last executing test programs: 7m9.139533903s ago: executing program 4 (id=206): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) 7m6.102838026s ago: executing program 4 (id=240): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x6, 0x4, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7m5.928351111s ago: executing program 4 (id=246): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [], {0x2}, {0x2}}, 0x24, 0x3) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd28, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x2c}}, 0x0) 7m4.626489412s ago: executing program 4 (id=258): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) close(0x3) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4) 7m4.354148859s ago: executing program 4 (id=261): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m4.251818851s ago: executing program 4 (id=263): setns(0xc9, 0x8000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) unshare(0x6020400) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') pread64(r2, &(0x7f0000000380)=""/185, 0xb9, 0x5) pread64(r2, 0x0, 0x0, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6m49.178581826s ago: executing program 32 (id=263): setns(0xc9, 0x8000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) unshare(0x6020400) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') pread64(r2, &(0x7f0000000380)=""/185, 0xb9, 0x5) pread64(r2, 0x0, 0x0, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4m21.340188565s ago: executing program 5 (id=1699): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x526, &(0x7f0000001100)="$eJzs3U9vG2kZAPBnJnY2abPrLHBYVmJ3xS5KIqjTbOhuhNACEoLTSoVyDyFxoyhOXMVO20QVpOIDICEESFzgxAWJD4CE+hEQUiW4I0CgClo4cCgMsj1OQ2qnierYJfn9pDfzzj8/z2tnxvPOjDwBnFtvRcR0RGRZls1ERCmfnuYl9tqludyjh3eWmyWJLLv2tySSfFrntV7Khxfz1cYi4utfjfhW8nTc+s7u+lK1WtnKx2cbG8njLNu9tLaxtFpZrWzOvxLvLby/cGXhcl/aORkRH3z5zz/83s+/8sGvP3PrD4t/nf52u4FtB9vRT+2mF1vvRUchIrZOI9iQFFotbLsy5FwAADha83j/IxHxyYiYiVKMtI7mWmaGmxkAAADQL9kXJuJx0r7+BwAAAJxNaURMxNXRcn6/70Skabncvof3Y3EhrdbqjU9npf3zBZNRTK+vVSuX83sHJqOYNMfn8ntsO+PvHhqfj4hXI+IHpfHWeHm5Vl0Z6pkPAAAAOD8utvr8Sdrp//+z1O7/AwAAAGfM5LATAAAAAE6d/j8AAACcffr/AAAAcKZd/fDDZsk6z79eubmzvV67eWmlUl8vb2wvl5drWzfKq7Xa6oNCRG3jWa9XrdVufDY2t2/PNir1xmx9Z3dxo7a92Vhc+59HYAMAAAAD9Oqb936fRMTe58bTiMiSA/OKEdnIwYULg88POD3pSRb+0+nlAQzeyLATAIbGIT2cX8VhJwAM3bP2Az1v3vlN/3MBAABOx9TH96//t0rTaD4v6b7K3uCyA05Tfv0/6bGtA2eY6/9wfnXO+7sPAM6f4lFHADoFcOalx9jUn//6f5adKCkAAKDvJlolSct5P2Ai0rRcjni59ViAJ2cFX4mI35WKL11fq1bmWlMSpwcAAAAAAAAAAAAAAAAAAAAAAAAA4JiyLImsh/bTAGO013wAAADg/0NE+pckf/7XVOmdicPnB0aTf5Vaw4i49ZNrP7q91GhszTWn/31/euPH+fR3B376AgAAAOii00/v9OMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePbyz3CmDjPvgSxEx2S1+IcZaw7EoRsSFfyRROLBeEhEjfYi/dzciXusWP2mmFZN5FofjpxExPuT4F/sQH86ze839zxe7bX9pvNUadt/+Cnl5Xu3930jX+J3930iP/d/L3V4wfXrS6/d/Odsz/t2I1wvd9z+d+En+JhQOxG6Wt4/Zxm9+Y3e317zsZxFTXb9/kv1lmrXZpHBjtr6ze2ltY2m1slrZnJ+fe2/h/YUrC5dnr69VK/nfrjG+/4lf/eeo9l/oEX/ySfu7vv/vHLP9/75/++FH29XioVnF+GmWTb/d/f/vtXb8zy8eit/57vtU/nE3x6c69b12/aA3fvHbN948ov0rPdo/9oz2Tx+z/TNf++4fj7koADAA9Z3d9aVqtbJ1skoSsfccq6v0qozHC5FGnyvjMcCgS3HUMp2D2AHk85081AvxEZy4Mrx9EgAAcDqS/YP+YWcCAAAAAAAAAAAAAAAAAAAA51d9Z/TI3yc75s/RPcraui5zOObecJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCk/wYAAP//CIzIxg==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0x800, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0xfff1}, {0x2, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x8, 0x19, 0x13, 0xa, 0x0, 0x10e6, {0x4, 0x2521, 0xff, 0x9, 0x81, 0x20008}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c040) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0x0, 0xfff3}, {0x9, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041044}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f00000001c0)) 4m19.89332074s ago: executing program 5 (id=1714): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x22000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='yeah', 0x4) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) syz_genetlink_get_family_id$ethtool(&(0x7f0000002180), 0xffffffffffffffff) 4m19.559106857s ago: executing program 5 (id=1715): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0xa}, 0x20) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0xfffffffc, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) writev(r0, &(0x7f0000000740), 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x8044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x5, 0x8, 0x9b9b, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x2a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 4m18.703303308s ago: executing program 5 (id=1720): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2204f1a, &(0x7f0000000280)={[{@delalloc}]}, 0x82, 0x49f, &(0x7f0000000840)="$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") capset(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) 4m17.770014011s ago: executing program 5 (id=1733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$tun(0xffffffffffffff9c, 0x0, 0xacd6a4e1331c8c5c, 0x0) close(0x3) socket$netlink(0x10, 0x3, 0x2) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000010) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000100)='\f7', 0x2}], 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4m17.525655287s ago: executing program 5 (id=1735): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x24b, &(0x7f0000000940)="$eJzs3T9oG1ccB/DfnaT6n2jddikU2kIppTUYdyt0cZcWDMWYUgptwaWULi12wbXpZmfKkiGZk+ApiwnZ4mQMXkyWhEAmJ/HgLIHEZIjJkAwKp7ODEyt/jBSd8X0+cNKd9N793nH6vtNyXAClNRgRoxFRiYihiKhFRLK7wSf5Mri9udi3OhnRaPx4P2m2y7dzO/0GImIhIr6OiJU0ib+rEXPLv248XPv+82Oztc/OLP/S19WD3La5sf7D1unxo+fHvpq7ev3ueBKjUX/muDovafFZNYl4700UOyCSatEj4HVM/H/uRpb79yPi02b+a5FGfvKOz7y1UosvT72o74l71z7s5liBzms0atk1cKEBlE4aEfVI0uGIyNfTdHg4/w9/s9Kf/jM989/QX9OzU38WPVMBnVKPWP/uYs+Fgefyf6eS5x84vLL8/zSxdCtb36oUPRqgm7L8D/0+/0XIP5SO/EN5yT+Ul/zD4fLOPtq+LP9ph8cFHCyu/1Be8g/lJf9QXvIP5SX/UF678w8AlEujp+g7kIGiFD3/AAAAAAAAAAAAAAAAAAAAey32rU7uLN2qeflkxOa3EVFtVb+y/RyC3uZr/4Mka/ZUkndry28ft7mDNp0t+O7rt28XW//KR8XWn5+KWDgSESPV6t7fX9L2czDefcX3tT/aLNCmb34utv7jpWLrj61FXMrmn5FW808aHzTfW88/9ez87d1l737q//uondEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQTU8CAAD//1dubUI=") preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x20, 0xd) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x4, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x200000, 0x10009) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m17.481333938s ago: executing program 33 (id=1735): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x24b, &(0x7f0000000940)="$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") preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x20, 0xd) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x4, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x200000, 0x10009) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 15.058032306s ago: executing program 3 (id=3195): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x123d, &(0x7f0000001340)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf9, 0x0, &(0x7f0000000100)="b90000000044268cb89e14f086dd65e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000000000000000", 0x0, 0xfe, 0x60000000, 0x98, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", 0x0, 0x0, 0x700}, 0x50) mlockall(0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) getresuid(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, 0x0, 0x200, 0x0) 11.431886754s ago: executing program 3 (id=3204): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x0, 0x0, 0x9, 0x9}) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sg(&(0x7f0000000240), 0x200, 0x80c0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x20800) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x20000, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 8.803276587s ago: executing program 6 (id=3213): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001000000"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c800"], 0x2c}}, 0x0) 8.329867438s ago: executing program 1 (id=3215): fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94238000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000002a000000850000002a0000009500000000000000c6716cbde55f79594dec8881a4fc64ae128eb989df3a10205371784013f446bd23187959a0c6840480c4b76b55b17764bba4"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x470bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 7.092776908s ago: executing program 6 (id=3218): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f00000009c0)={[{@nocompress}, {@cruft}, {@check_strict}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$eJzs3V1v01gawPHHpYUqK6HV7gqhqsAB9qKVSnASCIq4AK9zkh5I7Mh2UHuFKpqiihRWlJW2vUHcsLvSzofgdj7EXM+XQfMRMvJL6GuSMiVNh/n/IvBJfHzOYyfy0xPFxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMRyq7ZdsKRhvPaKGsytBn4zLU6JUtnWe+v77S0eWAzpV8SK/8nsrFxNX7r6t73VV+L/bsl8+mxeZuPFrOz+6cqfH/51eqq//ZCAz8T2zu6rtW6383bSgYzRtUuD19W1Z0LfNJ26Vib0VaVctu8u10JVMw0dymykm8oNtBP5wYXsnS0pnV/121696jS0WnAXVaFSeXCnaNtl9STf0k4Q+t7dJ/nQXTaNhvHqSZ14dVznQfxBfGoiFWmnqdTGZrdTGrUDcaXCSSoVR1Uq2sVioVAsFsr3K/cf2Pb0kRfsQ+RIjcl/aDFZ3+jMDZzeVJb/pSFGPGnLiqhjH65UJRBfmgPWZxYfZYW7emi/+/N/P8tf3Vs9J0n+v54+uz4o/w+I5ewe27Iju/JK1qQrXenI24lHNN6HJQePeV20eGIk/PRYjDTFSV5R8Svii5KKlKUstjyXZalJKEpqYqQhWsLe++y9biafrkC0OBKJL4EoWRBXFkVJQSpSkZIo0ZKXVfGlLZ7UpSpO0sqGbCbHvTQk5i+VCgOr5Pqfu44Uh7RE/sfpfatTN3BqvX7+H+LimUUDAAAAAADGwUq+fY/H/zNyLSnVTEPbkw4LAAAAAAB8Q71eryfzYsXjfxG5JhbjfwAAAAAAvjdWco2dJSI5uZGWNsRKLpfiSwAAAAAAAL4TyZX/1+NFMgfKDbG+TJfC+B8AAAAAgO/EfwfPsT+bVWldsn76RYJgxvrQWvm7teXELzpb2YTuFw63GNXmrMtZI8miPJ09c/W8lc1+uTcJZtrL541Rc/1bWQBW+pXFXgCXTh6A/F9upnVurqfL9f6atJdczTR03vUbDwviOJenIr0S/ev15r8l2f3/ec3Llmxsdjv5F2+668nB+BC38mErm0DxyDyKQ2J5l8y3kFxzcewezyQXYmT95tJ+7f4b8Ficral086kT9/lIPsotEZneq5s7uP+zcZ+F/KC9z6IonHLPP8rttM7thdvp4pgoiqOiKO6P4quPxQmjKI2KovQVUVhyNAoAmJSNEVnIOpr4f8O5Nsnu0yfI7qf580I+ykJaZ2EuObFOzx1zRrdHndHtU2a3H4/cA2lQjo37/eFQVv0Ub/BpYL9ho2jFh/DCu61/ypXtnd07m1trLzsvO6+LxVLZvmfbPUvS3ZCZZDEkUgDAH9foe+yMrGHdGzGq/suXnxTk5YW8ka6sy1JytUHyi4NjW83t+xnCUjJqjYPN7tNyaNSaS9JkeoeXpSGjuovJVQ79dotD6x6MoTT+NwIAgDN0a0QePkn+Xxox7j6Yy4ePjnP77tYGAADGQwefrVz0HysITOt5oVIpONGyVoHvPlWBqda1Ml6kA3fZ8epatQI/8l2/EReemaoOVdhutfwgUjU/UC0/NCvKEktUuBpGuqlC3XS8yLhhq6GdUCvX9yLHjVTVhK5qtf/RMOGyDpKNw5Z2Tc24TmR8T4V+O3B1XqlQa7WVE0krmqr2IlMzcdFTrcA0nWBVPfMb7aZWVR26gWlFftpgvy/j1fygmTSbn/TBBgDgnNje2X211u123o6xMOl9BAAAB5GlAQAAAAAAAAAAAAAAAAAAAAA4/87i+j8KYy+s/NzrnYMwzknhopyLMH7fhZGnjvdncoICMDa/BgAA//+IFFJh") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r2, 0xfffff789) r3 = accept(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x8, 0xfffffffd, 0x0, 0xd0, 0x6, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4ea3, @empty}}, 0x1000, 0x2, 0x8005, 0x101, 0x4c, 0x8, 0xfc}, 0x9c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) lseek(r1, 0x2000, 0x0) 7.054839259s ago: executing program 0 (id=3219): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) lstat(&(0x7f0000000240)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1a00800, &(0x7f0000000e80)={[{@dioread_nolock}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x98}}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x340}}, {@debug}, {@nodelalloc}, {@noauto_da_alloc}], [{@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '\xa3'}}, {@euid_lt={'euid<', 0xee00}}, {@euid_lt}]}, 0xfd, 0x593, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x80000000, 0xff, {{0x10, 0x4, 0x3, 0x4, 0x40, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @empty, {[@timestamp_addr={0x44, 0x24, 0x56, 0x1, 0xf, [{@rand_addr=0x64010100, 0xfffffffb}, {@remote, 0x1}, {@broadcast, 0x1000}, {@rand_addr=0x64010101, 0xe}]}, @ra={0x94, 0x4}, @noop]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 6.143412741s ago: executing program 3 (id=3220): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d38000911171000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) syz_pidfd_open(0x0, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9ff06ffffaf64000000a2"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) write$tun(r3, &(0x7f0000000180)={@val={0x0, 0x88ca}, @val={0x1, 0x4, 0x6, 0x8, 0x10, 0xb000}, @x25={0x1, 0xe, 0x1f, "0fab6a7ed234de752f9bf6960b8254a37ec9660fbbae1b609f48febf9dc6b16d66f7005fd30f999621d92c7643c6fc8834199300bcef74e451f56b0e136f93070f5c0c635873fc0ed96fabb2629777af9b507dccf7e7644353f2fcac891d9c9a5da0f56bf220e5e05ba41b4fbdc2999425cb41aa64b466d191faa30ccefd471d904685e497c1a7d9f437845312c8602415312f9a263261d81a6c49ffdb960899133ac4e6b30e492064818bde08bc778008b70994848fecef305ec0196ca6792db6d4d4f221c7ecb1ec"}}, 0xda) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}, 0x0, r4}) 6.142166031s ago: executing program 0 (id=3231): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x7}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x11) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x438501, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800002, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x86000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @dev={0xac, 0x14, 0x14, 0x37}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x2}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x100}, &(0x7f0000000380)=0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 6.138648411s ago: executing program 1 (id=3222): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001900)=ANY=[@ANYBLOB="14000000030301"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) recvmmsg(r4, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4}, 0x44}], 0x1, 0x20, 0x0) pidfd_getfd(r1, r1, 0x0) 5.826540239s ago: executing program 6 (id=3225): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x60}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5420) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000030000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000040000080007400000040018000680140004"], 0xb4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x138, 0x16, 0x633, 0x70bd27, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x5, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x8, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 5.561234965s ago: executing program 0 (id=3226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.311725491s ago: executing program 2 (id=3227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x3) sendmsg$NL80211_CMD_VENDOR(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r2, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 5.252001493s ago: executing program 1 (id=3228): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001900)=ANY=[@ANYBLOB="14000000030301"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) recvmmsg(r3, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4}, 0x44}], 0x1, 0x20, 0x0) pidfd_getfd(r1, r1, 0x0) 5.009764249s ago: executing program 0 (id=3229): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001000000"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c800"], 0x2c}}, 0x0) 4.97814491s ago: executing program 6 (id=3230): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_usbip_server_init(0x1) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x490042, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=r3], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 4.343483705s ago: executing program 2 (id=3232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) write$nci(r0, 0x0, 0xb6) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x8000, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x40200) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r2, &(0x7f0000000000)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 4.170950549s