last executing test programs: 1m59.327572419s ago: executing program 1 (id=93): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x102, @remote, 0xe3}}, 0x0, 0x0, 0x26, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000380)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1m59.277087864s ago: executing program 1 (id=94): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?*', 0x2}], 0x1) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007", 0x4}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1m58.42405805s ago: executing program 1 (id=101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newsa={0x13c, 0x10, 0x1, 0x70bf28, 0x0, {{@in=@remote, @in6=@private0, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x5, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3fffffffc000}, {0xfffffffffffffffc, 0x8, 0xcc}, {0xf6}, 0x0, 0xfffffffd, 0xa, 0x1, 0xfe, 0x5c}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x4000804) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r1, 0x800454e0, &(0x7f00000000c0)=0x70dfd79b) socket$inet6(0xa, 0x3, 0x5) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x2, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x63, 0x78d342) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000001640)=0x1) r4 = fcntl$dupfd(r3, 0x0, r3) readv(r4, &(0x7f0000001680)=[{&(0x7f00000016c0)=""/136, 0x3f}], 0x1) 1m57.956516626s ago: executing program 1 (id=105): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x24, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x20000885, 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000e80)='ext4\x00', &(0x7f0000000ec0)='./file0\x00', 0x22000011, &(0x7f0000000f00)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000001fc0)="$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") setregid(0x0, 0xee01) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[], 0x50) clock_gettime(0x4, &(0x7f00000024c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 1m56.051017749s ago: executing program 1 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x4, 0x0, 0x9, 0x7ffffd, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa5, 0x2000007, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000a80)="4400000030000504000000000000000000000000300001802c0001800900010067617465000000001c000280180080000000fcffffffffffffffffe400000000000000001416cd7d4f4e20c7caaf11617d410dd4a1cee73f67480e569659b61f36af540457e1797aae8810aa4903696f31d910feae27f238696cf053cf8d2d1e983465f2ad658f593394c51525fc5bc555aa52b5576cc63fc2ac6ecd22b1cc00191d4703f4", 0xa5, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/hibernate_compression_threads', 0x1, 0x68) write$UHID_INPUT2(r1, &(0x7f00000002c0)={0x30}, 0x6) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x80) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[], 0x34}}, 0x48800) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 1m55.362076738s ago: executing program 1 (id=118): perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb05bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x7fff, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) setns(0xc9, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, 0xffffffffffffffff, 0xf}, 0x20) write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000700)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000740), 0x800001d, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) 1m55.361687838s ago: executing program 32 (id=118): perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb05bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x7fff, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) setns(0xc9, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, 0xffffffffffffffff, 0xf}, 0x20) write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000700)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000740), 0x800001d, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) 1m38.677024649s ago: executing program 5 (id=258): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff, 0x8}, 0x0, 0x0, 0x7, 0x1, 0x40, 0x0, 0x1000, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f00000002c0)={0x1}, &(0x7f0000000300)) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000500)=0x3, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd09, &(0x7f0000000200)="040000000000000004000000000072000000000000f20ae1bbac6ac0b9a1") setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) renameat(r3, &(0x7f0000000180)='./dev/file0\x00', r3, &(0x7f00000001c0)='.\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m37.800841037s ago: executing program 5 (id=263): socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x9, 0x40}, 0x50) mkdir(0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) syz_open_dev$mouse(&(0x7f0000000100), 0xd312, 0x880) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m36.953549623s ago: executing program 5 (id=271): setns(0xc9, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000580)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x24018000}, 0x4000) getresuid(&(0x7f0000000680), 0x0, &(0x7f00000006c0)) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x0, &(0x7f0000000cc0), 0x0, 0x289, &(0x7f0000001200)="$eJzs3T9oA1UcB/DfXZL+DVoVRBT/gIhoodTBSQRdFAoiRURQoSLiJK1QLW6Nk4uDziqdXIq4WR3FpbgIXat2qAgiFgeLgw6RyyUlpGkb0uRSk88H0svde+/eS+n35VGa1wAm1kJEPBURpYhYjIhKRCTtFR7IHwvN053Z/bWIev2FP5NGvfw812o3HxG1iDQiyq2yrb1Xjv8+fPbhD9+tPPT53suzBby0UueFk+Oj504/e/6Dr1Ye20qb16rNY/vrGKC7b+1ysZxE3D6Ezm6KpDzqEdCL1fe+/DELyR0R8WAj/5VIm5H9aHPqu0o8+ulFbT/+4+CeIscKDF69XsneA2t1YOKkjTVwki5FvmCvRpouLeVr+J9Kc+lbG5vvLL65UVp/o33WKGL5DgxLNeLomW+mv57vyP9vpTz/wPjK8v/i6u7P2fPTc78pA8bSvfkhy//ia9uPhPzDxJF/GA9zfbSRfxgL1T4byT/83/WZ3T7yf+evB0/21xlwo/SY/9+LHBNQDOt/GGOV1pNa12L5hzE1fXWVnvPvT31h7DTz/3g66oEAhWt//wcAJkt9etSfQAZGZdTzDwAAAAAAAAAAAAAAAAAAcN7O7P5a6xGRFNLn959EnDwdEeXO/qPxjw3yvclmGl/n/kqyameSvFnTVF/9v3r/dUZ/fV8M/9PX5Y7zmfaTW34Zev+X+uG+wdync4vK9y8vPrO9HlHLKi+Xy+d//pK4ZG+8nnbMve2K8srrvdxlcDpT/cRLRfR68Xfx390i+r/YymHEt9n8s9xt/knjrsax+/xTbd9iuU9v/3PNGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCY/wIAAP//xHJr6g==") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000840)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000000880), 0x5b, 0x40, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0xe}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1m36.651244283s ago: executing program 5 (id=274): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x841e, &(0x7f0000000640)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x23, 0x42f, &(0x7f0000000680)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20050800) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000f80)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) bind$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)}, 0x0) personality(0x60000a) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./sys\x00', &(0x7f0000000b00)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r2, &(0x7f0000000b80)="306663353a313232373a720afaf6379a24cd3db04935649cad5c8b678d1d6868", 0x20) 1m36.520959086s ago: executing program 5 (id=275): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x14109, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000a80)=0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x1}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}}, 0x24004000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x7, 0x6, 0x0, 0x0, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x524, &(0x7f00000001c0)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x1a4f, 0xdd63, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e80)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0xffffffff, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x1}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1m36.126089626s ago: executing program 5 (id=281): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x870, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0xd548, 0x0, 0x0, 0x4, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800012, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000000480)="$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") r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x80c40a, &(0x7f00000008c0)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@sysvgroups}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@nobarrier}, {@mblk_io_submit}, {@noload}, {@errors_remount}, {@mblk_io_submit}], [], 0x2c}, 0x80, 0x475, &(0x7f0000000980)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x6}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x1, 0x20) 1m36.125823096s ago: executing program 33 (id=281): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x870, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0xd548, 0x0, 0x0, 0x4, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800012, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000000480)="$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") r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x80c40a, &(0x7f00000008c0)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@sysvgroups}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@nobarrier}, {@mblk_io_submit}, {@noload}, {@errors_remount}, {@mblk_io_submit}], [], 0x2c}, 0x80, 0x475, &(0x7f0000000980)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x6}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x1, 0x20) 11.789573716s ago: executing program 6 (id=909): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "1cb114910de52665e50dde0d0ade39ce3cdbc2b644ee44c5ef551a527108b513a1fde9fb093306b61b9a19374f1f4212a880bdf5652b435261446d84b79c2a25", 0x37}, 0x48, 0xfffffffffffffff8) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x3c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r6, 0x8f5, 0xb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000440)=0x2, &(0x7f0000000480)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r8, &(0x7f0000000500)}, 0x20) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11.494364556s ago: executing program 6 (id=904): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setrlimit(0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x400, 0x8}, 0x204, 0x9, 0x43a1bd76, 0x3, 0x9, 0x6, 0x8f0, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x4000) 11.358688s ago: executing program 6 (id=908): pipe2(0x0, 0x4080) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240)=0x8001, 0x4) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20001) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000700)={0x42, 0x3, 0x1}, 0x10) close(r2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000280)=0x80000000, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000540)=""/92, &(0x7f00000005c0)=0x11) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bfa900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509000000000000db6874fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.144989382s ago: executing program 6 (id=912): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8002, &(0x7f0000000180), 0xfc, 0x4dd, &(0x7f0000000440)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2b, 0x0, &(0x7f00000009c0)) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[], 0x10}}, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x2241c2) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setgroups(0x1, &(0x7f0000001240)=[0x0]) read$msr(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 10.654294712s ago: executing program 6 (id=918): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x3, 0x0, 0x4, 0x5373, 0x0, 0x0, 0x0, 0xb6e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000019c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001a40)={0x3, &(0x7f0000001a80)=[{0x54, 0x0, 0x1, 0x4}, {0xa4}, {0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001811", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000003c0), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) capset(&(0x7f0000000740)={0x20071026}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000840)=""/4115, 0x1013}], 0x1, 0x16, 0xfffffff9) 10.227249925s ago: executing program 6 (id=922): pipe2(0x0, 0x4080) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240)=0x8001, 0x4) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20001) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000700)={0x42, 0x3, 0x1}, 0x10) close(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000280)=0x80000000, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000540)=""/92, &(0x7f00000005c0)=0x11) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bfa900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509000000000000db6874fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.220132596s ago: executing program 34 (id=922): pipe2(0x0, 0x4080) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240)=0x8001, 0x4) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20001) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000700)={0x42, 0x3, 0x1}, 0x10) close(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000280)=0x80000000, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000540)=""/92, &(0x7f00000005c0)=0x11) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bfa900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509000000000000db6874fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.415910667s ago: executing program 4 (id=952): r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x13}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x10000001, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtaction={0xa8, 0x30, 0x51b, 0x0, 0x0, {}, [{0x94, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xa8}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x20, 0xde, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r4, &(0x7f00000002c0)={0x0, 0x9521, &(0x7f0000000400)=[{&(0x7f0000000440)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.09049607s ago: executing program 4 (id=954): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40047438, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x8004, &(0x7f0000000ac0)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noquota}]}, 0x1, 0x7d2, &(0x7f0000000b00)="$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") getdents64(r0, 0x0, 0x0) unlinkat(r0, 0x0, 0x200) unshare(0x6020400) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) epoll_create(0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000004c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtaction={0x14, 0x30, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) close(r1) 4.863874653s ago: executing program 3 (id=956): r0 = socket$inet(0x2, 0x1, 0x6) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xf8, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x36}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x721}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008800}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0xfc}}, @TCA_RED_STAB={0x104, 0x2, '\x00 \x00'}]}}]}, 0x148}}, 0x0) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) accept$inet(r0, 0x0, 0x0) 4.539158426s ago: executing program 2 (id=958): pipe2(0x0, 0x4080) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240)=0x8001, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20001) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000700)={0x42, 0x3, 0x1}, 0x10) close(r2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000280)=0x80000000, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000540)=""/92, &(0x7f00000005c0)=0x11) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bfa900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509000000000000db6874fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.381930262s ago: executing program 4 (id=960): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x105604, 0x10000, 0xfffffffb, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x27, 0x660f537e, 0x48}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000440)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8001}, 0x340, 0x2, 0x8f20, 0x7, 0x0, 0x808}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_regs={0x4, 0x0, 0x4, "8da1ecee"}}) 4.278151353s ago: executing program 2 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000814000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000840)=""/4100, &(0x7f0000001880)=0x1004) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x0, 0x8, 0x0, 0xf}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, &(0x7f0000000480)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb2, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f00000004c0)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000500)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) clock_adjtime(0x3b9ac9ff, &(0x7f0000000000)={0xfffffffffffffff9, 0x7, 0x0, 0xd, 0x7bffffff, 0xfffffffffffffffe, 0x7, 0x200000000000000, 0x2, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x1000, 0xd92d, 0x6, 0x2, 0x81000000000056, 0x3, 0x4}) 4.277860253s ago: executing program 0 (id=962): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000140), 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) unshare(0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) connect$inet6(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) 