd vhci_hcd.3: disconnect device [ 91.979922][ T3396] usb 7-1: new full-speed USB device number 3 using vhci_hcd [ 92.046660][ T3396] usb 7-1: enqueue for inactive port 0 [ 92.178451][ T4449] loop4: detected capacity change from 0 to 512 [ 93.042206][ T3396] usb 7-1: enqueue for inactive port 0 [ 93.058967][ T3396] usb 7-1: enqueue for inactive port 0 [ 93.083177][ T4449] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.179: invalid indirect mapped block 4294967295 (level 1) [ 93.799802][ T4451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.178'. [ 94.051463][ T3396] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 94.131621][ T4449] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.132837][ T4449] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.179: invalid indirect mapped block 4294967295 (level 1) [ 94.146675][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 94.146708][ C0] EXT4-fs (loop4): initial error at time 1773928924: ext4_free_branches:1023: inode 11 [ 94.146746][ C0] EXT4-fs (loop4): last error at time 1773928924: ext4_free_branches:1023: inode 11 [ 94.339799][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 94.339814][ T28] audit: type=1400 audit(1773928924.577:317): avc: denied { bind } for pid=4444 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.411002][ T28] audit: type=1400 audit(1773928924.577:318): avc: denied { node_bind } for pid=4444 comm="syz.2.178" saddr=::ffff:255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 94.528298][ T4464] loop3: detected capacity change from 0 to 512 [ 94.840885][ T4449] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.841131][ T4449] EXT4-fs (loop4): 2 truncates cleaned up [ 94.863658][ T4461] loop1: detected capacity change from 0 to 8192 [ 94.982870][ T4464] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 95.004391][ T4449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.017941][ T4464] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.486420][ T4464] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.180: bg 0: block 305: padding at end of block bitmap is not set [ 95.570544][ T4472] syz.5.183 uses obsolete (PF_INET,SOCK_PACKET) [ 95.578543][ T4472] syzkaller1: entered promiscuous mode [ 95.585445][ T4472] syzkaller1: entered allmulticast mode [ 95.609738][ T4464] loop3: lost filesystem error report for type 5 error -117 [ 95.629640][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 95.644703][ C1] EXT4-fs (loop3): initial error at time 1773928925: ext4_validate_block_bitmap:441 [ 95.655345][ C1] EXT4-fs (loop3): last error at time 1773928925: ext4_validate_block_bitmap:441 [ 95.675628][ T4464] EXT4-fs (loop3): Remounting filesystem read-only [ 95.775048][ T4464] EXT4-fs (loop3): 1 truncate cleaned up [ 95.866488][ T3442] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.899067][ T3442] Quota error (device loop3): write_blk: dquota write failed [ 95.929844][ T3442] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 95.943053][ T3442] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.955511][ T3442] Quota error (device loop3): write_blk: dquota write failed [ 95.964120][ T3442] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 95.975078][ T3442] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 95.989346][ T3442] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 95.998856][ T3442] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 96.009976][ T4464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.025203][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.043485][ T28] audit: type=1400 audit(1773928926.297:319): avc: denied { read } for pid=4457 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.190255][ T28] audit: type=1400 audit(1773928926.437:320): avc: denied { read } for pid=4457 comm="syz.3.180" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.395510][ T4490] 9p: Bad value for 'rfdno' [ 97.077985][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.326493][ T4493] netlink: 64 bytes leftover after parsing attributes in process `syz.3.188'. [ 97.339711][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 97.412371][ T4498] loop1: detected capacity change from 0 to 512 [ 97.422269][ T4498] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.442880][ T4498] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 97.455819][ T4498] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 97.465049][ T4498] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.473936][ T4498] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 97.493829][ T4498] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 97.502388][ T4498] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.190: Invalid block bitmap block 0 in block_group 0 [ 97.516871][ T4498] loop1: lost filesystem error report for type 5 error -117 [ 97.517044][ T4498] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 97.525381][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 97.525420][ C1] EXT4-fs (loop1): last error at time 1773928927: ext4_read_block_bitmap_nowait:483 [ 97.552616][ T4498] loop1: lost filesystem error report for type 5 error -117 [ 97.552964][ T4498] EXT4-fs (loop1): 1 orphan inode deleted [ 97.571231][ T4498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.773251][ T4502] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 97.780589][ T4502] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.805924][ T4502] vhci_hcd vhci_hcd.0: Device attached [ 97.840268][ T4508] loop3: detected capacity change from 0 to 8192 [ 97.913278][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.892934][ T3417] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 98.918831][ T4504] vhci_hcd: connection closed [ 98.919021][ T56] vhci_hcd vhci_hcd.2: stop threads [ 98.931212][ T56] vhci_hcd vhci_hcd.2: release socket [ 98.937320][ T56] vhci_hcd vhci_hcd.2: disconnect device [ 98.959892][ T3417] usb 5-1: new full-speed USB device number 4 using vhci_hcd [ 98.967955][ T3417] usb 5-1: enqueue for inactive port 0 [ 98.973942][ T3417] usb 5-1: enqueue for inactive port 0 [ 99.400990][ T4509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.192'. [ 99.642154][ T4517] loop3: detected capacity change from 0 to 8192 [ 99.719699][ T3417] usb 5-1: enqueue for inactive port 0 [ 99.799700][ T3417] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 99.905830][ T10] kernel read not supported for file /vcs (pid: 10 comm: kworker/0:1) [ 99.972844][ T4537] loop1: detected capacity change from 0 to 512 [ 100.170037][ T4537] EXT4-fs: Ignoring removed bh option [ 100.824319][ T4537] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 101.813384][ T4545] loop2: detected capacity change from 0 to 512 [ 102.110354][ T4537] EXT4-fs (loop1): 1 truncate cleaned up [ 102.116832][ T4545] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.204: invalid indirect mapped block 4294967295 (level 1) [ 102.629827][ T4549] 9p: Bad value for 'rfdno' [ 102.790317][ T4537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.806817][ T4545] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 102.806963][ T4545] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.204: invalid indirect mapped block 4294967295 (level 1) [ 102.817272][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 102.817291][ C1] EXT4-fs (loop2): initial error at time 1773928933: ext4_free_branches:1023: inode 11 [ 102.817329][ C1] EXT4-fs (loop2): last error at time 1773928933: ext4_free_branches:1023: inode 11 [ 103.110022][ T4545] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 103.111518][ T4545] EXT4-fs (loop2): 2 truncates cleaned up [ 103.125055][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.138906][ T4545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.259710][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 103.259769][ T28] audit: type=1400 audit(1773928933.497:322): avc: denied { write } for pid=4550 comm="syz.5.206" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.302169][ T4554] hub 8-0:1.0: USB hub found [ 103.307416][ T4554] hub 8-0:1.0: 8 ports detected [ 103.364600][ T4555] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 103.407476][ T4555] netlink: 2 bytes leftover after parsing attributes in process `syz.3.205'. [ 103.458741][ T4557] netlink: 'syz.4.208': attribute type 2 has an invalid length. [ 103.548043][ T4555] bond0: entered promiscuous mode [ 103.582603][ T4555] bond_slave_0: entered promiscuous mode [ 103.621961][ T4555] bond_slave_1: entered promiscuous mode [ 103.659392][ T4555] bridge0: port 3(bond0) entered