ago: executing program 3 (id=3233): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) lstat(&(0x7f0000000240)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1a00800, &(0x7f0000000e80)={[{@dioread_nolock}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x98}}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x340}}, {@debug}, {@nodelalloc}, {@noauto_da_alloc}], [{@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '\xa3'}}, {@euid_lt={'euid<', 0xee00}}, {@euid_lt}]}, 0xfd, 0x593, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x80000000, 0xff, {{0x10, 0x4, 0x3, 0x4, 0x40, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @empty, {[@timestamp_addr={0x44, 0x24, 0x56, 0x1, 0xf, [{@rand_addr=0x64010100, 0xfffffffb}, {@remote, 0x1}, {@broadcast, 0x1000}, {@rand_addr=0x64010101, 0xe}]}, @ra={0x94, 0x4}, @noop]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 3.912343595s ago: executing program 1 (id=3234): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f00000009c0)={[{@nocompress}, {@cruft}, {@check_strict}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r2, 0xfffff789) r3 = accept(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x8, 0xfffffffd, 0x0, 0xd0, 0x6, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4ea3, @empty}}, 0x1000, 0x2, 0x8005, 0x101, 0x4c, 0x8, 0xfc}, 0x9c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) lseek(r1, 0x2000, 0x0) 3.332942699s ago: executing program 2 (id=3235): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_usbip_server_init(0x1) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x490042, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=r3], 0x1, 0x122e, &(0x7f0000002580)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 2.661327435s ago: executing program 6 (id=3236): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f00000009c0)={[{@nocompress}, {@cruft}, {@check_strict}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r2, 0xfffff789) r3 = accept(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x8, 0xfffffffd, 0x0, 0xd0, 0x6, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4ea3, @empty}}, 0x1000, 0x2, 0x8005, 0x101, 0x4c, 0x8, 0xfc}, 0x9c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) lseek(r1, 0x2000, 0x0) 2.580192907s ago: executing program 1 (id=3237): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x0, 0x0, 0x9, 0x9}) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sg(&(0x7f0000000240), 0x200, 0x80c0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x20800) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x20000, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.475179354s ago: executing program 0 (id=3238): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=@migrate={0xac, 0x21, 0x1, 0x70bd2d, 0xa5dfdbfe, {{@in=@multicast1, @in=@rand_addr=0x64010100, 0x4e22, 0x8001, 0x8, 0x0, 0x2, 0x80, 0x80, 0x3b}, 0x6e6bb3, 0x1}, [@migrate={0x50, 0x11, [{@in6=@empty, @in=@remote, @in=@multicast1, @in6=@private0, 0x2b, 0x3, 0x0, 0x34fd, 0x2, 0xa}]}, @offload={0xc}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000340)}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4004884}, 0x4000001) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) clock_adjtime(0x5, &(0x7f0000000b40)={0x9, 0x6a811517, 0xfffffffffffffffc, 0x9, 0xcb89, 0x0, 0xf, 0x3, 0x7, 0x6, 0x81, 0x7fff, 0x8, 0x0, 0x8, 0x7fff, 0x1, 0x0, 0x4, 0x100000001, 0x10001, 0x1, 0x5, 0x5, 0xfffffffffffffff9, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, r5, 0x1, 0x70bd2b, 0x25dfdbf8, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2a, 0xb, 0xfffffff8}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000) 1.322014908s ago: executing program 3 (id=3239): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) lstat(&(0x7f0000000240)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1a00800, &(0x7f0000000e80)={[{@dioread_nolock}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x98}}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x340}}, {@debug}, {@nodelalloc}, {@noauto_da_alloc}], [{@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '\xa3'}}, {@euid_lt={'euid<', 0xee00}}, {@euid_lt}]}, 0xfd, 0x593, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x80000000, 0xff, {{0x10, 0x4, 0x3, 0x4, 0x40, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @empty, {[@timestamp_addr={0x44, 0x24, 0x56, 0x1, 0xf, [{@rand_addr=0x64010100, 0xfffffffb}, {@remote, 0x1}, {@broadcast, 0x1000}, {@rand_addr=0x64010101, 0xe}]}, @ra={0x94, 0x4}, @noop]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 794.861761ms ago: executing program 0 (id=3240): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x3, 0x7ffcfffc}]}) r0 = syz_pidfd_open(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001900)=ANY=[@ANYBLOB="14000000030301"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) recvmmsg(r3, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4}, 0x44}], 0x1, 0x20, 0x0) pidfd_getfd(r0, r0, 0x0) 739.312032ms ago: executing program 2 (id=3241): mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000022, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,nfs=stale_rw,uid=', @ANYRESHEX=0xee00, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c617564692c0093591481b2dac6c586482df1499a5d110264abd884a04c3c17f1c678294ba89de3d86c0645512aed6d9103b453b32f2367ac88ec9428d5c7acbe688a0077fcfc4862ee05f019c1f7fd56a6ffbf9af11e85ba202f6f3745d3"], 0x1, 0x1f5, &(0x7f0000000600)="$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") r2 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000b20000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007fc0), r3) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000080c0)={0x0, 0x0, &(0x7f0000008080)={&(0x7f0000008000)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xc}]}, 0x1c}}, 0x0) 554.047006ms ago: executing program 1 (id=3242): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) socket(0x2, 0x2, 0x0) ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000100000043ca0629eb9d386b5d41bb330f355a055ee1950ea9a91def8beaef22408f3e943e991578bbbe884310d420bee4a36b78e97a2fe590e04dbfe24d837f22b0171796851ae5bf08a94a0573b51b4c4452b902a3c5cb428ab048538c3ffb50ddc140430973b057c93cd0e64f9d0ba292bef5b30e6eaad0b3b5fa4aef61642d1882e1748d48613e82099c24ea1a1b0619e232211dd9b77f2c40a9aba7c4d5d24d4fc55b02387d40e38f3894e71e4d380bf72a7b442c7d04c34cc9764dcc823d14d0b3818ec39e28a4438a4731b903c3d47832002db17848dd95afe6955afd565b22cd", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x40000}, 0x4000) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='e:mygroup/myevent sch-d.s', 0x19) 332.189462ms ago: executing program 2 (id=3243): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) lstat(&(0x7f0000000240)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1a00800, &(0x7f0000000e80)={[{@dioread_nolock}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x98}}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x340}}, {@debug}, {@nodelalloc}, {@noauto_da_alloc}], [{@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '\xa3'}}, {@euid_lt={'euid<', 0xee00}}, {@euid_lt}]}, 0xfd, 0x593, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x80000000, 0xff, {{0x10, 0x4, 0x3, 0x4, 0x40, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @empty, {[@timestamp_addr={0x44, 0x24, 0x56, 0x1, 0xf, [{@rand_addr=0x64010100, 0xfffffffb}, {@remote, 0x1}, {@broadcast, 0x1000}, {@rand_addr=0x64010101, 0xe}]}, @ra={0x94, 0x4}, @noop]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 75.344678ms ago: executing program 2 (id=3244): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb000018000000000000004cf7"], 0x0, 0x66, 0x0, 0x3}, 0x28) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x5, 0x0, 0x0, 0xfd, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x80000480}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 75.195268ms ago: executing program 6 (id=3245): pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1, 0xffffff01, 0x2) socket(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x241, &(0x7f0000010540)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0xfe37, 0x0) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x4004000) fallocate(r2, 0x0, 0x2000000, 0x8800000) 0s ago: executing program 3 (id=3246): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_usbip_server_init(0x1) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x490042, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 338.435023][T13257] total_active_anon 0 [ 338.439018][T13257] total_inactive_file 0 [ 338.443194][T13257] total_active_file 0 [ 338.447309][T13257] total_unevictable 135168 [ 338.451813][T13257] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2051,pid=11691,uid=0 [ 338.466553][T13257] Memory cgroup out of memory: Killed process 11691 (syz.1.2051) total-vm:98156kB, anon-rss:1240kB, file-rss:22856kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:0 [ 338.915600][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.954253][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 338.957194][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.211704][T13309] UDC core: g1: couldn't find an available UDC or it's busy [ 339.303032][T13312] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 339.303032][T13312] The task syz.0.2453 (13312) triggered the difference, watch for misbehavior. [ 339.775399][T13322] syzkaller0: entered promiscuous mode [ 339.786449][T13322] syzkaller0: entered allmulticast mode [ 340.119818][T13337] netlink: 'syz.0.2462': attribute type 1 has an invalid length. [ 340.136087][T13337] netlink: 'syz.0.2462': attribute type 4 has an invalid length. [ 340.149909][T13337] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2462'. [ 340.180285][T13334] netlink: 'syz.0.2462': attribute type 1 has an invalid length. [ 340.201906][T13334] netlink: 'syz.0.2462': attribute type 4 has an invalid length. [ 340.256669][T13334] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2462'. [ 340.558936][T13361] loop6: detected capacity change from 0 to 512 [ 340.576785][T13361] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 340.815508][ T28] kauditd_printk_skb: 498 callbacks suppressed [ 340.815532][ T28] audit: type=1400 audit(1786322808.255:9474): avc: denied { execmem } for pid=13364 comm="syz.6.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 341.698579][ T28] audit: type=1400 audit(1786322808.315:9475): avc: denied { bpf } for pid=13367 comm="syz.2.2472" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.719257][ T28] audit: type=1400 audit(1786322808.365:9476): avc: denied { module_request } for pid=13366 comm="syz.1.2469" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 341.741657][ T28] audit: type=1400 audit(1786322808.375:9477): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 341.748625][T13384] loop6: detected capacity change from 0 to 128 [ 341.862366][ T28] audit: type=1400 audit(1786322808.375:9478): avc: denied { open } for pid=3296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 341.888355][ T28] audit: type=1400 audit(1786322808.925:9479): avc: denied { write } for pid=13367 comm="syz.2.2472" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 341.913020][T13384] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.913876][ T28] audit: type=1400 audit(1786322808.995:9480): avc: denied { create } for pid=13366 comm="syz.1.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 341.925521][T13384] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.990731][ T28] audit: type=1400 audit(1786322809.045:9481): avc: denied { module_request } for pid=13366 comm="syz.1.2469" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 342.013155][ T28] audit: type=1400 audit(1786322809.164:9482): avc: denied { read write } for pid=10023 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 342.071302][ T28] audit: type=1400 audit(1786322809.164:9483): avc: denied { open } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 342.079337][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.064727][T13424] netlink: 'syz.2.2483': attribute type 39 has an invalid length. [ 343.195037][T13426] gre0: Caught tx_queue_len zero misconfig [ 344.277390][T13442] loop6: detected capacity change from 0 to 8192 [ 345.106743][T13451] bridge0: port 3(erspan0) entered blocking state [ 345.113275][T13451] bridge0: port 3(erspan0) entered disabled state [ 345.120047][T13451] erspan0: entered allmulticast mode [ 345.126546][T13451] erspan0: entered promiscuous mode [ 345.145127][T13451] erspan0: left allmulticast mode [ 345.150231][T13451] erspan0: left promiscuous mode [ 345.155378][T13451] bridge0: port 3(erspan0) entered disabled state [ 346.190300][ T28] kauditd_printk_skb: 227 callbacks suppressed [ 346.190319][ T28] audit: type=1400 audit(1786322813.742:9711): avc: denied { unmount } for pid=10023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 346.224574][ T28] audit: type=1400 audit(1786322813.772:9712): avc: denied { open } for pid=13452 comm="syz.1.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 346.290229][ T28] audit: type=1400 audit(1786322813.772:9713): avc: denied { perfmon } for pid=13452 comm="syz.1.2493" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.357842][ T28] audit: type=1400 audit(1786322813.772:9714): avc: denied { kernel } for pid=13452 comm="syz.1.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 346.379437][T13459] loop6: detected capacity change from 0 to 128 [ 346.382965][ T28] audit: type=1400 audit(1786322813.802:9715): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.410807][ T28] audit: type=1400 audit(1786322813.802:9716): avc: denied { read write } for pid=10023 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.460716][T13459] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.489706][ T28] audit: type=1400 audit(1786322813.802:9717): avc: denied { open } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.522136][ T28] audit: type=1400 audit(1786322813.802:9718): avc: denied { read write open } for pid=3296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.539528][T13459] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.549721][ T28] audit: type=1400 audit(1786322813.802:9719): avc: denied { ioctl } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.584934][ T28] audit: type=1400 audit(1786322813.862:9720): avc: denied { create } for pid=13454 comm="syz.3.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 346.778045][T13470] xt_hashlimit: size too large, truncated to 1048576 [ 347.006125][T13473] geneve1: entered promiscuous mode [ 347.012770][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.399367][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2501'. [ 347.443476][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2501'. [ 347.473180][T13488] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 347.515519][T13488] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 347.965223][T13495] xt_hashlimit: size too large, truncated to 1048576 [ 348.113658][T13502] loop6: detected capacity change from 0 to 164 [ 348.711773][T13512] loop0: detected capacity change from 0 to 8192 [ 349.889237][T13538] xt_hashlimit: size too large, truncated to 1048576 [ 351.073364][T13556] xt_hashlimit: size too large, truncated to 1048576 [ 351.202389][ T28] kauditd_printk_skb: 370 callbacks suppressed [ 351.202406][ T28] audit: type=1400 audit(1786322818.740:10091): avc: denied { prog_load } for pid=13557 comm="syz.2.