last executing test programs: 1m58.494787746s ago: executing program 3 (id=974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r3, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x10}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001a00010029bd7000000000000220200000000000002000000e001e"], 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010025bd7000ffffffff0a00203c0000000011000100140002002003000000000000000000000000000208000e000700000008000d"], 0x40}, 0x1, 0x0, 0x0, 0x24048854}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x44, r8, 0x1, 0x70bd25, 0x35dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0xfffffffffffffdc9}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x44}}, 0x4080080) 1m58.325613411s ago: executing program 3 (id=976): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/154, 0x9a}], 0x1, 0x2, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) pwrite64(0xffffffffffffffff, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff00000000080008"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m58.278905025s ago: executing program 3 (id=979): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000100)={[{@usrquota}, {@noblock_validity}, {@nodiscard}, {@nodelalloc}, {@lazytime}, {@init_itable}, {@nogrpid}]}, 0x0, 0x53a, &(0x7f0000000b40)="$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") 1m57.626668243s ago: executing program 3 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = dup3(r2, r1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r8 = dup(r7) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xd, "0062ba7d820700000000000000000000096304"}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0xdacc, 0x8000000, {"ab2a4f21faeebdad8404bf9400000008"}, 0x8, 0x7, 0x2}}}, 0xa0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000040)={0x400, 0x7, 0x8, 0x8, 0x9, "edbd952c25f77335"}) r9 = syz_open_pts(r7, 0x82080) dup3(r9, r7, 0x80000) read(r7, &(0x7f00000005c0)=""/228, 0xe4) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r11 = openat$cgroup_freezer_state(r10, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r11, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r11, r11, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x8e}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xe47}]}}]}, 0x48}}, 0x4000010) 1m57.348445688s ago: executing program 3 (id=992): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) syz_clone3(&(0x7f0000000540)={0x200000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x20}, &(0x7f0000000380)=""/155, 0x9b, &(0x7f0000000440)=""/248, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001880)=@filter={'filter\x00', 0xe, 0x4, 0x640, 0xffffffff, 0x208, 0x208, 0x0, 0xffffffff, 0xffffffff, 0x570, 0x570, 0x570, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0xffff7fff, 0x200], 0xd7c, 0x4, 0x0, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @mcast1, @remote, @empty, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @remote, @dev={0xfe, 0x80, '\x00', 0xc}], 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x3e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], [], 'syz_tun\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x32, 0x69, 0x2, 0x7}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x4}}, @common=@icmp6={{0x28}, {0x12, "145a", 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x7, {0x2}}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0xead9, [0x7], 0x2, 0x30, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @mcast1, @remote, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @loopback, @dev={0xfe, 0x80, '\x00', 0x17}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @remote, @remote, @remote, @mcast1]}}, @common=@hl={{0x28}, {0x0, 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000200)={0x13, 0x10, 0x8, {0x0, r4, 0x7ffffffe}}, 0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000840)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r5, 0x5, 0x20}, &(0x7f0000000140)=0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000700)={[{@norecovery}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@noblock_validity}, {@noblock_validity}, {@minixdf}, {@nolazytime}, {@nouid32}, {@norecovery}]}, 0x0, 0x515, &(0x7f0000000c40)="$eJzs3d9rm2sdAPDvmzZru/Wc9qgXxwMei+dId9Al7eq24sWcIHo1UOf9LG1aStOmNGm3liEd/gGCiApeeeWN4B8gyP4EEQZ6LyqKuM1deKORJG+2Nkvarkua0Xw+8O59nvdHv98na9+8T56HvAEMrKmIuBURQxHxSURMpNsz6RL7jaV23LOnDxZrSxLV6p1/JZGk25o/K0nXl9LTRiPiu9+KiCfVamvc8u7e2kKxWNhK6/nK+ma+vLt3ZXV9YaWwUtiYm5u9Pn9j/tr8zKnbthNJM6WYjIib3/jbT3/0q2/e/N2X7/357j8u/6C2czzdf7Ad3dRIIFt/LZqGI2KrF8H6YChtT7bfiQAAcCK1+9NPRcQX6vf/EzFUv5s7ytgZZQYAAAB0S/Vr45GN6kgVAAAAOLcy9TmwSSaXzvcdj0wml2vM4f1MXMwUS+XKl5ZL2xtLjbmyk5HNLK8WCzPpXOHJyCa1+mw6x7ZZv9pSn4uI9yLiJxNj9XpusVRc6veHHwAAADAgLrX0/59PNPr/AAAAwDkz2e8EAAAAgJ7T/wcAAIDzT/8fAAAAzrVv375dW6rN518v7exur5V2riwVymu59e3F3GJpazO3Uiqt1L+zb/24n1cslTa/Ehvb9/OVQrmSL+/u3V0vbW9U7q4eegQ2AAAAcIbe+/yjPyURsf/VsfoSScSFdF+2z7kBvZV5nYP/2rs8gLM31O8EgL4Z7ncCQN/o4wPJMfs7Tt75ffdzAQAAemP6sy3j/2H8HwbFa43/A+eK8X8YXG3G/00JgAGRdQcAA6/34//V6mslBAAAdN14fUkyuXQscDwymVwu4p36YwGyyfJqsTATEe9GxB8nsiO1+mz9zOTYPgMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlE9heenOQkAAADoi4jM35P0+V/TEx+Pt34+cCH5z0R9HRH3fnHnZ/cXKpWt2dr2Jy+2V36ebr968Mz9Vz9s8LBxAAAAOBPNfnqzHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fTs6YPF5hLZs4v7z69HxGRL/LrhGK2vR+vpXPx3EsMHzksiYqgL8fcfRsT77eIntbRiMs2iNX4mIsb6HP9SF+LDIHtUu/7cavf3l4mp+rr9399wurypg9e/2uXgYPzm9W+ow/XvnRPG+ODxb/Id4z+M+GC4/fWnGT/pEP+jjhFHDtW+/729vU5HVn8ZMd36/vMiwstSvrK+mS/v7l1ZXV9YKawUNubmZq/P35i/Nj+TX14tFtJ/28b48ed++7+j2n+xQ/zJY9r/ccf2H/bfx/effrpRfOWdtRb/8keH40+l+97vED+Tvvd9MS3X9k83y/uN8kEf/voPH75Iuk38pQ7tP+7//3KzMnp0+z/5zg//csxLBACcofLu3tpCsVjYOmVhJ0568FT7Xc07opMH3Y83zFnhLSsMxeEtzfvULsfKnvB3fvQteVlOUHj3wJYLafO6FKIPFyMAAKCnXt70n+DgQwPuI71LCgAAAAAAAAAAAAAAAAAAAAbMWXxRWWvM/f40FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSP8PAAD//22Dxkw=") personality(0xfe47fef9f5ff7379) openat$incfs(r1, &(0x7f0000000240)='.pending_reads\x00', 0x400, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000003001600000000000000000400", @ANYRES32=0x0, @ANYBLOB="000300000000000008002900fece0500"], 0x28}, 0x1, 0x0, 0x0, 0x24041050}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@max_batch_time}, {@resuid={'resuid', 0x3d, 0xee01}}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0xad55}}]}, 0x1, 0x483, &(0x7f0000001040)="$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") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x440088c4) fchdir(r0) mkdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 1m56.558139698s ago: executing program 3 (id=1000): r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000010000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a", 0x34, 0x810, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m41.301717565s ago: executing program 32 (id=1000): r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000010000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a", 0x34, 0x810, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.107713906s ago: executing program 2 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1f, &(0x7f0000006680)) llistxattr(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000040)="82903e3154b52259a4e358a58d6bd0291a9c3fa9b5773455e53ac62360c0aeb63f96c0de58932d45fe342924f3057a1437ccf22cdd6cceeafc4e5991395295efe403d631ec2e644a6c88d63dbbcc3446a5493663764c83c57b1ff714288ec7fe4466551ea25017763dbff167538cfd13b26f53e60e94ef4509fcbd313cdd5d45c5e5ee39803ca34a560e4b98fa8dbd3ae01cefc559a0cc4092c5660550dafc252c503dfb9cdcaec874ceea2003eeb9b3fc6d2a356ab2004555b30e95e2912775b94cd5e61e9ce514660658837793f2e57dd22f5d049cb6db89", &(0x7f0000000140)=""/107, 0x4}, 0x20) 5.021746704s ago: executing program 2 (id=1894): getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xb, 0x0, 0x80000001, 0xffff, 0x2}, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) write$binfmt_script(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x840, &(0x7f0000000000), 0x1, 0x241, &(0x7f0000000540)="$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") fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 4.481548722s ago: executing program 2 (id=1897): socket$kcm(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xffffffff8de282fc, 0x0) 4.150643271s ago: executing program 5 (id=1901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) (fail_nth: 3) 4.106862305s ago: executing program 5 (id=1904): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x484d1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000240)) socket$key(0xf, 0x3, 0x2) r1 = socket$inet(0x2, 0x2, 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x112) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x10000320) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60000, 0x3) getdents(r3, &(0x7f0000000380)=""/4096, 0x1000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f0000000000)=0x2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="0800e5bb59ec815a", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4800) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="ca4700611088000000000063012000000b00009500000000000ab0530b6b443b6c8747909696b26d798e007f314d367d3fa222c31ad4098e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000340)=""/129, 0x81}], 0x1) 4.034484581s ago: executing program 5 (id=1906): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x7f2b1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x4, 0xc032}]}, 0x44}}, 0x8000002) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x571, 0x4, 0x11723705, 0x2, r4, 0xfffffffa, '\x00', r6, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) 3.156783089s ago: executing program 5 (id=1911): r0 = socket(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x4000010) read$nci(r1, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x0, 0x0, 0x30, 0x0, [{@broadcast}, {@initdev}, {}]}}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r6, 0x0) write(r0, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x11e, 0x1, 0x0, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff, r9}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8005}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0xff, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000e00000008000000ae00000009000000", @ANYRES32=0x1], 0x50) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0xff81, &(0x7f0000000100)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0x3e}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}, {&(0x7f00000001c0)="1663b331c3bf9534525784f9f4558909c5b1a19e7f7dd74f5576d99b7166c13465e7f5e4c47883e70aee845e1083df1768a76e40614062ed926c98b5347ed16d15f52193792db0cd93435ce1889dbe873555d16e308b1bfa4300386836d401f2a2dad5e2fba8b1977071ce9daeeba03df660c0c34a0d8c67000400008904a31f7cda422d62b091465305c421d2", 0x1e}], 0x3}, 0x400c010) 3.012033372s ago: executing program 4 (id=1914): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="46ff07001000ffff27bd7000eedb9f250000000035036f6b00d4b848842dfe91fe101119b05ff0fe34c9ad188c4c92d4e20858b968fa6f1504d3a3da21a6e3baef3434d7a37a80", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c0012800b0001006d616373656300000c000280050003000c00000008000500", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async) socket$inet6_udp(0xa, 0x2, 0x0) 3.011712012s ago: executing program 4 (id=1915): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48) r0 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) dup(0xffffffffffffffff) fallocate(r0, 0x8, 0x2000000, 0x10000) (fail_nth: 2) 2.934614549s ago: executing program 0 (id=1918): getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xb, 0x0, 0x80000001, 0xffff, 0x2}, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) write$binfmt_script(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 2.838125588s ago: executing program 0 (id=1920): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x20, 0x5, "1ad327b299"}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) 2.556126293s ago: executing program 4 (id=1921): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x7f2b1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0xc032}]}, 0x44}}, 0x8000002) 2.544723174s ago: executing program 4 (id=1922): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x571, 0x4, 0x11723705, 0x2, r3, 0xfffffffa, '\x00', r5, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) 2.532551875s ago: executing program 0 (id=1923): socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) prlimit64(r0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r5, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0x3}) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$rds(0x15, 0x5, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000080)={'veth1_vlan\x00', {0x2, 0x0, @private=0xfffffffc}}) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f0000000640)=0x1, 0x4) ptrace$peeksig(0x4209, r7, 0x0, &(0x7f0000000b40)) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 2.506168397s ago: executing program 2 (id=1925): getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xb, 0x0, 0x80000001, 0xffff, 0x2}, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000002dc0)=@buf={0x50, &(0x7f0000001dc0)="b62f06e0264357d7f9812fce5e020dff3cf8ebd5c55cf91510675ee511da743c5e657abb8866e184e78d729c6be3a0d1d5bfce3dc9bbeab31681b59aaefe9d1cd338ee71b51792e7349e64824d656b01"}) 2.486920459s ago: executing program 2 (id=1926): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='attr/fscreate\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd}, @enum]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) read$rfkill(r0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xbff4, 0x100000002}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r2, 0x309, 0x0, 0x0, {0x1d}}, 0x14}}, 0x0) 1.676267541s ago: executing program 0 (id=1927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async, rerun: 32) pwritev(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x0, 0x9) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c00010003080108020000000600150002"], 0x44}}, 0x0) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8100, 0x1, 0x10006, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async, rerun: 32) syz_clone(0x20884a00, 0x0, 0xffe3, 0x0, 0x0, 0x0) (rerun: 32) 1.611905707s ago: executing program 0 (id=1929): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$netlink(0x10, 0x3, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r4 = socket(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000100)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r5, r3, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000003b80)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x28}}], 0x1, 0x4800) write(r4, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum64={0x2, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000001f40)=""/4089, 0x28, 0xff9, 0x9, 0x614fc9df}, 0x28) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x4b, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1.504798167s ago: executing program 4 (id=1932): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46040700030400000000000000020003000a0000000903000038000000b3c6ce002000000005000500000000000000"], 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf252400000008000200", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.406639275s ago: executing program 1 (id=1933): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x7f2b1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0xc032}]}, 0x44}}, 0x8000002) 1.381251318s ago: executing program 1 (id=1934): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x20, 0x5, "1ad327b299"}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) 1.315283893s ago: executing program 1 (id=1935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20442) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x3, 0x0, 0x8f}, 0x100000000000, 0x8, 0x5}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x80) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x40002) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x10000}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.281854046s ago: executing program 1 (id=1936): preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="1400020000000000000000000000ffff0000000008000800700300003008743e464426f8966e720f8f1bec6f7c1497341cc25542d8fea9a99267eff329dd89"], 0x34}}, 0x0) 1.263351848s ago: executing program 1 (id=1937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x24, 0x26, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xc, 0xc}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040850}, 0x4004000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a60000000060a0104000000000000000002000005300004802c0001c0b300000000000063680000001c0002800800010074746c00060003007acc000008000000000000000900410073797a30000000000900020073797a320000000004000580c5bb733067d61400000011000100000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c110032f4000d042dbd7000fcffff1f000000003399be6251d227e1d1f219dc9c67c8027b00c21d5e4cb59ca7725b9da0134d867a4b99964be2e7384205d39e3444bdf560560bcc6543cb3dc22f4d6ec023531f54af9873c8255471616034bd4dec06118b43bb154bcf0313a4545d3ac9b16583fab22ce53046905555df2d8a815ff747f5b92c13746d80cf00bf70", @ANYRES32=r9, @ANYBLOB="46000600000000001c00128009000100626f6e64000000000c0002800500010002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300ae4946ee6b28cdea87aead4d0100b713e20afe08000a0053090c94a26d01c14832e670d307dc856601936f9f32cf03d260e5d44bdc7f011bb347d03ca6befa9633c0bb69d70d46424adf4ee5477a", @ANYRES32=r9, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) listen(r1, 0xff) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) io_uring_setup(0x1f2c, &(0x7f0000000780)={0x0, 0xca8a, 0x0, 0x0, 0x200004}) recvmsg(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1}, 0x10000) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100085"], 0x3c}}, 0x40000) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a1c40a, &(0x7f0000000440)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRESDEC, @ANYRES8=r0, @ANYRESDEC], 0x43, 0xa10, &(0x7f0000000e00)="$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") 816.206478ms ago: executing program 0 (id=1938): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x7f2b1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x4, 0xc032}]}, 0x44}}, 0x8000002) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x571, 0x4, 0x11723705, 0x2, r4, 0xfffffffa, '\x00', r6, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) 65.649844ms ago: executing program 1 (id=1939): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x7f2b1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x4, 0xc032}]}, 0x44}}, 0x8000002) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x571, 0x4, 0x11723705, 0x2, r4, 0xfffffffa, '\x00', r6, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) 65.349494ms ago: executing program 2 (id=1940): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x464}, 0x1, 0x0, 0x0, 0x8d5}, 0x4800) 64.905774ms ago: executing program 4 (id=1941): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'batadv_slave_0\x00', {'macvtap0\x00'}, 0x4}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r1, &(0x7f0000000040)="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", 0x1000, 0x800, 0x0, 0x0) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001040)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), r4) close_range(r2, r3, 0x2) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000001340)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001300)={&(0x7f0000001140)={0x198, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ab496e339d7e4947458af0c8c0306b0a1f446b8fc0605543cd83402863f4e06b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1835c7f27d022212c0dbc6250951f424"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0xa4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3e1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a4ea4836eca7f1002db062f7c2c400faf4f9c736bb20a9b22ed0bcef3814e9cc"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f55616eed16c19a1242b70d101cc34bd57ce4d951aef7a835c4662af8973cc0"}]}, @NL802154_ATTR_SEC_KEY={0x60, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "39ff3a653b626256d017f6be2b5610267f3b18492e25fd3c3ad6e167df22af3f"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9d0467a01c656d6cdb865f3de2d0ba25"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a0a1d75928a3728173c11d1166baeb273d140e34906d399039debfd02c8239e7"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x198}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000013c0), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000001480)={&(0x7f0000001380), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r7, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040810) recvfrom$rxrpc(r3, &(0x7f00000014c0)=""/158, 0x9e, 0x0, &(0x7f0000001580)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffc00}}, 0x24) socket$pptp(0x18, 0x1, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x2000, 0x0) r8 = syz_io_uring_setup(0x64a0, &(0x7f0000001600)={0x0, 0xe8a6, 0x400, 0x3, 0x1a2}, &(0x7f0000001680)=0x0, &(0x7f00000016c0)) r10 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x153, r2, 0x10000000) syz_io_uring_submit(r9, r10, &(0x7f0000001700)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd, 0x7, 0x0, 0x9, 0x2, 0x1}) syz_io_uring_setup(0x6113, &(0x7f0000001740)={0x0, 0x5bb, 0x4000, 0x2, 0x339, 0x0, r8}, &(0x7f00000017c0), &(0x7f0000001800)=0x0) syz_io_uring_submit(r9, r11, &(0x7f0000001840)=@IORING_OP_FALLOCATE={0x11, 0xc, 0x0, @fd_index=0x6, 0x4, 0x0, 0x5b}) connect$inet(r2, &(0x7f0000001880)={0x2, 0x4e24, @local}, 0x10) 64.774594ms ago: executing program 5 (id=1942): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 0s ago: executing program 5 (id=1943): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x7f2b1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8, 0x4, 0xc032}]}, 0x44}}, 0x8000002) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x571, 0x4, 0x11723705, 0x2, r5, 0xfffffffa, '\x00', r7, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) kernel console output (not intermixed with test programs): 03e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 194.634022][ T7442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.649871][ T28] audit: type=1326 audit(1771346078.310:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 194.665664][ T7444] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1062: corrupted in-inode xattr: invalid ea_ino [ 194.686164][ T28] audit: type=1326 audit(1771346078.310:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 194.724341][ T28] audit: type=1326 audit(1771346078.310:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 194.732832][ T7444] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 194.750540][ T28] audit: type=1326 audit(1771346078.310:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 194.759821][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 194.759837][ C1] EXT4-fs (loop2): initial error at time 1771346078: ext4_iget_extra_inode:5025: inode 15 [ 194.759862][ C1] EXT4-fs (loop2): last error at time 1771346078: ext4_iget_extra_inode:5025: inode 15 [ 194.822255][ T7444] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1062: couldn't read orphan inode 15 (err -117) [ 194.823874][ T7451] __nla_validate_parse: 1 callbacks suppressed [ 194.823937][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 194.834992][ T7444] loop2: lost filesystem error report for type 5 error -117 [ 194.850307][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.854223][ T7452] tipc: Started in network mode [ 194.868007][ T7444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.884860][ T28] audit: type=1326 audit(1771346078.310:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 194.909695][ T28] audit: type=1326 audit(1771346078.310:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 194.944888][ T7444] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1062: corrupted in-inode xattr: invalid ea_ino [ 194.959620][ T28] audit: type=1326 audit(1771346078.310:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 194.974344][ T7452] tipc: Node identity , cluster identity 4711 [ 195.006536][ T28] audit: type=1326 audit(1771346078.310:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 195.035776][ T7444] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1062: corrupted in-inode xattr: invalid ea_ino [ 195.050302][ T7452] tipc: Failed to set node id, please configure manually [ 195.059995][ T7461] loop4: detected capacity change from 0 to 512 [ 195.090110][ T7452] tipc: Enabling of bearer rejected, failed to enable media [ 195.098669][ T7463] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1062: corrupted in-inode xattr: invalid ea_ino [ 195.120919][ T7461] ext4: Bad value for 'journal_dev' [ 195.167225][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1062'. [ 195.191296][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1069'. [ 195.267135][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.467910][ T7469] loop2: detected capacity change from 0 to 128 [ 195.855765][ T7477] sctp: [Deprecated]: syz.1.1072 (pid 7477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.855765][ T7477] Use struct sctp_sack_info instead [ 195.908819][ T7479] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1073'. [ 195.952260][ T7483] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1075'. [ 195.970129][ T7485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1076'. [ 196.032611][ T7487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1074'. [ 196.121027][ T7488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7488 comm=syz.2.1075 [ 196.212385][ T7488] loop2: detected capacity change from 0 to 512 [ 196.277993][ T7488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.405625][ T7488] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.734436][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.775763][ T7510] sctp: [Deprecated]: syz.4.1085 (pid 7510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.775763][ T7510] Use struct sctp_sack_info instead [ 197.875532][ T7518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1087'. [ 197.886893][ T7515] syzkaller1: entered promiscuous mode [ 197.892392][ T7515] syzkaller1: entered allmulticast mode [ 198.742757][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 198.832381][ T7541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1094'. [ 199.156482][ T7537] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 200.393895][ T7555] __nla_validate_parse: 2 callbacks suppressed [ 200.393929][ T7555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1098'. [ 200.477181][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 200.477198][ T28] audit: type=1326 audit(1771346084.150:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 200.510727][ T28] audit: type=1326 audit(1771346084.150:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 200.534581][ T28] audit: type=1326 audit(1771346084.190:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 200.579160][ T28] audit: type=1326 audit(1771346084.190:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 200.603786][ T28] audit: type=1326 audit(1771346084.190:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 200.639694][ T28] audit: type=1326 audit(1771346084.190:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 200.676222][ T28] audit: type=1326 audit(1771346084.190:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 200.700789][ T28] audit: type=1326 audit(1771346084.190:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 200.764883][ T28] audit: type=1326 audit(1771346084.190:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 200.798996][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.803486][ T28] audit: type=1326 audit(1771346084.190:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 201.556329][ T4323] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.648493][ T4323] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.780681][ T4323] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.800126][ T7593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1110'. [ 201.836223][ T7569] chnl_net:caif_netlink_parms(): no params data found [ 201.874885][ T4323] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.063255][ T7569] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.222489][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.252764][ T7569] bridge_slave_0: entered allmulticast mode [ 202.278571][ T7569] bridge_slave_0: entered promiscuous mode [ 202.327777][ T4323] bridge_slave_1: left allmulticast mode [ 202.340829][ T4323] bridge_slave_1: left promiscuous mode [ 202.364267][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.411471][ T4323] bridge_slave_0: left allmulticast mode [ 202.417320][ T4323] bridge_slave_0: left promiscuous mode [ 202.425191][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.479694][ T4323] bond1 (unregistering): (slave gretap1): Releasing active interface [ 202.535169][ T7612] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 202.544470][ T7612] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 202.554878][ T4323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.564106][ T7612] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 202.574201][ T4323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.583483][ T7612] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 202.590740][ T4323] bond0 (unregistering): Released all slaves [ 202.598575][ T7612] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 202.600040][ T4323] bond1 (unregistering): Released all slaves [ 202.605209][ T7612] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 202.606641][ T7612] vhci_hcd vhci_hcd.0: Device attached [ 202.626964][ T7612] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 202.636180][ T7569] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.643534][ T7612] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 202.650161][ T7612] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.658103][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.665652][ T7569] bridge_slave_1: entered allmulticast mode [ 202.673482][ T7569] bridge_slave_1: entered promiscuous mode [ 202.682027][ T7612] vhci_hcd vhci_hcd.0: Device attached [ 202.712170][ T7612] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(17) [ 202.718816][ T7612] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.733497][ T7569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.744417][ T7612] vhci_hcd vhci_hcd.0: Device attached [ 202.753985][ T7569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.767746][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 202.831133][ T7569] team0: Port device team_slave_0 added [ 202.885872][ T7569] team0: Port device team_slave_1 added [ 202.943211][ T3407] usb 6-1: SetAddress Request (2) to port 0 [ 202.949248][ T3407] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 202.965801][ T7569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.985931][ T7569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.072849][ T7569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.107515][ T7569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.129937][ T7569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.185702][ T7612] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(21) [ 203.192353][ T7612] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.210297][ T7612] vhci_hcd vhci_hcd.0: Device attached [ 203.221754][ T7569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.243688][ T7624] vhci_hcd: connection closed [ 203.243921][ T70] vhci_hcd vhci_hcd.2: stop threads [ 203.255231][ T70] vhci_hcd vhci_hcd.2: release socket [ 203.270690][ T70] vhci_hcd vhci_hcd.2: disconnect device [ 203.368085][ T4323] hsr_slave_0: left promiscuous mode [ 203.373868][ T4323] hsr_slave_1: left promiscuous mode [ 203.384105][ T4323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.398419][ T7613] vhci_hcd: connection reset by peer [ 203.405363][ T7620] vhci_hcd: connection closed [ 203.405844][ T4296] vhci_hcd vhci_hcd.2: stop threads [ 203.406396][ T4323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.410791][ T7616] vhci_hcd: connection closed [ 203.428406][ T4296] vhci_hcd vhci_hcd.2: release socket [ 203.439044][ T4323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.446242][ T4296] vhci_hcd vhci_hcd.2: disconnect device [ 203.457852][ T4296] vhci_hcd vhci_hcd.2: stop threads [ 203.457884][ T4323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.473332][ T4296] vhci_hcd vhci_hcd.2: release socket [ 203.478902][ T4296] vhci_hcd vhci_hcd.2: disconnect device [ 203.494176][ T4296] vhci_hcd vhci_hcd.2: stop threads [ 203.524308][ T4296] vhci_hcd vhci_hcd.2: release socket [ 203.529978][ T4323] veth1_macvtap: left promiscuous mode [ 203.538516][ T4296] vhci_hcd vhci_hcd.2: disconnect device [ 203.545752][ T4323] veth0_macvtap: left promiscuous mode [ 203.562656][ T4323] veth1_vlan: left promiscuous mode [ 203.571747][ T4323] veth0_vlan: left promiscuous mode [ 203.816729][ T4323] team0 (unregistering): Port device team_slave_1 removed [ 203.839359][ T4323] team0 (unregistering): Port device team_slave_0 removed [ 204.149436][ T7659] sctp: [Deprecated]: syz.2.1125 (pid 7659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.149436][ T7659] Use struct sctp_sack_info instead [ 204.392860][ T7569] hsr_slave_0: entered promiscuous mode [ 204.403602][ T7662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 204.404191][ T7569] hsr_slave_1: entered promiscuous mode [ 204.418810][ T7569] debugfs: 'hsr0' already exists in 'hsr' [ 204.429689][ T7569] Cannot create hsr debugfs directory [ 204.621465][ T7678] loop4: detected capacity change from 0 to 128 [ 204.654600][ T7569] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.704521][ T7569] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.719948][ T7685] loop1: detected capacity change from 0 to 128 [ 204.747895][ T7569] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.773518][ T7569] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.774949][ T4323] IPVS: stop unused estimator thread 0... [ 204.869240][ T7569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.933912][ T7569] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.964273][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.971424][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.993828][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.000919][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.206207][ T7569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.519689][ T7569] veth0_vlan: entered promiscuous mode [ 205.536767][ T7754] loop1: detected capacity change from 0 to 128 [ 205.555237][ T7569] veth1_vlan: entered promiscuous mode [ 205.622710][ T7569] veth0_macvtap: entered promiscuous mode [ 205.649501][ T7569] veth1_macvtap: entered promiscuous mode [ 205.673042][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 205.673057][ T28] audit: type=1400 audit(1771346089.327:848): avc: denied { setopt } for pid=7760 comm="syz.4.1137" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.701159][ T28] audit: type=1400 audit(1771346089.356:849): avc: denied { write } for pid=7760 comm="syz.4.1137" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.725164][ T7569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.734293][ T7569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.744085][ T4323] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.778455][ T4323] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.802518][ T4323] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.832254][ T4323] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.880057][ T28] audit: type=1400 audit(1771346089.536:850): avc: denied { mounton } for pid=7569 comm="syz-executor" path="/root/syzkaller.MyIzqQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 205.934705][ T7771] netlink: 'syz.4.1140': attribute type 14 has an invalid length. [ 205.975008][ T28] audit: type=1400 audit(1771346089.576:851): avc: denied { mounton } for pid=7569 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 206.010254][ T28] audit: type=1400 audit(1771346089.586:852): avc: denied { create } for pid=7770 comm="syz.4.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 206.030923][ T28] audit: type=1400 audit(1771346089.586:853): avc: denied { write } for pid=7770 comm="syz.4.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 206.205917][ T7781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1141'. [ 206.510724][ T7776] loop5: detected capacity change from 0 to 512 [ 206.591567][ T7776] EXT4-fs: Ignoring removed nobh option [ 206.615567][ T7776] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 206.654133][ T7776] EXT4-fs (loop5): 1 truncate cleaned up [ 206.668576][ T7776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.899739][ T7569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.055316][ T7805] loop5: detected capacity change from 0 to 128 [ 207.685719][ T28] audit: type=1326 audit(1771346091.320:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 207.754681][ T28] audit: type=1326 audit(1771346091.320:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 207.780098][ T28] audit: type=1326 audit(1771346091.359:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 207.835466][ T28] audit: type=1326 audit(1771346091.359:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ac98c629 code=0x7ffc0000 [ 208.655780][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1159'. [ 209.017254][ T3407] usb 6-1: device descriptor read/8, error -110 [ 209.113859][ T7843] sctp: [Deprecated]: syz.5.1164 (pid 7843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.113859][ T7843] Use struct sctp_sack_info instead [ 209.156200][ T3407] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 209.176270][ T3407] usb 6-1: enqueue for inactive port 0 [ 209.181784][ T3407] usb 6-1: enqueue for inactive port 0 [ 209.196385][ T3407] usb 6-1: enqueue for inactive port 0 [ 209.397493][ T23] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 209.548069][ T7853] loop1: detected capacity change from 0 to 128 [ 210.186399][ T7863] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1170'. [ 210.652034][ T7868] netlink: 508 bytes leftover after parsing attributes in process `syz.1.1173'. [ 210.677048][ T7873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57362 sclass=netlink_route_socket pid=7873 comm=syz.5.1175 [ 210.943730][ T7873] loop5: detected capacity change from 0 to 512 [ 211.262519][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1176'. [ 211.639872][ T7884] sctp: [Deprecated]: syz.2.1177 (pid 7884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.639872][ T7884] Use struct sctp_sack_info instead [ 212.222493][ T7867] delete_channel: no stack [ 212.407540][ T3407] usb usb6-port1: attempt power cycle [ 212.488716][ T7910] loop5: detected capacity change from 0 to 128 [ 212.618976][ T7915] bio_check_eod: 102 callbacks suppressed [ 212.619367][ T7915] syz.5.1188: attempt to access beyond end of device [ 212.619367][ T7915] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 212.839547][ T7917] sctp: [Deprecated]: syz.0.1189 (pid 7917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.839547][ T7917] Use struct sctp_sack_info instead [ 213.041202][ T7915] syz.5.1188: attempt to access beyond end of device [ 213.041202][ T7915] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 213.054866][ T7915] syz.5.1188: attempt to access beyond end of device [ 213.054866][ T7915] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 213.084107][ T7915] syz.5.1188: attempt to access beyond end of device [ 213.084107][ T7915] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 213.135865][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 213.135883][ T28] audit: type=1400 audit(1771346096.765:866): avc: denied { ioctl } for pid=7909 comm="syz.5.1188" path="socket:[20269]" dev="sockfs" ino=20269 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 213.138719][ T7915] syz.5.1188: attempt to access beyond end of device [ 213.138719][ T7915] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 213.254759][ T7915] syz.5.1188: attempt to access beyond end of device [ 213.254759][ T7915] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 213.344878][ T7925] netlink: 'syz.1.1191': attribute type 14 has an invalid length. [ 213.388620][ T7915] syz.5.1188: attempt to access beyond end of device [ 213.388620][ T7915] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 213.423456][ T7915] syz.5.1188: attempt to access beyond end of device [ 213.423456][ T7915] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 213.438359][ T7915] syz.5.1188: attempt to access beyond end of device [ 213.438359][ T7915] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 213.497583][ T7915] syz.5.1188: attempt to access beyond end of device [ 213.497583][ T7915] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 213.584676][ T7933] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1192'. [ 214.036224][ T7938] can: request_module (can-proto-0) failed. [ 214.130289][ T7938] wireguard0: entered promiscuous mode [ 214.147043][ T7938] wireguard0: entered allmulticast mode [ 214.257304][ T7951] sctp: [Deprecated]: syz.2.1200 (pid 7951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.257304][ T7951] Use struct sctp_sack_info instead [ 214.322859][ T7953] loop2: detected capacity change from 0 to 2048 [ 214.342203][ T7953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.930136][ T3407] usb usb6-port1: unable to enumerate USB device [ 214.964667][ T28] audit: type=1400 audit(1771346098.591:867): avc: denied { execute } for pid=7966 comm="syz.1.1206" path="/240/blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.991673][ T7961] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 215.042646][ T28] audit: type=1400 audit(1771346098.621:868): avc: denied { mac_admin } for pid=7952 comm="syz.2.1201" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 215.076987][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1207'. [ 215.096404][ T7975] tmpfs: Bad value for 'mpol' [ 215.115686][ T28] audit: type=1400 audit(1771346098.621:869): avc: denied { relabelto } for pid=7952 comm="syz.2.1201" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 215.389384][ T7983] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1210'. [ 215.544643][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.888506][ T8002] loop1: detected capacity change from 0 to 512 [ 215.895617][ T8002] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 215.906619][ T8002] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1215: bad orphan inode 15 [ 215.917004][ T8002] loop1: lost filesystem error report for type 5 error -117 [ 215.921536][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 215.935332][ C0] EXT4-fs (loop1): initial error at time 1771346099: ext4_orphan_get:1417 [ 215.943920][ C0] EXT4-fs (loop1): last error at time 1771346099: ext4_orphan_get:1417 [ 215.950186][ T8002] ext4_test_bit(bit=14, block=18) = 0 [ 215.968881][ T8002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 215.982969][ T8007] loop4: detected capacity change from 0 to 512 [ 215.989893][ T8002] ext2 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.013602][ T28] audit: type=1400 audit(1771346099.639:870): avc: denied { setattr } for pid=8001 comm="syz.1.1215" path="/242/bus" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.036799][ T8007] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 216.082054][ T8007] EXT4-fs (loop4): mount failed [ 216.133058][ T8013] loop2: detected capacity change from 0 to 128 [ 216.233144][ T28] audit: type=1400 audit(1771346099.849:871): avc: denied { search } for pid=8020 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.250174][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 216.272569][ T7956] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 216.659905][ T8007] loop4: detected capacity change from 0 to 1764 [ 216.756070][ T28] audit: type=1400 audit(1771346099.849:872): avc: denied { search } for pid=8020 comm="rm" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.777609][ T28] audit: type=1400 audit(1771346099.849:873): avc: denied { search } for pid=8020 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.799458][ T28] audit: type=1400 audit(1771346099.929:874): avc: denied { open } for pid=8001 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 216.839234][ T8007] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 216.846331][ T28] audit: type=1400 audit(1771346099.929:875): avc: denied { perfmon } for pid=8001 comm="syz.1.1215" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.992941][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 217.031244][ T8007] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 217.526776][ T8085] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1231'. [ 218.170269][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1234'. [ 218.699845][ T8103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1236'. [ 218.828339][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 218.828354][ T28] audit: type=1400 audit(1771346102.455:919): avc: denied { write } for pid=8100 comm="syz.2.1237" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 219.228613][ T8111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1238'. [ 220.017077][ T28] audit: type=1400 audit(1771346103.634:920): avc: denied { watch watch_reads } for pid=8137 comm="syz.2.1247" path="/250" dev="tmpfs" ino=1362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 220.333151][ T28] audit: type=1400 audit(1771346103.953:921): avc: denied { create } for pid=8128 comm="syz.0.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.373368][ T28] audit: type=1400 audit(1771346103.983:922): avc: denied { setopt } for pid=8128 comm="syz.0.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.404550][ T28] audit: type=1400 audit(1771346103.983:923): avc: denied { connect } for pid=8128 comm="syz.0.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.437985][ T28] audit: type=1400 audit(1771346103.983:924): avc: denied { name_connect } for pid=8128 comm="syz.0.1245" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 220.460714][ T28] audit: type=1400 audit(1771346104.013:925): avc: denied { read } for pid=8128 comm="syz.0.1245" lport=45763 faddr=2001:: fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.527534][ T8147] syz.2.1249 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 220.569110][ T28] audit: type=1400 audit(1771346104.193:926): avc: denied { ioctl } for pid=8148 comm="syz.1.1248" path="socket:[21357]" dev="sockfs" ino=21357 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.612083][ T8150] loop2: detected capacity change from 0 to 128 [ 220.636779][ T8149] loop1: detected capacity change from 0 to 512 [ 220.643214][ T28] audit: type=1400 audit(1771346104.233:927): avc: denied { create } for pid=8146 comm="syz.2.1249" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 220.664513][ T8149] EXT4-fs: old and new quota format mixing [ 220.718352][ T28] audit: type=1400 audit(1771346104.233:928): avc: denied { map } for pid=8146 comm="syz.2.1249" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 220.748654][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 220.779703][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'. [ 220.838969][ T8147] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1249'. [ 220.888581][ T8150] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8150 comm=syz.2.1249 [ 220.910794][ T8150] loop2: detected capacity change from 0 to 512 [ 220.956067][ T8147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=621 sclass=netlink_route_socket pid=8147 comm=syz.2.1249 [ 221.079404][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1251'. [ 221.389069][ T8150] mmap: syz.2.1249 (8150) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 221.829487][ T8173] netlink: 'syz.1.1258': attribute type 7 has an invalid length. [ 221.879529][ T8173] netlink: 'syz.1.1258': attribute type 8 has an invalid length. [ 222.058589][ T8181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1260'. [ 223.303952][ T8205] netlink: 'syz.1.1271': attribute type 7 has an invalid length. [ 223.312747][ T8205] netlink: 'syz.1.1271': attribute type 8 has an invalid length. [ 223.785040][ T8212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1272'. [ 224.286166][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 224.286181][ T28] audit: type=1400 audit(1771346107.899:934): avc: denied { create } for pid=8216 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.375149][ T8217] loop1: detected capacity change from 0 to 256 [ 224.411958][ T8222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1276'. [ 224.520993][ T8217] FAT-fs (loop1): Directory bread(block 64) failed [ 224.552331][ T8217] FAT-fs (loop1): Directory bread(block 65) failed [ 224.560504][ T8217] FAT-fs (loop1): Directory bread(block 66) failed [ 224.578926][ T8217] FAT-fs (loop1): Directory bread(block 67) failed [ 224.599209][ T8217] FAT-fs (loop1): Directory bread(block 68) failed [ 224.612100][ T28] audit: type=1400 audit(1771346108.229:935): avc: denied { bind } for pid=8229 comm="syz.5.