3.680900474s ago: executing program 3 (id=963): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0xe7) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x68ed, 0x0, 0x7, 0x6, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) r1 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001280)={&(0x7f00000012c0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000013c0)="1a", 0x100000}], 0x1}, 0x0) 3.678570594s ago: executing program 0 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000800), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffff7, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048010) sendmsg$kcm(r4, &(0x7f0000000a80)={&(0x7f0000000ac0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.61610313s ago: executing program 4 (id=964): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x4000, 0x80000000, 0x2, 0x9, 0x800000, 0x3d, 0x2, 0x0, 0x0, 0x0, 0xfdfffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000480)=0x80000fff, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0xc1062500, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000380)={0x0, 0xea60}, 0x10) clock_nanosleep(0x2, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) waitid(0x1, 0x0, 0x0, 0x2, 0x0) 3.356733057s ago: executing program 2 (id=965): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3800003, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) semget(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r2, &(0x7f0000000800)=""/102384, 0x18ff0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019800)=0x410000002) r3 = perf_event_open(&(0x7f0000019840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x9, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000198c0)={@fallback=r0, 0xffffffffffffffff, 0x10, 0x1028}, 0x20) mmap(&(0x7f00000b8000/0x3000)=nil, 0x3000, 0x3000009, 0x2013, r3, 0xdffff000) 3.099890873s ago: executing program 7 (id=923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x45, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000009c0)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='my_debugfs\x00', &(0x7f0000000a40)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='my_debugfs/asoc/dais\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0xb, 0x0, &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5203f54634075cae, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000240)}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 2.771399737s ago: executing program 0 (id=966): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r0 = openat$binderfs_feature(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={0xffffffffffffffff, r0}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) setitimer(0x1, &(0x7f00000006c0)={{}, {0x0, 0x2710}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x40000000) 2.438703761s ago: executing program 7 (id=967): pipe2(0x0, 0x4080) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20001) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000700)={0x42, 0x3, 0x1}, 0x10) close(r2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000280)=0x80000000, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000540)=""/92, &(0x7f00000005c0)=0x11) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bfa900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509000000000000db6874fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.982341988s ago: executing program 2 (id=968): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x29, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x3, 0xa, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@private=0xa010100, {0x0, 0xe839, 0x0, 0xd, 0xffffffff00000001, 0x2, 0x80000001, 0x543}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {0x0, 0x5}, 0x70bd2c, 0x34ff, 0x2, 0x0, 0x0, 0x70}}, 0xf0}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) socket$inet(0x2, 0x3, 0x8d) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x7, 0xb8b3, 0x4, 0x0, 0x3c100, 0x3}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x240480c0}, 0x4044080) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x16d, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000001000)) rename(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.981384288s ago: executing program 3 (id=969): r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$iso9660(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x1214c91, &(0x7f00000006c0)=ANY=[], 0x1, 0x879, &(0x7f0000000700)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000f80)=ANY=[@ANYBLOB="200000000200"], 0x88040) openat$dir(0xffffffffffffff9c, &(0x7f0000000fc0)='./file1\x00', 0x189800, 0x9b) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000005c0)) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000001000)=ANY=[@ANYBLOB="016f0800010027000000270038004600003f00002700008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c40005020000000000000000004602d58838068b9100000071cffa63035e65a0caae041cdaa4b102d58e3264d75af4debef5de3a443761dc51ee2096e12aebcc3fbf452d47c57e816a319cdd4b0151b0"], 0xfd6c) perf_event_open(&(0x7f0000001800)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x4000, 0x1000, 0x2, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e25, 0x7, @empty, 0x8000}, r5, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000480)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r5, 0x2}}, 0x18) 1.824431274s ago: executing program 0 (id=970): pipe2(0x0, 0x4080) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240)=0x8001, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20001) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000700)={0x42, 0x3, 0x1}, 0x10) close(r2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000280)=0x80000000, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000540)=""/92, &(0x7f00000005c0)=0x11) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bfa900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509000000000000db6874fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.752916511s ago: executing program 7 (id=971): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x13}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x1, 0x101000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff4c) 1.752702411s ago: executing program 2 (id=973): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@huge_never}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = msgget$private(0x0, 0x180) msgrcv(r0, &(0x7f00000005c0)={0x0, ""/4096}, 0x1008, 0x2, 0x800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x3e8, 0x0, {0x3, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x13, 0x1}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f00000017c0)='ext4\x00', &(0x7f0000001800)='./file1\x00', 0x200000, &(0x7f0000001840)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f00000018c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001f00)='./file1\x00', &(0x7f0000001f40), &(0x7f0000001f80)=ANY=[], 0x835, 0x0) perf_event_open(&(0x7f0000001600)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001780)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000001ec0)={0xffffffffffffffff, 0x0, &(0x7f0000001f80)={&(0x7f0000002040)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x3}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.37195734s ago: executing program 3 (id=974): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x105604, 0x10000, 0xfffffffb, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x27, 0x660f537e, 0x48}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000440)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8001}, 0x340, 0x2, 0x8f20, 0x7, 0x0, 0x808}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_regs={0x4, 0x0, 0x4, "8da1ecee"}}) 1.212494036s ago: executing program 3 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000814000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000840)=""/4100, &(0x7f0000001880)=0x1004) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, &(0x7f0000000480)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb2, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f00000004c0)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000500)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) clock_adjtime(0x3b9ac9ff, &(0x7f0000000000)={0xfffffffffffffff9, 0x7, 0x0, 0xd, 0x7bffffff, 0xfffffffffffffffe, 0x7, 0x200000000000000, 0x2, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x1000, 0xd92d, 0x6, 0x2, 0x81000000000056, 0x3, 0x4}) 1.126273875s ago: executing program 0 (id=976): r0 = getpid() r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000044c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'c\xb3R$P~\xdco\xc3\"\xef\xf9', 0x3a, '\x00c6Iw\x9a\x8b\x0e\x953\x02S\xb3\xb6(\xb0/V\xca\xc6\x16\x9f\xf8\x1f\x97\x9d[\x7f\xe7\xccxh\xa1\xf2\x02\xa3\xe9*e[\xe5\xc9\x9dKx0xffffffffffffffff}) accept4$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000180)=0x6e, 0x80800) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c9f7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c6ff7f000000000000ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x251, &(0x7f0000001000)="$eJzs2k9rXFUYB+D3pq1NU9KJ+I8WxIMu1M2lydpFgzQgBhTtCFWQ3pobHXKdCblDYERMVnXrR3AtLt0J0qWbbPwELtxINll2IV7JzGiaEiVZpBP1eTbzwjk/zns5h8NZzO5rX326tlrnq0U/prIspm7EdjzIYi6m4k/b8erLt398/t3b77+5uLx8852UlhZvzS+klK688MMHn3/74v3+5fe+u/L9xdiZ+3B3b+GXnWd3ru7+fuuTTp06der2+qlId3u9fnG3KtNKp17LU3q7Kou6TJ1uXW4cGl+teuvrg1R0V2Zn1jfKuk5Fd5DWykHq91J/Y5CKj4tON+V5nmZngkctXTr+3PY3D5om9poLd6Jpmktfx+X7MftztCJ7MmVP3cieuZM9t51d3Wua1mm2zMTY//+3hy716Yjqy832Znv0OxpfXI1OVFHG9WjFb7F/TMZG9dIbyzevp6G5uFdtjfNbm+1zh/Pz0Yq5o/Pzo3yKe9WvT4yW3dpsX4yZiAsR4/xCtOLpo/MLB/nh+ueG60/HKy89tH4erfjpo+hFFSuxnz3IfzGf0utvLafD/V8bzvsn06e8NwAApyFPfzny/Zbnfzc+yp/gffjI++p8XDs/2W8noh58tlZUVblxrGJ/R489+V9YTJ+NNv4LRUQ2PGDZ+KBNuh/FCYuJXks8JgebPulOAAAAAAAAAAAAOInH8XfCSX8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwtv0RAAD//11yztI=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001980)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000019c0)='./bus\x00', 0x1c1002, 0x12) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f0000001a00)="c7", 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 116.532848ms ago: executing program 4 (id=981): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000a00)='ext3\x00', &(0x7f0000000a80)='./file1\x00', 0x2402002, &(0x7f0000001b40)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nodioread_nolock}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000000b80)="$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") syz_mount_image$ext4(&(0x7f0000001000)='ext4\x00', &(0x7f0000001040)='./file1\x00', 0x200810, &(0x7f0000001080)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@sysvgroups}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000001100)="$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") syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000001c40)="$eJzs3TFrE2EYB/DHNG1DHexcHA5cnII6uQapIAaESAadPKgurQjX5XS6j+Fn8CP5MTp1O7EXmrSNFrHXt8n9fhDugX8Cz5tA3gzPm/vw8PPhwZfjT/XP7zEYZNGPqOo6Yjd6sRGNe7Nr76zeikVVAACrZjLJR6l7oF1FMco3I2L7SjL9kaQhAAAAAAAAAAAA/tuy+f84Nf8PAOtscf5/L20rtKQoRvnO7PfbReb/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHRO6/pB/ZdH6v4AgJtn/weA7rH/A0D32P8BoHvevnv/ejQe70+ybBBxUpXTctpcm/zlq/H+k+zM7vxVJ2U53TjPnzZ5djHfjJ1Z/mxpvhWPHzX57+zFm/GlfDsOrrbba+EtAAAAAAAAAAAAAAAAAAAAgOSG2bml5/uHwz/lTbXw/wCXzu/3Y69/a8sAAAAAAAAAAAAAAAAAAACAlXb89dthfnT0sVBcX9yPO9HGdUU8vxNt3HYRq/HpJCz6//Lk1N9MAAAAAAAAAAAAAAAAAADQPfNDv6k7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB05vf/b6+IiKpupF4uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsMZ+BQAA//8E/pnA") r0 = creat(&(0x7f0000001ec0)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000001f00)=0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2c020400) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_submit(r1, 0x3b, &(0x7f0000001f80)=[&(0x7f0000001fc0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000002000), 0x70000, 0x600}]) 90.465041ms ago: executing program 2 (id=982): pipe2(0x0, 0x4080) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20001) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000700)={0x42, 0x3, 0x1}, 0x10) close(r2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000280)=0x80000000, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000540)=""/92, &(0x7f00000005c0)=0x11) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bfa900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509000000000000db6874fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 7 (id=983): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x105604, 0x10000, 0xfffffffb, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x27, 0x660f537e, 0x48}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000440)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8001}, 0x340, 0x2, 0x8f20, 0x7, 0x0, 0x808}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_regs={0x4, 0x0, 0x4, "8da1ecee"}}) kernel console output (not intermixed with test programs): 6] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.104908][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.354585][ T5469] loop3: detected capacity change from 0 to 512 [ 100.528730][ T5474] loop2: detected capacity change from 0 to 512 [ 100.568732][ T5469] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.442: bg 0: block 5: invalid block bitmap [ 100.570924][ T5469] loop3: lost filesystem error report for type 5 error -117 [ 100.591415][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 100.591503][ C0] EXT4-fs (loop3): initial error at time 1794134970: ext4_validate_block_bitmap:436 [ 100.591546][ C0] EXT4-fs (loop3): last error at time 1794134970: ext4_validate_block_bitmap:436 [ 100.634497][ T5469] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 100.639232][ T5469] loop3: lost filesystem error report for type 5 error -117 [ 100.645581][ T5481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.647027][ T5481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.650610][ T5469] EXT4-fs error (device loop3): ext4_free_branches:1040: inode #11: comm syz.3.442: invalid indirect mapped block 3 (level 2) [ 100.650707][ T5469] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.249122][ T5469] EXT4-fs (loop3): 1 orphan inode deleted [ 101.253521][ T5469] EXT4-fs (loop3): 1 truncate cleaned up [ 101.267613][ T5469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.293503][ T5474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.293840][ T5474] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.460031][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.616852][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.873653][ T5446] loop6: detected capacity change from 0 to 512 [ 101.877055][ T5446] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.885948][ T5446] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 101.886344][ T5446] EXT4-fs (loop6): orphan cleanup on readonly fs [ 101.911704][ T5446] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4221: comm syz.6.430: Allocating blocks 41-42 which overlap fs metadata [ 101.911842][ T5446] loop6: lost filesystem error report for type 5 error -117 [ 101.925624][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 101.925648][ C1] EXT4-fs (loop6): initial error at time 1794134971: ext4_mb_mark_diskspace_used:4221 [ 101.925679][ C1] EXT4-fs (loop6): last error at time 1794134971: ext4_mb_mark_diskspace_used:4221 [ 101.933276][ T5446] EXT4-fs (loop6): Remounting filesystem read-only [ 101.933550][ T5446] EXT4-fs (loop6): 1 truncate cleaned up [ 101.944639][ T5446] EXT4-fs (loop6): pa ffff888106ed3f50: logic 1, phys. 41, len 23 [ 101.977540][ T5446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.083596][ T5499] loop3: detected capacity change from 0 to 512 [ 102.147989][ T4714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.180378][ T5499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.216809][ T5499] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 102.239009][ T5499] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.239045][ T5499] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 102.239070][ T5499] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 102.298244][ T5499] EXT4-fs (loop3): 1 truncate cleaned up [ 102.334185][ T5499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.451113][ T5505] loop6: detected capacity change from 0 to 512 [ 102.511150][ T5505] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.450: bad orphan inode 15 [ 102.511185][ T5505] loop6: lost filesystem error report for type 5 error -117 [ 102.513945][ T5505] ext4_test_bit(bit=14, block=5) = 0 [ 102.522230][ T5505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.566042][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.606839][ T4714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.674783][ T5515] loop6: detected capacity change from 0 to 512 [ 102.751768][ T5518] tcf_pedit_act: 7 callbacks suppressed [ 102.751788][ T5518] tc action pedit offset must be on 32 bit boundaries [ 102.751801][ T5518] tc action pedit offset must be on 32 bit boundaries [ 102.751813][ T5518] tc action pedit offset must be on 32 bit boundaries [ 102.751830][ T5518] tc action pedit offset must be on 32 bit boundaries [ 102.751841][ T5518] tc action pedit offset must be on 32 bit boundaries [ 102.751852][ T5518] tc action pedit offset must be on 32 bit boundaries [ 102.751864][ T5518] tc action pedit offset must be on 32 bit boundaries [ 102.751875][ T5518] tc action pedit offset must be on 32 bit boundaries [ 102.751955][ T5518] tc action pedit offset must be on 32 bit boundaries [ 102.751963][ T5518] tc action pedit offset must be on 32 bit boundaries [ 102.751978][ T5518] 0: reclassify loop, rule prio 0, protocol 800 [ 102.842707][ T5520] bond1 (unregistering): Released all slaves [ 103.055321][ T5532] loop4: detected capacity change from 0 to 1024 [ 103.055669][ T5532] EXT4-fs: Ignoring removed bh option [ 103.078904][ T5532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.079028][ T5532] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.169279][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 103.169300][ T30] audit: type=1400 audit(1794134972.962:3763): avc: denied { write } for pid=5529 comm="syz.4.460" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.207952][ T5527] bond1: entered allmulticast mode [ 103.208169][ T5527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.217102][ T5532] EXT4-fs error (device loop4): ext4_map_blocks:951: inode #15: block 3: comm syz.4.460: lblock 3 mapped to illegal pblock 3 (length 3) [ 103.224875][ T5532] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 103.224962][ T5532] EXT4-fs (loop4): This should not happen!! Data will be lost [ 103.224962][ T5532] [ 103.305829][ T3420] EXT4-fs error (device loop4): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 103.307516][ T3420] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 103.307548][ T3420] EXT4-fs (loop4): This should not happen!! Data will be lost [ 103.307548][ T3420] [ 103.308924][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.027183][ T5550] netlink: 52 bytes leftover after parsing attributes in process `syz.3.463'. [ 104.041481][ T5545] sctp: [Deprecated]: syz.3.463 (pid 5545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.041481][ T5545] Use struct sctp_sack_info instead [ 104.445665][ T30] audit: type=1400 audit(1794134974.242:3764): avc: denied { connect } for pid=5558 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.517146][ T5554] loop3: detected capacity change from 0 to 512 [ 104.525762][ T5553] loop6: detected capacity change from 0 to 512 [ 104.530490][ T5553] EXT4-fs: Ignoring removed bh option [ 104.686726][ T30] audit: type=1400 audit(1794134974.482:3765): avc: denied { setopt } for pid=5563 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.686757][ T30] audit: type=1400 audit(1794134974.482:3766): avc: denied { accept } for pid=5563 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.687523][ T30] audit: type=1400 audit(1794134974.482:3767): avc: denied { write } for pid=5563 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.691714][ T5554] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.465: bad orphan inode 15 [ 104.691810][ T5554] loop3: lost filesystem error report for type 5 error -117 [ 104.692504][ T5554] ext4_test_bit(bit=14, block=5) = 0 [ 104.693800][ T5554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.704508][ T5553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.704794][ T5553] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.749746][ T30] audit: type=1400 audit(1794134974.532:3768): avc: denied { read } for pid=5563 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.797382][ T30] audit: type=1400 audit(1794134974.592:3769): avc: denied { write } for pid=5551 comm="syz.6.475" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.841242][ T30] audit: type=1400 audit(1794134974.622:3770): avc: denied { write } for pid=5551 comm="syz.6.475" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.849424][ T5553] ip6erspan0: entered allmulticast mode [ 104.880461][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.939137][ T30] audit: type=1400 audit(1794134974.732:3771): avc: denied { write } for pid=4714 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.940831][ T30] audit: type=1400 audit(1794134974.732:3772): avc: denied { write } for pid=4714 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.969611][ T5572] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 104.983400][ T5572] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.990304][ T4714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.054380][ T5576] set_capacity_and_notify: 1 callbacks suppressed [ 105.054396][ T5576] loop2: detected capacity change from 0 to 512 [ 105.058017][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.164484][ T5584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.164687][ T5584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.327307][ T5586] FAULT_INJECTION: forcing a failure. [ 105.327307][ T5586] name failslab, interval 1, probability 0, space 0, times 0 [ 105.327389][ T5590] loop2: detected capacity change from 0 to 512 [ 105.327466][ T5586] CPU: 1 UID: 0 PID: 5586 Comm: syz.6.476 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.327498][ T5586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 105.327514][ T5586] Call Trace: [ 105.327522][ T5586] [ 105.327570][ T5586] __dump_stack+0x1d/0x30 [ 105.327602][ T5586] dump_stack_lvl+0x95/0xd0 [ 105.327651][ T5586] dump_stack+0x15/0x1b [ 105.327680][ T5586] should_fail_ex+0x259/0x270 [ 105.327719][ T5586] ? security_file_alloc+0x32/0xf0 [ 105.327761][ T5586] should_failslab+0x8c/0xb0 [ 105.327857][ T5586] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 105.327901][ T5586] ? security_file_alloc+0x32/0xf0 [ 105.327945][ T5586] security_file_alloc+0x32/0xf0 [ 105.328012][ T5586] init_file+0x5b/0x1b0 [ 105.328120][ T5586] alloc_empty_file+0x85/0x1e0 [ 105.328230][ T5586] alloc_file_pseudo+0x92/0x120 [ 105.328263][ T5586] sock_alloc_file+0x9c/0x1e0 [ 105.328301][ T5586] __sys_socket+0x118/0x180 [ 105.328418][ T5586] __x64_sys_socket+0x3f/0x50 [ 105.328510][ T5586] x64_sys_call+0x246e/0x2550 [ 105.328548][ T5586] do_syscall_64+0x112/0x360 [ 105.328578][ T5586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.328605][ T5586] RIP: 0033:0x7f0b2419fb19 [ 105.328622][ T5586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.328719][ T5586] RSP: 002b:00007f0b22bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 105.328748][ T5586] RAX: ffffffffffffffda RBX: 00007f0b24425fa0 RCX: 00007f0b2419fb19 [ 105.328767][ T5586] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 105.328782][ T5586] RBP: 00007f0b24237b70 R08: 0000000000000000 R09: 0000000000000000 [ 105.328796][ T5586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.328808][ T5586] R13: 00007f0b24426038 R14: 00007f0b24425fa0 R15: 00007ffe29a78268 [ 105.328830][ T5586] [ 105.533334][ T5591] sctp: [Deprecated]: syz.4.477 (pid 5591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.533334][ T5591] Use struct sctp_sack_info instead [ 105.572890][ T5592] bridge_slave_0: left allmulticast mode [ 105.572916][ T5592] bridge_slave_0: left promiscuous mode [ 105.573067][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.592049][ T5591] netlink: 52 bytes leftover after parsing attributes in process `syz.4.477'. [ 105.605360][ T5592] bridge_slave_1: left allmulticast mode [ 105.605385][ T5592] bridge_slave_1: left promiscuous mode [ 105.605618][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.631617][ T5592] bond0: (slave bond_slave_0): Releasing backup interface [ 105.635635][ T5592] bond0: (slave bond_slave_1): Releasing backup interface [ 105.666281][ T5592] team0: Port device team_slave_0 removed [ 105.681792][ T5592] team0: Port device team_slave_1 removed [ 105.699502][ T5592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.897731][ T5604] loop4: detected capacity change from 0 to 128 [ 106.430281][ T5604] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.432190][ T5604] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.446713][ T5606] loop2: detected capacity change from 0 to 512 [ 106.556668][ T5606] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.480: bad orphan inode 15 [ 106.556852][ T5606] loop2: lost filesystem error report for type 5 error -117 [ 106.557243][ T5606] ext4_test_bit(bit=14, block=5) = 0 [ 106.601434][ T5606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.621180][ T5604] netlink: 32 bytes leftover after parsing attributes in process `syz.4.481'. [ 106.761167][ T5613] loop6: detected capacity change from 0 to 512 [ 106.767390][ T5604] netlink: 104 bytes leftover after parsing attributes in process `syz.4.481'. [ 106.788117][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.831227][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 106.854671][ T3292] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.192399][ T5613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.192488][ T5613] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.223048][ T5617] loop2: detected capacity change from 0 to 512 [ 107.254214][ T5627] FAULT_INJECTION: forcing a failure. [ 107.254214][ T5627] name failslab, interval 1, probability 0, space 0, times 0 [ 107.254514][ T5627] CPU: 0 UID: 0 PID: 5627 Comm: syz.4.489 Not tainted syzkaller #0 PREEMPT(lazy) [ 107.254548][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 107.254567][ T5627] Call Trace: [ 107.254577][ T5627] [ 107.254587][ T5627] __dump_stack+0x1d/0x30 [ 107.254644][ T5627] dump_stack_lvl+0x95/0xd0 [ 107.254674][ T5627] dump_stack+0x15/0x1b [ 107.254703][ T5627] should_fail_ex+0x259/0x270 [ 107.254742][ T5627] ? security_file_alloc+0x32/0xf0 [ 107.254806][ T5627] should_failslab+0x8c/0xb0 [ 107.254927][ T5627] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 107.255040][ T5627] ? security_file_alloc+0x32/0xf0 [ 107.255086][ T5627] security_file_alloc+0x32/0xf0 [ 107.255131][ T5627] init_file+0x5b/0x1b0 [ 107.255169][ T5627] alloc_empty_file+0x85/0x1e0 [ 107.255204][ T5627] alloc_file_pseudo+0x92/0x120 [ 107.255320][ T5627] sock_alloc_file+0x9c/0x1e0 [ 107.255359][ T5627] __sys_socket+0x118/0x180 [ 107.255400][ T5627] __x64_sys_socket+0x3f/0x50 [ 107.255473][ T5627] x64_sys_call+0x246e/0x2550 [ 107.255580][ T5627] do_syscall_64+0x112/0x360 [ 107.255607][ T5627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.255629][ T5627] RIP: 0033:0x7f3a4d4cfb19 [ 107.255675][ T5627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.255701][ T5627] RSP: 002b:00007f3a4bf27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 107.255729][ T5627] RAX: ffffffffffffffda RBX: 00007f3a4d755fa0 RCX: 00007f3a4d4cfb19 [ 107.255749][ T5627] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 107.255767][ T5627] RBP: 00007f3a4d567b70 R08: 0000000000000000 R09: 0000000000000000 [ 107.255785][ T5627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.255812][ T5627] R13: 00007f3a4d756038 R14: 00007f3a4d755fa0 R15: 00007ffee3a64538 [ 107.255840][ T5627] [ 107.266468][ T5617] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 107.375020][ T5617] EXT4-fs (loop2): 1 orphan inode deleted [ 107.384802][ T5617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.418838][ T13] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 1 [ 107.440351][ T5617] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.453023][ T4714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.564925][ T5636] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.693800][ T5636] loop6: detected capacity change from 0 to 512 [ 107.776587][ T5645] 9p: Bad value for 'wfdno' [ 107.799266][ T5636] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.492: bg 0: block 5: invalid block bitmap [ 107.799315][ T5636] loop6: lost filesystem error report for type 5 error -117 [ 107.801100][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 107.801127][ C0] EXT4-fs (loop6): initial error at time 1794134977: ext4_validate_block_bitmap:436 [ 107.801158][ C0] EXT4-fs (loop6): last error at time 1794134977: ext4_validate_block_bitmap:436 [ 107.822017][ T5645] loop4: detected capacity change from 0 to 512 [ 107.843339][ T5636] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 107.846198][ T5636] loop6: lost filesystem error report for type 5 error -117 [ 107.846427][ T5636] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #11: comm syz.6.492: invalid indirect mapped block 3 (level 2) [ 107.846838][ T5636] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 107.854457][ T5636] EXT4-fs (loop6): 1 orphan inode deleted [ 107.854767][ T5636] EXT4-fs (loop6): 1 truncate cleaned up [ 107.865788][ T5636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.875581][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.074503][ T4714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.078900][ T5645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.080506][ T5645] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.668838][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.692650][ T5662] FAULT_INJECTION: forcing a failure. [ 108.692650][ T5662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.692730][ T5662] CPU: 1 UID: 0 PID: 5662 Comm: syz.6.497 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.692767][ T5662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 108.692819][ T5662] Call Trace: [ 108.692827][ T5662] [ 108.692835][ T5662] __dump_stack+0x1d/0x30 [ 108.692900][ T5662] dump_stack_lvl+0x95/0xd0 [ 108.692934][ T5662] dump_stack+0x15/0x1b [ 108.692963][ T5662] should_fail_ex+0x259/0x270 [ 108.693061][ T5662] should_fail+0xb/0x20 [ 108.693098][ T5662] should_fail_usercopy+0x1a/0x20 [ 108.693171][ T5662] _copy_from_user+0x1c/0xb0 [ 108.693222][ T5662] do_seccomp+0x27f/0xa50 [ 108.693328][ T5662] ? restore_fpregs_from_fpstate+0x61/0x110 [ 108.693428][ T5662] __x64_sys_seccomp+0x40/0x50 [ 108.693461][ T5662] x64_sys_call+0x3f0/0x2550 [ 108.693581][ T5662] do_syscall_64+0x112/0x360 [ 108.693613][ T5662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.693661][ T5662] RIP: 0033:0x7f0b2419fb19 [ 108.693682][ T5662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.693708][ T5662] RSP: 002b:00007f0b22bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 108.693782][ T5662] RAX: ffffffffffffffda RBX: 00007f0b24425fa0 RCX: 00007f0b2419fb19 [ 108.693798][ T5662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 108.693811][ T5662] RBP: 00007f0b24237b70 R08: 0000000000000000 R09: 0000000000000000 [ 108.693824][ T5662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.693836][ T5662] R13: 00007f0b24426038 R14: 00007f0b24425fa0 R15: 00007ffe29a78268 [ 108.693927][ T5662] [ 109.384394][ T5673] sctp: [Deprecated]: syz.2.502 (pid 5673) Use of int in max_burst socket option. [ 109.384394][ T5673] Use struct sctp_assoc_value instead [ 109.655717][ T5677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.665150][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 109.665194][ T30] audit: type=1400 audit(1794134979.462:3786): avc: denied { recv } for pid=5676 comm="syz.0.503" saddr=::1 src=47768 daddr=::1 dest=4660 netif=lo scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 109.722399][ T5683] netlink: 92 bytes leftover after parsing attributes in process `syz.4.508'. [ 109.754132][ T30] audit: type=1400 audit(1794134979.552:3787): avc: denied { ioctl } for pid=5684 comm="syz.6.505" path="socket:[10986]" dev="sockfs" ino=10986 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.778310][ T5682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.507'. [ 109.971541][ T5673] loop2: detected capacity change from 0 to 1024 [ 110.085108][ T5673] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.373251][ T5673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.453786][ T30] audit: type=1400 audit(1794134980.242:3788): avc: denied { write } for pid=5672 comm="syz.2.502" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.468423][ T30] audit: type=1400 audit(1794134980.262:3789): avc: denied { read append } for pid=5672 comm="syz.2.502" path="/99/file1/memory.events.local" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.565379][ T30] audit: type=1400 audit(1794134980.362:3790): avc: denied { write } for pid=5711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.613106][ T30] audit: type=1400 audit(1794134980.412:3791): avc: denied { write } for pid=5729 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.719278][ T5733] loop4: detected capacity change from 0 to 512 [ 110.750981][ T5733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.751126][ T5733] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.823375][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.854004][ T5737] FAULT_INJECTION: forcing a failure. [ 110.854004][ T5737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.854053][ T5737] CPU: 0 UID: 0 PID: 5737 Comm: syz.3.515 Not tainted syzkaller #0 PREEMPT(lazy) [ 110.854084][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 110.854105][ T5737] Call Trace: [ 110.854115][ T5737] [ 110.854200][ T5737] __dump_stack+0x1d/0x30 [ 110.854233][ T5737] dump_stack_lvl+0x95/0xd0 [ 110.854307][ T5737] dump_stack+0x15/0x1b [ 110.854328][ T5737] should_fail_ex+0x259/0x270 [ 110.854382][ T5737] should_fail+0xb/0x20 [ 110.854414][ T5737] should_fail_usercopy+0x1a/0x20 [ 110.854449][ T5737] _copy_from_user+0x1c/0xb0 [ 110.854491][ T5737] do_seccomp+0x27f/0xa50 [ 110.854543][ T5737] ? restore_fpregs_from_fpstate+0x61/0x110 [ 110.854578][ T5737] __x64_sys_seccomp+0x40/0x50 [ 110.854692][ T5737] x64_sys_call+0x3f0/0x2550 [ 110.854725][ T5737] do_syscall_64+0x112/0x360 [ 110.854754][ T5737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.854799][ T5737] RIP: 0033:0x7f5c71ddfb19 [ 110.854820][ T5737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.854846][ T5737] RSP: 002b:00007f5c7082f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 110.854874][ T5737] RAX: ffffffffffffffda RBX: 00007f5c72065fa0 RCX: 00007f5c71ddfb19 [ 110.854894][ T5737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 110.854909][ T5737] RBP: 00007f5c71e77b70 R08: 0000000000000000 R09: 0000000000000000 [ 110.854926][ T5737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.855077][ T5737] R13: 00007f5c72066038 R14: 00007f5c72065fa0 R15: 00007ffcef773fe8 [ 110.855104][ T5737] [ 111.013198][ T5739] loop2: detected capacity change from 0 to 512 [ 111.049682][ T5739] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.516: bad orphan inode 15 [ 111.049712][ T5739] loop2: lost filesystem error report for type 5 error -117 [ 111.051100][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 111.051124][ C0] EXT4-fs (loop2): initial error at time 1794134980: ext4_orphan_get:1430 [ 111.051147][ C0] EXT4-fs (loop2): last error at time 1794134980: ext4_orphan_get:1430 [ 111.052671][ T5739] ext4_test_bit(bit=14, block=5) = 0 [ 111.057831][ T5739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.157012][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.315008][ T30] audit: type=1400 audit(1794134981.102:3792): avc: denied { write } for pid=5747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.386165][ T30] audit: type=1400 audit(1794134981.182:3793): avc: denied { write } for pid=5759 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.994679][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.141438][ T30] audit: type=1400 audit(1794134981.932:3794): avc: denied { map } for pid=5771 comm="syz.4.520" path="/114/dev/sda" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.504783][ T5775] loop2: detected capacity change from 0 to 512 [ 112.526540][ T5775] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 112.526988][ T5775] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.533722][ T5775] EXT4-fs (loop2): 1 truncate cleaned up [ 112.537016][ T5775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.774125][ T30] audit: type=1400 audit(1794134982.572:3795): avc: denied { write } for pid=5767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.921973][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.924005][ T5794] netlink: 92 bytes leftover after parsing attributes in process `syz.4.523'. [ 113.027669][ T5798] loop2: detected capacity change from 0 to 1024 [ 113.031898][ T5798] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 113.035550][ T5798] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 113.036859][ T5798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.054205][ T5790] bridge0: port 1(gretap0) entered blocking state [ 113.054618][ T5790] bridge0: port 1(gretap0) entered disabled state [ 113.054745][ T5790] gretap0: entered allmulticast mode [ 113.064620][ T5790] gretap0: entered promiscuous mode [ 113.073256][ T5790] bridge0: port 1(gretap0) entered blocking state [ 113.073416][ T5790] bridge0: port 1(gretap0) entered forwarding state [ 113.230117][ T5808] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 113.294757][ T5820] netlink: 92 bytes leftover after parsing attributes in process `syz.3.537'. [ 113.430125][ T5798] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.524: corrupted in-inode xattr: overlapping e_value [ 113.455752][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.904183][ T5819] loop4: detected capacity change from 0 to 512 [ 113.983546][ T5819] EXT4-fs: Ignoring removed bh option [ 114.152386][ T5843] --map-set only usable from mangle table [ 114.155653][ T5843] xt_hashlimit: size too large, truncated to 1048576 [ 114.155669][ T5843] xt_hashlimit: max too large, truncated to 1048576 [ 114.193361][ T5819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.193456][ T5819] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.286083][ T5853] ip6erspan0: entered allmulticast mode [ 114.411433][ T5849] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.561356][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.275571][ T5869] loop4: detected capacity change from 0 to 512 [ 115.303479][ T5869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.303566][ T5869] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.360301][ T5877] netlink: 'syz.2.540': attribute type 1 has an invalid length. [ 115.360337][ T5877] netlink: 244 bytes leftover after parsing attributes in process `syz.2.540'. [ 115.373530][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.373902][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.394817][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 115.394836][ T30] audit: type=1400 audit(1794134985.202:3817): avc: denied { write } for pid=5866 comm="syz.4.539" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.747759][ T30] audit: type=1400 audit(1794134985.542:3818): avc: denied { write } for pid=5866 comm="syz.4.539" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.836561][ T30] audit: type=1400 audit(1794134985.632:3819): avc: denied { write } for pid=3292 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.838261][ T30] audit: type=1400 audit(1794134985.632:3820): avc: denied { write } for pid=3292 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.838434][ T3292] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 115.838630][ T3292] EXT4-fs (loop4): Remounting filesystem read-only [ 115.838854][ T30] audit: type=1400 audit(1794134985.632:3821): avc: denied { write } for pid=3292 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.840532][ T30] audit: type=1400 audit(1794134985.632:3822): avc: denied { write } for pid=3292 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.840568][ T30] audit: type=1400 audit(1794134985.632:3823): avc: denied { write } for pid=3292 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.840708][ T30] audit: type=1400 audit(1794134985.632:3824): avc: denied { write } for pid=3292 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.840746][ T30] audit: type=1400 audit(1794134985.632:3825): avc: denied { write } for pid=3292 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.841927][ T30] audit: type=1400 audit(1794134985.632:3826): avc: denied { write } for pid=3292 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.155091][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.155352][ T72] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 116.258320][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.258615][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.436808][ T5900] loop2: detected capacity change from 0 to 512 [ 116.460441][ T5900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.460569][ T5900] ext4 filesystem being mounted at /109/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.480267][ T5897] TC_ACT_REPEAT abuse ? [ 116.483747][ T5900] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5900 comm=syz.2.544 [ 116.579895][ T5903] gretap0: left allmulticast mode [ 116.579936][ T5903] gretap0: left promiscuous mode [ 116.580135][ T5903] bridge0: port 3(gretap0) entered disabled state [ 116.684385][ T5903] bridge_slave_0: left allmulticast mode [ 116.684425][ T5903] bridge_slave_0: left promiscuous mode [ 116.684617][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.692006][ T5903] bridge_slave_1: left allmulticast mode [ 116.692028][ T5903] bridge_slave_1: left promiscuous mode [ 116.692191][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.743572][ T5903] bond0: (slave bond_slave_0): Releasing backup interface [ 116.772991][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.774988][ T5903] bond0: (slave bond_slave_1): Releasing backup interface [ 116.810808][ T5903] team0: Port device team_slave_0 removed [ 116.840810][ T5903] team0: Port device team_slave_1 removed [ 116.852731][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.852758][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.854368][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.854465][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.857333][ T5903] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.306108][ T5928] netlink: 'syz.0.553': attribute type 4 has an invalid length. [ 118.306187][ T5928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.553'. [ 118.394806][ T5936] loop6: detected capacity change from 0 to 512 [ 118.422317][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.555'. [ 118.461712][ T5936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.461829][ T5936] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.607056][ T4714] EXT4-fs error (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 118.607177][ T4714] EXT4-fs (loop6): Remounting filesystem read-only [ 118.623536][ T4714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.624445][ T13] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 119.273876][ T5949] loop2: detected capacity change from 0 to 512 [ 119.276434][ T5951] loop3: detected capacity change from 0 to 512 [ 119.278390][ T5951] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 119.312006][ T5951] EXT4-fs (loop3): 1 orphan inode deleted [ 119.312356][ T5951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.312626][ T5951] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.315762][ T5954] FAULT_INJECTION: forcing a failure. [ 119.315762][ T5954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.315805][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: syz.4.556 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.315839][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 119.315873][ T5954] Call Trace: [ 119.315880][ T5954] [ 119.315889][ T5954] __dump_stack+0x1d/0x30 [ 119.315919][ T5954] dump_stack_lvl+0x95/0xd0 [ 119.315950][ T5954] dump_stack+0x15/0x1b [ 119.316031][ T5954] should_fail_ex+0x259/0x270 [ 119.316072][ T5954] should_fail+0xb/0x20 [ 119.316106][ T5954] should_fail_usercopy+0x1a/0x20 [ 119.316143][ T5954] _copy_from_user+0x1c/0xb0 [ 119.316229][ T5954] do_seccomp+0x27f/0xa50 [ 119.316263][ T5954] ? restore_fpregs_from_fpstate+0x61/0x110 [ 119.316299][ T5954] __x64_sys_seccomp+0x40/0x50 [ 119.316398][ T5954] x64_sys_call+0x3f0/0x2550 [ 119.316435][ T5954] do_syscall_64+0x112/0x360 [ 119.316463][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.316542][ T5954] RIP: 0033:0x7f3a4d4cfb19 [ 119.316564][ T5954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.316591][ T5954] RSP: 002b:00007f3a4bf27028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 119.316617][ T5954] RAX: ffffffffffffffda RBX: 00007f3a4d755fa0 RCX: 00007f3a4d4cfb19 [ 119.316637][ T5954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 119.316655][ T5954] RBP: 00007f3a4d567b70 R08: 0000000000000000 R09: 0000000000000000 [ 119.316733][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.316751][ T5954] R13: 00007f3a4d756038 R14: 00007f3a4d755fa0 R15: 00007ffee3a64538 [ 119.316783][ T5954] [ 119.373450][ T5949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.373655][ T5949] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.420936][ T13] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 1 [ 120.126969][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.202725][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.235049][ T5974] syzkaller0: entered promiscuous mode [ 120.235149][ T5974] syzkaller0: entered allmulticast mode [ 120.612557][ T30] kauditd_printk_skb: 282 callbacks suppressed [ 120.612767][ T30] audit: type=1400 audit(1794134990.412:4104): avc: denied { bind } for pid=5981 comm="syz.6.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.614522][ T30] audit: type=1400 audit(1794134990.412:4105): avc: denied { listen } for pid=5981 comm="syz.6.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.919206][ T5980] bond1: entered allmulticast mode [ 120.919373][ T5980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.957540][ T5990] TC_ACT_REPEAT abuse ? [ 121.012899][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.013091][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.042034][ T30] audit: type=1400 audit(1794134990.832:4106): avc: denied { setopt } for pid=5992 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 121.042063][ T30] audit: type=1400 audit(1794134990.832:4107): avc: denied { bind } for pid=5992 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 121.049898][ T30] audit: type=1400 audit(1794134990.852:4108): avc: denied { getopt } for pid=5992 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.200433][ T6000] loop3: detected capacity change from 0 to 1024 [ 121.211870][ T6000] EXT4-fs: Ignoring removed bh option [ 121.268657][ T6000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 121.268778][ T6000] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.305324][ T6004] gretap0: left allmulticast mode [ 121.305404][ T6004] gretap0: left promiscuous mode [ 121.305569][ T6004] bridge0: port 3(gretap0) entered disabled state [ 121.374217][ T5234] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 121.408461][ T6004] bridge_slave_0: left allmulticast mode [ 121.408488][ T6004] bridge_slave_0: left promiscuous mode [ 121.415693][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.423047][ T30] audit: type=1400 audit(1794134991.212:4109): avc: denied { write } for pid=5999 comm="syz.3.573" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.427253][ T6004] bridge_slave_1: left allmulticast mode [ 121.427334][ T6004] bridge_slave_1: left promiscuous mode [ 121.427705][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.472906][ T6004] bond0: (slave bond_slave_0): Releasing backup interface [ 121.480211][ T6004] bond0: (slave bond_slave_1): Releasing backup interface [ 121.495874][ T30] audit: type=1400 audit(1794134991.282:4110): avc: denied { map } for pid=5999 comm="syz.3.573" path="/104/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.530602][ T6004] team0: Port device team_slave_0 removed [ 121.569385][ T6004] team0: Port device team_slave_1 removed [ 121.570217][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.570237][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.612638][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 121.614552][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.614572][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.617126][ T6004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.873010][ T6009] ip6erspan0: entered allmulticast mode [ 121.892372][ T5234] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 121.962176][ T6016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.577'. [ 121.969110][ T6016] netlink: 304 bytes leftover after parsing attributes in process `syz.0.577'. [ 121.989074][ T30] audit: type=1400 audit(1794134991.772:4111): avc: denied { read } for pid=6015 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 122.288507][ T6023] loop2: detected capacity change from 0 to 128 [ 123.051547][ T6023] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.055039][ T6023] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.114995][ T6023] netlink: 32 bytes leftover after parsing attributes in process `syz.2.580'. [ 123.149775][ T30] audit: type=1400 audit(1794134992.932:4112): avc: denied { write } for pid=6021 comm="syz.2.580" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.305721][ T6042] syzkaller0: entered promiscuous mode [ 123.305747][ T6042] syzkaller0: entered allmulticast mode [ 123.336574][ T6045] loop4: detected capacity change from 0 to 512 [ 123.387589][ T6023] netlink: 104 bytes leftover after parsing attributes in process `syz.2.580'. [ 123.387564][ T6045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.387669][ T6045] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.451151][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.526468][ T6054] loop2: detected capacity change from 0 to 128 [ 123.526847][ T6054] vfat: Unknown parameter 'Þ”ïÒ' [ 123.569665][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.675063][ T6063] FAULT_INJECTION: forcing a failure. [ 123.675063][ T6063] name fail_futex, interval 1, probability 0, space 0, times 1 [ 123.675180][ T6063] CPU: 1 UID: 0 PID: 6063 Comm: syz.4.590 Not tainted syzkaller #0 PREEMPT(lazy) [ 123.675210][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 123.675236][ T6063] Call Trace: [ 123.675244][ T6063] [ 123.675254][ T6063] __dump_stack+0x1d/0x30 [ 123.675285][ T6063] dump_stack_lvl+0x95/0xd0 [ 123.675312][ T6063] dump_stack+0x15/0x1b [ 123.675352][ T6063] should_fail_ex+0x259/0x270 [ 123.675430][ T6063] should_fail+0xb/0x20 [ 123.675464][ T6063] get_futex_key+0x12c/0xc40 [ 123.675488][ T6063] ? tick_program_event+0x79/0xc0 [ 123.675556][ T6063] ? irqentry_exit_to_kernel_mode_preempt+0x55/0x80 [ 123.675718][ T6063] futex_wake+0x89/0x400 [ 123.675755][ T6063] do_futex+0x3f8/0x460 [ 123.675784][ T6063] __se_sys_futex+0x2f6/0x370 [ 123.675816][ T6063] __x64_sys_futex+0x78/0x90 [ 123.675844][ T6063] x64_sys_call+0x22e2/0x2550 [ 123.675894][ T6063] do_syscall_64+0x112/0x360 [ 123.675919][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.675945][ T6063] RIP: 0033:0x7f3a4d4cfb19 [ 123.675964][ T6063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.676039][ T6063] RSP: 002b:00007f3a4bf270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.676063][ T6063] RAX: ffffffffffffffda RBX: 00007f3a4d755fa8 RCX: 00007f3a4d4cfb19 [ 123.676080][ T6063] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3a4d755fac [ 123.676096][ T6063] RBP: 00007f3a4d755fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 123.676153][ T6063] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 123.676168][ T6063] R13: 00007f3a4d756038 R14: 00007ffee3a64450 R15: 00007ffee3a64538 [ 123.676192][ T6063] [ 123.788675][ T30] audit: type=1400 audit(1794134993.582:4113): avc: denied { write } for pid=6056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.879357][ T6052] loop3: detected capacity change from 0 to 1024 [ 123.961016][ T6052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.977582][ T6052] program syz.3.588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.005883][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.192379][ T6095] loop4: detected capacity change from 0 to 164 [ 124.344606][ T6103] sctp: [Deprecated]: syz.0.604 (pid 6103) Use of int in max_burst socket option. [ 124.344606][ T6103] Use struct sctp_assoc_value instead [ 124.389606][ T6105] loop3: detected capacity change from 0 to 512 [ 124.398912][ T6105] EXT4-fs: Ignoring removed oldalloc option [ 124.421542][ T6105] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 124.424320][ T6105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 124.424415][ T6105] EXT4-fs (loop3): orphan cleanup on readonly fs [ 124.424499][ T6105] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.595: bad orphan inode 267 [ 124.424527][ T6105] loop3: lost filesystem error report for type 5 error -117 [ 124.424840][ T6105] EXT4-fs (loop3): Remounting filesystem read-only [ 124.425352][ T6105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 124.512973][ T6110] FAULT_INJECTION: forcing a failure. [ 124.512973][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 124.513009][ T6110] CPU: 1 UID: 0 PID: 6110 Comm: syz.2.597 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.513042][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 124.513060][ T6110] Call Trace: [ 124.513068][ T6110] [ 124.513148][ T6110] __dump_stack+0x1d/0x30 [ 124.513178][ T6110] dump_stack_lvl+0x95/0xd0 [ 124.513208][ T6110] dump_stack+0x15/0x1b [ 124.513302][ T6110] should_fail_ex+0x259/0x270 [ 124.513335][ T6110] ? alloc_pipe_info+0xad/0x340 [ 124.513360][ T6110] should_failslab+0x8c/0xb0 [ 124.513406][ T6110] __kmalloc_cache_noprof+0x5d/0x3e0 [ 124.513507][ T6110] ? alloc_pipe_info+0xad/0x340 [ 124.513615][ T6110] alloc_pipe_info+0xad/0x340 [ 124.513635][ T6110] create_pipe_files+0x64/0x440 [ 124.513660][ T6110] __do_pipe_flags+0x44/0x140 [ 124.513688][ T6110] do_pipe2+0x61/0x140 [ 124.513725][ T6110] ? switch_fpu_return+0xe7/0x1b0 [ 124.513793][ T6110] __x64_sys_pipe+0x21/0x30 [ 124.513819][ T6110] x64_sys_call+0x24fd/0x2550 [ 124.513855][ T6110] do_syscall_64+0x112/0x360 [ 124.513947][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.513970][ T6110] RIP: 0033:0x7f812c01fb19 [ 124.513992][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.514018][ T6110] RSP: 002b:00007f812aa6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 124.514096][ T6110] RAX: ffffffffffffffda RBX: 00007f812c2a5fa0 RCX: 00007f812c01fb19 [ 124.514116][ T6110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.514134][ T6110] RBP: 00007f812c0b7b70 R08: 0000000000000000 R09: 0000000000000000 [ 124.514149][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.514162][ T6110] R13: 00007f812c2a6038 R14: 00007f812c2a5fa0 R15: 00007fff6acd5e58 [ 124.514251][ T6110] [ 126.493976][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 126.641435][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 126.641456][ T30] audit: type=1400 audit(1794134996.402:4119): avc: denied { write } for pid=6120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.699919][ T30] audit: type=1400 audit(1794134996.492:4120): avc: denied { write } for pid=6142 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.737106][ T6140] loop3: detected capacity change from 0 to 512 [ 126.753236][ T6140] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 126.753253][ T6140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.757591][ T6140] EXT4-fs (loop3): 1 truncate cleaned up [ 126.758203][ T6140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.971126][ T30] audit: type=1400 audit(1794134996.762:4121): avc: denied { write } for pid=6147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.083395][ T30] audit: type=1400 audit(1794134996.882:4122): avc: denied { write } for pid=6160 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.433761][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.445081][ T6171] bridge0: port 1(gretap0) entered blocking state [ 127.445120][ T6171] bridge0: port 1(gretap0) entered disabled state [ 127.445461][ T6171] gretap0: entered allmulticast mode [ 127.452321][ T6171] gretap0: entered promiscuous mode [ 127.452936][ T6171] bridge0: port 1(gretap0) entered blocking state [ 127.453156][ T6171] bridge0: port 1(gretap0) entered forwarding state [ 127.475299][ T6169] loop2: detected capacity change from 0 to 512 [ 127.507414][ T6169] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.519196][ T30] audit: type=1400 audit(1794134997.302:4123): avc: denied { write } for pid=6166 comm="syz.2.606" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.617334][ T30] audit: type=1400 audit(1794134997.412:4124): avc: denied { ioctl } for pid=6186 comm="syz.3.610" path="socket:[12700]" dev="sockfs" ino=12700 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.751684][ T6187] syzkaller0: entered promiscuous mode [ 127.751757][ T6187] syzkaller0: entered allmulticast mode [ 127.987780][ T6224] loop6: detected capacity change from 0 to 512 [ 128.412567][ T6201] gretap0: left allmulticast mode [ 128.412825][ T6201] bridge0: port 1(gretap0) entered disabled state [ 128.415139][ T6201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.748616][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.6.617'. [ 128.748663][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.6.617'. [ 128.748678][ T6289] netlink: 'syz.6.617': attribute type 4 has an invalid length. [ 128.877195][ T6299] netlink: 20 bytes leftover after parsing attributes in process `syz.6.620'. [ 128.892597][ T6290] loop4: detected capacity change from 0 to 512 [ 128.908687][ T6290] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.616: iget: bad i_size value: 38620345925642 [ 128.908793][ T6290] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.908965][ T6290] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.616: couldn't read orphan inode 15 (err -117) [ 128.908999][ T6290] loop4: lost filesystem error report for type 5 error -117 [ 128.924820][ T30] audit: type=1400 audit(1794134998.712:4125): avc: denied { write } for pid=6284 comm="syz.4.616" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.044977][ T6303] loop3: detected capacity change from 0 to 512 [ 129.046753][ T6311] loop2: detected capacity change from 0 to 128 [ 129.068188][ T6311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 129.068311][ T6311] System zones: 1-3, 19-19, 35-36 [ 129.069007][ T6311] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.179749][ T6303] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 129.252249][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.6.625'. [ 129.270800][ T6303] EXT4-fs (loop3): 1 orphan inode deleted [ 129.276111][ T6303] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.292579][ T33] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 129.292704][ T33] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:1: Failed to release dquot type 1 [ 129.563678][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.630'. [ 129.602137][ T6334] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 129.602164][ T6334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.602240][ T6334] vhci_hcd vhci_hcd.0: Device attached [ 129.604554][ T6335] vhci_hcd: connection closed [ 129.604834][ T53] vhci_hcd vhci_hcd.2: stop threads [ 129.604852][ T53] vhci_hcd vhci_hcd.2: release socket [ 129.604867][ T53] vhci_hcd vhci_hcd.2: disconnect device [ 129.684753][ T6340] sock: sock_timestamping_bind_phc: sock not bind to device [ 129.855175][ T6345] netlink: 20 bytes leftover after parsing attributes in process `syz.6.635'. [ 129.888337][ T30] audit: type=1400 audit(1794134999.682:4127): avc: denied { write } for pid=6341 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.889812][ T30] audit: type=1400 audit(1794134999.632:4126): avc: denied { connect } for pid=6341 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.162895][ T6357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.639'. [ 130.190115][ T6359] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.218041][ T6360] sctp: [Deprecated]: syz.4.640 (pid 6360) Use of int in max_burst socket option. [ 130.218041][ T6360] Use struct sctp_assoc_value instead [ 130.372614][ T6366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.642'. [ 130.699526][ T6381] netlink: 20 bytes leftover after parsing attributes in process `syz.6.647'. [ 130.777420][ T6384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.658'. [ 130.913441][ T6389] loop6: detected capacity change from 0 to 1024 [ 130.927666][ T6389] EXT4-fs: Ignoring removed bh option [ 130.937554][ T6389] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.305883][ T6394] loop4: detected capacity change from 0 to 2048 [ 131.328328][ T6394] EXT4-fs mount: 10 callbacks suppressed [ 131.328346][ T6394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.362281][ T6397] xt_HMARK: proto mask must be zero with L3 mode [ 131.432647][ T6398] loop2: detected capacity change from 0 to 512 [ 131.446045][ T6398] EXT4-fs: Ignoring removed bh option [ 131.638313][ T6397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.645220][ T6397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.720166][ T6398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.720335][ T6398] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.761961][ T6412] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.833125][ T30] kauditd_printk_skb: 476 callbacks suppressed [ 131.833146][ T30] audit: type=1400 audit(1794135001.632:4604): avc: denied { write } for pid=6396 comm="syz.2.651" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.865715][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.875589][ T30] audit: type=1400 audit(1794135001.672:4605): avc: denied { write } for pid=6396 comm="syz.2.651" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.046883][ T6398] ip6erspan0: entered allmulticast mode [ 132.081307][ T30] audit: type=1400 audit(1794135001.872:4606): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.081343][ T30] audit: type=1400 audit(1794135001.872:4607): avc: denied { write } for pid=3297 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.082853][ T30] audit: type=1400 audit(1794135001.882:4608): avc: denied { write } for pid=3297 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.082886][ T30] audit: type=1400 audit(1794135001.882:4609): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.082965][ T30] audit: type=1400 audit(1794135001.882:4610): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.082998][ T30] audit: type=1400 audit(1794135001.882:4611): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.084018][ T30] audit: type=1400 audit(1794135001.882:4612): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.084116][ T30] audit: type=1400 audit(1794135001.882:4613): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.099070][ T6420] bridge0: port 1(gretap0) entered blocking state [ 132.099169][ T6420] bridge0: port 1(gretap0) entered disabled state [ 132.099441][ T6420] gretap0: entered allmulticast mode [ 132.104907][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.108411][ T6418] bridge0: port 1(gretap0) entered blocking state [ 132.108443][ T6418] bridge0: port 1(gretap0) entered disabled state [ 132.108716][ T6418] gretap0: entered allmulticast mode [ 132.110174][ T6418] gretap0: entered promiscuous mode [ 132.110758][ T6418] bridge0: port 1(gretap0) entered blocking state [ 132.110839][ T6418] bridge0: port 1(gretap0) entered forwarding state [ 132.982678][ T6449] loop4: detected capacity change from 0 to 512 [ 133.212492][ T6455] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.440186][ T6466] loop6: detected capacity change from 0 to 512 [ 133.477401][ T6466] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 133.497796][ T6466] EXT4-fs (loop6): 1 orphan inode deleted [ 133.500342][ T6466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.501005][ T6466] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.530653][ T53] EXT4-fs error (device loop6): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 1 [ 133.655761][ T6473] tipc: Started in network mode [ 133.655823][ T6473] tipc: Node identity ee94c5bb7b08, cluster identity 4711 [ 133.655896][ T6473] tipc: Enabled bearer , priority 0 [ 133.656314][ T6473] syzkaller0: entered promiscuous mode [ 133.656356][ T6473] syzkaller0: entered allmulticast mode [ 133.688602][ T6473] tipc: Resetting bearer [ 133.718093][ T6471] tipc: Resetting bearer [ 133.729218][ T6471] tipc: Disabling bearer [ 133.819661][ T6480] __nla_validate_parse: 5 callbacks suppressed [ 133.820315][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.680'. [ 133.975383][ T6485] loop4: detected capacity change from 0 to 8192 [ 133.989495][ T6485] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 133.989520][ T6485] FAT-fs (loop4): Filesystem has been set read-only [ 133.997090][ T6485] bridge0: port 2(team0) entered blocking state [ 133.997199][ T6485] bridge0: port 2(team0) entered disabled state [ 133.997669][ T6485] team0: entered allmulticast mode [ 133.999164][ T6485] team0: entered promiscuous mode [ 134.029091][ T6485] team0: left allmulticast mode [ 134.029302][ T6485] team0: left promiscuous mode [ 134.029568][ T6485] bridge0: port 2(team0) entered disabled state [ 134.205910][ T4714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.565255][ T6505] loop4: detected capacity change from 0 to 128 [ 134.572101][ T6505] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 134.604273][ T6505] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.606577][ T6505] ext2 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.850569][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.6.691'. [ 134.927919][ T3292] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.985089][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.682'. [ 134.985164][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.682'. [ 134.985177][ T6483] netlink: 'syz.2.682': attribute type 4 has an invalid length. [ 135.052476][ T6519] loop2: detected capacity change from 0 to 512 [ 135.076302][ T6519] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 135.097726][ T6519] EXT4-fs (loop2): 1 orphan inode deleted [ 135.098202][ T6519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.098638][ T6519] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.111792][ T72] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:4: Failed to release dquot type 1 [ 135.212557][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.695'. [ 135.246371][ T6528] netlink: 20 bytes leftover after parsing attributes in process `syz.6.696'. [ 135.732327][ T6538] loop3: detected capacity change from 0 to 512 [ 135.818999][ T6545] loop3: detected capacity change from 0 to 164 [ 135.990126][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.025030][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 136.181456][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.706'. [ 136.552634][ T6562] loop6: detected capacity change from 0 to 256 [ 136.604127][ T6565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.708'. [ 137.034879][ T6581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.724'. [ 137.101496][ T6583] sctp: [Deprecated]: syz.3.714 (pid 6583) Use of int in max_burst socket option. [ 137.101496][ T6583] Use struct sctp_assoc_value instead [ 137.220205][ T6587] loop2: detected capacity change from 0 to 512 [ 137.226007][ T6587] EXT4-fs: Ignoring removed oldalloc option [ 137.262351][ T6587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.416013][ T6583] loop3: detected capacity change from 0 to 1024 [ 137.483454][ T6583] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.517289][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.622826][ T6583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.660287][ T30] kauditd_printk_skb: 242 callbacks suppressed [ 137.660307][ T30] audit: type=1400 audit(1794135007.452:4854): avc: denied { write } for pid=6582 comm="syz.3.714" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.839860][ T6610] EXT4-fs: Ignoring removed bh option [ 137.848235][ T6610] EXT4-fs error (device loop6): ext4_iget_extra_inode:6027: inode #15: comm syz.6.720: corrupted in-inode xattr: e_value size too large [ 137.848281][ T6610] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.848644][ T6610] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.720: couldn't read orphan inode 15 (err -117) [ 137.848677][ T6610] loop6: lost filesystem error report for type 5 error -117 [ 137.849304][ T6610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.850616][ T30] audit: type=1400 audit(1794135007.642:4855): avc: denied { write } for pid=6608 comm="syz.6.720" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.852020][ T30] audit: type=1400 audit(1794135007.642:4856): avc: denied { write } for pid=6608 comm="syz.6.720" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.933543][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.961363][ T30] audit: type=1400 audit(1794135007.762:4857): avc: denied { write } for pid=6608 comm="syz.6.720" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.034246][ T4714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.272357][ T6619] set_capacity_and_notify: 1 callbacks suppressed [ 138.272378][ T6619] loop6: detected capacity change from 0 to 128 [ 138.539899][ T30] audit: type=1400 audit(1794135008.332:4858): avc: denied { create } for pid=6633 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.690641][ T6641] loop3: detected capacity change from 0 to 128 [ 138.693193][ T6634] loop4: detected capacity change from 0 to 512 [ 138.744919][ T6619] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.750484][ T6619] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.757528][ T6641] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.758087][ T6641] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.988806][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.000883][ T6619] __nla_validate_parse: 5 callbacks suppressed [ 139.000899][ T6619] netlink: 32 bytes leftover after parsing attributes in process `syz.6.725'. [ 139.022983][ T30] audit: type=1400 audit(1794135008.822:4859): avc: denied { write } for pid=6618 comm="syz.6.725" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.083800][ T6649] sock: sock_timestamping_bind_phc: sock not bind to device [ 139.089979][ T6619] netlink: 104 bytes leftover after parsing attributes in process `syz.6.725'. [ 139.144346][ T4714] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.204506][ T6647] loop3: detected capacity change from 0 to 512 [ 139.269057][ T30] audit: type=1400 audit(1794135009.052:4860): avc: denied { ioctl } for pid=6633 comm="syz.4.739" path="socket:[13900]" dev="sockfs" ino=13900 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.309623][ T30] audit: type=1400 audit(1794135009.102:4861): avc: denied { connect } for pid=6633 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.343262][ T6660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.737'. [ 139.352207][ T6647] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.732: bad orphan inode 15 [ 139.352350][ T6647] loop3: lost filesystem error report for type 5 error -117 [ 139.353237][ T6647] ext4_test_bit(bit=14, block=5) = 0 [ 139.359758][ T6647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.589091][ T6664] lo: entered allmulticast mode [ 139.590721][ T6646] lo: left allmulticast mode [ 139.616341][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.660468][ T6673] netlink: 92 bytes leftover after parsing attributes in process `syz.3.741'. [ 139.714413][ T6677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.742'. [ 139.719480][ T6677] sctp: [Deprecated]: syz.2.742 (pid 6677) Use of int in max_burst socket option deprecated. [ 139.719480][ T6677] Use struct sctp_assoc_value instead [ 139.744465][ T6678] No source specified [ 139.756296][ T6674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.740'. [ 140.015409][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.744'. [ 140.129365][ T6687] loop4: detected capacity change from 0 to 1024 [ 140.133257][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 140.157108][ T6687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.166912][ T6684] program syz.4.745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.200984][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.224079][ T6692] xt_HMARK: proto mask must be zero with L3 mode [ 140.269449][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 140.293033][ T6694] vxlan0: entered promiscuous mode [ 140.309147][ T6694] bond1: entered promiscuous mode [ 140.338427][ T6694] ip6erspan0: entered promiscuous mode [ 140.338571][ T6694] batadv2: entered promiscuous mode [ 140.338651][ T6694] batadv3: entered promiscuous mode [ 140.338763][ T6694] batadv4: entered promiscuous mode [ 140.339719][ T6694] batadv5: entered promiscuous mode [ 140.431416][ T6692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.466254][ T6692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.601903][ T6711] tipc: Enabling of bearer rejected, failed to enable media [ 140.630311][ T30] audit: type=1400 audit(1794135010.432:4862): avc: denied { sys_module } for pid=6709 comm="syz.0.754" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 140.675287][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.755'. [ 140.984278][ T30] audit: type=1400 audit(1794135010.772:4863): avc: denied { setopt } for pid=6724 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.491305][ T6745] process 'syz.0.766' launched '/dev/fd/3' with NULL argv: empty string added [ 141.497602][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.6.768'. [ 141.561006][ T6751] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 141.561062][ T6751] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.561171][ T6751] vhci_hcd vhci_hcd.0: Device attached [ 141.603837][ T6747] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 141.603878][ T6747] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.612529][ T6747] vhci_hcd vhci_hcd.0: Device attached [ 141.632546][ T6752] vhci_hcd: connection closed [ 141.632927][ T6755] vhci_hcd: connection closed [ 141.633652][ T72] vhci_hcd vhci_hcd.4: stop threads [ 141.633738][ T72] vhci_hcd vhci_hcd.4: release socket [ 141.633754][ T72] vhci_hcd vhci_hcd.4: disconnect device [ 141.633913][ T72] vhci_hcd vhci_hcd.4: stop threads [ 141.633931][ T72] vhci_hcd vhci_hcd.4: release socket [ 141.633950][ T72] vhci_hcd vhci_hcd.4: disconnect device [ 142.024686][ T6763] xt_HMARK: proto mask must be zero with L3 mode [ 142.118876][ T6772] loop6: detected capacity change from 0 to 512 [ 142.161470][ T6772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.161550][ T6772] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.203307][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.209456][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.397412][ T4714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.164075][ T6787] loop6: detected capacity change from 0 to 512 [ 143.503271][ T6787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.509691][ T6787] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.650521][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 143.650541][ T30] audit: type=1400 audit(1794135013.442:4870): avc: denied { write } for pid=6786 comm="syz.6.778" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.650673][ T30] audit: type=1400 audit(1794135013.402:4869): avc: denied { name_connect } for pid=6807 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 143.778341][ T4714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.937212][ T30] audit: type=1400 audit(1794135013.732:4871): avc: denied { listen } for pid=6830 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.997054][ T6836] tmpfs: Bad value for 'mpol' [ 144.479977][ T6849] loop3: detected capacity change from 0 to 128 [ 144.686912][ T6849] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.690272][ T6849] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.802164][ T6849] __nla_validate_parse: 8 callbacks suppressed [ 144.802216][ T6849] netlink: 32 bytes leftover after parsing attributes in process `syz.3.795'. [ 144.828215][ T30] audit: type=1400 audit(1794135014.602:4872): avc: denied { write } for pid=6847 comm="syz.3.795" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.903560][ T6849] netlink: 104 bytes leftover after parsing attributes in process `syz.3.795'. [ 145.049266][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.195986][ T6857] loop2: detected capacity change from 0 to 512 [ 146.269317][ T6864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.800'. [ 146.426951][ T6869] netlink: 92 bytes leftover after parsing attributes in process `syz.2.802'. [ 146.656761][ T6873] netlink: 92 bytes leftover after parsing attributes in process `syz.0.803'. [ 146.883706][ T6877] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.011591][ T6885] loop2: detected capacity change from 0 to 512 [ 147.106970][ T6885] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.806: iget: bad i_size value: 38620345925642 [ 147.107069][ T6885] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.107244][ T6885] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.806: couldn't read orphan inode 15 (err -117) [ 147.107279][ T6885] loop2: lost filesystem error report for type 5 error -117 [ 147.107877][ T6885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.217070][ T30] audit: type=1400 audit(1794135017.002:4873): avc: denied { write } for pid=6882 comm="syz.2.806" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.284408][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.817'. [ 147.310067][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.767428][ T6916] netlink: 92 bytes leftover after parsing attributes in process `syz.4.814'. [ 147.777427][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.812'. [ 148.063650][ T6931] tipc: Started in network mode [ 148.063687][ T6931] tipc: Node identity aaefba688613, cluster identity 4711 [ 148.063821][ T6931] tipc: Enabled bearer , priority 0 [ 148.128968][ T6932] syzkaller0: entered promiscuous mode [ 148.128994][ T6932] syzkaller0: entered allmulticast mode [ 148.177935][ T6921] tipc: Resetting bearer [ 148.191283][ T6917] tipc: Resetting bearer [ 148.199815][ T6917] tipc: Disabling bearer [ 148.230765][ T6943] loop4: detected capacity change from 0 to 512 [ 148.232658][ T6943] EXT4-fs: Ignoring removed oldalloc option [ 148.244526][ T6938] No source specified [ 148.264084][ T6943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.290321][ T6942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.822'. [ 148.326061][ T6951] netlink: 20 bytes leftover after parsing attributes in process `syz.3.824'. [ 148.529905][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.638929][ T6938] loop2: detected capacity change from 0 to 512 [ 148.737793][ T6966] SELinux: Context system_u:object_r:dhcpd_state_t:s0 is not valid (left unmapped). [ 148.740280][ T30] audit: type=1400 audit(1794135018.532:4874): avc: denied { mac_admin } for pid=6965 comm="syz.3.829" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.740321][ T30] audit: type=1400 audit(1794135018.532:4875): avc: denied { relabelto } for pid=6965 comm="syz.3.829" name="157" dev="tmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_state_t:s0" [ 148.740381][ T30] audit: type=1400 audit(1794135018.532:4876): avc: denied { associate } for pid=6965 comm="syz.3.829" name="157" dev="tmpfs" ino=881 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_state_t:s0" [ 148.750440][ T30] audit: type=1400 audit(1794135018.532:4877): avc: denied { write } for pid=6965 comm="syz.3.829" name="157" dev="tmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_state_t:s0" [ 148.750481][ T30] audit: type=1400 audit(1794135018.532:4878): avc: denied { add_name } for pid=6965 comm="syz.3.829" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_state_t:s0" [ 148.750604][ T30] audit: type=1400 audit(1794135018.532:4879): avc: denied { create } for pid=6965 comm="syz.3.829" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 148.750658][ T30] audit: type=1400 audit(1794135018.532:4880): avc: denied { associate } for pid=6965 comm="syz.3.829" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.750751][ T30] audit: type=1400 audit(1794135018.552:4881): avc: denied { create } for pid=6965 comm="syz.3.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.785173][ T6964] loop6: detected capacity change from 0 to 512 [ 148.924056][ T6964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.929388][ T6964] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.987677][ T30] audit: type=1400 audit(1794135018.752:4882): avc: denied { write } for pid=3299 comm="syz-executor" name="157" dev="tmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_state_t:s0" [ 148.987756][ T30] audit: type=1400 audit(1794135018.752:4883): avc: denied { remove_name } for pid=3299 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_state_t:s0" [ 149.013877][ T6964] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz.6.828: Failed to acquire dquot type 0 [ 149.149895][ T4714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.869146][ T7016] loop6: detected capacity change from 0 to 512 [ 149.893508][ T7016] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.842: iget: bad i_size value: 38620345925642 [ 149.893575][ T7016] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.893715][ T7016] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.842: couldn't read orphan inode 15 (err -117) [ 149.893818][ T7016] loop6: lost filesystem error report for type 5 error -117 [ 149.894492][ T7016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.992892][ T7021] __nla_validate_parse: 4 callbacks suppressed [ 149.993030][ T7021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.846'. [ 150.070508][ T4714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.247350][ T7027] raw_sendmsg: syz.0.848 forgot to set AF_INET. Fix it! [ 150.267177][ T7025] netlink: 20 bytes leftover after parsing attributes in process `syz.6.847'. [ 150.462455][ T7034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.860'. [ 150.789213][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.852'. [ 150.796888][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.6.854'. [ 150.939675][ T7054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.856'. [ 151.022408][ T7054] netlink: 104 bytes leftover after parsing attributes in process `syz.0.856'. [ 151.255675][ T7065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.862'. [ 151.540892][ T7061] loop3: detected capacity change from 0 to 512 [ 151.648092][ T7061] EXT4-fs: test_dummy_encryption option not supported [ 151.720602][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.6.867'. [ 151.923818][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.868'. [ 152.024849][ T7090] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 152.024881][ T7090] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.024920][ T7090] vhci_hcd vhci_hcd.0: Device attached [ 152.408734][ T7098] loop3: detected capacity change from 0 to 256 [ 152.430605][ T7098] msdos: Unknown parameter '000000000010414106000000x000000000000ee00' [ 152.741431][ T5230] usb 14-1: SetAddress Request (2) to port 0 [ 152.741511][ T5230] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 152.853864][ T7091] vhci_hcd: connection reset by peer [ 152.854139][ T39] vhci_hcd vhci_hcd.6: stop threads [ 152.854159][ T39] vhci_hcd vhci_hcd.6: release socket [ 152.854179][ T39] vhci_hcd vhci_hcd.6: disconnect device [ 153.766631][ T7142] xt_HMARK: proto mask must be zero with L3 mode [ 154.453955][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.455763][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.089595][ T7157] loop4: detected capacity change from 0 to 128 [ 155.157097][ T7157] FAT-fs (loop4): Directory bread(block 1048) failed [ 155.157127][ T7157] FAT-fs (loop4): Directory bread(block 1049) failed [ 155.157151][ T7157] FAT-fs (loop4): Directory bread(block 1050) failed [ 155.157238][ T7157] FAT-fs (loop4): Directory bread(block 1051) failed [ 155.157262][ T7157] FAT-fs (loop4): Directory bread(block 1052) failed [ 155.157284][ T7157] FAT-fs (loop4): Directory bread(block 1053) failed [ 155.157315][ T7157] FAT-fs (loop4): Directory bread(block 1054) failed [ 155.157339][ T7157] FAT-fs (loop4): Directory bread(block 1055) failed [ 155.158538][ T7164] __nla_validate_parse: 4 callbacks suppressed [ 155.158551][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.890'. [ 155.159110][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 155.159126][ T30] audit: type=1400 audit(1794135024.952:4892): avc: denied { read } for pid=7162 comm="syz.6.890" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 155.159154][ T30] audit: type=1400 audit(1794135024.952:4893): avc: denied { open } for pid=7162 comm="syz.6.890" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 155.176421][ T7164] loop6: detected capacity change from 0 to 1764 [ 155.303973][ T7161] loop3: detected capacity change from 0 to 128 [ 155.333461][ T7161] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 155.400655][ T30] audit: type=1400 audit(1794135025.182:4894): avc: denied { ioctl } for pid=7162 comm="syz.6.890" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 155.492994][ T7169] FAT-fs (loop4): Directory bread(block 1048) failed [ 155.493071][ T7169] FAT-fs (loop4): Directory bread(block 1049) failed [ 155.684391][ T7161] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.714203][ T7161] ext2 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.097921][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.097928][ T7185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.893'. [ 156.339365][ T7198] netlink: 92 bytes leftover after parsing attributes in process `syz.6.897'. [ 156.391920][ T30] audit: type=1400 audit(1794135026.192:4895): avc: denied { read } for pid=7190 comm="syz.3.896" dev="nsfs" ino=4026532430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.391960][ T30] audit: type=1400 audit(1794135026.192:4896): avc: denied { open } for pid=7190 comm="syz.3.896" path="net:[4026532430]" dev="nsfs" ino=4026532430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.398745][ T30] audit: type=1400 audit(1794135026.192:4897): avc: denied { create } for pid=7190 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.441038][ T30] audit: type=1400 audit(1794135026.232:4898): avc: denied { write } for pid=7188 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 156.450963][ T7201] netlink: 'syz.4.898': attribute type 21 has an invalid length. [ 156.451029][ T7201] netlink: 156 bytes leftover after parsing attributes in process `syz.4.898'. [ 156.473998][ T30] audit: type=1400 audit(1794135026.272:4899): avc: denied { create } for pid=7197 comm="syz.4.