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 351.303138][ T28] audit: type=1400 audit(1786322818.810:10092): avc: denied { perfmon } for pid=13557 comm="syz.2.2522" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.372922][ T28] audit: type=1400 audit(1786322818.810:10093): avc: denied { bpf } for pid=13557 comm="syz.2.2522" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.403264][ T28] audit: type=1400 audit(1786322818.810:10094): avc: denied { prog_run } for pid=13557 comm="syz.2.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 351.451902][ T28] audit: type=1400 audit(1786322818.900:10095): avc: denied { open } for pid=13564 comm="syz.3.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 351.511856][ T28] audit: type=1400 audit(1786322818.900:10096): avc: denied { perfmon } for pid=13564 comm="syz.3.2524" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.546355][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 351.549646][ T28] audit: type=1400 audit(1786322818.900:10097): avc: denied { kernel } for pid=13564 comm="syz.3.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 351.568664][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 351.582614][ T28] audit: type=1400 audit(1786322818.900:10098): avc: denied { perfmon } for pid=13564 comm="syz.3.2524" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.635427][T13581] audit: audit_backlog=65 > audit_backlog_limit=64 [ 351.642429][ T28] audit: type=1400 audit(1786322818.960:10099): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.668469][T13574] loop0: detected capacity change from 0 to 8192 [ 352.840421][T13589] xt_hashlimit: size too large, truncated to 1048576 [ 353.127586][T13600] loop6: detected capacity change from 0 to 128 [ 353.189198][T13600] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.260579][T13608] xt_hashlimit: size too large, truncated to 1048576 [ 353.958860][T13600] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.119989][T13614] lo speed is unknown, defaulting to 1000 [ 354.597881][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.748591][T13625] netlink: 'syz.1.2539': attribute type 1 has an invalid length. [ 355.139059][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2541'. [ 355.161587][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2541'. [ 355.189540][T13629] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 355.206465][T13629] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 355.230174][T13640] loop6: detected capacity change from 0 to 164 [ 355.398255][T13634] loop0: detected capacity change from 0 to 8192 [ 355.427453][T13634] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 355.444748][T13647] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 355.461893][T13643] futex_wake_op: syz.2.2543 tries to shift op by 36; fix this program [ 355.661218][T13653] Unsupported NM flag settings (240) [ 356.212596][ T28] kauditd_printk_skb: 636 callbacks suppressed [ 356.212615][ T28] audit: type=1400 audit(1786322823.747:10653): avc: denied { setopt } for pid=13662 comm="syz.2.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 356.235375][T13666] syzkaller0: entered promiscuous mode [ 356.261596][T13666] syzkaller0: entered allmulticast mode [ 356.272644][ T28] audit: type=1400 audit(1786322823.757:10654): avc: denied { create } for pid=13656 comm="syz.1.2548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 356.297077][T13666] tipc: Enabled bearer , priority 0 [ 356.308025][ T28] audit: type=1400 audit(1786322823.787:10655): avc: denied { create } for pid=13662 comm="syz.2.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.337494][T13666] tipc: Resetting bearer [ 356.351692][ T28] audit: type=1400 audit(1786322823.797:10656): avc: denied { write } for pid=13662 comm="syz.2.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.374211][ T28] audit: type=1400 audit(1786322823.797:10657): avc: denied { read } for pid=13662 comm="syz.2.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.394942][T13664] tipc: Resetting bearer [ 356.401473][ T28] audit: type=1400 audit(1786322823.797:10658): avc: denied { create } for pid=13662 comm="syz.2.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.453519][T13664] tipc: Disabling bearer [ 356.463707][ T28] audit: type=1400 audit(1786322823.797:10659): avc: denied { setopt } for pid=13662 comm="syz.2.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.504553][ T28] audit: type=1400 audit(1786322823.797:10660): avc: denied { connect } for pid=13662 comm="syz.2.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.569714][ T28] audit: type=1400 audit(1786322823.797:10661): avc: denied { name_connect } for pid=13662 comm="syz.2.2549" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 356.644629][ T28] audit: type=1400 audit(1786322823.837:10662): avc: denied { create } for pid=13664 comm="syz.3.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.922123][T13681] xt_hashlimit: size too large, truncated to 1048576 [ 357.720853][T13693] syzkaller0: entered promiscuous mode [ 357.732108][T13693] syzkaller0: entered allmulticast mode [ 357.754813][T13693] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2559'. [ 358.062559][T13709] netlink: 'syz.3.2566': attribute type 1 has an invalid length. [ 358.093806][T13709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2566'. [ 358.282370][T13716] netlink: 'syz.2.2568': attribute type 4 has an invalid length. [ 360.528706][T13755] loop6: detected capacity change from 0 to 128 [ 360.551758][T13755] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.582356][T13755] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.683944][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.304534][ T28] kauditd_printk_skb: 363 callbacks suppressed [ 361.304562][ T28] audit: type=1326 audit(1786322828.845:11026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.3.2584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80dc7e0d9 code=0x7ffc0000 [ 361.394940][ T28] audit: type=1326 audit(1786322828.895:11027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.3.2584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa80dc7e0d9 code=0x7ffc0000 [ 361.423548][ T28] audit: type=1326 audit(1786322828.895:11028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.3.2584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80dc7e0d9 code=0x7ffc0000 [ 361.450464][ T28] audit: type=1326 audit(1786322828.895:11029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.3.2584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa80dc7e0d9 code=0x7ffc0000 [ 362.021384][ T28] audit: type=1400 audit(1786322828.895:11030): avc: denied { create } for pid=13767 comm="syz.3.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 362.043056][ T28] audit: type=1326 audit(1786322828.895:11031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.3.2584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80dc7e0d9 code=0x7ffc0000 [ 362.083359][ T28] audit: type=1326 audit(1786322828.935:11032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.3.2584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80dc7e0d9 code=0x7ffc0000 [ 362.135463][T13782] audit: audit_backlog=65 > audit_backlog_limit=64 [ 362.142020][T13782] audit: audit_lost=37 audit_rate_limit=0 audit_backlog_limit=64 [ 362.150289][ T28] audit: type=1326 audit(1786322828.935:11033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.3.2584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa80dc7e0d9 code=0x7ffc0000 [ 362.934889][T13802] loop6: detected capacity change from 0 to 128 [ 363.005169][T13802] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.025125][T13802] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.174525][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.185343][T13807] xt_hashlimit: size too large, truncated to 1048576 [ 363.391506][T13815] loop0: detected capacity change from 0 to 256 [ 363.784424][T13829] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 364.098082][T13840] syzkaller0: entered promiscuous mode [ 364.103710][T13840] syzkaller0: entered allmulticast mode [ 364.133713][T13840] tipc: Enabled bearer , priority 0 [ 364.157744][T13844] loop0: detected capacity change from 0 to 128 [ 364.167455][T13843] syzkaller0: entered promiscuous mode [ 364.196534][T13843] syzkaller0: entered allmulticast mode [ 364.207196][T13844] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.220745][T13840] tipc: Resetting bearer [ 364.236796][T13844] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.252997][T13839] tipc: Resetting bearer [ 364.283035][T13839] tipc: Disabling bearer [ 364.344412][T13849] xt_hashlimit: size too large, truncated to 1048576 [ 364.760109][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.154257][T13866] syzkaller0: entered promiscuous mode [ 365.161340][T13866] syzkaller0: entered allmulticast mode [ 365.557841][T13878] loop0: detected capacity change from 0 to 4096 [ 365.618862][T13878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 365.644492][T13878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.668604][T13878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.360002][T13900] xt_hashlimit: size too large, truncated to 1048576 [ 366.507395][ T28] kauditd_printk_skb: 652 callbacks suppressed [ 366.507415][ T28] audit: type=1400 audit(1786322833.892:11676): avc: denied { create } for pid=13897 comm="syz.1.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 366.907816][ T28] audit: type=1400 audit(1786322833.902:11677): avc: denied { setopt } for pid=13897 comm="syz.1.2623" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 366.929245][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.947905][ T28] audit: type=1400 audit(1786322834.042:11678): avc: denied { module_request } for pid=13897 comm="syz.1.2623" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 367.003223][ T28] audit: type=1400 audit(1786322834.072:11679): avc: denied { name_bind } for pid=13897 comm="syz.1.2623" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 367.031353][ T28] audit: type=1400 audit(1786322834.132:11680): avc: denied { prog_load } for pid=13901 comm="syz.2.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 367.051680][ T28] audit: type=1400 audit(1786322834.212:11681): avc: denied { prog_load } for pid=13901 comm="syz.2.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 367.186780][ T28] audit: type=1400 audit(1786322834.222:11682): avc: denied { bpf } for pid=13901 comm="syz.2.2624" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 367.209508][ T28] audit: type=1400 audit(1786322834.232:11683): avc: denied { perfmon } for pid=13901 comm="syz.2.2624" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 367.233434][ T28] audit: type=1400 audit(1786322834.242:11684): avc: denied { prog_load } for pid=13901 comm="syz.2.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 367.253540][ T28] audit: type=1400 audit(1786322834.252:11685): avc: denied { perfmon } for pid=13901 comm="syz.2.2624" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 367.325297][T13912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2625'. [ 368.067118][T13922] syzkaller0: entered promiscuous mode [ 368.099507][T13922] syzkaller0: entered allmulticast mode [ 368.195086][T13890] net_ratelimit: 212 callbacks suppressed [ 368.195105][T13890] Set syz1 is full, maxelem 65536 reached [ 369.098902][ T5440] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 369.111695][ T5440] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 369.123601][ T5440] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 369.137559][ T5440] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 369.156820][T13968] veth0_macvtap: left promiscuous mode [ 369.890940][T14002] loop0: detected capacity change from 0 to 164 [ 369.944629][T13988] sit0: entered promiscuous mode [ 369.968002][T13988] sit0: entered allmulticast mode [ 370.004323][ T3020] veth0_macvtap: entered promiscuous mode [ 370.013019][T13996] syzkaller0: entered promiscuous mode [ 370.026226][T13996] syzkaller0: entered allmulticast mode [ 370.135033][T14014] loop6: detected capacity change from 0 to 128 [ 370.188089][T14014] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 370.244482][T14014] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.462167][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.611566][T14036] bond2: (slave batadv0): Removing an active aggregator [ 370.627413][T14036] bond2: (slave batadv0): Releasing backup interface [ 370.670157][T14036] bond1: (slave veth0_to_bond): Releasing active interface [ 370.721738][T14036] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 370.811215][T14038] team0: Failed to send options change via netlink (err -105) [ 370.834167][T14038] team0: Mode changed to "loadbalance" [ 370.969891][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 371.154907][T14056] loop0: detected capacity change from 0 to 1024 [ 371.228679][T14059] xt_hashlimit: size too large, truncated to 1048576 [ 371.270831][T14060] syzkaller0: entered promiscuous mode [ 371.310479][T14060] syzkaller0: entered allmulticast mode [ 371.525311][T14065] can: request_module (can-proto-0) failed. [ 371.575829][ T28] kauditd_printk_skb: 938 callbacks suppressed [ 371.575847][ T28] audit: type=1400 audit(1786322839.110:12624): avc: denied { module_request } for pid=14050 comm="syz.6.2659" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 371.710562][ T28] audit: type=1400 audit(1786322839.240:12625): avc: denied { create } for pid=14070 comm="syz.2.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.741350][T14071] sctp: [Deprecated]: syz.2.2663 (pid 14071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.741350][T14071] Use struct sctp_sack_info instead [ 371.789178][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 371.801757][ T28] audit: type=1400 audit(1786322839.250:12626): avc: denied { read } for pid=14070 comm="syz.2.2663" dev="nsfs" ino=4026532595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 371.920378][ T28] audit: type=1400 audit(1786322839.250:12627): avc: denied { open } for pid=14070 comm="syz.2.2663" path="net:[4026532595]" dev="nsfs" ino=4026532595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 371.993237][T14074] audit: audit_backlog=65 > audit_backlog_limit=64 [ 372.006678][T14074] audit: audit_lost=41 audit_rate_limit=0 audit_backlog_limit=64 [ 372.024189][T14077] audit: audit_backlog=65 > audit_backlog_limit=64 [ 372.031368][T14074] audit: backlog limit exceeded [ 372.036257][ T28] audit: type=1400 audit(1786322839.250:12628): avc: denied { create } for pid=14070 comm="syz.2.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 372.061002][T14077] audit: audit_lost=42 audit_rate_limit=0 audit_backlog_limit=64 [ 372.284052][T14088] loop0: detected capacity change from 0 to 128 [ 372.299901][T14088] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.327645][T14088] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.486250][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.729327][T14101] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 372.729327][T14101] program syz.0.2672 not setting count and/or reply_len properly [ 372.735433][T14102] xt_hashlimit: size too large, truncated to 1048576 [ 372.913958][T14101] loop0: detected capacity change from 0 to 764 [ 372.955833][T14101] iso9660: Unknown parameter '~k#áÐî“XHÐ [ 372.955833][T14101] #2jŽÐpôºš' [ 373.236955][T14116] loop0: detected capacity change from 0 to 128 [ 373.252447][T14114] syzkaller0: entered promiscuous mode [ 373.259485][T14114] syzkaller0: entered allmulticast mode [ 373.277585][T14116] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.304388][T14116] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.469818][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.660917][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2682'. [ 374.519129][T14141] xt_hashlimit: size too large, truncated to 1048576 [ 374.806410][T14144] loop0: detected capacity change from 0 to 164 [ 374.874965][T14146] loop6: detected capacity change from 0 to 164 [ 375.690776][T14163] loop0: detected capacity change from 0 to 164 [ 376.212105][T14174] lo speed is unknown, defaulting to 1000 [ 376.583950][ T28] kauditd_printk_skb: 544 callbacks suppressed [ 376.583975][ T28] audit: type=1400 audit(1786322844.117:13163): avc: denied { create } for pid=14182 comm="syz.0.