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.642699][ T8217] FAT-fs (loop1): Directory bread(block 69) failed [ 224.650607][ T8217] FAT-fs (loop1): Directory bread(block 70) failed [ 224.669422][ T8217] FAT-fs (loop1): Directory bread(block 71) failed [ 224.688640][ T8217] FAT-fs (loop1): Directory bread(block 72) failed [ 224.722309][ T8230] netlink: 'syz.5.1281': attribute type 10 has an invalid length. [ 224.733155][ T8217] FAT-fs (loop1): Directory bread(block 73) failed [ 224.845520][ T8230] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 224.871908][ T28] audit: type=1400 audit(1771346108.479:936): avc: denied { create } for pid=8216 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 224.891484][ T8231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.901020][ T28] audit: type=1400 audit(1771346108.509:937): avc: denied { bind } for pid=8216 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 224.957145][ T28] audit: type=1400 audit(1771346108.569:938): avc: denied { listen } for pid=8216 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 225.053016][ T8242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1283'. [ 225.565175][ T28] audit: type=1400 audit(1771346109.179:939): avc: denied { read } for pid=8257 comm="syz.2.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 225.592673][ T3407] IPVS: starting estimator thread 0... [ 225.615461][ T28] audit: type=1400 audit(1771346109.179:940): avc: denied { create } for pid=8257 comm="syz.2.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.711802][ T28] audit: type=1400 audit(1771346109.179:941): avc: denied { create } for pid=8257 comm="syz.2.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.732738][ T8259] IPVS: using max 2304 ests per chain, 115200 per kthread [ 225.823616][ T28] audit: type=1400 audit(1771346109.198:942): avc: denied { setopt } for pid=8257 comm="syz.2.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.843317][ T28] audit: type=1400 audit(1771346109.208:943): avc: denied { firmware_load } for pid=8257 comm="syz.2.1290" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 227.248354][ T8277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1294'. [ 227.405650][ T8283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1296'. [ 228.830976][ T8299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1303'. [ 229.376356][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1308'. [ 229.795010][ T28] audit: type=1400 audit(1771346113.406:944): avc: denied { create } for pid=8317 comm="syz.5.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 229.821337][ T8318] netlink: 'syz.5.1312': attribute type 14 has an invalid length. [ 229.834545][ T28] audit: type=1400 audit(1771346113.436:945): avc: denied { write } for pid=8317 comm="syz.5.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 230.971630][ T8337] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1319'. [ 230.995498][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1319'. [ 231.190064][ T28] audit: type=1400 audit(1771346114.806:946): avc: denied { ioctl } for pid=8336 comm="syz.5.1319" path="socket:[22180]" dev="sockfs" ino=22180 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.465683][ T3373] IPVS: starting estimator thread 0... [ 231.591405][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1320'. [ 231.735948][ T8348] IPVS: using max 2304 ests per chain, 115200 per kthread [ 231.998169][ T8353] netlink: 'syz.5.1323': attribute type 14 has an invalid length. [ 232.077368][ T28] audit: type=1400 audit(1771346115.695:947): avc: denied { connect } for pid=8360 comm="syz.2.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.119950][ T28] audit: type=1400 audit(1771346115.715:948): avc: denied { write } for pid=8360 comm="syz.2.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.144609][ T28] audit: type=1400 audit(1771346115.715:949): avc: denied { read } for pid=8360 comm="syz.2.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.172096][ T8365] loop2: detected capacity change from 0 to 128 [ 232.945760][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1333'. [ 233.692331][ T8385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1334'. [ 233.740926][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1334'. [ 233.786681][ T8391] netlink: 'syz.4.1336': attribute type 14 has an invalid length. [ 233.842674][ T8394] loop5: detected capacity change from 0 to 128 [ 233.884515][ T8396] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.896885][ T28] audit: type=1400 audit(1771346117.495:950): avc: denied { name_bind } for pid=8395 comm="syz.4.1338" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 233.958941][ T28] audit: type=1400 audit(1771346117.495:951): avc: denied { node_bind } for pid=8395 comm="syz.4.1338" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 233.984669][ T8397] loop4: detected capacity change from 0 to 512 [ 234.011575][ T8397] vfat: Unknown parameter '€ ' [ 234.059369][ T28] audit: type=1400 audit(1771346117.595:952): avc: denied { create } for pid=8395 comm="syz.4.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.138322][ T28] audit: type=1400 audit(1771346117.605:953): avc: denied { create } for pid=8398 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.862821][ T8418] loop5: detected capacity change from 0 to 2048 [ 235.055596][ T8426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1344'. [ 235.320147][ T8428] netlink: 'syz.4.1348': attribute type 14 has an invalid length. [ 235.345570][ T8430] netlink: 'syz.0.1349': attribute type 6 has an invalid length. [ 235.432378][ T8418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.447444][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 235.447461][ T28] audit: type=1400 audit(1771346119.065:956): avc: denied { mount } for pid=8416 comm="syz.5.1345" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 235.524881][ T7569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.608279][ T28] audit: type=1326 audit(1771346119.215:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda06e2c629 code=0x7ffc0000 [ 235.654510][ T28] audit: type=1326 audit(1771346119.215:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda06e2c629 code=0x7ffc0000 [ 235.754082][ T28] audit: type=1326 audit(1771346119.225:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fda06e2c629 code=0x7ffc0000 [ 235.777923][ T28] audit: type=1326 audit(1771346119.225:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda06e2c629 code=0x7ffc0000 [ 235.802328][ T28] audit: type=1326 audit(1771346119.225:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda06e2c629 code=0x7ffc0000 [ 236.400321][ T8461] netlink: 'syz.0.1360': attribute type 14 has an invalid length. [ 236.582540][ T8465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1362'. [ 236.617499][ T8465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'. [ 236.737152][ T8468] loop5: detected capacity change from 0 to 2048 [ 236.792434][ T8468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.919962][ T7569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.996567][ T3478] IPVS: starting estimator thread 0... [ 237.025114][ T28] audit: type=1400 audit(1771346120.635:962): avc: denied { ioctl } for pid=8490 comm="syz.0.1371" path="socket:[22831]" dev="sockfs" ino=22831 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.052181][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 237.071325][ T8491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1371'. [ 237.097222][ T8491] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1371'. [ 237.106179][ T8491] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 237.121741][ T8489] IPVS: using max 2256 ests per chain, 112800 per kthread [ 237.168626][ T8494] netlink: 'syz.0.1372': attribute type 14 has an invalid length. [ 237.889222][ T8516] loop1: detected capacity change from 0 to 2048 [ 238.256918][ T8516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.429739][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.525309][ T8527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1382'. [ 238.627016][ T8527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1382'. [ 238.992836][ T23] IPVS: starting estimator thread 0... [ 239.096572][ T8539] IPVS: using max 2304 ests per chain, 115200 per kthread [ 239.324910][ T8547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1387'. [ 239.774992][ T28] audit: type=1400 audit(1771346123.385:963): avc: denied { ioctl } for pid=8552 comm="syz.1.1391" path="socket:[23690]" dev="sockfs" ino=23690 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 239.815104][ T28] audit: type=1400 audit(1771346123.405:964): avc: denied { ioctl } for pid=8552 comm="syz.1.1391" path="socket:[23691]" dev="sockfs" ino=23691 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 239.846011][ T28] audit: type=1400 audit(1771346123.415:965): avc: denied { getopt } for pid=8552 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.898489][ T8557] netlink: 'syz.5.1393': attribute type 14 has an invalid length. [ 239.909177][ T8558] loop1: detected capacity change from 0 to 128 [ 239.972702][ T8558] SELinux: failed to load policy [ 240.089417][ T8570] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1399'. [ 240.105130][ T8570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8570 comm=syz.0.1399 [ 240.380917][ T8580] loop1: detected capacity change from 0 to 2048 [ 240.408702][ T8580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.465899][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.632907][ T8589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1405'. [ 240.658052][ T8589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1405'. [ 241.040789][ T8595] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1407'. [ 241.398749][ T8597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1408'. [ 241.419684][ T8597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1408'. [ 241.523506][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 241.523559][ T28] audit: type=1400 audit(1771346125.135:974): avc: denied { read } for pid=8605 comm="syz.2.1412" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 241.540102][ T8607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1410'. [ 241.560425][ T28] audit: type=1400 audit(1771346125.175:975): avc: denied { open } for pid=8605 comm="syz.2.1412" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 241.586213][ T28] audit: type=1400 audit(1771346125.175:976): avc: denied { ioctl } for pid=8605 comm="syz.2.1412" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 241.616024][ T8607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1410'. [ 241.970987][ T8628] loop1: detected capacity change from 0 to 128 [ 242.274081][ T28] audit: type=1400 audit(1771346125.885:977): avc: denied { read } for pid=8633 comm="syz.1.1421" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.302065][ T28] audit: type=1400 audit(1771346125.885:978): avc: denied { open } for pid=8633 comm="syz.1.1421" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.325626][ T28] audit: type=1400 audit(1771346125.885:979): avc: denied { ioctl } for pid=8633 comm="syz.1.1421" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.352470][ T28] audit: type=1400 audit(1771346125.915:980): avc: denied { setopt } for pid=8633 comm="syz.1.1421" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.373111][ T28] audit: type=1400 audit(1771346125.915:981): avc: denied { write } for pid=8633 comm="syz.1.1421" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.631813][ T8652] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1428'. [ 242.644395][ T8652] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1428'. [ 243.090830][ T8660] loop5: detected capacity change from 0 to 128 [ 243.191311][ T8664] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.217011][ T8664] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.245279][ T8664] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.266594][ T8664] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 243.282400][ T8664] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 243.289097][ T8664] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 243.302841][ T8664] vhci_hcd vhci_hcd.0: Device attached [ 243.313171][ T8664] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.322582][ T8664] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 243.329215][ T8664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.337414][ T8664] vhci_hcd vhci_hcd.0: Device attached [ 243.344648][ T8664] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(17) [ 243.351272][ T8664] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 243.373298][ T8664] vhci_hcd vhci_hcd.0: Device attached [ 243.398935][ T8664] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(21) [ 243.405707][ T8664] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 243.413545][ T8664] vhci_hcd vhci_hcd.0: Device attached [ 243.420083][ T8683] vhci_hcd: connection closed [ 243.420516][ T4323] vhci_hcd vhci_hcd.1: stop threads [ 243.432673][ T4323] vhci_hcd vhci_hcd.1: release socket [ 243.475872][ T4323] vhci_hcd vhci_hcd.1: disconnect device [ 243.496408][ T8674] vhci_hcd: connection closed [ 243.496541][ T8676] vhci_hcd: connection closed [ 243.497461][ T8670] vhci_hcd: connection closed [ 243.510617][ T4323] vhci_hcd vhci_hcd.1: stop threads [ 243.520704][ T4323] vhci_hcd vhci_hcd.1: release socket [ 243.532667][ T4323] vhci_hcd vhci_hcd.1: disconnect device [ 243.555006][ T4323] vhci_hcd vhci_hcd.1: stop threads [ 243.566229][ T4323] vhci_hcd vhci_hcd.1: release socket [ 243.575891][ T4323] vhci_hcd vhci_hcd.1: disconnect device [ 243.586333][ T3407] usb 4-1: SetAddress Request (2) to port 0 [ 243.592416][ T3407] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 243.608514][ T4323] vhci_hcd vhci_hcd.1: stop threads [ 243.614807][ T8688] loop4: detected capacity change from 0 to 512 [ 243.621159][ T4323] vhci_hcd vhci_hcd.1: release socket [ 243.636903][ T4323] vhci_hcd vhci_hcd.1: disconnect device [ 243.645052][ T8688] EXT4-fs: Ignoring removed nobh option [ 243.686584][ T8688] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 243.731932][ T8688] EXT4-fs (loop4): 1 truncate cleaned up [ 243.754198][ T8688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.788684][ T28] audit: type=1400 audit(1771346127.405:982): avc: denied { add_name } for pid=8687 comm="syz.4.1441" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.826199][ T28] audit: type=1400 audit(1771346127.405:983): avc: denied { create } for pid=8687 comm="syz.4.1441" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 243.979371][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.225950][ T8714] loop4: detected capacity change from 0 to 128 [ 244.239170][ T8712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8712 comm=syz.1.1449 [ 245.170231][ T8729] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.192350][ T8731] loop1: detected capacity change from 0 to 512 [ 245.204040][ T8729] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.235178][ T8731] EXT4-fs: Ignoring removed nobh option [ 245.290350][ T8734] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.301901][ T8731] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.354591][ T8729] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 245.375099][ T8731] EXT4-fs (loop1): 1 truncate cleaned up [ 245.413508][ T8734] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 245.420260][ T8734] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 245.438502][ T8731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.651104][ T8734] vhci_hcd vhci_hcd.0: Device attached [ 245.683324][ T8729] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 246.478754][ T8749] __nla_validate_parse: 6 callbacks suppressed [ 246.478771][ T8749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1461'. [ 246.611266][ T8750] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(17) [ 246.618023][ T8750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.725065][ T8729] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(16) [ 246.731733][ T8729] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 246.739338][ T8750] vhci_hcd vhci_hcd.0: Device attached [ 246.745065][ T8729] vhci_hcd vhci_hcd.0: Device attached [ 246.774464][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1456'. [ 246.795705][ T3373] usb 12-1: SetAddress Request (2) to port 0 [ 246.802493][ T3373] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 246.817520][ T8729] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(21) [ 246.824171][ T8729] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 246.832627][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1463'. [ 246.855700][ T8729] vhci_hcd vhci_hcd.0: Device attached [ 246.867590][ T8764] vhci_hcd: connection closed [ 246.868236][ T8756] vhci_hcd: connection closed [ 246.869224][ T116] vhci_hcd vhci_hcd.5: stop threads [ 246.895457][ T116] vhci_hcd vhci_hcd.5: release socket [ 246.921753][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.942589][ T116] vhci_hcd vhci_hcd.5: disconnect device [ 246.948695][ T8751] vhci_hcd: connection closed [ 246.949659][ T8738] vhci_hcd: connection reset by peer [ 246.961103][ T116] vhci_hcd vhci_hcd.5: stop threads [ 247.245689][ T116] vhci_hcd vhci_hcd.5: release socket [ 247.254751][ T116] vhci_hcd vhci_hcd.5: disconnect device [ 247.265211][ T116] vhci_hcd vhci_hcd.5: stop threads [ 247.275659][ T116] vhci_hcd vhci_hcd.5: release socket [ 247.305655][ T116] vhci_hcd vhci_hcd.5: disconnect device [ 247.311615][ T116] vhci_hcd vhci_hcd.5: stop threads [ 247.335913][ T116] vhci_hcd vhci_hcd.5: release socket [ 247.341367][ T116] vhci_hcd vhci_hcd.5: disconnect device [ 247.621213][ T8779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1468'. [ 247.637275][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1468'. [ 247.851168][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1472'. [ 248.081124][ T8797] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1474'. [ 248.696626][ T8803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1475'. [ 248.985310][ T8805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1476'. [ 249.089358][ T3407] usb 4-1: device descriptor read/8, error -110 [ 249.205157][ T3407] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 249.235225][ T3407] usb 4-1: enqueue for inactive port 0 [ 249.247009][ T3407] usb 4-1: enqueue for inactive port 0 [ 249.258742][ T3407] usb 4-1: enqueue for inactive port 0 [ 249.351409][ T8811] netlink: 'syz.2.1479': attribute type 14 has an invalid length. [ 249.528444][ T8818] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 249.535026][ T8818] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 249.568885][ T8818] vhci_hcd vhci_hcd.0: Device attached [ 249.595742][ T8820] vhci_hcd: connection closed [ 249.595906][ T12] vhci_hcd vhci_hcd.4: stop threads [ 249.616057][ T12] vhci_hcd vhci_hcd.4: release socket [ 249.632497][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 249.646221][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 249.646235][ T28] audit: type=1400 audit(1771346133.266:985): avc: denied { view } for pid=8824 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 249.684420][ T8825] netlink: 508 bytes leftover after parsing attributes in process `syz.2.1486'. [ 249.725040][ T28] audit: type=1400 audit(1771346133.326:986): avc: denied { create } for pid=8824 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 249.886468][ T28] audit: type=1400 audit(1771346133.506:987): avc: denied { wake_alarm } for pid=8824 comm="syz.2.1486" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 249.939231][ T8824] delete_channel: no stack [ 249.944982][ T28] audit: type=1400 audit(1771346133.556:988): avc: denied { ioctl } for pid=8824 comm="syz.2.1486" path="socket:[24410]" dev="sockfs" ino=24410 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.295201][ T3407] usb usb4-port1: attempt power cycle [ 250.364985][ T23] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 251.063274][ T8848] netlink: 'syz.2.1493': attribute type 14 has an invalid length. [ 251.108946][ T8852] netlink: 'syz.2.1495': attribute type 14 has an invalid length. [ 251.189709][ T8857] loop4: detected capacity change from 0 to 128 [ 251.537517][ T8862] bio_check_eod: 102 callbacks suppressed [ 251.537664][ T8862] syz.4.1496: attempt to access beyond end of device [ 251.537664][ T8862] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 251.828452][ T8862] syz.4.1496: attempt to access beyond end of device [ 251.828452][ T8862] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 251.848833][ T8862] syz.4.1496: attempt to access beyond end of device [ 251.848833][ T8862] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 251.850370][ T28] audit: type=1400 audit(1771346135.457:989): avc: denied { getopt } for pid=8856 comm="syz.4.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.393313][ T3373] usb 12-1: device descriptor read/8, error -110 [ 252.519870][ T8862] syz.4.1496: attempt to access beyond end of device [ 252.519870][ T8862] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 252.533663][ T3373] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 252.581791][ T3373] usb 12-1: enqueue for inactive port 0 [ 252.595453][ T3373] usb 12-1: enqueue for inactive port 0 [ 252.601047][ T3373] usb 12-1: enqueue for inactive port 0 [ 252.683801][ T8862] syz.4.1496: attempt to access beyond end of device [ 252.683801][ T8862] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 252.743134][ T8862] syz.4.1496: attempt to access beyond end of device [ 252.743134][ T8862] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 252.804274][ T8862] syz.4.1496: attempt to access beyond end of device [ 252.804274][ T8862] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 252.858226][ T8862] syz.4.1496: attempt to access beyond end of device [ 252.858226][ T8862] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 252.914244][ T8862] syz.4.1496: attempt to access beyond end of device [ 252.914244][ T8862] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 252.957427][ T8862] syz.4.1496: attempt to access beyond end of device [ 252.957427][ T8862] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 253.285765][ T8887] __nla_validate_parse: 4 callbacks suppressed [ 253.285780][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1507'. [ 253.330620][ T8891] netlink: 'syz.2.1510': attribute type 14 has an invalid length. [ 253.363785][ T8893] loop2: detected capacity change from 0 to 128 [ 253.585703][ T8900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1512'. [ 253.694338][ T3373] usb usb12-port1: attempt power cycle [ 253.937807][ T28] audit: type=1400 audit(1771346137.557:990): avc: denied { create } for pid=8903 comm="syz.5.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 253.982857][ T28] audit: type=1400 audit(1771346137.577:991): avc: denied { read } for pid=8903 comm="syz.5.1515" path="socket:[24639]" dev="sockfs" ino=24639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 254.044022][ T3420] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 254.364226][ T8919] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 254.370904][ T8919] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.413009][ T8919] vhci_hcd vhci_hcd.0: Device attached [ 254.434688][ T8920] vhci_hcd: connection closed [ 254.662707][ T8925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1519'. [ 254.677159][ T4296] vhci_hcd vhci_hcd.2: stop threads [ 254.682498][ T4296] vhci_hcd vhci_hcd.2: release socket [ 254.690507][ T4296] vhci_hcd vhci_hcd.2: disconnect device [ 254.703704][ T3421] usb 5-1: new high-speed USB device number 3 using vhci_hcd [ 254.730797][ T3421] usb 5-1: enqueue for inactive port 0 [ 254.757236][ T3421] usb 5-1: enqueue for inactive port 0 [ 254.762766][ T3421] usb 5-1: enqueue for inactive port 0 [ 254.862175][ T8927] netlink: 'syz.5.1521': attribute type 14 has an invalid length. [ 254.870153][ T3421] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 254.933751][ T3407] usb usb4-port1: unable to enumerate USB device [ 255.191501][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1526'. [ 255.490060][ T8948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1529'. [ 256.318104][ T8954] netlink: 'syz.5.1532': attribute type 13 has an invalid length. [ 256.563896][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1537'. [ 256.687024][ T8969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1539'. [ 256.702766][ T8969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1539'. [ 257.073015][ T3373] usb usb12-port1: unable to enumerate USB device [ 257.333958][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1541'. [ 257.449545][ T8983] netlink: 'syz.5.1543': attribute type 14 has an invalid length. [ 257.780609][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1546'. [ 257.833762][ T8993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8993 comm=syz.2.1548 [ 258.810291][ T9011] netlink: 'syz.2.1555': attribute type 14 has an invalid length. [ 258.901288][ T9013] __nla_validate_parse: 2 callbacks suppressed [ 258.901315][ T9013] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1556'. [ 258.934084][ T9013] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1556'. [ 259.414884][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1562'. [ 259.914709][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1563'. [ 260.200406][ T9044] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1566'. [ 260.274890][ T9045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9045 comm=syz.1.1566 [ 260.437919][ T9047] netlink: 'syz.0.1567': attribute type 14 has an invalid length. [ 260.785319][ T9058] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1573'. [ 260.809924][ T9060] loop2: detected capacity change from 0 to 128 [ 260.826791][ T9058] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1573'. [ 261.277795][ T28] audit: type=1400 audit(1771346144.890:992): avc: denied { module_request } for pid=9068 comm="syz.4.1576" kmod=6E65742D70662D31362D70726F746F2D31362D66616D696C792D05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 261.425420][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1576'. [ 262.863164][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1580'. [ 262.955081][ T9098] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1585'. [ 262.968254][ T9098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9098 comm=syz.1.1585 [ 263.014965][ T9102] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 263.035037][ T9102] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 263.043436][ T9102] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 263.096378][ T9102] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 263.112850][ T9102] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 263.119455][ T9102] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 263.155504][ T9102] vhci_hcd vhci_hcd.0: Device attached [ 263.156368][ T9110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 263.190571][ T9102] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13) [ 263.197211][ T9102] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.210628][ T9102] vhci_hcd vhci_hcd.0: Device attached [ 263.220648][ T9102] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(17) [ 263.227342][ T9102] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 263.245035][ T9102] vhci_hcd vhci_hcd.0: Device attached [ 263.270630][ T9102] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(21) [ 263.277302][ T9102] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 263.292540][ T9102] vhci_hcd vhci_hcd.0: Device attached [ 263.299075][ T9118] vhci_hcd: connection closed [ 263.299259][ T4318] vhci_hcd vhci_hcd.2: stop threads [ 263.314039][ T4318] vhci_hcd vhci_hcd.2: release socket [ 263.330589][ T4318] vhci_hcd vhci_hcd.2: disconnect device [ 263.340676][ T9113] vhci_hcd: connection closed [ 263.340933][ T9108] vhci_hcd: connection closed [ 263.345831][ T9115] vhci_hcd: connection closed [ 263.361197][ T12] vhci_hcd vhci_hcd.2: stop threads [ 263.374059][ T12] vhci_hcd vhci_hcd.2: release socket [ 263.380465][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 263.387141][ T12] vhci_hcd vhci_hcd.2: stop threads [ 263.393100][ T12] vhci_hcd vhci_hcd.2: release socket [ 263.399200][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 263.406168][ T12] vhci_hcd vhci_hcd.2: stop threads [ 263.416977][ T12] vhci_hcd vhci_hcd.2: release socket [ 263.420599][ T3420] usb 6-1: enqueue for inactive port 0 [ 263.438007][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 263.470719][ T9125] loop5: detected capacity change from 0 to 128 [ 263.670375][ T3420] usb 6-1: enqueue for inactive port 0 [ 263.800699][ T9132] netlink: 'syz.5.1595': attribute type 14 has an invalid length. [ 264.588309][ T9146] __nla_validate_parse: 3 callbacks suppressed [ 264.588325][ T9146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1598'. [ 264.664772][ T9144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1600'. [ 264.819929][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1600'. [ 265.001049][ T9159] netlink: 'syz.0.1606': attribute type 14 has an invalid length. [ 265.213948][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1607'. [ 265.760100][ T3420] usb usb6-port1: attempt power cycle [ 265.903667][ T9175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1610'. [ 266.017556][ T9176] netlink: 47 bytes leftover after parsing attributes in process `syz.5.1611'. [ 266.080574][ T9178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9178 comm=syz.5.1611 [ 266.792330][ T3407] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 267.846316][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1612'. [ 268.149204][ T9193] loop1: detected capacity change from 0 to 512 [ 268.171371][ T9201] netlink: 'syz.5.1618': attribute type 14 has an invalid length. [ 268.174139][ T9197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1620'. [ 268.193658][ T9197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1620'. [ 268.213727][ T9193] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 268.237711][ T9193] EXT4-fs (loop1): mount failed [ 268.300831][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 268.338708][ T28] audit: type=1400 audit(1771346151.933:993): avc: denied { create } for pid=9196 comm="syz.0.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 268.374696][ T28] audit: type=1400 audit(1771346151.943:994): avc: denied { read } for pid=9208 comm="syz.4.1623" dev="nsfs" ino=4026532513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 268.399564][ T9193] loop1: detected capacity change from 0 to 1764 [ 268.423596][ T28] audit: type=1400 audit(1771346151.943:995): avc: denied { open } for pid=9208 comm="syz.4.1623" path="net:[4026532513]" dev="nsfs" ino=4026532513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 268.423666][ T28] audit: type=1400 audit(1771346151.943:996): avc: denied { create } for pid=9208 comm="syz.4.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.514994][ T28] audit: type=1400 audit(1771346151.953:997): avc: denied { open } for pid=9196 comm="syz.0.