blocking state [ 103.679306][ T4555] bridge0: port 3(bond0) entered disabled state [ 103.686732][ T4555] bond0: entered allmulticast mode [ 103.692333][ T4555] bond_slave_0: entered allmulticast mode [ 103.698781][ T4555] bond_slave_1: entered allmulticast mode [ 103.721992][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.736629][ T4555] bridge0: port 3(bond0) entered blocking state [ 103.743993][ T4555] bridge0: port 3(bond0) entered forwarding state [ 104.786701][ T4586] loop3: detected capacity change from 0 to 1764 [ 104.809073][ T4590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.216'. [ 104.837346][ T4587] loop1: detected capacity change from 0 to 1764 [ 105.085722][ T4583] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 105.093424][ T4583] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 105.783922][ T4583] vhci_hcd vhci_hcd.0: Device attached [ 105.810424][ T4592] vhci_hcd: connection closed [ 105.815528][ T3442] vhci_hcd vhci_hcd.4: stop threads [ 106.789913][ T3442] vhci_hcd vhci_hcd.4: release socket [ 106.799106][ T3442] vhci_hcd vhci_hcd.4: disconnect device [ 109.638376][ T28] audit: type=1400 audit(1773928939.887:323): avc: denied { setopt } for pid=4607 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.407488][ T4623] loop3: detected capacity change from 0 to 1764 [ 111.161008][ T4629] loop4: detected capacity change from 0 to 512 [ 111.226128][ T4629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.284976][ T4627] loop2: detected capacity change from 0 to 8192 [ 111.323875][ T4629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.430574][ T4629] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.568870][ T28] audit: type=1400 audit(1773928941.817:324): avc: denied { add_name } for pid=4628 comm="syz.4.227" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.714772][ T4629] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 111.768698][ T4629] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 111.865403][ T4629] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.227: Failed to acquire dquot type 1 [ 112.046091][ T4635] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 112.155318][ T4635] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 112.214775][ T4635] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.227: Failed to acquire dquot type 1 [ 112.491751][ T4658] loop5: detected capacity change from 0 to 1764 [ 113.325073][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.614263][ T4669] loop2: detected capacity change from 0 to 8192 [ 114.019978][ T4675] FAULT_INJECTION: forcing a failure. [ 114.019978][ T4675] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.044889][ T28] audit: type=1400 audit(1773928944.297:325): avc: denied { connect } for pid=4678 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.076035][ T4681] loop5: detected capacity change from 0 to 512 [ 114.078914][ T28] audit: type=1400 audit(1773928944.297:326): avc: denied { write } for pid=4678 comm="syz.3.239" path="socket:[8456]" dev="sockfs" ino=8456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.087104][ T4675] CPU: 1 UID: 0 PID: 4675 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT(full) [ 114.087133][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.087146][ T4675] Call Trace: [ 114.087154][ T4675] [ 114.087162][ T4675] __dump_stack+0x1d/0x30 [ 114.087239][ T4675] dump_stack_lvl+0x95/0xd0 [ 114.087263][ T4675] dump_stack+0x15/0x1b [ 114.087286][ T4675] should_fail_ex+0x263/0x280 [ 114.087334][ T4675] should_fail+0xb/0x20 [ 114.087373][ T4675] should_fail_usercopy+0x1a/0x20 [ 114.087485][ T4675] _copy_from_user+0x1c/0xb0 [ 114.087516][ T4675] get_user_ifreq+0x52/0x110 [ 114.087540][ T4675] sock_ioctl+0x54e/0x610 [ 114.087605][ T4675] ? __pfx_sock_ioctl+0x10/0x10 [ 114.087626][ T4675] __se_sys_ioctl+0xce/0x140 [ 114.087646][ T4675] __x64_sys_ioctl+0x43/0x50 [ 114.087705][ T4675] x64_sys_call+0x1563/0x3020 [ 114.087799][ T4675] do_syscall_64+0x12c/0x370 [ 114.087821][ T4675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.087840][ T4675] RIP: 0033:0x7f28ed7ac799 [ 114.087854][ T4675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.087872][ T4675] RSP: 002b:00007f28ec1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.087892][ T4675] RAX: ffffffffffffffda RBX: 00007f28eda25fa0 RCX: 00007f28ed7ac799 [ 114.088044][ T4675] RDX: 0000200000000300 RSI: 00000000000089f8 RDI: 0000000000000004 [ 114.088058][ T4675] RBP: 00007f28ec1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 114.088076][ T4675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.088090][ T4675] R13: 00007f28eda26038 R14: 00007f28eda25fa0 R15: 00007fffedbd3c78 [ 114.088110][ T4675] [ 114.133586][ T4681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.140819][ T4682] ªªªªªª: renamed from vlan0 (while UP) [ 114.193383][ T28] audit: type=1400 audit(1773928944.447:327): avc: denied { read open } for pid=4680 comm="syz.5.240" path="/24/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 114.222684][ T4685] loop1: detected capacity change from 0 to 1024 [ 114.225837][ T28] audit: type=1400 audit(1773928944.447:328): avc: denied { ioctl } for pid=4680 comm="syz.5.240" path="/24/file1/bus" dev="loop5" ino=18 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 114.294701][ T4685] netlink: 'syz.1.242': attribute type 13 has an invalid length. [ 114.413538][ T4687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'. [ 114.570571][ T3418] dummy0 speed is unknown, defaulting to 1000 [ 114.629101][ T3817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.004664][ T4716] 9p: Bad value for 'rfdno' [ 115.070768][ T4717] Cannot find add_set index 0 as target [ 116.438062][ T4725] loop2: detected capacity change from 0 to 1764 [ 116.546493][ T4727] loop5: detected capacity change from 0 to 128 [ 116.605387][ T4727] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.689840][ T4727] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.726237][ T4727] FAULT_INJECTION: forcing a failure. [ 116.726237][ T4727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.774090][ T4727] CPU: 1 UID: 0 PID: 4727 Comm: syz.5.251 Not tainted syzkaller #0 PREEMPT(full) [ 116.774154][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.774252][ T4727] Call Trace: [ 116.774267][ T4727] [ 116.774305][ T4727] __dump_stack+0x1d/0x30 [ 116.774335][ T4727] dump_stack_lvl+0x95/0xd0 [ 116.774360][ T4727] dump_stack+0x15/0x1b [ 116.774575][ T4727] should_fail_ex+0x263/0x280 [ 116.774612][ T4727] should_fail+0xb/0x20 [ 116.774665][ T4727] should_fail_usercopy+0x1a/0x20 [ 116.774752][ T4727] _copy_from_user+0x1c/0xb0 [ 116.774782][ T4727] ext4_ioctl+0x9fe/0x31b0 [ 116.774819][ T4727] ? ioctl_has_perm+0x27e/0x2d0 [ 116.774858][ T4727] ? __pfx_ext4_ioctl+0x10/0x10 [ 116.774924][ T4727] __se_sys_ioctl+0xce/0x140 [ 116.774965][ T4727] __x64_sys_ioctl+0x43/0x50 [ 116.775001][ T4727] x64_sys_call+0x1563/0x3020 [ 116.775034][ T4727] do_syscall_64+0x12c/0x370 [ 116.775110][ T4727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.775139][ T4727] RIP: 0033:0x7f63385cc799 [ 116.775155][ T4727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.775175][ T4727] RSP: 002b:00007f6337027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.775198][ T4727] RAX: ffffffffffffffda RBX: 00007f6338845fa0 RCX: 00007f63385cc799 [ 116.775258][ T4727] RDX: 0000200000000040 RSI: 0000000040e8662e RDI: 0000000000000003 [ 116.775317][ T4727] RBP: 00007f6337027090 R08: 0000000000000000 R09: 0000000000000000 [ 116.775330][ T4727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.775342][ T4727] R13: 00007f6338846038 R14: 00007f6338845fa0 R15: 00007ffd4191c1e8 [ 116.775361][ T4727] [ 117.352570][ T4730] loop3: detected capacity change from 0 to 8192 [ 117.828039][ T3817] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.943942][ T4735] netlink: 88 bytes leftover after parsing attributes in process `syz.5.252'. [ 117.954128][ T4735] netlink: 48 bytes leftover after parsing attributes in process `syz.5.252'. [ 117.999304][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 117.999318][ T28] audit: type=1400 audit(1773928948.247:334): avc: denied { read } for pid=4731 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.041353][ T4739] batadv0: entered promiscuous mode [ 118.048940][ T4739] bond0: entered promiscuous mode [ 118.054939][ T4739] bond_slave_0: entered promiscuous mode [ 118.075542][ T4739] bond_slave_1: entered promiscuous mode [ 118.083604][ T28] audit: type=1400 audit(1773928948.287:335): avc: denied { create } for pid=4731 