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 376.637520][ T28] audit: type=1400 audit(1786322844.157:13164): avc: denied { create } for pid=14182 comm="syz.0.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 376.670476][ T28] audit: type=1400 audit(1786322844.157:13165): avc: denied { create } for pid=14182 comm="syz.0.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.708609][ T28] audit: type=1400 audit(1786322844.207:13166): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.770453][ T28] audit: type=1400 audit(1786322844.207:13167): avc: denied { open } for pid=3295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.846135][ T28] audit: type=1400 audit(1786322844.207:13168): avc: denied { ioctl } for pid=3295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1311 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.939027][ T28] audit: type=1400 audit(1786322844.227:13169): avc: denied { open } for pid=14184 comm="syz.2.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 377.007606][ T28] audit: type=1400 audit(1786322844.227:13170): avc: denied { perfmon } for pid=14184 comm="syz.2.2701" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 377.067652][T14202] loop6: detected capacity change from 0 to 164 [ 377.069634][ T28] audit: type=1400 audit(1786322844.227:13171): avc: denied { kernel } for pid=14184 comm="syz.2.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 377.126704][ T28] audit: type=1400 audit(1786322844.247:13172): avc: denied { prog_load } for pid=14184 comm="syz.2.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 377.265021][T14208] xt_hashlimit: size too large, truncated to 1048576 [ 377.647431][T14212] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14212 comm=syz.0.2708 [ 377.857514][T14221] loop0: detected capacity change from 0 to 164 [ 378.053591][T14229] loop6: detected capacity change from 0 to 128 [ 378.074618][T14229] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.088721][T14229] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.312182][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.488570][T14245] syzkaller0: entered promiscuous mode [ 378.515163][T14245] syzkaller0: entered allmulticast mode [ 378.532805][T14250] loop6: detected capacity change from 0 to 128 [ 378.564852][T14250] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.593921][T14250] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.871489][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.932933][T14270] loop0: detected capacity change from 0 to 128 [ 378.951774][T14270] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.966511][T14270] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.084568][T14274] tc action pedit offset 0 out of bounds [ 379.113750][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 379.342983][T14283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2729'. [ 379.406244][T14282] IPv6: …: Disabled Multicast RS [ 379.908314][T14287] syzkaller0: entered promiscuous mode [ 379.913849][T14287] syzkaller0: entered allmulticast mode [ 379.936127][T14306] loop0: detected capacity change from 0 to 128 [ 379.958328][T14306] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.410478][T14306] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.554078][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.716631][T14322] loop6: detected capacity change from 0 to 164 [ 381.597798][ T28] kauditd_printk_skb: 549 callbacks suppressed [ 381.597815][ T28] audit: type=1400 audit(1786322848.915:13719): avc: denied { create } for pid=14315 comm="syz.3.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 381.639094][ T28] audit: type=1400 audit(1786322849.175:13723): avc: denied { create } for pid=14315 comm="syz.3.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 381.726908][ T28] audit: type=1400 audit(1786322849.265:13724): avc: denied { unmount } for pid=10023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 381.764640][T14333] loop0: detected capacity change from 0 to 128 [ 381.773481][ T28] audit: type=1400 audit(1786322849.265:13725): avc: denied { search } for pid=14332 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.809152][T14333] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 381.833210][ T28] audit: type=1400 audit(1786322849.265:13726): avc: denied { search } for pid=14332 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.858711][ T28] audit: type=1400 audit(1786322849.265:13727): avc: denied { search } for pid=14332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.882614][ T28] audit: type=1400 audit(1786322849.265:13728): avc: denied { search } for pid=14332 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.906838][ T28] audit: type=1400 audit(1786322849.285:13729): avc: denied { search } for pid=14334 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.943402][ T28] audit: type=1400 audit(1786322849.285:13730): avc: denied { search } for pid=14334 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.967134][ T28] audit: type=1400 audit(1786322849.285:13731): avc: denied { search } for pid=14334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.005721][T14333] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.583691][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 383.286326][T14382] xt_hashlimit: size too large, truncated to 1048576 [ 383.423211][T14383] loop0: detected capacity change from 0 to 164 [ 384.812837][T14427] loop0: detected capacity change from 0 to 512 [ 385.228306][T14447] xt_hashlimit: size too large, truncated to 1048576 [ 385.515694][T14427] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2763: bg 0: block 433: padding at end of block bitmap is not set [ 385.535046][T14427] loop0: lost filesystem error report for type 5 error -117 [ 385.536978][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 385.550760][ C0] EXT4-fs (loop0): initial error at time 1786322853: ext4_validate_block_bitmap:441 [ 385.560188][ C0] EXT4-fs (loop0): last error at time 1786322853: ext4_validate_block_bitmap:441 [ 385.578839][T14427] EXT4-fs (loop0): Remounting filesystem read-only [ 385.589569][T14427] EXT4-fs (loop0): 1 truncate cleaned up [ 385.609583][ T30] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.616348][T14427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.654058][ T30] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.660831][T14427] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.688647][ T30] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 385.760773][T14451] loop6: detected capacity change from 0 to 164 [ 385.914424][T14455] can: request_module (can-proto-0) failed. [ 386.033510][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.432028][T14479] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14479 comm=syz.3.2780 [ 386.626268][ T28] kauditd_printk_skb: 612 callbacks suppressed [ 386.626286][ T28] audit: type=1400 audit(1786322854.152:14338): avc: denied { unmount } for pid=10023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 386.656097][ T28] audit: type=1400 audit(1786322854.182:14339): avc: denied { create } for pid=14483 comm="syz.3.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 386.677616][ T28] audit: type=1400 audit(1786322854.182:14340): avc: denied { read write } for pid=10023 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.711605][ T28] audit: type=1400 audit(1786322854.182:14341): avc: denied { open } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.765622][ T28] audit: type=1400 audit(1786322854.182:14342): avc: denied { ioctl } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.818377][ T28] audit: type=1400 audit(1786322854.242:14343): avc: denied { map_create } for pid=14488 comm="syz.6.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 386.848302][T14493] futex_wake_op: syz.1.2786 tries to shift op by 144; fix this program [ 386.863320][ T28] audit: type=1400 audit(1786322854.242:14344): avc: denied { perfmon } for pid=14488 comm="syz.6.2785" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 386.976361][ T28] audit: type=1400 audit(1786322854.242:14345): avc: denied { map_create } for pid=14488 comm="syz.6.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 387.006690][T14486] xt_hashlimit: size too large, truncated to 1048576 [ 387.047259][ T28] audit: type=1400 audit(1786322854.242:14346): avc: denied { map_read map_write } for pid=14488 comm="syz.6.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 387.163986][ T28] audit: type=1400 audit(1786322854.282:14347): avc: denied { create } for pid=14488 comm="syz.6.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 389.019320][T14553] xt_hashlimit: size too large, truncated to 1048576 [ 390.390482][T14563] lo speed is unknown, defaulting to 1000 [ 390.450482][T14591] loop0: detected capacity change from 0 to 128 [ 390.484083][T14591] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.525044][T14591] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.711451][T14600] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 390.718048][T14600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.725564][T14600] vhci_hcd vhci_hcd.0: Device attached [ 391.179889][ T5953] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 391.596025][T14601] vhci_hcd: connection reset by peer [ 391.604339][ T39] vhci_hcd vhci_hcd.2: stop threads [ 391.609892][ T39] vhci_hcd vhci_hcd.2: release socket [ 391.616324][ T39] vhci_hcd vhci_hcd.2: disconnect device [ 391.625442][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.649433][ T28] kauditd_printk_skb: 478 callbacks suppressed [ 391.649461][ T28] audit: type=1400 audit(1786322859.170:14826): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.715795][ T28] audit: type=1400 audit(1786322859.170:14827): avc: denied { open } for pid=3295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.914675][ T28] audit: type=1400 audit(1786322859.170:14828): avc: denied { ioctl } for pid=3295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1311 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.059475][ T28] audit: type=1400 audit(1786322859.290:14829): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.128334][ T28] audit: type=1400 audit(1786322859.290:14830): avc: denied { read write open } for pid=3295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.245862][ T28] audit: type=1400 audit(1786322859.290:14831): avc: denied { ioctl } for pid=3295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1311 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.273774][ T28] audit: type=1400 audit(1786322859.470:14832): avc: denied { create } for pid=14609 comm="syz.1.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.295232][ T28] audit: type=1400 audit(1786322859.500:14833): avc: denied { setopt } for pid=14609 comm="syz.1.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.321677][ T28] audit: type=1400 audit(1786322859.560:14834): avc: denied { setopt } for pid=14609 comm="syz.1.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.359226][ T28] audit: type=1400 audit(1786322859.620:14835): avc: denied { create } for pid=14609 comm="syz.1.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 392.490549][T14616] xt_hashlimit: size too large, truncated to 1048576 [ 393.251856][T14637] netlink: 'syz.1.2825': attribute type 39 has an invalid length. [ 393.886502][T14660] loop6: detected capacity change from 0 to 8192 [ 393.894295][T14657] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 393.900821][T14657] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.908394][T14657] vhci_hcd vhci_hcd.0: Device attached [ 393.914543][T14660] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 394.691624][T14658] vhci_hcd: connection closed [ 394.698369][ T5460] vhci_hcd vhci_hcd.6: stop threads [ 394.726588][ T5460] vhci_hcd vhci_hcd.6: release socket [ 394.738980][ T5460] vhci_hcd vhci_hcd.6: disconnect device [ 394.746805][T14664] loop0: detected capacity change from 0 to 128 [ 394.957486][T14664] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 395.044635][T14664] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.279236][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.689819][T14676] xt_hashlimit: size too large, truncated to 1048576 [ 395.944785][T14679] loop0: detected capacity change from 0 to 512 [ 396.018886][T14679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.064857][T14679] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.262498][ T5953] usb 5-1: enqueue for inactive port 0 [ 396.266491][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.294654][ T5953] usb 5-1: enqueue for inactive port 0 [ 396.382398][ T5953] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 396.665684][T14699] netlink: 'syz.6.2844': attribute type 39 has an invalid length. [ 396.740264][ T28] kauditd_printk_skb: 304 callbacks suppressed [ 396.740283][ T28] audit: type=1400 audit(1786322864.257:15140): avc: denied { read } for pid=14692 comm="syz.6.2844" dev="nsfs" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 396.768447][ T28] audit: type=1400 audit(1786322864.257:15141): avc: denied { open } for pid=14692 comm="syz.6.2844" path="net:[4026532377]" dev="nsfs" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 396.839377][ T28] audit: type=1400 audit(1786322864.347:15142): avc: denied { create } for pid=14692 comm="syz.6.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 396.872132][ T28] audit: type=1400 audit(1786322864.387:15143): avc: denied { create } for pid=14701 comm="syz.2.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 396.901714][ T28] audit: type=1400 audit(1786322864.387:15144): avc: denied { setopt } for pid=14701 comm="syz.2.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 396.945957][ T28] audit: type=1400 audit(1786322864.447:15145): avc: denied { setopt } for pid=14701 comm="syz.2.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 396.990720][ T28] audit: type=1400 audit(1786322864.457:15146): avc: denied { create } for pid=14701 comm="syz.2.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 397.030722][ T28] audit: type=1400 audit(1786322864.457:15147): avc: denied { write } for pid=14701 comm="syz.2.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 397.052766][ T28] audit: type=1400 audit(1786322864.457:15148): avc: denied { read } for pid=14701 comm="syz.2.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 397.073891][ T28] audit: type=1400 audit(1786322864.457:15149): avc: denied { create } for pid=14701 comm="syz.2.