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 268.538623][ T9193] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 268.574407][ T28] audit: type=1400 audit(1771346151.993:998): avc: denied { map_create } for pid=9206 comm="syz.5.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 268.608666][ T28] audit: type=1400 audit(1771346151.993:999): avc: denied { perfmon } for pid=9196 comm="syz.0.1620" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.633154][ T28] audit: type=1400 audit(1771346151.993:1000): avc: denied { kernel } for pid=9196 comm="syz.0.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 268.652867][ T28] audit: type=1400 audit(1771346151.993:1001): avc: denied { tracepoint } for pid=9196 comm="syz.0.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 268.706699][ T28] audit: type=1400 audit(1771346152.023:1002): avc: denied { read write } for pid=9190 comm="syz.1.1617" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.631037][ T9232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1626'. [ 269.808609][ T9234] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1629'. [ 269.887197][ T9239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9239 comm=syz.4.1629 [ 269.958324][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1630'. [ 270.199595][ T9246] netlink: 'syz.2.1632': attribute type 14 has an invalid length. [ 270.793593][ T9258] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1636'. [ 270.803280][ T9258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1636'. [ 271.058814][ T3420] usb usb6-port1: unable to enumerate USB device [ 272.188174][ T9282] netlink: 'syz.5.1644': attribute type 14 has an invalid length. [ 272.198667][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1643'. [ 272.295281][ T9288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.378623][ T9296] FAULT_INJECTION: forcing a failure. [ 272.378623][ T9296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.391921][ T9296] CPU: 1 UID: 0 PID: 9296 Comm: syz.4.1651 Not tainted syzkaller #0 PREEMPT(full) [ 272.391948][ T9296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.391962][ T9296] Call Trace: [ 272.391978][ T9296] [ 272.391986][ T9296] __dump_stack+0x1d/0x30 [ 272.392052][ T9296] dump_stack_lvl+0x95/0xd0 [ 272.392078][ T9296] dump_stack+0x15/0x1b [ 272.392101][ T9296] should_fail_ex+0x263/0x280 [ 272.392128][ T9296] should_fail+0xb/0x20 [ 272.392186][ T9296] should_fail_usercopy+0x1a/0x20 [ 272.392214][ T9296] _copy_from_user+0x1c/0xb0 [ 272.392244][ T9296] __sys_bpf+0x183/0x7e0 [ 272.392322][ T9296] __x64_sys_bpf+0x41/0x50 [ 272.392352][ T9296] x64_sys_call+0x10cb/0x3020 [ 272.392380][ T9296] do_syscall_64+0x12c/0x370 [ 272.392483][ T9296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.392507][ T9296] RIP: 0033:0x7f18baafc629 [ 272.392537][ T9296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.392557][ T9296] RSP: 002b:00007f18b954f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.392577][ T9296] RAX: ffffffffffffffda RBX: 00007f18bad75fa0 RCX: 00007f18baafc629 [ 272.392603][ T9296] RDX: 000000000000006d RSI: 00002000000000c0 RDI: 0000000000000005 [ 272.392616][ T9296] RBP: 00007f18b954f090 R08: 0000000000000000 R09: 0000000000000000 [ 272.392629][ T9296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.392641][ T9296] R13: 00007f18bad76038 R14: 00007f18bad75fa0 R15: 00007ffc7ade0288 [ 272.392703][ T9296] [ 272.610743][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1648'. [ 272.786277][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1649'. [ 272.884418][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 272.955877][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 273.006769][ T9316] netlink: 'syz.0.1656': attribute type 14 has an invalid length. [ 273.836067][ T9334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9334 comm=syz.1.1663 [ 273.956319][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 273.956334][ T28] audit: type=1400 audit(1771346157.585:1060): avc: denied { ioctl } for pid=9335 comm="syz.2.1664" path="socket:[26821]" dev="sockfs" ino=26821 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 274.002342][ T9336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.037122][ T9347] netlink: 'syz.0.1668': attribute type 14 has an invalid length. [ 274.078260][ T28] audit: type=1400 audit(1771346157.695:1061): avc: denied { read write } for pid=9352 comm="syz.0.1670" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 274.208723][ T28] audit: type=1400 audit(1771346157.695:1062): avc: denied { open } for pid=9352 comm="syz.0.1670" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 274.263787][ T9365] loop5: detected capacity change from 0 to 4096 [ 274.358861][ T28] audit: type=1400 audit(1771346157.795:1063): avc: denied { create } for pid=9364 comm="syz.5.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 274.419181][ T28] audit: type=1400 audit(1771346157.825:1064): avc: denied { write } for pid=9362 comm="syz.0.1674" lport=115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.513242][ T28] audit: type=1400 audit(1771346157.875:1065): avc: denied { module_request } for pid=9362 comm="syz.0.1674" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 274.539788][ T28] audit: type=1400 audit(1771346157.925:1066): avc: denied { sys_module } for pid=9362 comm="syz.0.1674" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 274.562945][ T28] audit: type=1400 audit(1771346157.925:1067): avc: denied { create } for pid=9362 comm="syz.0.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 274.582637][ T28] audit: type=1400 audit(1771346157.925:1068): avc: denied { bind } for pid=9362 comm="syz.0.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 274.602252][ T28] audit: type=1400 audit(1771346157.925:1069): avc: denied { setopt } for pid=9362 comm="syz.0.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 275.346371][ T9389] netlink: 'syz.5.1681': attribute type 14 has an invalid length. [ 275.394081][ T9391] uprobe: syz.5.1682:9391 failed to unregister, leaking uprobe [ 275.665599][ T9398] __nla_validate_parse: 8 callbacks suppressed [ 275.665616][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 275.701198][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1685'. [ 275.751377][ T9400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.765791][ T9400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.784537][ T9400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.803231][ T9400] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 275.819427][ T9400] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 275.826034][ T9400] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 275.844018][ T9400] vhci_hcd vhci_hcd.0: Device attached [ 275.851628][ T9400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.860612][ T9400] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 275.867244][ T9400] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.874853][ T9400] vhci_hcd vhci_hcd.0: Device attached [ 275.884925][ T9400] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(17) [ 275.891635][ T9400] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 275.911091][ T9400] vhci_hcd vhci_hcd.0: Device attached [ 275.922514][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 275.936239][ T9400] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(21) [ 275.942880][ T9400] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 275.963758][ T9400] vhci_hcd vhci_hcd.0: Device attached [ 275.974001][ T9408] vhci_hcd: connection closed [ 275.975111][ T4296] vhci_hcd vhci_hcd.1: stop threads [ 275.987395][ T4296] vhci_hcd vhci_hcd.1: release socket [ 276.005103][ T4296] vhci_hcd vhci_hcd.1: disconnect device [ 276.037715][ T9401] vhci_hcd: connection closed [ 276.038008][ T4318] vhci_hcd vhci_hcd.1: stop threads [ 276.038046][ T9403] vhci_hcd: connection closed [ 276.038268][ T9405] vhci_hcd: connection closed [ 276.044071][ T4318] vhci_hcd vhci_hcd.1: release socket [ 276.060742][ T9412] loop4: detected capacity change from 0 to 8192 [ 276.078628][ T4318] vhci_hcd vhci_hcd.1: disconnect device [ 276.092292][ T4318] vhci_hcd vhci_hcd.1: stop threads [ 276.093855][ T9412] vfat: Unknown parameter '„w' [ 276.111407][ T4318] vhci_hcd vhci_hcd.1: release socket [ 276.116896][ T3420] usb 3-5: new low-speed USB device number 3 using vhci_hcd [ 276.142939][ T4318] vhci_hcd vhci_hcd.1: disconnect device [ 276.165165][ T4318] vhci_hcd vhci_hcd.1: stop threads [ 276.179934][ T4318] vhci_hcd vhci_hcd.1: release socket [ 276.198251][ T4318] vhci_hcd vhci_hcd.1: disconnect device [ 276.317889][ T9420] netlink: 'syz.5.1692': attribute type 14 has an invalid length. [ 276.350279][ T9422] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1693'. [ 276.369946][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1693'. [ 277.027049][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1697'. [ 277.036225][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1697'. [ 277.045416][ T9436] netlink: 'syz.2.1697': attribute type 6 has an invalid length. [ 277.170438][ T9441] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1699'. [ 277.188375][ T9441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9441 comm=syz.0.1699 [ 277.224485][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 277.411336][ T9453] netlink: 'syz.5.1704': attribute type 14 has an invalid length. [ 277.423844][ T9451] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1703'. [ 277.436682][ T9451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.448948][ T9451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.462120][ T9451] bond0 (unregistering): Released all slaves [ 277.521917][ T9455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9455 comm=syz.5.1705 [ 278.649235][ T9480] netlink: 'syz.4.1715': attribute type 14 has an invalid length. [ 278.705723][ T9484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9484 comm=syz.5.1716 [ 278.913205][ T9494] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 278.958598][ T9494] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 278.967483][ T9494] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 278.976282][ T9494] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 278.982909][ T9494] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 278.989523][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 279.011319][ T9494] vhci_hcd vhci_hcd.0: Device attached [ 279.021951][ T9494] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 279.085984][ T9502] vcan0: tx drop: invalid sa for name 0x00000000000007db [ 279.098211][ T9505] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(18) [ 279.104835][ T9505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 279.140138][ T9505] vhci_hcd vhci_hcd.0: Device attached [ 279.174004][ T9505] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(22) [ 279.180669][ T9505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 279.193467][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 279.193481][ T28] audit: type=1400 audit(1771346162.657:1115): avc: denied { setopt } for pid=9501 comm="syz.0.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.250294][ T28] audit: type=1400 audit(1771346162.717:1116): avc: denied { getopt } for pid=9501 comm="syz.0.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 279.274264][ T9505] vhci_hcd vhci_hcd.0: Device attached [ 279.340632][ T28] audit: type=1400 audit(1771346162.968:1117): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.403445][ T9517] netlink: 'syz.4.1727': attribute type 14 has an invalid length. [ 279.432279][ T28] audit: type=1400 audit(1771346162.998:1118): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.482717][ T9494] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 279.483010][ T28] audit: type=1400 audit(1771346162.998:1119): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.489419][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 279.522588][ T9494] vhci_hcd vhci_hcd.0: Device attached [ 279.538835][ T9511] vhci_hcd: connection closed [ 279.539073][ T1873] vhci_hcd vhci_hcd.1: stop threads [ 279.549381][ T1873] vhci_hcd vhci_hcd.1: release socket [ 279.563479][ T28] audit: type=1400 audit(1771346162.998:1120): avc: denied { execmem } for pid=9514 comm="syz.0.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 279.569450][ T1873] vhci_hcd vhci_hcd.1: disconnect device [ 279.597221][ T9498] vhci_hcd: connection closed [ 279.597354][ T9503] vhci_hcd: connection reset by peer [ 279.622015][ T9522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9522 comm=syz.4.1729 [ 279.635427][ T1873] vhci_hcd vhci_hcd.1: stop threads [ 279.672343][ T1873] vhci_hcd vhci_hcd.1: release socket [ 279.690616][ T1873] vhci_hcd vhci_hcd.1: disconnect device [ 279.707001][ T1873] vhci_hcd vhci_hcd.1: stop threads [ 279.716560][ T9506] vhci_hcd: connection closed [ 279.736650][ T1873] vhci_hcd vhci_hcd.1: release socket [ 279.778281][ T1873] vhci_hcd vhci_hcd.1: disconnect device [ 279.802748][ T1873] vhci_hcd vhci_hcd.1: stop threads [ 279.831102][ T1873] vhci_hcd vhci_hcd.1: release socket [ 279.869420][ T1873] vhci_hcd vhci_hcd.1: disconnect device [ 279.916145][ T9528] loop5: detected capacity change from 0 to 1024 [ 279.929202][ T9530] loop2: detected capacity change from 0 to 1024 [ 280.540707][ T9530] EXT4-fs: Ignoring removed bh option [ 280.556802][ T28] audit: type=1400 audit(1771346163.008:1121): avc: denied { map_create } for pid=9516 comm="syz.4.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 280.579891][ T28] audit: type=1400 audit(1771346163.008:1122): avc: denied { map_read map_write } for pid=9516 comm="syz.4.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.025335][ T28] audit: type=1400 audit(1771346163.008:1123): avc: denied { create } for pid=9516 comm="syz.4.