comm="syz.3.254" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.108809][ T4739] hsr1: entered allmulticast mode [ 118.114514][ T4739] batadv0: entered allmulticast mode [ 118.121024][ T4739] bond0: entered allmulticast mode [ 118.127071][ T4739] bond_slave_0: entered allmulticast mode [ 118.133561][ T28] audit: type=1400 audit(1773928948.287:336): avc: denied { write } for pid=4731 comm="syz.3.254" name="file0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.160006][ T4739] bond_slave_1: entered allmulticast mode [ 118.166812][ T4739] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 118.176337][ T28] audit: type=1400 audit(1773928948.287:337): avc: denied { open } for pid=4731 comm="syz.3.254" path="/52/file0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.215919][ T4739] batadv0: left promiscuous mode [ 118.344237][ T4739] bond0: left promiscuous mode [ 118.350418][ T4739] bond_slave_0: left promiscuous mode [ 118.357103][ T4739] bond_slave_1: left promiscuous mode [ 118.968617][ T4763] loop1: detected capacity change from 0 to 1764 [ 120.294911][ T28] audit: type=1400 audit(1773928950.547:338): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.308484][ T28] audit: type=1400 audit(1773928950.887:339): avc: denied { mounton } for pid=4768 comm="syz.3.262" path="/proc/172/task" dev="proc" ino=8576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 123.131399][ T4780] syzkaller0: entered promiscuous mode [ 123.146881][ T4780] syzkaller0: entered allmulticast mode [ 123.471685][ T4788] loop1: detected capacity change from 0 to 1764 [ 123.883724][ T4793] loop3: detected capacity change from 0 to 512 [ 123.980238][ T4793] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.269: ea_inode file size=4 entry size=6 [ 124.159126][ T4793] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 124.184476][ T4802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.271'. [ 124.205270][ T4793] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.269: corrupted inode contents [ 124.239886][ T4793] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.240066][ T4793] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.269: mark_inode_dirty error [ 124.249716][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 124.249738][ C0] EXT4-fs (loop3): initial error at time 1773928954: ext4_do_update_inode:5569: inode 15 [ 124.249785][ C0] EXT4-fs (loop3): last error at time 1773928954: ext4_do_update_inode:5569: inode 15 [ 124.395810][ T4793] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.396040][ T4793] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.269: corrupted inode contents [ 124.466055][ T4793] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.466206][ T4793] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.269: mark_inode_dirty error [ 124.538054][ T4793] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.538206][ T4793] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.269: mark inode dirty (error -117) [ 124.614779][ T4793] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.615094][ T4793] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 124.672652][ T4793] EXT4-fs (loop3): 1 orphan inode deleted [ 124.696729][ T4793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.074563][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.126221][ T28] audit: type=1400 audit(1773928955.377:340): avc: denied { bind } for pid=4805 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.020179][ T4818] netlink: 44 bytes leftover after parsing attributes in process `syz.3.276'. [ 126.020564][ T4822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'. [ 126.054324][ T4825] loop2: detected capacity change from 0 to 512 [ 126.058997][ T28] audit: type=1400 audit(1773928956.307:341): avc: denied { mounton } for pid=4819 comm="syz.5.277" path="/31/file0" dev="cgroup" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 126.063675][ T4825] EXT4-fs: Ignoring removed nobh option [ 126.108441][ T4824] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 126.116220][ T4824] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 126.153622][ T4824] vhci_hcd vhci_hcd.0: Device attached [ 126.167177][ T4825] EXT4-fs (loop2): unable to read superblock [ 126.180347][ T28] audit: type=1400 audit(1773928956.327:342): avc: denied { unmount } for pid=3817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 126.329658][ T3418] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 126.341185][ T28] audit: type=1400 audit(1773928956.597:343): avc: denied { create } for pid=4847 comm="syz.5.