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.495852][ T30] audit: type=1400 audit(1794135026.292:4900): avc: denied { setopt } for pid=7197 comm="syz.4.898" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.499126][ T30] audit: type=1400 audit(1794135026.292:4901): avc: denied { read } for pid=4714 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.608020][ T7208] x_tables: duplicate underflow at hook 1 [ 156.634710][ T7205] xt_HMARK: proto mask must be zero with L3 mode [ 156.692821][ T7205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.696224][ T7205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.816776][ T7219] loop3: detected capacity change from 0 to 1024 [ 156.817424][ T7219] EXT4-fs: Ignoring removed orlov option [ 156.840920][ T7219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.969121][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.983841][ T7229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.906'. [ 157.089035][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.6.908'. [ 157.148797][ T7239] loop2: detected capacity change from 0 to 128 [ 157.159078][ T7240] netlink: 'syz.3.911': attribute type 4 has an invalid length. [ 157.159539][ T7240] netlink: 32 bytes leftover after parsing attributes in process `syz.3.911'. [ 157.353783][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 157.365141][ T7242] loop6: detected capacity change from 0 to 512 [ 157.564788][ T7242] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.912: bg 0: block 385: padding at end of block bitmap is not set [ 157.564867][ T7242] loop6: lost filesystem error report for type 5 error -117 [ 157.571141][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 157.571176][ C0] EXT4-fs (loop6): initial error at time 1794135027: ext4_validate_block_bitmap:445 [ 157.571232][ C0] EXT4-fs (loop6): last error at time 1794135027: ext4_validate_block_bitmap:445 [ 157.571958][ T7242] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 157.572080][ T7242] loop6: lost filesystem error report for type 5 error -117 [ 157.590798][ T7242] EXT4-fs (loop6): 2 truncates cleaned up [ 157.594064][ T7242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.623809][ T7246] netlink: 'syz.4.913': attribute type 1 has an invalid length. [ 157.623857][ T7246] netlink: 'syz.4.913': attribute type 2 has an invalid length. [ 157.787278][ T5230] usb 14-1: device descriptor read/8, error -110 [ 157.809721][ T7262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.920'. [ 157.815002][ T7257] sctp: [Deprecated]: syz.0.916 (pid 7257) Use of int in max_burst socket option. [ 157.815002][ T7257] Use struct sctp_assoc_value instead [ 157.891961][ T5230] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 157.912749][ T5230] usb 14-1: enqueue for inactive port 0 [ 157.912777][ T5230] usb 14-1: enqueue for inactive port 0 [ 157.912800][ T5230] usb 14-1: enqueue for inactive port 0 [ 157.931620][ T7267] loop4: detected capacity change from 0 to 128 [ 158.082936][ T6294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.115575][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 158.225274][ T7268] lo: entered promiscuous mode [ 158.232919][ T7268] tunl0: entered promiscuous mode [ 158.234439][ T7268] gre0: entered promiscuous mode [ 158.249464][ T7268] bridge0: port 1(gretap0) entered disabled state [ 158.258303][ T7268] erspan0: entered promiscuous mode [ 158.270179][ T7268] ip_vti0: entered promiscuous mode [ 158.283557][ T7268] ip6_vti0: entered promiscuous mode [ 158.295922][ T7268] sit0: entered promiscuous mode [ 158.320311][ T7268] ip6tnl0: entered promiscuous mode [ 158.323604][ T7275] loop3: detected capacity change from 0 to 512 [ 158.360607][ T7268] ip6gre0: entered promiscuous mode [ 158.369527][ T7268] syz_tun: entered promiscuous mode [ 158.378826][ T7275] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.924: iget: bad i_size value: 38620345925642 [ 158.379404][ T7275] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.379904][ T7268] ip6gretap0: entered promiscuous mode [ 158.380411][ T7275] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.924: couldn't read orphan inode 15 (err -117) [ 158.380451][ T7275] loop3: lost filesystem error report for type 5 error -117 [ 158.393860][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 158.393881][ C1] EXT4-fs (loop3): initial error at time 1794135028: ext4_orphan_get:1404: inode 15 [ 158.393911][ C1] EXT4-fs (loop3): last error at time 1794135028: ext4_orphan_get:1409 [ 158.404367][ T7268] bridge0: entered promiscuous mode [ 158.432481][ T7268] vcan0: entered promiscuous mode [ 158.446062][ T7268] bond0: entered promiscuous mode [ 158.446154][ T7268] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 158.477227][ T7268] team0: entered promiscuous mode [ 158.478934][ T7268] dummy0: entered promiscuous mode [ 158.487392][ T7275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.487552][ T7268] nlmon0: entered promiscuous mode [ 158.489987][ T7268] batadv0: entered promiscuous mode [ 158.516546][ T7268] vxcan0: entered promiscuous mode [ 158.517219][ T7268] vxcan1: entered promiscuous mode [ 158.518275][ T7268] veth0: entered promiscuous mode [ 158.519776][ T7268] veth1: entered promiscuous mode [ 158.551424][ T7268] wg0: entered promiscuous mode [ 158.555092][ T7268] wg1: entered promiscuous mode [ 158.558567][ T7268] wg2: entered promiscuous mode [ 158.559708][ T7268] veth0_to_bridge: entered promiscuous mode [ 158.585776][ T7268] bridge_slave_0: entered promiscuous mode [ 158.588227][ T7268] veth1_to_bridge: entered promiscuous mode [ 158.603542][ T7268] bridge_slave_1: entered promiscuous mode [ 158.605895][ T7268] veth0_to_bond: entered promiscuous mode [ 158.607215][ T7268] bond_slave_0: entered promiscuous mode [ 158.619660][ T7275] EXT4-fs error (device loop3): __ext4_iget:6490: inode #16: block 50331678: comm syz.3.924: invalid block [ 158.621461][ T7268] veth1_to_bond: entered promiscuous mode [ 158.623771][ T7268] bond_slave_1: entered promiscuous mode [ 158.629340][ T7268] veth0_to_team: entered promiscuous mode [ 158.638472][ T7268] team_slave_0: entered promiscuous mode [ 158.640647][ T7268] veth1_to_team: entered promiscuous mode [ 158.656314][ T7268] team_slave_1: entered promiscuous mode [ 158.656805][ T7268] veth0_to_batadv: entered promiscuous mode [ 158.681685][ T7268] batadv_slave_0: entered promiscuous mode [ 158.683079][ T7268] veth1_to_batadv: entered promiscuous mode [ 158.684297][ T7268] batadv_slave_1: entered promiscuous mode [ 158.685399][ T7268] xfrm0: entered promiscuous mode [ 158.686690][ T7268] veth0_to_hsr: entered promiscuous mode [ 158.688854][ T7268] veth1_to_hsr: entered promiscuous mode [ 158.722254][ T7268] hsr0: entered promiscuous mode [ 158.725916][ T7268] veth1_virt_wifi: entered promiscuous mode [ 158.730625][ T7268] veth0_virt_wifi: entered promiscuous mode [ 158.747611][ T7268] vlan0: entered promiscuous mode [ 158.748829][ T7268] vlan1: entered promiscuous mode [ 158.749737][ T7268] macvlan0: entered promiscuous mode [ 158.750032][ T7268] macvlan1: entered promiscuous mode [ 158.750830][ T7268] ipvlan0: entered promiscuous mode [ 158.750948][ T7268] ipvlan1: entered promiscuous mode [ 158.787246][ T7268] macvtap0: entered promiscuous mode [ 158.788131][ T7268] macsec0: entered promiscuous mode [ 158.790339][ T7268] geneve0: entered promiscuous mode [ 158.807648][ T7268] geneve1: entered promiscuous mode [ 158.808961][ T7268] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 158.809918][ T7268] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 158.817550][ T7268] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 158.819167][ T7268] vxcan2: entered promiscuous mode [ 158.819338][ T7268] vxcan3: entered promiscuous mode [ 158.819544][ T7268] batadv1: entered promiscuous mode [ 158.819730][ T7268] ip6tnl1: entered promiscuous mode [ 158.820005][ T7268] vxlan0: entered promiscuous mode [ 158.820190][ T7268] ip6erspan0: entered promiscuous mode [ 158.820420][ T7268] batadv2: entered promiscuous mode [ 158.828768][ T7268] batadv3: entered promiscuous mode [ 158.829034][ T7268] batadv4: entered promiscuous mode [ 158.829213][ T7268] batadv5: entered promiscuous mode [ 158.829490][ T7268] batadv6: entered promiscuous mode [ 158.829713][ T7268] batadv7: entered promiscuous mode [ 158.829897][ T7268] batadv8: entered promiscuous mode [ 158.834034][ T7268] batadv9: entered promiscuous mode [ 158.834254][ T7268] batadv10: entered promiscuous mode [ 158.834505][ T7268] batadv11: entered promiscuous mode [ 158.834699][ T7268] batadv12: entered promiscuous mode [ 158.841578][ T39] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.841708][ T39] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.841817][ T39] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.841894][ T39] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.876809][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.893787][ T5225] syz0: Port: 1 Link DOWN [ 158.942669][ T5230] usb usb14-port1: attempt power cycle [ 158.975816][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.060118][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.108146][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.145905][ T7270] rxe_eth0 speed is unknown, defaulting to 1000 [ 159.201669][ T39] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 159.201972][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 260 with error 28 [ 159.202005][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 159.202005][ T39] [ 159.202023][ T39] EXT4-fs (loop3): Total free blocks count 0 [ 159.202063][ T39] EXT4-fs (loop3): Free/Dirty block details [ 159.202078][ T39] EXT4-fs (loop3): free_blocks=0 [ 159.202094][ T39] EXT4-fs (loop3): dirty_blocks=524 [ 159.202108][ T39] EXT4-fs (loop3): Block reservation details [ 159.202119][ T39] EXT4-fs (loop3): i_reserved_data_blocks=264 [ 159.203219][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 258 with error 28 [ 159.315849][ T7298] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 159.315917][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 159.315962][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 159.317245][ T7296] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 159.317274][ T7296] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 159.317594][ T7296] vhci_hcd vhci_hcd.0: Device attached [ 159.329463][ T53] gretap0: left allmulticast mode [ 159.329539][ T53] gretap0: left promiscuous mode [ 159.329916][ T53] bridge0: port 1(gretap0) entered disabled state [ 159.497378][ T53] bond0 (unregistering): Released all slaves [ 159.500644][ T53] bond1 (unregistering): Released all slaves [ 159.553494][ T5222] usb 5-2: new high-speed USB device number 2 using vhci_hcd [ 159.565234][ T53] tipc: Left network mode [ 159.715922][ T7307] loop3: detected capacity change from 0 to 512 [ 159.815029][ T7330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.815117][ T7330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.830890][ T53] hsr_slave_0: left promiscuous mode [ 159.831333][ T53] hsr_slave_1: left promiscuous mode [ 159.840082][ T53] veth1_macvtap: left promiscuous mode [ 159.840116][ T53] veth0_macvtap: left promiscuous mode [ 159.840229][ T53] veth1_vlan: left promiscuous mode [ 159.840277][ T53] veth0_vlan: left promiscuous mode [ 159.843835][ T7307] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.929: bad orphan inode 15 [ 159.843921][ T7307] loop3: lost filesystem error report for type 5 error -117 [ 159.848154][ T7307] ext4_test_bit(bit=14, block=5) = 0 [ 159.849639][ T7307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.911198][ T7330] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 159.939907][ T7304] vhci_hcd: connection closed [ 159.940051][ T7300] vhci_hcd: connection reset by peer [ 159.940296][ T6261] vhci_hcd vhci_hcd.2: stop threads [ 159.940318][ T6261] vhci_hcd vhci_hcd.2: release socket [ 159.940347][ T6261] vhci_hcd vhci_hcd.2: disconnect device [ 159.940497][ T6261] vhci_hcd vhci_hcd.2: stop threads [ 159.940512][ T6261] vhci_hcd vhci_hcd.2: release socket [ 159.940531][ T6261] vhci_hcd vhci_hcd.2: disconnect device [ 160.094119][ T7330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.110221][ T7338] lo: entered allmulticast mode [ 160.110856][ T3016] 8021q: adding VLAN 0 to HW filter on device eth9 [ 160.138842][ T7306] lo: left allmulticast mode [ 160.171832][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.277552][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.277592][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.277667][ T7270] bridge_slave_0: entered allmulticast mode [ 160.278237][ T7270] bridge_slave_0: entered promiscuous mode [ 160.280916][ T7349] loop3: detected capacity change from 0 to 128 [ 160.312619][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.312662][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.312753][ T7270] bridge_slave_1: entered allmulticast mode [ 160.313376][ T7270] bridge_slave_1: entered promiscuous mode [ 160.360950][ T7270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.372179][ T7270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.393071][ T7270] team0: Port device team_slave_0 added [ 160.394086][ T7270] team0: Port device team_slave_1 added [ 160.420332][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 160.420350][ T30] audit: type=1400 audit(1794135030.212:4986): avc: denied { write } for pid=7347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.451875][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.451893][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.451994][ T7270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.452590][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.452601][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.452671][ T7270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.482757][ T7349] __nla_validate_parse: 2 callbacks suppressed [ 160.482856][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 160.550767][ T7349] lo: entered promiscuous mode [ 160.589306][ T30] audit: type=1400 audit(1794135030.382:4987): avc: denied { write } for pid=7365 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.623546][ T7370] loop2: detected capacity change from 0 to 128 [ 160.759581][ T7349] tunl0: entered promiscuous mode [ 160.761360][ T5230] usb usb14-port1: unable to enumerate USB device [ 160.796802][ T30] audit: type=1400 audit(1794135030.582:4988): avc: denied { ioctl } for pid=7369 comm="syz.2.940" path="socket:[16956]" dev="sockfs" ino=16956 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.861484][ T30] audit: type=1400 audit(1794135030.652:4989): avc: denied { create } for pid=7366 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.861592][ T30] audit: type=1400 audit(1794135030.652:4990): avc: denied { ioctl } for pid=7366 comm="syz.0.939" path="socket:[16173]" dev="sockfs" ino=16173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.861686][ T30] audit: type=1400 audit(1794135030.652:4991): avc: denied { bind } for pid=7366 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.861754][ T30] audit: type=1400 audit(1794135030.652:4992): avc: denied { setopt } for pid=7366 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.861851][ T30] audit: type=1400 audit(1794135030.652:4993): avc: denied { write } for pid=7366 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.937860][ T7349] gre0: entered promiscuous mode [ 161.417429][ T7349] bridge0: port 1(gretap0) entered disabled state [ 161.509934][ T30] audit: type=1400 audit(1794135031.302:4994): avc: denied { setopt } for pid=7375 comm="syz.2.