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 281.044885][ T28] audit: type=1400 audit(1771346163.008:1124): avc: denied { bpf } for pid=9516 comm="syz.4.1727" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.071575][ T9530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.087056][ T9528] EXT4-fs: Ignoring removed bh option [ 281.157060][ T9528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.172130][ T9530] FAULT_INJECTION: forcing a failure. [ 281.172130][ T9530] name failslab, interval 1, probability 0, space 0, times 0 [ 281.197829][ T9530] CPU: 0 UID: 0 PID: 9530 Comm: syz.2.1732 Not tainted syzkaller #0 PREEMPT(full) [ 281.197882][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.197893][ T9530] Call Trace: [ 281.197898][ T9530] [ 281.197904][ T9530] __dump_stack+0x1d/0x30 [ 281.197962][ T9530] dump_stack_lvl+0x95/0xd0 [ 281.197987][ T9530] dump_stack+0x15/0x1b [ 281.198010][ T9530] should_fail_ex+0x263/0x280 [ 281.198103][ T9530] should_failslab+0x8c/0xb0 [ 281.198139][ T9530] __kmalloc_noprof+0xb8/0x4e0 [ 281.198176][ T9530] ? ext4_convert_inline_data_nolock+0x8d/0x5a0 [ 281.198209][ T9530] ext4_convert_inline_data_nolock+0x8d/0x5a0 [ 281.198386][ T9530] ext4_convert_inline_data+0x2bd/0x360 [ 281.198419][ T9530] ext4_fallocate+0x163/0x2f0 [ 281.198493][ T9530] vfs_fallocate+0x3b6/0x450 [ 281.198530][ T9530] __x64_sys_fallocate+0x7a/0xd0 [ 281.198592][ T9530] x64_sys_call+0x298e/0x3020 [ 281.198707][ T9530] do_syscall_64+0x12c/0x370 [ 281.198748][ T9530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.198848][ T9530] RIP: 0033:0x7ff5ac98c629 [ 281.198865][ T9530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.198883][ T9530] RSP: 002b:00007ff5ab3df028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 281.198906][ T9530] RAX: ffffffffffffffda RBX: 00007ff5acc05fa0 RCX: 00007ff5ac98c629 [ 281.198923][ T9530] RDX: 0000000002000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 281.198940][ T9530] RBP: 00007ff5ab3df090 R08: 0000000000000000 R09: 0000000000000000 [ 281.198960][ T9530] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 281.198976][ T9530] R13: 00007ff5acc06038 R14: 00007ff5acc05fa0 R15: 00007fffbc8d0588 [ 281.199000][ T9530] [ 281.393173][ T3420] usb 3-5: enqueue for inactive port 4 [ 281.398664][ T3420] usb 3-5: enqueue for inactive port 4 [ 281.411478][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.435937][ T9546] netlink: 'syz.4.1738': attribute type 14 has an invalid length. [ 281.450861][ T9547] loop1: detected capacity change from 0 to 1024 [ 281.457643][ T9541] __nla_validate_parse: 8 callbacks suppressed [ 281.457662][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1734'. [ 281.467615][ T9547] EXT4-fs: Ignoring removed bh option [ 281.474332][ T3420] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 281.486305][ T9541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1734'. [ 281.489001][ T7569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.525536][ T9547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.668655][ T9557] loop2: detected capacity change from 0 to 8192 [ 281.686989][ T9557] vfat: Unknown parameter '„w' [ 281.712496][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1743'. [ 282.271609][ T9582] netlink: 'syz.0.1750': attribute type 14 has an invalid length. [ 282.318756][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.477172][ T9585] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.486107][ T9585] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.495148][ T9585] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.503858][ T9585] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 282.512106][ T9585] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 282.518721][ T9585] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 282.550423][ T9585] vhci_hcd vhci_hcd.0: Device attached [ 282.567294][ T9592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.611984][ T9585] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 282.618603][ T9585] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.677629][ T9605] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1757'. [ 282.692011][ T9585] vhci_hcd vhci_hcd.0: Device attached [ 282.709622][ T9605] loop1: detected capacity change from 0 to 256 [ 282.733056][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'. [ 282.780569][ T9605] bio_check_eod: 64 callbacks suppressed [ 282.780583][ T9605] syz.1.1757: attempt to access beyond end of device [ 282.780583][ T9605] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 282.853250][ T9592] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(18) [ 282.859870][ T9592] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 282.867568][ T6026] usb 2-1: SetAddress Request (2) to port 0 [ 282.887242][ T6026] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 282.897960][ T9614] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1760'. [ 282.943565][ T9617] loop4: detected capacity change from 0 to 512 [ 282.952624][ T9592] vhci_hcd vhci_hcd.0: Device attached [ 282.960348][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1760'. [ 282.975923][ T9619] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(22) [ 282.982599][ T9619] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 283.006475][ T9622] netlink: 'syz.1.1761': attribute type 14 has an invalid length. [ 283.023054][ T9619] vhci_hcd vhci_hcd.0: Device attached [ 283.030200][ T9620] vhci_hcd: connection closed [ 283.030467][ T4318] vhci_hcd vhci_hcd.0: stop threads [ 283.050819][ T9617] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 283.062621][ T4318] vhci_hcd vhci_hcd.0: release socket [ 283.066049][ T9617] EXT4-fs (loop4): mount failed [ 283.100331][ T4318] vhci_hcd vhci_hcd.0: disconnect device [ 283.122681][ T9597] vhci_hcd: connection closed [ 283.122786][ T9602] vhci_hcd: connection closed [ 283.127721][ T9586] vhci_hcd: connection reset by peer [ 283.127754][ T4318] vhci_hcd vhci_hcd.0: stop threads [ 283.140486][ T9617] loop4: detected capacity change from 0 to 1764 [ 283.149396][ T4318] vhci_hcd vhci_hcd.0: release socket [ 283.155017][ T4318] vhci_hcd vhci_hcd.0: disconnect device [ 283.160843][ T4318] vhci_hcd vhci_hcd.0: stop threads [ 283.166467][ T4318] vhci_hcd vhci_hcd.0: release socket [ 283.171999][ T4318] vhci_hcd vhci_hcd.0: disconnect device [ 283.177861][ T4318] vhci_hcd vhci_hcd.0: stop threads [ 283.183404][ T4318] vhci_hcd vhci_hcd.0: release socket [ 283.188908][ T4318] vhci_hcd vhci_hcd.0: disconnect device [ 283.189145][ T9617] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 283.231963][ T9617] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 283.472813][ T9634] netlink: 'syz.2.1766': attribute type 4 has an invalid length. [ 283.594819][ T9636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1765'. [ 283.759660][ T9637] tmpfs: Bad value for 'mpol' [ 284.423486][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 284.423498][ T28] audit: type=1400 audit(1771346168.050:1220): avc: denied { write } for pid=9651 comm="syz.4.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.507851][ T28] audit: type=1400 audit(1771346168.070:1221): avc: denied { read } for pid=9651 comm="syz.4.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.714024][ T9656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1771'. [ 285.016353][ T28] audit: type=1400 audit(1771346168.640:1222): avc: denied { create } for pid=9657 comm="syz.1.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 285.039972][ T9658] netlink: 'syz.1.1773': attribute type 14 has an invalid length. [ 285.078042][ T28] audit: type=1400 audit(1771346168.670:1223): avc: denied { write } for pid=9657 comm="syz.1.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 285.240389][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'. [ 285.290891][ T3407] usb usb4-port1: attempt power cycle [ 285.327613][ T28] audit: type=1400 audit(1771346168.950:1224): avc: denied { create } for pid=9668 comm="syz.4.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.380127][ T28] audit: type=1400 audit(1771346169.000:1225): avc: denied { create } for pid=9668 comm="syz.4.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.430950][ T28] audit: type=1400 audit(1771346169.040:1226): avc: denied { tracepoint } for pid=9668 comm="syz.4.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 285.505476][ T28] audit: type=1400 audit(1771346169.130:1227): avc: denied { ioctl } for pid=9668 comm="syz.4.1778" path="socket:[27793]" dev="sockfs" ino=27793 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.950880][ T28] audit: type=1400 audit(1771346169.571:1228): avc: denied { write } for pid=9682 comm="syz.2.1782" name="kcm" dev="proc" ino=4026532499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 285.975249][ T9683] loop2: detected capacity change from 0 to 128 [ 286.025697][ T28] audit: type=1400 audit(1771346169.641:1229): avc: denied { mount } for pid=9682 comm="syz.2.1782" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 286.073836][ T9684] syz.2.1782: attempt to access beyond end of device [ 286.073836][ T9684] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 286.143312][ T9684] syz.2.1782: attempt to access beyond end of device [ 286.143312][ T9684] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 286.208498][ T9684] syz.2.1782: attempt to access beyond end of device [ 286.208498][ T9684] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 286.282427][ T9684] syz.2.1782: attempt to access beyond end of device [ 286.282427][ T9684] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 286.312323][ T9684] syz.2.1782: attempt to access beyond end of device [ 286.312323][ T9684] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 286.351265][ T9684] syz.2.1782: attempt to access beyond end of device [ 286.351265][ T9684] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 286.398841][ T9684] syz.2.1782: attempt to access beyond end of device [ 286.398841][ T9684] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 286.631046][ T9696] netlink: 'syz.0.1785': attribute type 3 has an invalid length. [ 286.639764][ T9684] syz.2.1782: attempt to access beyond end of device [ 286.639764][ T9684] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 286.736357][ T9684] syz.2.1782: attempt to access beyond end of device [ 286.736357][ T9684] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 286.893922][ T9703] loop2: detected capacity change from 0 to 128 [ 287.127870][ T9712] loop4: detected capacity change from 0 to 512 [ 287.166514][ T9712] EXT4-fs: Ignoring removed bh option [ 287.186339][ T9712] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 287.311709][ T9716] __nla_validate_parse: 2 callbacks suppressed [ 287.311721][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1793'. [ 287.470424][ T9712] EXT4-fs (loop4): 1 truncate cleaned up [ 287.480324][ T9712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.548026][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.662293][ T3407] usb usb4-port1: unable to enumerate USB device [ 287.726302][ T9721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1794'. [ 287.746014][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1794'. [ 287.825175][ T9725] nftables ruleset with unbound chain [ 288.111858][ T9731] FAULT_INJECTION: forcing a failure. [ 288.111858][ T9731] name failslab, interval 1, probability 0, space 0, times 0 [ 288.150302][ T9731] CPU: 0 UID: 0 PID: 9731 Comm: syz.2.1798 Not tainted syzkaller #0 PREEMPT(full) [ 288.150369][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.150383][ T9731] Call Trace: [ 288.150390][ T9731] [ 288.150397][ T9731] __dump_stack+0x1d/0x30 [ 288.150421][ T9731] dump_stack_lvl+0x95/0xd0 [ 288.150446][ T9731] dump_stack+0x15/0x1b [ 288.150541][ T9731] should_fail_ex+0x263/0x280 [ 288.150569][ T9731] should_failslab+0x8c/0xb0 [ 288.150708][ T9731] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 288.150745][ T9731] ? __d_alloc+0x37/0x340 [ 288.150768][ T9731] __d_alloc+0x37/0x340 [ 288.150796][ T9731] d_alloc_pseudo+0x1e/0x80 [ 288.150889][ T9731] alloc_file_pseudo+0x91/0x190 [ 288.150917][ T9731] __shmem_file_setup+0x1dd/0x210 [ 288.151064][ T9731] shmem_file_setup+0x3b/0x50 [ 288.151084][ T9731] memfd_alloc_file+0x4e/0x300 [ 288.151230][ T9731] __se_sys_memfd_create+0x2e1/0x3b0 [ 288.151258][ T9731] __x64_sys_memfd_create+0x31/0x40 [ 288.151328][ T9731] x64_sys_call+0x1f22/0x3020 [ 288.151355][ T9731] do_syscall_64+0x12c/0x370 [ 288.151447][ T9731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.151470][ T9731] RIP: 0033:0x7ff5ac98c629 [ 288.151484][ T9731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.151503][ T9731] RSP: 002b:00007ff5ab3ded58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 288.151572][ T9731] RAX: ffffffffffffffda RBX: 00000000000005c9 RCX: 00007ff5ac98c629 [ 288.151584][ T9731] RDX: 00007ff5ab3deddc RSI: 0000000000000000 RDI: 00007ff5aca22d19 [ 288.151597][ T9731] RBP: 0000200000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 288.151611][ T9731] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 288.151671][ T9731] R13: 00007ff5ab3deddc R14: 00007ff5ab3dede0 R15: 00007fffbc8d0588 [ 288.151720][ T9731] [ 288.180676][ T6026] usb 2-1: device descriptor read/8, error -110 [ 288.459529][ T6026] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 288.479585][ T6026] usb 2-1: enqueue for inactive port 0 [ 288.490821][ T6026] usb 2-1: enqueue for inactive port 0 [ 288.500821][ T6026] usb 2-1: enqueue for inactive port 0 [ 288.789121][ T3373] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 289.308682][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1803'. [ 289.860049][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1809'. [ 290.037447][ T9769] loop4: detected capacity change from 0 to 764 [ 290.089543][ T9769] rock: directory entry would overflow storage [ 290.095731][ T9769] rock: sig=0x5245, size=8, remaining=5 [ 290.741876][ T9778] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 290.748442][ T9778] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 290.764126][ T9778] vhci_hcd vhci_hcd.0: Device attached [ 290.784449][ T9778] vhci_hcd vhci_hcd.0: port 0 already used [ 290.807170][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 290.807184][ T28] audit: type=1400 audit(1771346174.433:1248): avc: denied { create } for pid=9777 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 290.840589][ T28] audit: type=1400 audit(1771346174.463:1249): avc: denied { read write } for pid=9777 comm="syz.5.1816" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.864457][ T28] audit: type=1400 audit(1771346174.463:1250): avc: denied { open } for pid=9777 comm="syz.5.1816" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.902823][ T9792] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1818'. [ 290.925716][ T28] audit: type=1400 audit(1771346174.523:1251): avc: denied { bind } for pid=9777 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 290.946680][ T6026] usb usb2-port1: attempt power cycle [ 290.952309][ T28] audit: type=1400 audit(1771346174.553:1252): avc: denied { create } for pid=9789 comm="syz.2.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.972727][ T28] audit: type=1400 audit(1771346174.553:1253): avc: denied { write } for pid=9789 comm="syz.2.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.993055][ T28] audit: type=1400 audit(1771346174.553:1254): avc: denied { nlmsg_write } for pid=9789 comm="syz.2.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 291.027179][ T28] audit: type=1400 audit(1771346174.633:1255): avc: denied { connect } for pid=9793 comm="syz.1.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.028511][ T3407] usb 12-1: SetAddress Request (6) to port 0 [ 291.056819][ T28] audit: type=1400 audit(1771346174.633:1256): avc: denied { write } for pid=9793 comm="syz.1.1819" path="socket:[28041]" dev="sockfs" ino=28041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.062181][ T9780] vhci_hcd: connection closed [ 291.085115][ T3407] usb 12-1: new SuperSpeed USB device number 6 using vhci_hcd [ 291.097339][ T28] audit: type=1400 audit(1771346174.643:1257): avc: denied { accept } for pid=9793 comm="syz.1.