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.364213][ T4849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.285'. [ 126.389727][ T3418] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 126.404267][ T28] audit: type=1400 audit(1773928956.597:344): avc: denied { setopt } for pid=4847 comm="syz.5.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.427335][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.288'. [ 127.226293][ T4860] loop2: detected capacity change from 0 to 1764 [ 127.679727][ T4826] vhci_hcd: connection reset by peer [ 127.730239][ T108] vhci_hcd vhci_hcd.4: stop threads [ 127.736044][ T108] vhci_hcd vhci_hcd.4: release socket [ 127.773935][ T108] vhci_hcd vhci_hcd.4: disconnect device [ 128.716295][ T4869] loop5: detected capacity change from 0 to 1764 [ 128.804810][ T4871] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 129.171510][ T28] audit: type=1400 audit(1773928959.417:345): avc: denied { append } for pid=4875 comm="syz.4.294" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 129.212890][ T4878] sctp: [Deprecated]: syz.2.295 (pid 4878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.212890][ T4878] Use struct sctp_sack_info instead [ 129.299474][ T4871] bond1: entered promiscuous mode [ 129.319462][ T28] audit: type=1400 audit(1773928959.467:346): avc: denied { write } for pid=4876 comm="syz.2.295" lport=49407 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 129.347735][ T4871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.497367][ T28] audit: type=1400 audit(1773928959.467:347): avc: denied { setopt } for pid=4876 comm="syz.2.295" lport=49407 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 129.497472][ T28] audit: type=1400 audit(1773928959.707:348): avc: denied { mount } for pid=4883 comm="syz.3.297" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 129.534023][ T4888] FAULT_INJECTION: forcing a failure. [ 129.534023][ T4888] name failslab, interval 1, probability 0, space 0, times 0 [ 129.534056][ T4888] CPU: 0 UID: 0 PID: 4888 Comm: syz.1.298 Not tainted syzkaller #0 PREEMPT(full) [ 129.534078][ T4888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.534089][ T4888] Call Trace: [ 129.534094][ T4888] [ 129.534153][ T4888] __dump_stack+0x1d/0x30 [ 129.534180][ T4888] dump_stack_lvl+0x95/0xd0 [ 129.534206][ T4888] dump_stack+0x15/0x1b [ 129.534228][ T4888] should_fail_ex+0x263/0x280 [ 129.534297][ T4888] should_failslab+0x8c/0xb0 [ 129.534321][ T4888] kmem_cache_alloc_noprof+0x66/0x400 [ 129.534343][ T4888] ? can_rx_register+0x104/0x4d0 [ 129.534373][ T4888] can_rx_register+0x104/0x4d0 [ 129.534463][ T4888] ? __pfx_bcm_rx_handler+0x10/0x10 [ 129.534515][ T4888] bcm_rx_setup+0xd8b/0x10a0 [ 129.534537][ T4888] ? _raw_spin_lock_bh+0x56/0xb0 [ 129.534611][ T4888] ? _raw_spin_unlock_bh+0x18/0x20 [ 129.534650][ T4888] ? lock_sock_nested+0x132/0x160 [ 129.534676][ T4888] ? selinux_socket_sendmsg+0x192/0x1c0 [ 129.534714][ T4888] bcm_sendmsg+0x1bb/0x4a0 [ 129.534741][ T4888] ? __pfx_bcm_sendmsg+0x10/0x10 [ 129.534791][ T4888] ____sys_sendmsg+0x563/0x5b0 [ 129.534838][ T4888] ___sys_sendmsg+0x195/0x1e0 [ 129.534907][ T4888] ? path_openat+0x1b01/0x2050 [ 129.534990][ T4888] __sys_sendmmsg+0x185/0x320 [ 129.535067][ T4888] __x64_sys_sendmmsg+0x57/0x70 [ 129.535099][ T4888] x64_sys_call+0x27aa/0x3020 [ 129.535129][ T4888] do_syscall_64+0x12c/0x370 [ 129.535157][ T4888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.535178][ T4888] RIP: 0033:0x7f28ed7ac799 [ 129.535197][ T4888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.535216][ T4888] RSP: 002b:00007f28ec1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 129.535236][ T4888] RAX: ffffffffffffffda RBX: 00007f28eda25fa0 RCX: 00007f28ed7ac799 [ 129.535265][ T4888] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000003 [ 129.535277][ T4888] RBP: 00007f28ec1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 129.535289][ T4888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.535348][ T4888] R13: 00007f28eda26038 R14: 00007f28eda25fa0 R15: 00007fffedbd3c78 [ 129.535381][ T4888] [ 130.433600][ T4908] loop1: detected capacity change from 0 to 512 [ 130.720879][ T4908] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.306: invalid indirect mapped block 4294967295 (level 1) [ 130.763462][ T4908] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.763657][ T4908] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.306: invalid indirect mapped block 4294967295 (level 1) [ 130.774124][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 130.774142][ C0] EXT4-fs (loop1): initial error at time 1773928961: ext4_free_branches:1023: inode 11 [ 130.774175][ C0] EXT4-fs (loop1): last error at time 1773928961: ext4_free_branches:1023: inode 11 [ 130.827014][ T4908] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.828990][ T4908] EXT4-fs (loop1): 2 truncates cleaned up [ 130.848268][ T4908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.954825][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.029862][ T4925] loop4: detected capacity change from 0 to 4096 [ 131.043672][ T4926] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 131.052828][ T4926] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 131.063030][ T4925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.077795][ T4926] vhci_hcd vhci_hcd.0: Device attached [ 131.184595][ T4932] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 131.194426][ T4932] audit: out of memory in audit_log_start [ 131.269658][ T35] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 131.473108][ T28] audit: type=1400 audit(1773928961.727:349): avc: denied { write } for pid=4924 comm="syz.4.310" path="/54/file0/trusted.r" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 131.501050][ T35] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 131.552960][ T28] audit: type=1400 audit(1773928961.797:350): avc: denied { create } for pid=4935 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.668091][ T28] audit: type=1400 audit(1773928961.827:351): avc: denied { bind } for pid=4935 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.807073][ T4928] vhci_hcd: connection reset by peer [ 131.891177][ T4944] loop2: detected capacity change from 0 to 512 [ 131.908935][ T4945] syzkaller0: entered promiscuous mode [ 131.915953][ T28] audit: type=1400 audit(1773928961.837:352): avc: denied { listen } for pid=4935 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.939838][ T4945] syzkaller0: entered allmulticast mode [ 131.967324][ T28] audit: type=1400 audit(1773928961.837:353): avc: denied { connect } for pid=4935 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.992626][ T28] audit: type=1400 audit(1773928961.837:354): avc: denied { write } for pid=4935 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.119961][ T28] audit: type=1400 audit(1773928961.837:355): avc: denied { accept } for pid=4935 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.145143][ T4720] vhci_hcd vhci_hcd.1: stop threads [ 132.157780][ T4720] vhci_hcd vhci_hcd.1: release socket [ 132.182100][ T3418] usb 9-1: enqueue for inactive port 0 [ 132.188372][ T3418] usb 9-1: enqueue for inactive port 0 [ 132.219186][ T4944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.239095][ T4720] vhci_hcd vhci_hcd.1: disconnect device [ 132.247662][ T28] audit: type=1400 audit(1773928962.487:356): avc: denied { connect } for pid=4954 comm="syz.5.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.249773][ T4944] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.911371][ T3418] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 133.241904][ T3506] kernel read not supported for file /vcs (pid: 3506 comm: kworker/0:7) [ 133.346849][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.360322][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.380240][ T4975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'. [ 134.427895][ T4977] ªªªªªª: renamed from vlan0 (while UP) [ 134.742241][ T4985] loop3: detected capacity change from 0 to 512 [ 134.760146][ T4985] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.326: ea_inode file size=4 entry size=6 [ 134.814671][ T4985] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.326: corrupted inode contents [ 134.850585][ T4973] ================================================================== [ 134.859524][ T4973] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 134.867716][ T4973] [ 134.870204][ T4973] write to 0xffffc9000173fe18 of 8 bytes by task 4978 on cpu 1: [ 134.878581][ T4973] shmem_fallocate+0x724/0x920 [ 134.884301][ T4973] vfs_fallocate+0x3b6/0x450 [ 134.889079][ T4973] __x64_sys_fallocate+0x7a/0xd0 [ 134.894424][ T4973] x64_sys_call+0x298e/0x3020 [ 134.899732][ T4973] do_syscall_64+0x12c/0x370 [ 134.905084][ T4973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.911829][ T4973] [ 134.914236][ T4973] read to 0xffffc9000173fe18 of 8 bytes by task 4973 on cpu 0: [ 134.923160][ T4973] shmem_writeout+0x2c1/0x920 [ 134.928505][ T4973] shrink_folio_list+0x1f1f/0x2820 [ 134.935263][ T4973] evict_folios+0x2a60/0x35c0 [ 134.940284][ T4973] try_to_shrink_lruvec+0x81b/0xbf0 [ 134.946359][ T4973] shrink_lruvec+0x255/0x1c60 [ 134.951560][ T4973] shrink_node+0x67a/0x2130 [ 134.956470][ T4973] do_try_to_free_pages+0x408/0xc80 [ 134.961754][ T4973] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 134.968317][ T4973] try_charge_memcg+0x37e/0xa10 [ 134.973344][ T4973] obj_cgroup_charge_pages+0x23/0xc0 [ 134.979267][ T4973] __memcg_kmem_charge_page+0x9e/0x170 [ 134.985321][ T4973] __alloc_frozen_pages_noprof+0x18a/0x360 [ 134.991384][ T4973] alloc_pages_mpol+0xb3/0x260 [ 134.996769][ T4973] alloc_pages_noprof+0x8f/0x130 [ 135.002486][ T4973] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 135.008917][ T4973] __kvmalloc_node_noprof+0x3d4/0x650 [ 135.014907][ T4973] ip_set_alloc+0x24/0x30 [ 135.019789][ T4973] hash_netiface_create+0x282/0x740 [ 135.025099][ T4973] ip_set_create+0x3cf/0x970 [ 135.029761][ T4973] nfnetlink_rcv_msg+0x509/0x5d0 [ 135.034882][ T4973] netlink_rcv_skb+0x123/0x220 [ 135.040429][ T4973] nfnetlink_rcv+0x167/0x1720 [ 135.045898][ T4973] netlink_unicast+0x5c0/0x690 [ 135.051201][ T4973] netlink_sendmsg+0x5c8/0x6f0 [ 135.056411][ T4973] ____sys_sendmsg+0x563/0x5b0 [ 135.061527][ T4973] ___sys_sendmsg+0x195/0x1e0 [ 135.067361][ T4973] __x64_sys_sendmsg+0xd4/0x160 [ 135.073346][ T4973] x64_sys_call+0x194c/0x3020 [ 135.078640][ T4973] do_syscall_64+0x12c/0x370 [ 135.083491][ T4973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.089911][ T4973] [ 135.092510][ T4973] value changed: 0x0000000000001115 -> 0x0000000000001116 [ 135.101256][ T4973] [ 135.103697][ T4973] Reported by Kernel Concurrency Sanitizer on: [ 135.111407][ T4973] CPU: 0 UID: 0 PID: 4973 Comm: syz.2.322 Not tainted syzkaller #0 PREEMPT(full) [ 135.121937][ T4973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.133551][ T4973] ================================================================== [ 135.149733][ T4985] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.159654][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 135.177937][ C0] EXT4-fs (loop3): initial error at time 1773928965: ext4_do_update_inode:5569: inode 15 [ 135.189860][ C0] EXT4-fs (loop3): last error at time 1773928965: ext4_do_update_inode:5569: inode 15 [ 135.202001][ T4985] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.326: mark_inode_dirty error [ 135.219871][ T4985] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.231063][ T4985] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.326: corrupted inode contents [ 135.319853][ T4985] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.320096][ T4985] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.326: mark_inode_dirty error [ 135.407701][ T4973] syz.2.322 (4973) used greatest stack depth: 5600 bytes left [ 135.464821][ T4985] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.464998][ T4985] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.326: mark inode dirty (error -117) [ 135.492701][ T4985] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.492946][ T4985] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 135.513328][ T4985] EXT4-fs (loop3): 1 orphan inode deleted [ 135.520061][ T4985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.554510][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.559827][ T35] usb 3-1: enqueue for inactive port 0 [ 136.566055][ T35] usb 3-1: enqueue for inactive port 0 [ 136.639716][ T35] vhci_hcd vhci_hcd.1: vhci_device speed not set