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.535755][ T7349] erspan0: entered promiscuous mode [ 161.550859][ T7349] ip_vti0: entered promiscuous mode [ 161.564185][ T7349] ip6_vti0: entered promiscuous mode [ 161.571414][ T7349] sit0: entered promiscuous mode [ 161.589476][ T7349] ip6tnl0: entered promiscuous mode [ 161.599403][ T7349] ip6gre0: entered promiscuous mode [ 161.610678][ T7349] syz_tun: entered promiscuous mode [ 161.627441][ T7349] ip6gretap0: entered promiscuous mode [ 161.629200][ T7349] bridge0: entered promiscuous mode [ 161.634861][ T7397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.944'. [ 161.636818][ T7349] vcan0: entered promiscuous mode [ 161.642040][ T7349] bond0: entered promiscuous mode [ 161.645428][ T7349] dummy0: entered promiscuous mode [ 161.651107][ T7349] nlmon0: entered promiscuous mode [ 161.653745][ T7349] vxcan0: entered promiscuous mode [ 161.656710][ T7349] vxcan1: entered promiscuous mode [ 161.658278][ T7349] veth0: entered promiscuous mode [ 161.661003][ T7349] veth1: entered promiscuous mode [ 161.666641][ T7349] wg0: entered promiscuous mode [ 161.671917][ T7349] wg1: entered promiscuous mode [ 161.674695][ T30] audit: type=1400 audit(1794135031.472:4995): avc: denied { write } for pid=7375 comm="syz.2.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.682091][ T7349] wg2: entered promiscuous mode [ 161.684399][ T7349] veth0_to_bridge: entered promiscuous mode [ 161.689053][ T7349] bridge_slave_0: entered promiscuous mode [ 161.694765][ T7349] veth1_to_bridge: entered promiscuous mode [ 161.699160][ T7349] bridge_slave_1: entered promiscuous mode [ 161.701983][ T7349] veth0_to_bond: entered promiscuous mode [ 161.704728][ T7349] bond_slave_0: entered promiscuous mode [ 161.758205][ T7349] veth1_to_bond: entered promiscuous mode [ 161.774972][ T7349] bond_slave_1: entered promiscuous mode [ 161.778044][ T7349] veth0_to_team: entered promiscuous mode [ 161.779454][ T7349] team_slave_0: entered promiscuous mode [ 161.786911][ T7349] veth1_to_team: entered promiscuous mode [ 161.789744][ T7349] team_slave_1: entered promiscuous mode [ 161.790331][ T7349] veth0_to_batadv: entered promiscuous mode [ 161.793628][ T7349] batadv_slave_0: entered promiscuous mode [ 161.796347][ T7349] veth1_to_batadv: entered promiscuous mode [ 161.798536][ T7349] batadv_slave_1: entered promiscuous mode [ 161.802097][ T7349] xfrm0: entered promiscuous mode [ 161.804425][ T7349] veth0_to_hsr: entered promiscuous mode [ 161.808234][ T7349] veth1_to_hsr: entered promiscuous mode [ 161.814612][ T7349] hsr0: entered promiscuous mode [ 161.816941][ T7349] veth1_virt_wifi: entered promiscuous mode [ 161.819337][ T7349] veth0_virt_wifi: entered promiscuous mode [ 161.827322][ T7349] vlan0: entered promiscuous mode [ 161.829508][ T7349] vlan1: entered promiscuous mode [ 161.833975][ T7349] macvlan0: entered promiscuous mode [ 161.839293][ T7349] macvlan1: entered promiscuous mode [ 161.840993][ T7349] ipvlan0: entered promiscuous mode [ 161.848115][ T7349] ipvlan1: entered promiscuous mode [ 161.858710][ T7349] macvtap0: entered promiscuous mode [ 161.860685][ T7349] macsec0: entered promiscuous mode [ 161.862723][ T7349] geneve0: entered promiscuous mode [ 161.863888][ T7349] geneve1: entered promiscuous mode [ 161.876191][ T7349] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 161.932583][ T7349] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 161.935996][ T7349] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 161.938217][ T7349] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 161.939127][ T7349] bond1: entered promiscuous mode [ 161.939510][ T7349] ip6erspan0: entered promiscuous mode [ 161.939657][ T7349] vxcan2: entered promiscuous mode [ 161.939721][ T7349] vxcan3: entered promiscuous mode [ 161.939852][ T7349] batadv0: entered promiscuous mode [ 161.939948][ T7349] batadv1: entered promiscuous mode [ 161.940081][ T7349] batadv2: entered promiscuous mode [ 161.940141][ T7349] batadv3: entered promiscuous mode [ 161.940304][ T7349] batadv4: entered promiscuous mode [ 161.940433][ T7349] batadv5: entered promiscuous mode [ 161.940494][ T7349] batadv6: entered promiscuous mode [ 161.940684][ T7349] batadv7: entered promiscuous mode [ 161.940782][ T7349] batadv8: entered promiscuous mode [ 161.940843][ T7349] batadv9: entered promiscuous mode [ 161.940947][ T7349] batadv10: entered promiscuous mode [ 161.941008][ T7349] batadv11: entered promiscuous mode [ 161.944422][ T7349] batadv12: entered promiscuous mode [ 161.944620][ T7349] batadv13: entered promiscuous mode [ 161.944784][ T7349] batadv14: entered promiscuous mode [ 161.950673][ T7270] hsr_slave_0: entered promiscuous mode [ 161.954180][ T7270] hsr_slave_1: entered promiscuous mode [ 161.954809][ T7270] debugfs: 'hsr0' already exists in 'hsr' [ 161.955447][ T7270] Cannot create hsr debugfs directory [ 161.962083][ T3420] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.962214][ T3420] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.962382][ T3420] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.962493][ T3420] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.005366][ T3016] 8021q: adding VLAN 0 to HW filter on device eth10 [ 162.160095][ T7403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.945'. [ 162.934934][ T53] IPVS: stop unused estimator thread 0... [ 163.010091][ T7270] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 163.033752][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.034643][ T7270] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 163.050115][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.063544][ T7270] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 163.081622][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.082224][ T7270] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 163.088583][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.219674][ T7443] xt_CONNSECMARK: invalid mode: 4 [ 163.237245][ T3016] 8021q: adding VLAN 0 to HW filter on device eth11 [ 163.270370][ T7270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.297983][ T7270] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.308551][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.308587][ T6269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.320791][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.320902][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.398598][ T7452] loop4: detected capacity change from 0 to 2048 [ 163.417378][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 163.435256][ T7452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.439508][ T7452] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 16: comm syz.4.954: path /198/file1: bad entry in directory: inode out of bounds - offset=0, inode=622082, rec_len=12, size=2048 fake=1 [ 163.439735][ T7452] EXT4-fs (loop4): Remounting filesystem read-only [ 163.538091][ T3016] 8021q: adding VLAN 0 to HW filter on device eth12 [ 163.709535][ T7270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.724357][ T7483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.957'. [ 163.871116][ T7505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.958'. [ 163.990514][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.112083][ T7270] veth0_vlan: entered promiscuous mode [ 164.116758][ T7270] veth1_vlan: entered promiscuous mode [ 164.145919][ T7270] veth0_macvtap: entered promiscuous mode [ 164.148983][ T7270] veth1_macvtap: entered promiscuous mode [ 164.540331][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.594138][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.621796][ T39] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.621873][ T39] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.622013][ T39] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.622072][ T39] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.995309][ T5222] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 165.157272][ T7554] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 165.157304][ T7554] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.157529][ T7554] vhci_hcd vhci_hcd.0: Device attached [ 165.421147][ T5209] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 165.568376][ T7573] vhci_hcd: connection reset by peer [ 165.568687][ T6261] vhci_hcd vhci_hcd.3: stop threads [ 165.568724][ T6261] vhci_hcd vhci_hcd.3: release socket [ 165.568751][ T6261] vhci_hcd vhci_hcd.3: disconnect device [ 165.642600][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 165.642632][ T30] audit: type=1400 audit(1794135035.432:5025): avc: denied { read } for pid=7563 comm="syz.2.965" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 165.642676][ T30] audit: type=1400 audit(1794135035.432:5026): avc: denied { open } for pid=7563 comm="syz.2.965" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 165.702409][ T30] audit: type=1400 audit(1794135035.492:5028): avc: denied { write } for pid=7565 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.702547][ T30] audit: type=1400 audit(1794135035.492:5027): avc: denied { read } for pid=7563 comm="syz.2.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 165.708586][ T7566] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(4) [ 165.708613][ T7566] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.709113][ T7566] vhci_hcd vhci_hcd.0: Device attached [ 165.792385][ T30] audit: type=1400 audit(1794135035.582:5029): avc: denied { mount } for pid=7580 comm="syz.0.966" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 165.858728][ T7582] rxe_eth0 speed is unknown, defaulting to 1000 [ 165.933316][ T30] audit: type=1400 audit(1794135035.732:5030): avc: denied { unmount } for pid=7270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 166.021224][ T7593] netlink: 20 bytes leftover after parsing attributes in process `syz.7.967'. [ 166.375168][ T7583] vhci_hcd: connection closed [ 166.399777][ T6269] vhci_hcd vhci_hcd.3: stop threads [ 166.399853][ T6269] vhci_hcd vhci_hcd.3: release socket [ 166.399929][ T6269] vhci_hcd vhci_hcd.3: disconnect device [ 166.441612][ T7600] netlink: 92 bytes leftover after parsing attributes in process `syz.2.968'. [ 166.441670][ T30] audit: type=1400 audit(1794135036.242:5031): avc: denied { write } for pid=7597 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.441713][ T30] audit: type=1400 audit(1794135036.242:5032): avc: denied { nlmsg_write } for pid=7597 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.443753][ T7599] loop3: detected capacity change from 0 to 764 [ 166.510710][ T30] audit: type=1400 audit(1794135036.302:5033): avc: denied { mount } for pid=7598 comm="syz.3.969" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 166.545584][ T7599] Symlink component flag not implemented [ 166.545881][ T7599] Symlink component flag not implemented (128) [ 166.576233][ T30] audit: type=1400 audit(1794135036.372:5034): avc: denied { ioctl } for pid=7598 comm="syz.3.969" path="socket:[18501]" dev="sockfs" ino=18501 ioctlcmd=0x8008f512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.806266][ T7613] loop2: detected capacity change from 0 to 1024 [ 166.810015][ T7613] EXT4-fs: Ignoring removed orlov option [ 167.171802][ T7613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.722342][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.978'. [ 167.765645][ T7629] ip_tables: iptables: counters copy to user failed while replacing table [ 167.860963][ T7640] netlink: 48 bytes leftover after parsing attributes in process `syz.0.976'. [ 168.353119][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.462704][ T7649] ================================================================== [ 168.462754][ T7649] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 168.462800][ T7649] [ 168.462806][ T7649] write to 0xffff88810ced42e0 of 8 bytes by task 7647 on cpu 1: [ 168.462823][ T7649] shmem_file_splice_read+0x3eb/0x570 [ 168.462853][ T7649] splice_direct_to_actor+0x25d/0x680 [ 168.462880][ T7649] do_splice_direct+0x119/0x1a0 [ 168.462910][ T7649] do_sendfile+0x37d/0x640 [ 168.462935][ T7649] __x64_sys_sendfile64+0x105/0x150 [ 168.462960][ T7649] x64_sys_call+0x1015/0x2550 [ 168.462986][ T7649] do_syscall_64+0x112/0x360 [ 168.463006][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.463035][ T7649] [ 168.463043][ T7649] write to 0xffff88810ced42e0 of 8 bytes by task 7649 on cpu 0: [ 168.463064][ T7649] shmem_file_splice_read+0x3eb/0x570 [ 168.463099][ T7649] splice_direct_to_actor+0x25d/0x680 [ 168.463130][ T7649] do_splice_direct+0x119/0x1a0 [ 168.463159][ T7649] do_sendfile+0x37d/0x640 [ 168.463188][ T7649] __x64_sys_sendfile64+0x105/0x150 [ 168.463212][ T7649] x64_sys_call+0x1015/0x2550 [ 168.463247][ T7649] do_syscall_64+0x112/0x360 [ 168.463264][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.463288][ T7649] [ 168.463293][ T7649] value changed: 0x0000000000001b51 -> 0x0000000000001b59 [ 168.463309][ T7649] [ 168.463314][ T7649] Reported by Kernel Concurrency Sanitizer on: [ 168.463329][ T7649] CPU: 0 UID: 0 PID: 7649 Comm: syz.0.980 Not tainted syzkaller #0 PREEMPT(lazy) [ 168.463362][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 168.463379][ T7649] ================================================================== [ 169.814020][ T7648] loop4: detected capacity change from 0 to 512 [ 170.587823][ T5209] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 171.494458][ T7649] ================================================================== [ 171.494524][ T7649] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 171.494582][ T7649] [ 171.494588][ T7649] write to 0xffff88810ced42e0 of 8 bytes by task 7647 on cpu 1: [ 171.494604][ T7649] shmem_file_splice_read+0x3eb/0x570 [ 171.494643][ T7649] splice_direct_to_actor+0x25d/0x680 [ 171.494671][ T7649] do_splice_direct+0x119/0x1a0 [ 171.494692][ T7649] do_sendfile+0x37d/0x640 [ 171.494714][ T7649] __x64_sys_sendfile64+0x105/0x150 [ 171.494742][ T7649] x64_sys_call+0x1015/0x2550 [ 171.494769][ T7649] do_syscall_64+0x112/0x360 [ 171.494787][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.494809][ T7649] [ 171.494817][ T7649] write to 0xffff88810ced42e0 of 8 bytes by task 7649 on cpu 0: [ 171.494839][ T7649] shmem_file_splice_read+0x3eb/0x570 [ 171.494879][ T7649] splice_direct_to_actor+0x25d/0x680 [ 171.494915][ T7649] do_splice_direct+0x119/0x1a0 [ 171.494941][ T7649] do_sendfile+0x37d/0x640 [ 171.494970][ T7649] __x64_sys_sendfile64+0x105/0x150 [ 171.494992][ T7649] x64_sys_call+0x1015/0x2550 [ 171.495018][ T7649] do_syscall_64+0x112/0x360 [ 171.495041][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.495065][ T7649] [ 171.495070][ T7649] value changed: 0x000000000002ff25 -> 0x000000000002ff2a [ 171.495082][ T7649] [ 171.495085][ T7649] Reported by Kernel Concurrency Sanitizer on: [ 171.495100][ T7649] CPU: 0 UID: 0 PID: 7649 Comm: syz.0.980 Not tainted syzkaller #0 PREEMPT(lazy) [ 171.495134][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 171.495151][ T7649] ================================================================== [ 175.621771][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 175.621788][ T30] audit: type=1400 audit(1794135045.422:5039): avc: denied { write } for pid=7662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.662542][ T30] audit: type=1400 audit(1794135045.462:5040): avc: denied { write } for pid=7673 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.096580][ T30] audit: type=1400 audit(1794135045.892:5041): avc: denied { write } for pid=7677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.133694][ T30] audit: type=1400 audit(1794135045.932:5042): avc: denied { write } for pid=7688 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.268694][ T30] audit: type=1400 audit(1794135047.062:5043): avc: denied { write } for pid=7692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.309273][ T30] audit: type=1400 audit(1794135047.102:5044): avc: denied { write } for pid=7703 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.407446][ T30] audit: type=1400 audit(1794135047.202:5045): avc: denied { write } for pid=7706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.444065][ T30] audit: type=1400 audit(1794135047.242:5046): avc: denied { write } for pid=7717 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1