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.118075][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1820'. [ 291.128629][ T4323] vhci_hcd vhci_hcd.5: stop threads [ 291.133850][ T4323] vhci_hcd vhci_hcd.5: release socket [ 291.144547][ T4323] vhci_hcd vhci_hcd.5: disconnect device [ 291.173945][ T9801] loop2: detected capacity change from 0 to 128 [ 291.347984][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 291.358060][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1822'. [ 291.367311][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 291.485803][ T9822] loop2: detected capacity change from 0 to 1764 [ 291.507916][ T9822] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 291.575200][ T9830] loop5: detected capacity change from 0 to 2048 [ 291.583912][ T9833] macvlan1: entered allmulticast mode [ 291.590937][ T9833] veth1_vlan: entered allmulticast mode [ 291.607802][ T9827] dvmrp0: entered allmulticast mode [ 291.739722][ T9853] FAULT_INJECTION: forcing a failure. [ 291.739722][ T9853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.753056][ T9853] CPU: 0 UID: 0 PID: 9853 Comm: syz.5.1844 Not tainted syzkaller #0 PREEMPT(full) [ 291.753097][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.753113][ T9853] Call Trace: [ 291.753120][ T9853] [ 291.753187][ T9853] __dump_stack+0x1d/0x30 [ 291.753217][ T9853] dump_stack_lvl+0x95/0xd0 [ 291.753243][ T9853] dump_stack+0x15/0x1b [ 291.753267][ T9853] should_fail_ex+0x263/0x280 [ 291.753353][ T9853] should_fail+0xb/0x20 [ 291.753378][ T9853] should_fail_usercopy+0x1a/0x20 [ 291.753409][ T9853] _copy_from_user+0x1c/0xb0 [ 291.753442][ T9853] ___sys_sendmsg+0xc1/0x1e0 [ 291.753509][ T9853] __x64_sys_sendmsg+0xd4/0x160 [ 291.753545][ T9853] x64_sys_call+0x194c/0x3020 [ 291.753574][ T9853] do_syscall_64+0x12c/0x370 [ 291.753632][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.753658][ T9853] RIP: 0033:0x7fda06e2c629 [ 291.753676][ T9853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.753698][ T9853] RSP: 002b:00007fda0587f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.753746][ T9853] RAX: ffffffffffffffda RBX: 00007fda070a5fa0 RCX: 00007fda06e2c629 [ 291.753763][ T9853] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 291.753778][ T9853] RBP: 00007fda0587f090 R08: 0000000000000000 R09: 0000000000000000 [ 291.753794][ T9853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.753887][ T9853] R13: 00007fda070a6038 R14: 00007fda070a5fa0 R15: 00007ffe1db7e8f8 [ 291.753912][ T9853] [ 292.354613][ T9873] tmpfs: Bad value for 'mpol' [ 292.369518][ T9875] netlink: 'syz.1.1852': attribute type 7 has an invalid length. [ 292.382989][ T9875] netlink: 'syz.1.1852': attribute type 8 has an invalid length. [ 292.443423][ T9877] netlink: 'syz.0.1853': attribute type 27 has an invalid length. [ 292.451289][ T9877] __nla_validate_parse: 2 callbacks suppressed [ 292.451302][ T9877] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1853'. [ 292.466955][ T9881] FAULT_INJECTION: forcing a failure. [ 292.466955][ T9881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.489694][ T9881] CPU: 1 UID: 0 PID: 9881 Comm: syz.4.1854 Not tainted syzkaller #0 PREEMPT(full) [ 292.489721][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.489735][ T9881] Call Trace: [ 292.489741][ T9881] [ 292.489748][ T9881] __dump_stack+0x1d/0x30 [ 292.489776][ T9881] dump_stack_lvl+0x95/0xd0 [ 292.489795][ T9881] dump_stack+0x15/0x1b [ 292.489881][ T9881] should_fail_ex+0x263/0x280 [ 292.489908][ T9881] should_fail+0xb/0x20 [ 292.489931][ T9881] should_fail_usercopy+0x1a/0x20 [ 292.489954][ T9881] _copy_from_user+0x1c/0xb0 [ 292.490064][ T9881] ___sys_sendmsg+0xc1/0x1e0 [ 292.490109][ T9881] __x64_sys_sendmsg+0xd4/0x160 [ 292.490203][ T9881] x64_sys_call+0x194c/0x3020 [ 292.490225][ T9881] do_syscall_64+0x12c/0x370 [ 292.490261][ T9881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.490306][ T9881] RIP: 0033:0x7f18baafc629 [ 292.490318][ T9881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.490333][ T9881] RSP: 002b:00007f18b954f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.490354][ T9881] RAX: ffffffffffffffda RBX: 00007f18bad75fa0 RCX: 00007f18baafc629 [ 292.490449][ T9881] RDX: 0000000000004040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 292.490460][ T9881] RBP: 00007f18b954f090 R08: 0000000000000000 R09: 0000000000000000 [ 292.490471][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.490490][ T9881] R13: 00007f18bad76038 R14: 00007f18bad75fa0 R15: 00007ffc7ade0288 [ 292.490511][ T9881] [ 292.742535][ T9892] loop1: detected capacity change from 0 to 8192 [ 292.770570][ T9892] vfat: Unknown parameter '„w' [ 293.367256][ T6026] usb usb2-port1: unable to enumerate USB device [ 293.541150][ T9910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1864'. [ 293.711538][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 293.879997][ T9919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1867'. [ 294.059524][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1866'. [ 296.005447][ T9949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1878'. [ 296.050454][ T9954] FAULT_INJECTION: forcing a failure. [ 296.050454][ T9954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.059422][ T9951] loop2: detected capacity change from 0 to 1024 [ 296.082612][ T9954] CPU: 1 UID: 0 PID: 9954 Comm: syz.0.1880 Not tainted syzkaller #0 PREEMPT(full) [ 296.082639][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 296.082649][ T9954] Call Trace: [ 296.082655][ T9954] [ 296.082661][ T9954] __dump_stack+0x1d/0x30 [ 296.082682][ T9954] dump_stack_lvl+0x95/0xd0 [ 296.082701][ T9954] dump_stack+0x15/0x1b [ 296.082734][ T9954] should_fail_ex+0x263/0x280 [ 296.082759][ T9954] should_fail+0xb/0x20 [ 296.082776][ T9954] should_fail_usercopy+0x1a/0x20 [ 296.082797][ T9954] _copy_from_user+0x1c/0xb0 [ 296.082856][ T9954] do_sock_getsockopt+0xf1/0x210 [ 296.082883][ T9954] __x64_sys_getsockopt+0x11d/0x1a0 [ 296.082914][ T9954] x64_sys_call+0x2dcf/0x3020 [ 296.082980][ T9954] do_syscall_64+0x12c/0x370 [ 296.083127][ T9954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.083145][ T9954] RIP: 0033:0x7f2d842dc629 [ 296.083184][ T9954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.083202][ T9954] RSP: 002b:00007f2d82d2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 296.083218][ T9954] RAX: ffffffffffffffda RBX: 00007f2d84555fa0 RCX: 00007f2d842dc629 [ 296.083261][ T9954] RDX: 0000000000000074 RSI: 0000000000000084 RDI: 0000000000000003 [ 296.083274][ T9954] RBP: 00007f2d82d2f090 R08: 0000200000000d80 R09: 0000000000000000 [ 296.083293][ T9954] R10: 0000200000000cc0 R11: 0000000000000246 R12: 0000000000000001 [ 296.083308][ T9954] R13: 00007f2d84556038 R14: 00007f2d84555fa0 R15: 00007fff06b8e8b8 [ 296.083330][ T9954] [ 296.243405][ T3407] usb 12-1: device descriptor read/8, error -110 [ 296.294672][ T9951] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 296.305611][ T9951] System zones: 0-1, 3-12 [ 296.323551][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 296.323723][ T28] audit: type=1400 audit(1771346179.936:1278): avc: denied { ioctl } for pid=9961 comm="syz.0.1881" path="socket:[28362]" dev="sockfs" ino=28362 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 296.355590][ T3407] usb 12-1: new SuperSpeed USB device number 6 using vhci_hcd [ 296.371128][ T9951] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.395606][ T3407] usb 12-1: enqueue for inactive port 0 [ 296.401235][ T3407] usb 12-1: enqueue for inactive port 0 [ 296.436318][ T3407] usb 12-1: enqueue for inactive port 0 [ 296.485564][ T28] audit: type=1400 audit(1771346180.086:1279): avc: denied { setopt } for pid=9965 comm="syz.1.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 296.535623][ T28] audit: type=1400 audit(1771346180.086:1280): avc: denied { write } for pid=9965 comm="syz.1.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 296.539524][ T9972] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1885'. [ 296.575422][ T28] audit: type=1400 audit(1771346180.086:1281): avc: denied { add_name } for pid=9950 comm="syz.2.1879" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.615243][ T28] audit: type=1400 audit(1771346180.086:1282): avc: denied { create } for pid=9950 comm="syz.2.1879" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 296.635636][ T28] audit: type=1400 audit(1771346180.096:1283): avc: denied { read write } for pid=9950 comm="syz.2.1879" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 296.664145][ T28] audit: type=1400 audit(1771346180.096:1284): avc: denied { open } for pid=9950 comm="syz.2.1879" path="/384/file0/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 296.706079][ T28] audit: type=1400 audit(1771346180.106:1285): avc: denied { ioctl } for pid=9950 comm="syz.2.1879" path="/384/file0/file0/file0" dev="loop2" ino=13 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 296.857310][ T28] audit: type=1400 audit(1771346180.496:1286): avc: denied { write } for pid=9978 comm="syz.0.1889" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 296.891332][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 296.993349][ T28] audit: type=1400 audit(1771346180.626:1287): avc: denied { create } for pid=9990 comm="syz.1.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 297.156944][ T9997] loop2: detected capacity change from 0 to 128 [ 297.211134][ T9997] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.259709][ T9997] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.513803][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.675452][ T3407] usb usb12-port1: attempt power cycle [ 297.858486][T10016] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1902'. [ 297.949124][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1905'. [ 297.973891][T10029] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 298.018920][T10029] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 298.037476][T10032] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1908'. [ 298.046670][T10032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1908'. [ 298.061699][T10029] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 298.070926][T10029] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 298.086086][T10029] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 298.092779][T10029] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 298.110835][T10029] vhci_hcd vhci_hcd.0: Device attached [ 298.118414][T10029] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 298.138096][T10029] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 298.144962][T10029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 298.158222][T10029] vhci_hcd vhci_hcd.0: Device attached [ 298.199407][T10029] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(17) [ 298.206037][T10029] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 298.331625][T10050] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(22) [ 298.338363][T10050] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 298.414611][ T23] usb 3-5: new low-speed USB device number 4 using vhci_hcd [ 298.431226][T10029] vhci_hcd vhci_hcd.0: Device attached [ 298.465141][T10050] vhci_hcd vhci_hcd.0: Device attached [ 298.514668][T10045] vhci_hcd: connection closed [ 298.515155][ T116] vhci_hcd vhci_hcd.1: stop threads [ 298.526313][T10038] vhci_hcd: connection closed [ 298.532952][T10051] vhci_hcd: connection closed [ 298.537842][T10042] vhci_hcd: connection reset by peer [ 298.577137][ T116] vhci_hcd vhci_hcd.1: release socket [ 298.599908][ T116] vhci_hcd vhci_hcd.1: disconnect device [ 298.605810][ T116] vhci_hcd vhci_hcd.1: stop threads [ 298.611084][ T116] vhci_hcd vhci_hcd.1: release socket [ 298.616550][ T116] vhci_hcd vhci_hcd.1: disconnect device [ 298.624259][ T116] vhci_hcd vhci_hcd.1: stop threads [ 298.630589][ T116] vhci_hcd vhci_hcd.1: release socket [ 298.639325][ T116] vhci_hcd vhci_hcd.1: disconnect device [ 298.659296][ T116] vhci_hcd vhci_hcd.1: stop threads [ 298.664769][ T116] vhci_hcd vhci_hcd.1: release socket [ 298.670278][ T116] vhci_hcd vhci_hcd.1: disconnect device [ 298.955000][T10067] netlink: 'syz.5.1911': attribute type 3 has an invalid length. [ 298.986263][T10067] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1911'. [ 298.999754][T10069] loop4: detected capacity change from 0 to 1024 [ 299.013195][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'. [ 299.035615][T10069] EXT4-fs: Ignoring removed bh option [ 299.086887][T10069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.121635][T10069] FAULT_INJECTION: forcing a failure. [ 299.121635][T10069] name failslab, interval 1, probability 0, space 0, times 0 [ 299.134947][T10069] CPU: 1 UID: 0 PID: 10069 Comm: syz.4.1915 Not tainted syzkaller #0 PREEMPT(full) [ 299.135041][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.135051][T10069] Call Trace: [ 299.135056][T10069] [ 299.135062][T10069] __dump_stack+0x1d/0x30 [ 299.135201][T10069] dump_stack_lvl+0x95/0xd0 [ 299.135261][T10069] dump_stack+0x15/0x1b [ 299.135283][T10069] should_fail_ex+0x263/0x280 [ 299.135309][T10069] should_failslab+0x8c/0xb0 [ 299.135336][T10069] __kmalloc_noprof+0xb8/0x4e0 [ 299.135417][T10069] ? ext4_find_extent+0x16b/0x7a0 [ 299.135442][T10069] ext4_find_extent+0x16b/0x7a0 [ 299.135463][T10069] ext4_ext_map_blocks+0x10d/0x2fb0 [ 299.135523][T10069] ? __ext4_handle_dirty_metadata+0x200/0x470 [ 299.135550][T10069] ? find_inode_by_ino_rcu+0x9d/0x160 [ 299.135577][T10069] ? __brelse+0x32/0x60 [ 299.135596][T10069] ? from_kprojid+0x171/0x3a0 [ 299.135691][T10069] ? ext4_mark_iloc_dirty+0xd4e/0xdb0 [ 299.135870][T10069] ? mark_buffer_dirty+0xfa/0x220 [ 299.135890][T10069] ? __brelse+0x32/0x60 [ 299.135986][T10069] ? ext4_mark_iloc_dirty+0xd4e/0xdb0 [ 299.136014][T10069] ext4_map_query_blocks+0xb2/0x550 [ 299.136057][T10069] ? ext4_es_lookup_extent+0x3ae/0x570 [ 299.136089][T10069] ext4_map_blocks+0x306/0x970 [ 299.136190][T10069] ext4_convert_inline_data_nolock+0x195/0x5a0 [ 299.136296][T10069] ext4_convert_inline_data+0x2bd/0x360 [ 299.136389][T10069] ext4_fallocate+0x163/0x2f0 [ 299.136416][T10069] vfs_fallocate+0x3b6/0x450 [ 299.136493][T10069] __x64_sys_fallocate+0x7a/0xd0 [ 299.136526][T10069] x64_sys_call+0x298e/0x3020 [ 299.136585][T10069] do_syscall_64+0x12c/0x370 [ 299.136622][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.136639][T10069] RIP: 0033:0x7f18baafc629 [ 299.136652][T10069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.136667][T10069] RSP: 002b:00007f18b954f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 299.136694][T10069] RAX: ffffffffffffffda RBX: 00007f18bad75fa0 RCX: 00007f18baafc629 [ 299.136705][T10069] RDX: 0000000002000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 299.136715][T10069] RBP: 00007f18b954f090 R08: 0000000000000000 R09: 0000000000000000 [ 299.136779][T10069] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 299.136792][T10069] R13: 00007f18bad76038 R14: 00007f18bad75fa0 R15: 00007ffc7ade0288 [ 299.136813][T10069] [ 299.396644][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.402108][T10079] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1919'. [ 300.183824][ T3407] usb usb12-port1: unable to enumerate USB device [ 300.349655][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1928'. [ 300.517534][T10109] netlink: 'syz.0.1929': attribute type 3 has an invalid length. [ 300.645352][T10125] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1935'. [ 300.799045][T10130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1937'. [ 300.869354][T10131] loop1: detected capacity change from 0 to 1764 [ 300.877237][T10131] iso9660: Bad value for 'uid' [ 300.885305][T10131] iso9660: Bad value for 'uid' [ 301.882188][T10054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.951693][ T3000] ================================================================== [ 301.959806][ T3000] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 301.967820][ T3000] [ 301.970154][ T3000] write to 0xffff888107c3fb70 of 8 bytes by task 3304 on cpu 0: [ 301.977798][ T3000] dentry_unlink_inode+0x65/0x260 [ 301.982842][ T3000] d_delete+0xc8/0xe0 [ 301.986828][ T3000] d_delete_notify+0x32/0x100 [ 301.991518][ T3000] vfs_unlink+0x289/0x490 [ 301.995856][ T3000] filename_unlinkat+0x1e2/0x410 [ 302.000840][ T3000] __se_sys_unlink+0x2b/0xe0 [ 302.005446][ T3000] __x64_sys_unlink+0x1f/0x30 [ 302.010134][ T3000] x64_sys_call+0x2eb6/0x3020 [ 302.014823][ T3000] do_syscall_64+0x12c/0x370 [ 302.019422][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.025316][ T3000] [ 302.027637][ T3000] read to 0xffff888107c3fb70 of 8 bytes by task 3000 on cpu 1: [ 302.035185][ T3000] step_into_slowpath+0x12c/0x4c0 [ 302.040234][ T3000] path_lookupat+0x330/0x500 [ 302.044831][ T3000] filename_lookup+0x190/0x390 [ 302.049595][ T3000] do_readlinkat+0x74/0x2f0 [ 302.054104][ T3000] __x64_sys_readlink+0x47/0x60 [ 302.058962][ T3000] x64_sys_call+0x2b51/0x3020 [ 302.063658][ T3000] do_syscall_64+0x12c/0x370 [ 302.068260][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.074168][ T3000] [ 302.076490][ T3000] value changed: 0xffff88811b39bd88 -> 0x0000000000000000 [ 302.083601][ T3000] [ 302.085927][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 302.092078][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 302.100926][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.110981][ T3000] ================================================================== [ 302.144113][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 302.144127][ T28] audit: type=1400 audit(1771346185.779:1325): avc: denied { map } for pid=10140 comm="syz.4.1941" path="socket:[29497]" dev="sockfs" ino=29497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 302.182574][ T28] audit: type=1400 audit(1771346185.779:1326): avc: denied { read } for pid=10140 comm="syz.4.1941" path="socket:[29497]" dev="sockfs" ino=29497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 303.441968][ T23] usb 3-5: enqueue for inactive port 4 [ 303.447542][ T23] usb 3-5: enqueue for inactive port 4 [ 303.521884][ T23] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 306.050832][ T3373] usb usb4-port1: attempt power cycle [ 307.889810][ T3373] usb usb4-port1: unable to enumerate USB device