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 397.180801][T14709] loop6: detected capacity change from 0 to 128 [ 397.211461][T14709] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 397.268509][T14709] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.355730][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 397.423984][T14721] loop6: detected capacity change from 0 to 128 [ 397.440472][T14721] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 397.453420][T14721] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.537459][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 401.108918][T14747] lo speed is unknown, defaulting to 1000 [ 401.500321][T14773] loop6: detected capacity change from 0 to 128 [ 401.619832][T14773] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 401.667808][T14773] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.752749][ T28] kauditd_printk_skb: 366 callbacks suppressed [ 401.752768][ T28] audit: type=1400 audit(1786322869.275:15516): avc: denied { setattr } for pid=14772 comm="syz.6.2867" path="/213/file1/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 401.859488][ T28] audit: type=1400 audit(1786322869.285:15517): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.961270][ T28] audit: type=1400 audit(1786322869.285:15518): avc: denied { open } for pid=3296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.005645][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 402.033080][ T28] audit: type=1326 audit(1786322869.315:15519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.0.2870" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d12c2e0d9 code=0x7ffc0000 [ 402.063687][ T28] audit: type=1326 audit(1786322869.315:15520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.0.2870" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d12c2e0d9 code=0x7ffc0000 [ 402.134750][ T28] audit: type=1326 audit(1786322869.315:15521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.0.2870" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f1d12c2e0d9 code=0x7ffc0000 [ 402.167800][ T28] audit: type=1326 audit(1786322869.325:15522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.0.2870" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d12c2e0d9 code=0x7ffc0000 [ 402.200103][ T28] audit: type=1326 audit(1786322869.325:15523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.0.2870" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d12c2e0d9 code=0x7ffc0000 [ 402.314942][ T28] audit: type=1326 audit(1786322869.325:15524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.0.2870" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d12c2e0d9 code=0x7ffc0000 [ 402.467024][ T28] audit: type=1400 audit(1786322869.325:15525): avc: denied { create } for pid=14781 comm="syz.0.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 403.126849][T14810] loop6: detected capacity change from 0 to 128 [ 403.153637][T14810] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 403.173504][T14810] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.353719][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 403.492938][T14822] loop6: detected capacity change from 0 to 128 [ 403.512347][T14822] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 403.541517][T14822] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.544283][T14813] lo speed is unknown, defaulting to 1000 [ 403.888729][T14830] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 403.895338][T14830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 403.902933][T14830] vhci_hcd vhci_hcd.0: Device attached [ 403.914141][T14834] loop0: detected capacity change from 0 to 8192 [ 403.925444][T14834] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.146226][ T3392] usb 1-1: new low-speed USB device number 4 using vhci_hcd [ 404.632629][T14832] vhci_hcd: connection reset by peer [ 404.638722][ T5458] vhci_hcd vhci_hcd.0: stop threads [ 404.644022][ T5458] vhci_hcd vhci_hcd.0: release socket [ 404.650269][ T5458] vhci_hcd vhci_hcd.0: disconnect device [ 405.708163][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.650437][T14851] loop0: detected capacity change from 0 to 512 [ 406.767826][ T28] kauditd_printk_skb: 394 callbacks suppressed [ 406.767843][ T28] audit: type=1400 audit(1786322874.282:15920): avc: denied { prog_load } for pid=14862 comm="syz.1.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 406.824389][ T28] audit: type=1400 audit(1786322874.302:15921): avc: denied { open } for pid=14863 comm="syz.2.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 406.860912][T14851] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 406.885886][ T28] audit: type=1400 audit(1786322874.302:15922): avc: denied { perfmon } for pid=14863 comm="syz.2.2894" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 406.940118][ T28] audit: type=1400 audit(1786322874.302:15923): avc: denied { kernel } for pid=14863 comm="syz.2.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 406.960399][ T28] audit: type=1400 audit(1786322874.342:15924): avc: denied { mounton } for pid=14849 comm="syz.0.2890" path="/606/file0" dev="tmpfs" ino=3230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 406.984074][ T28] audit: type=1400 audit(1786322874.392:15925): avc: denied { bpf } for pid=14862 comm="syz.1.2893" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 407.005740][ T28] audit: type=1400 audit(1786322874.412:15926): avc: denied { map_create } for pid=14863 comm="syz.2.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 407.025837][ T28] audit: type=1400 audit(1786322874.462:15927): avc: denied { listen } for pid=14840 comm="syz.3.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 407.046377][ T28] audit: type=1400 audit(1786322874.542:15928): avc: denied { create } for pid=14863 comm="syz.2.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.057121][T14851] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2890: bg 0: block 288: padding at end of block bitmap is not set [ 407.067803][ T28] audit: type=1400 audit(1786322874.572:15929): avc: denied { create } for pid=14863 comm="syz.2.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.142840][T14851] loop0: lost filesystem error report for type 5 error -117 [ 407.147615][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 407.161426][ C0] EXT4-fs (loop0): initial error at time 1786322874: ext4_validate_block_bitmap:441 [ 407.170030][T14851] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 407.170869][ C0] EXT4-fs (loop0): last error at time 1786322874: ext4_validate_block_bitmap:441 [ 407.190174][T14873] loop6: detected capacity change from 0 to 128 [ 407.266356][T14873] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 407.274350][T14851] loop0: lost filesystem error report for type 5 error -117 [ 407.303387][T14873] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.373250][T14851] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2890: attempt to clear invalid blocks 1024 len 1 [ 407.388562][T14851] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 407.407872][T14851] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2890: invalid indirect mapped block 1819239214 (level 0) [ 407.489340][T14851] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 407.531560][T14851] EXT4-fs (loop0): 1 truncate cleaned up [ 407.549057][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.638273][T14851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.818596][T14888] loop6: detected capacity change from 0 to 128 [ 407.852758][T14888] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 407.871623][T14888] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.050803][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 408.337425][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.394933][ T3392] usb 1-1: enqueue for inactive port 0 [ 409.415141][ T3392] usb 1-1: enqueue for inactive port 0 [ 409.528855][ T3392] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 409.564165][T14923] loop0: detected capacity change from 0 to 128 [ 409.633391][T14923] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.696261][T14923] ext4 filesystem being mounted at /608/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.842111][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.991041][T14938] loop0: detected capacity change from 0 to 164 [ 410.105922][T14942] syzkaller0: entered promiscuous mode [ 410.123979][T14942] syzkaller0: entered allmulticast mode [ 410.349637][T14937] netlink: 'syz.3.2911': attribute type 39 has an invalid length. [ 410.361631][T14953] Unsupported NM flag settings (240) [ 411.209985][T14972] loop0: detected capacity change from 0 to 1024 [ 411.287916][T14972] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 411.336342][T14972] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 412.268033][ T28] kauditd_printk_skb: 464 callbacks suppressed [ 412.268053][ T28] audit: type=1400 audit(1786322878.970:16394): avc: denied { read } for pid=14969 comm="syz.2.2924" dev="nsfs" ino=4026532595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 412.311185][T14972] JBD2: no valid journal superblock found [ 412.320362][T14972] EXT4-fs (loop0): Could not load journal inode [ 412.349083][T14971] lo speed is unknown, defaulting to 1000 [ 413.264372][ T28] audit: type=1400 audit(1786322878.970:16395): avc: denied { read open } for pid=14969 comm="syz.2.2924" path="net:[4026532595]" dev="nsfs" ino=4026532595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 413.289199][ T28] audit: type=1400 audit(1786322878.970:16396): avc: denied { create } for pid=14969 comm="syz.2.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 413.310467][ T28] audit: type=1400 audit(1786322878.980:16397): avc: denied { open } for pid=14969 comm="syz.2.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 414.296445][ T28] audit: type=1400 audit(1786322878.980:16398): avc: denied { perfmon } for pid=14969 comm="syz.2.2924" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 414.319014][T14981] loop6: detected capacity change from 0 to 128 [ 414.330725][T14981] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 414.340651][T14981] FAT-fs (loop6): data area starts beyond volume (36 > 6) [ 414.347838][T14981] FAT-fs (loop6): Can't find a valid FAT filesystem [ 414.546251][ T28] audit: type=1400 audit(1786322878.980:16399): avc: denied { kernel } for pid=14969 comm="syz.2.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 414.783114][ T28] audit: type=1400 audit(1786322878.990:16400): avc: denied { perfmon } for pid=14969 comm="syz.2.2924" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 414.805662][ T28] audit: type=1400 audit(1786322879.000:16401): avc: denied { open } for pid=14969 comm="syz.2.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 414.830218][ T28] audit: type=1400 audit(1786322879.000:16402): avc: denied { perfmon } for pid=14969 comm="syz.2.2924" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 415.009189][ T28] audit: type=1400 audit(1786322879.000:16403): avc: denied { kernel } for pid=14969 comm="syz.2.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 415.063773][T14991] syzkaller0: entered promiscuous mode [ 415.069354][T14991] syzkaller0: entered allmulticast mode [ 415.233032][T14997] syzkaller0: entered promiscuous mode [ 415.238842][T14997] syzkaller0: entered allmulticast mode [ 415.420030][T15003] geneve1: left promiscuous mode [ 416.275628][T15031] loop6: detected capacity change from 0 to 512 [ 416.299448][T15031] EXT4-fs: Ignoring removed bh option [ 416.817730][T15031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.831913][T15031] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.935303][T15028] netlink: 'syz.6.2937': attribute type 1 has an invalid length. [ 417.055706][T10023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.093799][T15038] netlink: 'syz.1.2939': attribute type 1 has an invalid length. [ 417.129787][T15038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2939'. [ 417.224137][T15045] netlink: 'syz.0.2938': attribute type 39 has an invalid length. [ 417.281504][T15048] program syz.6.2943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.294172][ T28] kauditd_printk_skb: 283 callbacks suppressed [ 417.294188][ T28] audit: type=1400 audit(1786322884.807:16687): avc: denied { create } for pid=15036 comm="syz.1.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 417.354831][T15048] loop6: detected capacity change from 0 to 512 [ 417.367999][ T28] audit: type=1400 audit(1786322884.837:16688): avc: denied { open } for pid=15047 comm="syz.2.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 417.392397][T15048] journal_path: Lookup failure for './bus' [ 417.407076][T15048] EXT4-fs: error: could not find journal device path [ 417.438477][ T28] audit: type=1400 audit(1786322884.837:16689): avc: denied { perfmon } for pid=15047 comm="syz.2.2944" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 417.509177][ T28] audit: type=1400 audit(1786322884.837:16690): avc: denied { kernel } for pid=15047 comm="syz.2.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 417.569947][ T28] audit: type=1400 audit(1786322884.847:16691): avc: denied { perfmon } for pid=15047 comm="syz.2.2944" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 417.632830][ T28] audit: type=1400 audit(1786322884.847:16692): avc: denied { write } for pid=15036 comm="syz.1.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 417.686051][ T28] audit: type=1400 audit(1786322884.857:16693): avc: denied { prog_load } for pid=15047 comm="syz.2.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 417.747940][T15064] loop6: detected capacity change from 0 to 128 [ 417.758973][ T28] audit: type=1400 audit(1786322884.867:16694): avc: denied { read write } for pid=15043 comm="syz.6.2943" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 417.818609][T15064] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 417.850250][T15064] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.864386][ T28] audit: type=1400 audit(1786322884.867:16695): avc: denied { read write open } for pid=15043 comm="syz.6.2943" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 417.931631][ T28] audit: type=1400 audit(1786322884.867:16696): avc: denied { ioctl } for pid=15043 comm="syz.6.2943" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 417.963849][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 418.081600][T15075] loop6: detected capacity change from 0 to 128 [ 418.107897][T15075] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 418.126357][T15075] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.310098][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 419.351807][T15092] loop0: detected capacity change from 0 to 128 [ 419.363956][T15092] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 419.414165][T15092] ext4 filesystem being mounted at /615/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.627017][T15097] loop6: detected capacity change from 0 to 128 [ 419.648506][T15097] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 420.210888][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.220765][T15097] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 420.416921][T15114] loop0: detected capacity change from 0 to 128 [ 420.429776][T15114] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 420.450691][T15114] ext4 filesystem being mounted at /616/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.005085][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.067682][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.077854][T15077] lo speed is unknown, defaulting to 1000 [ 421.462532][T15168] loop0: detected capacity change from 0 to 256 [ 422.317864][ T28] kauditd_printk_skb: 763 callbacks suppressed [ 422.317882][ T28] audit: type=1400 audit(1786322889.835:17460): avc: denied { search } for pid=15182 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.379122][T15186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 422.381938][T15189] audit: audit_backlog=65 > audit_backlog_limit=64 [ 422.398132][T15186] audit: audit_lost=46 audit_rate_limit=0 audit_backlog_limit=64 [ 422.415651][ T28] audit: type=1400 audit(1786322889.835:17461): avc: denied { search } for pid=15182 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.416698][T15189] audit: audit_lost=47 audit_rate_limit=0 audit_backlog_limit=64 [ 422.443525][T15186] audit: backlog limit exceeded [ 422.464897][T15183] audit: audit_backlog=65 > audit_backlog_limit=64 [ 422.470080][T15191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 422.479531][T15186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 422.727199][T15179] loop6: detected capacity change from 0 to 512 [ 422.877512][T15179] EXT4-fs: Ignoring removed i_version option [ 422.902079][T15179] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 423.014887][T15220] lo speed is unknown, defaulting to 1000 [ 423.476171][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.593501][T15179] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 423.615715][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 423.622224][ C0] EXT4-fs (loop6): initial error at time 1786322891: ext4_mb_generate_buddy:1317 [ 423.631401][ C0] EXT4-fs (loop6): last error at time 1786322891: ext4_mb_generate_buddy:1317 [ 423.685147][T15179] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2969: Failed to acquire dquot type 1 [ 423.716881][T15179] loop6: lost filesystem error report for type 5 error -28 [ 423.729712][T15179] EXT4-fs (loop6): 1 truncate cleaned up [ 423.775362][T15179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.043381][T15243] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.2969: iget: bad i_size value: 360287970189639690 [ 424.088220][T15246] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 424.088220][T15246] program syz.2.2977 not setting count and/or reply_len properly [ 424.222857][T15251] loop0: detected capacity change from 0 to 128 [ 424.259657][T15251] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 424.275401][T15251] ext4 filesystem being mounted at /619/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.450959][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2978'. [ 424.473811][T10023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.490592][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.554806][T15276] loop0: detected capacity change from 0 to 164 [ 426.977994][T15296] lo speed is unknown, defaulting to 1000 [ 427.628378][ T28] kauditd_printk_skb: 984 callbacks suppressed [ 427.628401][ T28] audit: type=1400 audit(1786322895.032:18273): avc: denied { read write } for pid=10023 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.719097][ T28] audit: type=1400 audit(1786322895.032:18274): avc: denied { open } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.842111][ T28] audit: type=1400 audit(1786322895.032:18275): avc: denied { ioctl } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.870035][ T28] audit: type=1400 audit(1786322895.082:18276): avc: denied { create } for pid=15298 comm="syz.6.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 427.890544][ T28] audit: type=1400 audit(1786322895.082:18277): avc: denied { getopt } for pid=15298 comm="syz.6.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 427.912989][ T28] audit: type=1400 audit(1786322895.082:18278): avc: denied { connect } for pid=15298 comm="syz.6.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 427.933800][ T28] audit: type=1400 audit(1786322895.082:18279): avc: denied { name_connect } for pid=15298 comm="syz.6.2991" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 427.997453][ T28] audit: type=1400 audit(1786322895.112:18280): avc: denied { open } for pid=15298 comm="syz.6.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 428.020228][ T28] audit: type=1400 audit(1786322895.122:18281): avc: denied { perfmon } for pid=15298 comm="syz.6.2991" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 428.024656][T15299] loop6: detected capacity change from 0 to 2048 [ 428.041796][ T28] audit: type=1400 audit(1786322895.122:18282): avc: denied { kernel } for pid=15298 comm="syz.6.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 428.642501][T15299] loop6: p1 < > p2 < > p3 p4 < > [ 428.648425][T15299] loop6: partition table partially beyond EOD, truncated [ 428.657388][T15299] loop6: p1 start 2305 is beyond EOD, truncated [ 428.665308][T15299] loop6: p2 start 4294902784 is beyond EOD, truncated [ 428.673094][T15299] loop6: p3 start 3724543488 is beyond EOD, truncated [ 428.762552][T15316] sit0: left promiscuous mode [ 428.769030][T15316] wg2: left promiscuous mode [ 428.774202][T15316] ip6gre1: left promiscuous mode [ 428.779796][T15316] bond8: left promiscuous mode [ 428.786468][T15316] bridge1: left promiscuous mode [ 428.792829][T15316] bridge2: left promiscuous mode [ 428.799229][T15316] bond13: left promiscuous mode [ 428.958303][T15309] sit0: entered promiscuous mode [ 428.982111][T15309] sit0: entered allmulticast mode [ 429.413711][T15319] loop0: detected capacity change from 0 to 164 [ 429.561930][T11722] udevd[11722]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 429.579535][T15321] loop6: detected capacity change from 0 to 4096 [ 429.613098][T15321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 429.664911][T15321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.689555][T15321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.774685][T11722] udevd[11722]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 430.386705][T15345] xt_hashlimit: size too large, truncated to 1048576 [ 430.421393][T15347] loop0: detected capacity change from 0 to 128 [ 431.060704][T15347] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.129783][T15347] ext4 filesystem being mounted at /625/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.188563][T10023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.305920][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.424840][T15364] loop6: detected capacity change from 0 to 256 [ 431.467927][T15364] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 431.647307][T15371] loop0: detected capacity change from 0 to 512 [ 431.662602][T15371] EXT4-fs: Ignoring removed orlov option [ 431.675731][T15371] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 431.696612][T15371] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 431.786437][T15371] EXT4-fs (loop0): group descriptors corrupted! [ 431.987519][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'. [ 432.297811][T15378] loop6: detected capacity change from 0 to 164 [ 432.516776][T15380] loop0: detected capacity change from 0 to 256 [ 432.683691][ T28] kauditd_printk_skb: 370 callbacks suppressed [ 432.683708][ T28] audit: type=1400 audit(1786322900.130:18653): avc: denied { create } for pid=15381 comm="syz.1.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 432.750477][T15379] netlink: 'syz.2.3016': attribute type 1 has an invalid length. [ 432.758727][ T28] audit: type=1400 audit(1786322900.230:18654): avc: denied { create } for pid=15377 comm="syz.2.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.827377][ T28] audit: type=1400 audit(1786322900.250:18655): avc: denied { write } for pid=15377 comm="syz.2.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.069172][T15386] lo speed is unknown, defaulting to 1000 [ 433.142692][ T28] audit: type=1400 audit(1786322900.529:18656): avc: denied { sys_admin } for pid=15381 comm="syz.1.3015" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 433.164312][ T28] audit: type=1400 audit(1786322900.589:18657): avc: denied { read write } for pid=15355 comm="syz.3.3010" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.188771][ T28] audit: type=1400 audit(1786322900.589:18658): avc: denied { open } for pid=15355 comm="syz.3.3010" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.240557][ T28] audit: type=1400 audit(1786322900.739:18659): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.270572][ T28] audit: type=1400 audit(1786322900.739:18660): avc: denied { open } for pid=3296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.401517][ T28] audit: type=1400 audit(1786322900.809:18661): avc: denied { open } for pid=15388 comm="syz.1.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 433.483803][ T28] audit: type=1400 audit(1786322900.809:18662): avc: denied { perfmon } for pid=15388 comm="syz.1.3019" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 433.590039][T15393] loop6: detected capacity change from 0 to 8192 [ 433.670708][ T39] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 433.688768][ T39] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 433.720770][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 433.751661][ T39] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 433.772789][ T39] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 434.646361][T15412] xt_hashlimit: size too large, truncated to 1048576 [ 434.761601][T15417] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 434.994364][T15413] socket: no more sockets [ 435.027360][T15413] socket: no more sockets [ 435.045600][T15413] socket: no more sockets [ 435.061282][T15413] socket: no more sockets [ 435.080070][T15413] socket: no more sockets [ 436.573499][T15449] loop6: detected capacity change from 0 to 256 [ 437.447785][T15464] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 437.454347][T15464] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 437.461907][T15464] vhci_hcd vhci_hcd.0: Device attached [ 437.713560][ T28] kauditd_printk_skb: 239 callbacks suppressed [ 437.713589][ T28] audit: type=1400 audit(1786322905.047:18902): avc: denied { read write } for pid=15457 comm="syz.3.3035" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 437.913028][ T5938] usb 7-1: new low-speed USB device number 3 using vhci_hcd [ 438.794850][T15465] vhci_hcd: connection closed [ 438.795403][ T5440] vhci_hcd vhci_hcd.3: stop threads [ 438.844361][ T5440] vhci_hcd vhci_hcd.3: release socket [ 438.890975][ T5440] vhci_hcd vhci_hcd.3: disconnect device [ 439.107671][T15478] loop0: detected capacity change from 0 to 128 [ 439.139416][T15478] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 439.157065][T15478] ext4 filesystem being mounted at /634/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.189847][T15478] audit: audit_backlog=65 > audit_backlog_limit=64 [ 439.196516][T15478] audit: audit_lost=105 audit_rate_limit=0 audit_backlog_limit=64 [ 439.205234][T15478] audit: backlog limit exceeded [ 439.210674][T15478] audit: audit_backlog=65 > audit_backlog_limit=64 [ 439.219542][T15478] audit: audit_lost=106 audit_rate_limit=0 audit_backlog_limit=64 [ 439.228922][T15478] audit: backlog limit exceeded [ 439.236381][T15478] audit: audit_backlog=65 > audit_backlog_limit=64 [ 439.243007][T15478] audit: audit_lost=107 audit_rate_limit=0 audit_backlog_limit=64 [ 439.251673][T15478] audit: backlog limit exceeded [ 439.349838][T15462] loop6: detected capacity change from 0 to 128 [ 439.395317][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 439.416478][T15482] xt_hashlimit: size too large, truncated to 1048576 [ 439.560804][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'. [ 439.857326][T15490] macsec1: entered allmulticast mode [ 439.857344][T15490] veth1_macvtap: entered allmulticast mode [ 439.861920][T15490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'. [ 439.998654][T15490] veth1_macvtap (unregistering): left allmulticast mode [ 440.635857][T15501] loop0: detected capacity change from 0 to 164 [ 441.067866][ T35] hid (null): unknown global tag 0xd [ 441.073864][ T35] hid-generic 0007:000E:0002.0002: unexpected long global item [ 441.113090][ T35] hid-generic 0007:000E:0002.0002: probe with driver hid-generic failed with error -22 [ 441.550033][T15525] loop6: detected capacity change from 0 to 8192 [ 441.558006][T15525] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 441.811422][T15540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.844935][T15540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.603754][T15546] loop0: detected capacity change from 0 to 1024 [ 442.721060][T15546] ext4: Unknown parameter 'noauto_da_a' [ 442.747955][ T28] kauditd_printk_skb: 253 callbacks suppressed [ 442.747972][ T28] audit: type=1400 audit(1786322910.255:19129): avc: denied { read write } for pid=15545 comm="syz.0.3068" name="loop0" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.856070][ T28] audit: type=1400 audit(1786322910.255:19130): avc: denied { open } for pid=15545 comm="syz.0.3068" path="/dev/loop0" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.977658][ T28] audit: type=1400 audit(1786322910.285:19131): avc: denied { ioctl } for pid=15545 comm="syz.0.3068" path="/dev/loop0" dev="devtmpfs" ino=1311 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.045391][ T28] audit: type=1400 audit(1786322910.295:19132): avc: denied { open } for pid=15545 comm="syz.0.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 443.138667][ T28] audit: type=1400 audit(1786322910.295:19133): avc: denied { perfmon } for pid=15545 comm="syz.0.3068" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 443.164164][ T28] audit: type=1400 audit(1786322910.295:19134): avc: denied { kernel } for pid=15545 comm="syz.0.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 443.185435][ T28] audit: type=1400 audit(1786322910.305:19135): avc: denied { prog_load } for pid=15545 comm="syz.0.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 443.263520][ T28] audit: type=1400 audit(1786322910.305:19136): avc: denied { bpf } for pid=15545 comm="syz.0.3068" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 443.305960][ T28] audit: type=1400 audit(1786322910.395:19137): avc: denied { open } for pid=15547 comm="syz.2.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 443.362089][ T28] audit: type=1400 audit(1786322910.395:19138): avc: denied { perfmon } for pid=15547 comm="syz.2.3059" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 443.894088][ T5938] usb 7-1: enqueue for inactive port 0 [ 443.900222][ T5938] usb 7-1: enqueue for inactive port 0 [ 443.975891][ T5938] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 444.044107][T15570] xt_hashlimit: size too large, truncated to 1048576 [ 444.470758][T15573] loop0: detected capacity change from 0 to 256 [ 444.660905][T15586] loop6: detected capacity change from 0 to 128 [ 444.672413][T15586] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 444.687616][T15586] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.745395][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 444.822169][T15594] loop6: detected capacity change from 0 to 256 [ 445.185802][T15602] loop6: detected capacity change from 0 to 164 [ 445.361567][T15606] xt_hashlimit: size too large, truncated to 1048576 [ 445.947712][T15613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.970885][T15613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.007242][ T28] kauditd_printk_skb: 381 callbacks suppressed [ 448.007261][ T28] audit: type=1400 audit(1786322914.992:19520): avc: denied { ioctl } for pid=15636 comm="syz.0.3096" path="/dev/loop0" dev="devtmpfs" ino=1311 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 448.050157][T15638] loop0: detected capacity change from 0 to 256 [ 448.095093][ T28] audit: type=1400 audit(1786322915.592:19521): avc: denied { mounton } for pid=15636 comm="syz.0.3096" path="/643/file0" dev="tmpfs" ino=3433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 448.736476][ T28] audit: type=1400 audit(1786322915.592:19522): avc: denied { create } for pid=15629 comm="syz.6.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 448.971973][ T28] audit: type=1400 audit(1786322915.592:19523): avc: denied { module_request } for pid=15629 comm="syz.6.3085" kmod="net-pf-11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 449.014425][ T28] audit: type=1400 audit(1786322915.622:19524): avc: denied { create } for pid=15629 comm="syz.6.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 449.055632][T15651] loop6: detected capacity change from 0 to 256 [ 449.062359][ T28] audit: type=1400 audit(1786322915.622:19525): avc: denied { module_request } for pid=15629 comm="syz.6.3085" kmod="net-pf-11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 449.126945][ T28] audit: type=1400 audit(1786322915.622:19526): avc: denied { create } for pid=15629 comm="syz.6.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 449.190846][ T28] audit: type=1400 audit(1786322915.622:19527): avc: denied { module_request } for pid=15629 comm="syz.6.3085" kmod="net-pf-11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 449.263944][ T28] audit: type=1400 audit(1786322915.622:19528): avc: denied { create } for pid=15629 comm="syz.6.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 449.293106][ T28] audit: type=1400 audit(1786322915.622:19529): avc: denied { module_request } for pid=15629 comm="syz.6.3085" kmod="net-pf-11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 449.789958][T15661] loop6: detected capacity change from 0 to 512 [ 449.812446][T15661] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 449.854436][T15661] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #11: comm syz.6.3089: corrupted in-inode xattr: invalid ea_ino [ 449.878697][T15661] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 449.878948][T15661] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3089: couldn't read orphan inode 11 (err -117) [ 449.899995][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 449.900035][ C1] EXT4-fs (loop6): initial error at time 1786322917: ext4_iget_extra_inode:5180: inode 11 [ 449.900067][ C1] EXT4-fs (loop6): last error at time 1786322917: ext4_iget_extra_inode:5180: inode 11 [ 449.974976][T14980] IPVS: starting estimator thread 0... [ 450.072186][T15668] IPVS: using max 2688 ests per chain, 134400 per kthread [ 450.086639][T15661] loop6: lost filesystem error report for type 5 error -117 [ 450.093319][T15661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.182109][T15675] loop2: detected capacity change from 0 to 164 [ 450.733472][T15657] lo speed is unknown, defaulting to 1000 [ 451.032996][T10023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.309825][T15685] loop6: detected capacity change from 0 to 256 [ 451.481005][T15693] loop0: detected capacity change from 0 to 512 [ 451.665559][T15693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.737188][T15693] ext4 filesystem being mounted at /648/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.048574][ T28] kauditd_printk_skb: 316 callbacks suppressed [ 453.048594][ T28] audit: type=1400 audit(1786322920.540:19846): avc: denied { open } for pid=15715 comm="syz.6.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 453.144274][ T28] audit: type=1400 audit(1786322920.540:19847): avc: denied { perfmon } for pid=15715 comm="syz.6.3106" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.199285][ T28] audit: type=1400 audit(1786322920.580:19848): avc: denied { kernel } for pid=15715 comm="syz.6.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 453.284856][ T28] audit: type=1400 audit(1786322920.580:19849): avc: denied { perfmon } for pid=15715 comm="syz.6.3106" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.366275][ T28] audit: type=1400 audit(1786322920.739:19850): avc: denied { open } for pid=15698 comm="syz.2.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 453.439248][ T28] audit: type=1400 audit(1786322920.739:19851): avc: denied { perfmon } for pid=15698 comm="syz.2.3101" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.546829][ T28] audit: type=1400 audit(1786322920.739:19852): avc: denied { kernel } for pid=15698 comm="syz.2.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 453.623515][ T28] audit: type=1400 audit(1786322920.739:19853): avc: denied { perfmon } for pid=15698 comm="syz.2.3101" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.764833][ T28] audit: type=1400 audit(1786322920.759:19854): avc: denied { write } for pid=15698 comm="syz.2.3101" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 453.813104][T15726] loop2: detected capacity change from 0 to 512 [ 453.854960][T15726] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 453.898452][ T28] audit: type=1400 audit(1786322920.779:19855): avc: denied { create } for pid=15713 comm="syz.1.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 453.942099][T15726] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #11: comm syz.2.3109: corrupted in-inode xattr: invalid ea_ino [ 453.963114][T15724] loop6: detected capacity change from 0 to 256 [ 453.965159][T15726] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 453.969728][T15726] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3109: couldn't read orphan inode 11 (err -117) [ 453.978930][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 453.978950][ C0] EXT4-fs (loop2): initial error at time 1786322921: ext4_iget_extra_inode:5180: inode 11 [ 453.978984][ C0] EXT4-fs (loop2): last error at time 1786322921: ext4_iget_extra_inode:5180: inode 11 [ 453.984581][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.996099][T15726] loop2: lost filesystem error report for type 5 error -117 [ 454.003315][T15725] lo speed is unknown, defaulting to 1000 [ 454.008461][T15726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.553112][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.711826][T15739] loop6: detected capacity change from 0 to 1024 [ 454.763091][T15739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.976932][T15747] loop0: detected capacity change from 0 to 128 [ 455.018228][T15747] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.054410][T15747] ext4 filesystem being mounted at /651/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.131123][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 455.229661][T15741] loop2: detected capacity change from 0 to 8192 [ 455.257795][T15741] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 455.372742][T10023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.598593][T15766] netlink: 'syz.1.3122': attribute type 1 has an invalid length. [ 455.639758][T15766] 8021q: adding VLAN 0 to HW filter on device bond14 [ 455.827588][T15766] veth9: entered allmulticast mode [ 455.858057][T15766] bond14: (slave veth9): Enslaving as an active interface with a down link [ 455.920506][T15768] bond5: (slave veth0_to_bond): Releasing active interface [ 455.964043][T15768] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 456.010644][T15773] bond14: entered promiscuous mode [ 456.027120][T15773] bond14: entered allmulticast mode [ 456.066077][T15776] macvlan0: entered promiscuous mode [ 456.094911][T15776] macvlan0: entered allmulticast mode [ 456.119990][T15776] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 456.231054][T15780] xt_hashlimit: size too large, truncated to 1048576 [ 456.951084][T15791] loop0: detected capacity change from 0 to 256 [ 457.068681][T15794] loop6: detected capacity change from 0 to 256 [ 457.529873][T15810] xt_hashlimit: size too large, truncated to 1048576 [ 457.909411][T15816] loop0: detected capacity change from 0 to 8192 [ 457.918261][T15816] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 457.984096][T15814] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 457.990643][T15814] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 457.998212][T15814] vhci_hcd vhci_hcd.0: Device attached [ 458.254811][ T5953] usb 1-1: new low-speed USB device number 5 using vhci_hcd [ 458.363735][T15815] vhci_hcd: connection reset by peer [ 458.386732][ T28] kauditd_printk_skb: 389 callbacks suppressed [ 458.386789][ T28] audit: type=1400 audit(1786322925.877:20245): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 458.456773][ T49] vhci_hcd vhci_hcd.0: stop threads [ 458.462092][ T49] vhci_hcd vhci_hcd.0: release socket [ 458.467587][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 458.500763][ T28] audit: type=1400 audit(1786322925.877:20246): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.352947][T15832] xt_hashlimit: size too large, truncated to 1048576 [ 459.475895][ T28] audit: type=1400 audit(1786322925.917:20247): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=1578 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.501671][ T28] audit: type=1400 audit(1786322925.947:20248): avc: denied { read write } for pid=10023 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.675029][ T28] audit: type=1400 audit(1786322925.947:20249): avc: denied { open } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.780168][ T28] audit: type=1400 audit(1786322925.947:20250): avc: denied { ioctl } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.806864][ T28] audit: type=1400 audit(1786322926.207:20251): avc: denied { open } for pid=15820 comm="syz.6.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 459.827129][ T28] audit: type=1400 audit(1786322926.217:20253): avc: denied { perfmon } for pid=15820 comm="syz.6.3138" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 459.850818][ T28] audit: type=1400 audit(1786322926.207:20252): avc: denied { name_bind } for pid=15795 comm="syz.1.3132" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 459.922503][ T28] audit: type=1400 audit(1786322926.217:20254): avc: denied { kernel } for pid=15820 comm="syz.6.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 460.096090][T15838] loop2: detected capacity change from 0 to 256 [ 460.292933][T15841] loop0: detected capacity change from 0 to 256 [ 461.480350][T15857] syzkaller0: entered promiscuous mode [ 461.516646][T15857] syzkaller0: entered allmulticast mode [ 462.334739][T15872] loop6: detected capacity change from 0 to 1024 [ 462.354457][T15872] ext4: Unknown parameter 'noauto_da_a' [ 462.585926][T15885] xt_hashlimit: size too large, truncated to 1048576 [ 462.624686][T15889] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15889 comm=syz.0.3157 [ 463.047787][T15897] loop6: detected capacity change from 0 to 256 [ 463.339017][ T5953] usb 1-1: enqueue for inactive port 0 [ 463.347017][ T5953] usb 1-1: enqueue for inactive port 0 [ 463.402647][ T28] kauditd_printk_skb: 272 callbacks suppressed [ 463.402737][ T28] audit: type=1400 audit(1786322930.894:20527): avc: denied { prog_load } for pid=15900 comm="syz.1.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 463.428217][ T5953] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 463.480485][ T28] audit: type=1400 audit(1786322930.934:20528): avc: denied { bpf } for pid=15900 comm="syz.1.3160" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 463.542697][ T28] audit: type=1400 audit(1786322931.034:20529): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.613135][ T28] audit: type=1400 audit(1786322931.064:20531): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.694538][ T28] audit: type=1400 audit(1786322931.064:20532): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.870658][T15915] loop6: detected capacity change from 0 to 8192 [ 463.880138][T15915] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 463.904426][T15912] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 463.910960][T15912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 463.918657][T15912] vhci_hcd vhci_hcd.0: Device attached [ 464.080066][ T28] audit: type=1400 audit(1786322931.064:20533): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=1578 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.165781][T14980] usb 13-1: new low-speed USB device number 3 using vhci_hcd [ 464.523020][T15913] vhci_hcd: connection reset by peer [ 464.530184][ T12] vhci_hcd vhci_hcd.6: stop threads [ 464.559386][ T12] vhci_hcd vhci_hcd.6: release socket [ 464.607409][ T28] audit: type=1400 audit(1786322931.084:20534): avc: denied { create } for pid=15903 comm="syz.1.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 464.669537][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 464.702740][T15911] lo speed is unknown, defaulting to 1000 [ 464.870793][ T28] audit: type=1400 audit(1786322931.094:20535): avc: denied { connect } for pid=15903 comm="syz.1.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 465.036283][T15920] loop2: detected capacity change from 0 to 128 [ 465.167276][T15920] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 465.226829][ T28] audit: type=1400 audit(1786322931.094:20536): avc: denied { create } for pid=15903 comm="syz.1.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 465.255850][T15920] ext4 filesystem being mounted at /670/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.286276][ T28] audit: type=1400 audit(1786322931.094:20537): avc: denied { prog_load } for pid=15903 comm="syz.1.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 465.484317][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 465.767280][T15931] xt_hashlimit: size too large, truncated to 1048576 [ 465.970483][T15939] syzkaller0: entered promiscuous mode [ 465.976038][T15939] syzkaller0: entered allmulticast mode [ 466.074500][T15945] loop6: detected capacity change from 0 to 256 [ 466.519542][T15959] loop6: detected capacity change from 0 to 128 [ 466.548131][T15959] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 466.558286][T15959] FAT-fs (loop6): Filesystem has been set read-only [ 467.267313][T15969] loop2: detected capacity change from 0 to 128 [ 467.325341][T15969] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 467.338051][T15969] ext4 filesystem being mounted at /673/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.403950][T15974] loop0: detected capacity change from 0 to 512 [ 467.446753][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.466082][T15974] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 467.549173][T15974] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #11: comm syz.0.3177: corrupted in-inode xattr: invalid ea_ino [ 467.570376][T15971] lo speed is unknown, defaulting to 1000 [ 467.781369][T15987] loop6: detected capacity change from 0 to 8192 [ 467.816965][T15987] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 467.836453][T15985] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 467.842980][T15985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 467.850515][T15985] vhci_hcd vhci_hcd.0: Device attached [ 468.402438][T15986] vhci_hcd: connection closed [ 468.402831][ T68] vhci_hcd vhci_hcd.6: stop threads [ 468.416034][ T68] vhci_hcd vhci_hcd.6: release socket [ 468.424767][ T68] vhci_hcd vhci_hcd.6: disconnect device [ 468.549658][T15974] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 468.552639][T15974] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3177: couldn't read orphan inode 11 (err -117) [ 468.561853][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 468.561874][ C0] EXT4-fs (loop0): initial error at time 1786322936: ext4_iget_extra_inode:5180: inode 11 [ 468.561907][ C0] EXT4-fs (loop0): last error at time 1786322936: ext4_iget_extra_inode:5180: inode 11 [ 468.566477][ T28] kauditd_printk_skb: 277 callbacks suppressed [ 468.566491][ T28] audit: type=1400 audit(1786322936.052:20814): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 469.140413][ T28] audit: type=1400 audit(1786322936.052:20815): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 469.310131][ T28] audit: type=1400 audit(1786322936.152:20816): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=1578 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 469.459289][ T28] audit: type=1400 audit(1786322936.492:20817): avc: denied { open } for pid=15991 comm="syz.2.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 469.548407][T14980] usb 13-1: enqueue for inactive port 0 [ 469.554115][T14980] usb 13-1: enqueue for inactive port 0 [ 469.560038][T15974] loop0: lost filesystem error report for type 5 error -117 [ 469.561310][T15974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.571781][ T28] audit: type=1400 audit(1786322936.492:20818): avc: denied { perfmon } for pid=15991 comm="syz.2.3185" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 469.716257][T14980] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 469.739139][ T28] audit: type=1400 audit(1786322936.492:20819): avc: denied { kernel } for pid=15991 comm="syz.2.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 469.815721][ T28] audit: type=1400 audit(1786322936.512:20820): avc: denied { create } for pid=15991 comm="syz.2.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 469.882558][ T28] audit: type=1400 audit(1786322936.522:20821): avc: denied { open } for pid=15991 comm="syz.2.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 469.934038][ T28] audit: type=1400 audit(1786322936.522:20822): avc: denied { perfmon } for pid=15991 comm="syz.2.3185" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 469.975851][ T28] audit: type=1400 audit(1786322936.522:20823): avc: denied { kernel } for pid=15991 comm="syz.2.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 470.056252][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.191802][T16011] tipc: Started in network mode [ 470.201172][T16011] tipc: Node identity c6f21d1c957b, cluster identity 4711 [ 470.213048][T16011] tipc: Enabled bearer , priority 0 [ 470.337682][T16008] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 470.401528][T16007] tipc: Disabling bearer [ 470.492302][T16017] loop6: detected capacity change from 0 to 128 [ 470.514961][T16017] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 470.539281][T16017] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.704037][T16032] loop0: detected capacity change from 0 to 8192 [ 470.722207][T16030] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 470.728751][T16030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 470.736430][T16030] vhci_hcd vhci_hcd.0: Device attached [ 470.744441][T16032] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 471.009093][ T35] usb 1-1: new low-speed USB device number 6 using vhci_hcd [ 471.360116][T16031] vhci_hcd: connection reset by peer [ 471.366487][ T39] vhci_hcd vhci_hcd.0: stop threads [ 471.372079][ T39] vhci_hcd vhci_hcd.0: release socket [ 471.390193][ T39] vhci_hcd vhci_hcd.0: disconnect device [ 472.202129][T10023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.199667][T16055] loop0: detected capacity change from 0 to 164 [ 473.219849][T16056] loop6: detected capacity change from 0 to 164 [ 473.588355][ T28] kauditd_printk_skb: 200 callbacks suppressed [ 473.588375][ T28] audit: type=1400 audit(1786322941.069:21024): avc: denied { mounton } for pid=16054 comm="syz.6.3200" path="/284/file0" dev="tmpfs" ino=1568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 473.662203][ T28] audit: type=1400 audit(1786322941.119:21025): avc: denied { mount } for pid=16054 comm="syz.6.3200" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 473.726104][ T28] audit: type=1400 audit(1786322941.119:21026): avc: denied { read write } for pid=16054 comm="syz.6.3200" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 473.794606][ T28] audit: type=1400 audit(1786322941.119:21027): avc: denied { open } for pid=16054 comm="syz.6.3200" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 473.844216][ T28] audit: type=1400 audit(1786322941.119:21028): avc: denied { create } for pid=16054 comm="syz.6.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 473.888503][ T28] audit: type=1400 audit(1786322941.129:21029): avc: denied { setopt } for pid=16054 comm="syz.6.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 473.933027][ T28] audit: type=1400 audit(1786322941.179:21030): avc: denied { create } for pid=16054 comm="syz.6.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 473.957656][ T28] audit: type=1400 audit(1786322941.179:21031): avc: denied { write } for pid=16054 comm="syz.6.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 473.978861][ T28] audit: type=1400 audit(1786322941.179:21032): avc: denied { read } for pid=16054 comm="syz.6.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.000049][ T28] audit: type=1400 audit(1786322941.189:21033): avc: denied { create } for pid=16054 comm="syz.6.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 474.155686][T16069] loop0: detected capacity change from 0 to 128 [ 474.197823][T16069] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 474.243258][T16069] ext4 filesystem being mounted at /669/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.555917][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 475.642635][T16087] batadv_slave_1: entered promiscuous mode [ 475.890066][T16089] netlink: 'syz.1.3211': attribute type 8 has an invalid length. [ 475.898098][T16089] sch_fq: defrate 0 ignored. [ 476.142848][ T35] usb 1-1: enqueue for inactive port 0 [ 476.160903][ T35] usb 1-1: enqueue for inactive port 0 [ 476.253522][ T35] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 476.718324][T16093] loop2: detected capacity change from 0 to 4096 [ 476.753229][T16093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.987231][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.998347][T16086] loop0: detected capacity change from 0 to 512 [ 478.327314][T16110] loop2: detected capacity change from 0 to 164 [ 478.624334][ T28] kauditd_printk_skb: 193 callbacks suppressed [ 478.624349][ T28] audit: type=1400 audit(1786322946.107:21227): avc: denied { read write } for pid=10023 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 478.670007][T16116] loop0: detected capacity change from 0 to 128 [ 478.716962][T16116] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.744178][ T28] audit: type=1400 audit(1786322946.107:21228): avc: denied { open } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 478.772170][T16120] loop6: detected capacity change from 0 to 164 [ 478.789065][T16116] ext4 filesystem being mounted at /672/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.897952][ T28] audit: type=1400 audit(1786322946.137:21229): avc: denied { ioctl } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.025041][ T28] audit: type=1400 audit(1786322946.147:21230): avc: denied { read write } for pid=16115 comm="syz.0.3219" name="loop0" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.112308][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.124714][ T28] audit: type=1400 audit(1786322946.147:21231): avc: denied { open } for pid=16115 comm="syz.0.3219" path="/dev/loop0" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.157092][ T28] audit: type=1400 audit(1786322946.147:21232): avc: denied { ioctl } for pid=16115 comm="syz.0.3219" path="/dev/loop0" dev="devtmpfs" ino=1311 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.182834][ T28] audit: type=1400 audit(1786322946.177:21233): avc: denied { mounton } for pid=16115 comm="syz.0.3219" path="/672/file1" dev="tmpfs" ino=3591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 479.233961][ T28] audit: type=1400 audit(1786322946.227:21234): avc: denied { read write } for pid=16118 comm="syz.6.3218" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.258443][ T28] audit: type=1400 audit(1786322946.227:21235): avc: denied { open } for pid=16118 comm="syz.6.3218" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.282928][ T28] audit: type=1400 audit(1786322946.247:21236): avc: denied { ioctl } for pid=16118 comm="syz.6.3218" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.462578][T16128] loop2: detected capacity change from 0 to 256 [ 479.496797][T16130] sctp: [Deprecated]: syz.0.3231 (pid 16130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.496797][T16130] Use struct sctp_sack_info instead [ 479.921380][T16133] loop2: detected capacity change from 0 to 256 [ 480.008277][T16141] syzkaller0: entered promiscuous mode [ 480.033071][T16141] syzkaller0: entered allmulticast mode [ 480.671151][T16158] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 480.677767][T16158] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 480.685352][T16158] vhci_hcd vhci_hcd.0: Device attached [ 480.770795][T16158] loop6: detected capacity change from 0 to 8192 [ 480.836559][T16158] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 481.024127][ T35] usb 13-1: new low-speed USB device number 4 using vhci_hcd [ 481.408942][T16159] vhci_hcd: connection reset by peer [ 481.446647][ T5458] vhci_hcd vhci_hcd.6: stop threads [ 481.456881][ T5458] vhci_hcd vhci_hcd.6: release socket [ 481.563529][ T5458] vhci_hcd vhci_hcd.6: disconnect device [ 482.789766][T16177] loop2: detected capacity change from 0 to 8192 [ 482.835281][T16176] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 482.841844][T16176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 482.849451][T16176] vhci_hcd vhci_hcd.0: Device attached [ 483.095045][ T3392] usb 5-1: new low-speed USB device number 4 using vhci_hcd [ 483.240132][T16183] bridge_slave_1: left allmulticast mode [ 483.276839][T16183] bridge_slave_1: left promiscuous mode [ 483.320019][T16183] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.405347][T16183] bridge_slave_0: left allmulticast mode [ 483.439821][T16183] bridge_slave_0: left promiscuous mode [ 483.478967][T16183] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.759804][T16177] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 483.789193][ T28] kauditd_printk_skb: 244 callbacks suppressed [ 483.789221][ T28] audit: type=1400 audit(1786322951.254:21481): avc: denied { mount } for pid=16172 comm="syz.2.3235" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 483.890479][ T28] audit: type=1400 audit(1786322951.254:21482): avc: denied { read write } for pid=16172 comm="syz.2.3235" name="loop2" dev="devtmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 483.917322][ T28] audit: type=1400 audit(1786322951.254:21483): avc: denied { read write open } for pid=16172 comm="syz.2.3235" path="/dev/loop2" dev="devtmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 483.976814][T16178] vhci_hcd: connection reset by peer [ 484.013128][T16185] loop6: detected capacity change from 0 to 164 [ 484.187424][ T28] audit: type=1400 audit(1786322951.314:21484): avc: denied { read write } for pid=10023 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 484.472762][ T28] audit: type=1400 audit(1786322951.314:21485): avc: denied { open } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 484.543725][ T28] audit: type=1400 audit(1786322951.314:21486): avc: denied { ioctl } for pid=10023 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 484.600462][ T28] audit: type=1400 audit(1786322951.494:21487): avc: denied { read write } for pid=16184 comm="syz.6.3236" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 484.651292][ T28] audit: type=1400 audit(1786322951.494:21488): avc: denied { open } for pid=16184 comm="syz.6.3236" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 484.722636][ T28] audit: type=1400 audit(1786322951.494:21489): avc: denied { ioctl } for pid=16184 comm="syz.6.3236" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 484.754702][ T5460] vhci_hcd vhci_hcd.2: stop threads [ 484.759980][ T5460] vhci_hcd vhci_hcd.2: release socket [ 484.765392][ T5460] vhci_hcd vhci_hcd.2: disconnect device [ 484.828366][T16185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 485.011073][T16195] loop2: detected capacity change from 0 to 256 [ 485.041506][T16200] futex_wake_op: syz.1.3242 tries to shift op by 144; fix this program [ 485.249848][T16204] loop2: detected capacity change from 0 to 128 [ 485.275995][T16204] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 485.307725][T16204] ext4 filesystem being mounted at /691/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.380215][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 485.517645][T16209] loop6: detected capacity change from 0 to 128 [ 485.542736][T16209] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 485.556926][ T2981] ================================================================== [ 485.565050][ T2981] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 485.573081][ T2981] [ 485.575422][ T2981] write to 0xffff88811a99b3f0 of 8 bytes by task 11722 on cpu 0: [ 485.583163][ T2981] dentry_unlink_inode+0x65/0x260 [ 485.588227][ T2981] d_delete+0x164/0x180 [ 485.592418][ T2981] d_delete_notify+0x32/0x100 [ 485.597120][ T2981] vfs_unlink+0x287/0x490 [ 485.601472][ T2981] filename_unlinkat+0x1dc/0x410 [ 485.606440][ T2981] __se_sys_unlink+0x2b/0xe0 [ 485.611053][ T2981] __x64_sys_unlink+0x1f/0x30 [ 485.615751][ T2981] x64_sys_call+0x2eb6/0x3020 [ 485.620457][ T2981] do_syscall_64+0x136/0x3c0 [ 485.625072][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.630986][ T2981] [ 485.633320][ T2981] read to 0xffff88811a99b3f0 of 8 bytes by task 2981 on cpu 1: [ 485.640879][ T2981] step_into_slowpath+0x12c/0x4c0 [ 485.645936][ T2981] path_lookupat+0x2eb/0x4c0 [ 485.650557][ T2981] filename_lookup+0x18f/0x390 [ 485.655344][ T2981] do_readlinkat+0x74/0x2f0 [ 485.659893][ T2981] __x64_sys_readlink+0x47/0x60 [ 485.664770][ T2981] x64_sys_call+0x2b51/0x3020 [ 485.669474][ T2981] do_syscall_64+0x136/0x3c0 [ 485.674091][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.676317][T16209] FAT-fs (loop6): Filesystem has been set read-only [ 485.680002][ T2981] [ 485.680009][ T2981] value changed: 0xffff88811cb1b170 -> 0x0000000000000000 [ 485.680026][ T2981] [ 485.698380][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 485.704544][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 485.714982][ T2981] Tainted: [W]=WARN [ 485.718804][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.728875][ T2981] ================================================================== [ 485.890630][T16215] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 485.897201][T16215] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 485.904737][T16215] vhci_hcd vhci_hcd.0: Device attached [ 486.070898][ T35] usb 13-1: enqueue for inactive port 0 [ 486.083538][ T35] usb 13-1: enqueue for inactive port 0 [ 486.146764][ T5953] usb 7-1: new low-speed USB device number 4 using vhci_hcd [ 486.160343][ T35] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 486.345917][T16216] vhci_hcd: connection reset by peer [ 486.357381][ T5436] vhci_hcd vhci_hcd.3: stop threads [ 486.362724][ T5436] vhci_hcd vhci_hcd.3: release socket [ 486.369575][ T5436] vhci_hcd vhci_hcd.3: disconnect device [ 488.147851][ T3392] usb 5-1: enqueue for inactive port 0 [ 488.153362][ T3392] usb 5-1: enqueue for inactive port 0 [ 488.227670][ T3392] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 491.189167][ T5953] usb 7-1: enqueue for inactive port 0 [ 491.194689][ T5953] usb 7-1: enqueue for inactive port 0 [ 491.269117][ T5953] vhci_hcd vhci_hcd.3: vhci_device speed not set