last executing test programs: 44.819592026s ago: executing program 2 (id=39): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.664473101s ago: executing program 2 (id=42): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 44.628195271s ago: executing program 2 (id=44): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xfd, 0x1be, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x105040, 0x1c2) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/62, 0x3e}], 0x1, 0x8, 0x0, 0x13) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x181800, 0xfd) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)) 44.553711964s ago: executing program 2 (id=47): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000540)='./file0\x00', 0x18048, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x27d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 44.405786749s ago: executing program 2 (id=50): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0x3, &(0x7f0000000180)) 43.73065635s ago: executing program 2 (id=72): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xfffffffffe000001}) 43.73058048s ago: executing program 32 (id=72): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xfffffffffe000001}) 2.056070065s ago: executing program 1 (id=827): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x1, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x20000000, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffffffffffff) 1.937471939s ago: executing program 3 (id=831): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100fdffffff000000001d00000018", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.834047732s ago: executing program 3 (id=834): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f7ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.736346505s ago: executing program 5 (id=841): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.736201865s ago: executing program 3 (id=842): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.482010223s ago: executing program 1 (id=847): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.318238999s ago: executing program 1 (id=849): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000140)='S', 0x1) sendfile(r1, r0, 0x0, 0x80000002) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) 1.317957348s ago: executing program 4 (id=850): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00005a6000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000247000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000370000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffd30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.27228065s ago: executing program 4 (id=851): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f7ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.238875901s ago: executing program 0 (id=852): r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) unshare(0x22020400) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, &(0x7f0000000140), 0x4) 1.206204272s ago: executing program 4 (id=853): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbb"], 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="ea", 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.177698643s ago: executing program 0 (id=854): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000900)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000001fc0)="$eJzs3ctrG9sdAODfyA/ZTlq7UGiTlaHQGkLkOnWTFrpI6aIUGgi06yZGVkxq2QqWHGJjiLModFNoSxeFdpN1H+mi0G0f2/afKHdxSQj3Oubmri66zEjyU1L8loO/D8ZzzsyZOefMOTNzrBmkAC6s8fRPLuJKRPw6iRhtLk8iYiAL9UfcbqR7u7FWTKck6vWffJRkaf5+aXtfSXN+qRn5akT8+xcR13J7cx1uzsulpWZosrbwaLK6snr94cLMXGmutHhzanr6xq1v37q5f6uj+uR/q5df/eaH3/jr7f74yotf/SeJ23G5uW5zY614zN3vMx7jzWMykB7CXX5w0pn1WNLrAnAk6anZ1zjL40qMRl8W6uC4JyAAcC48jYg6AHDBJO7/AHDBtD4H2NxYK7am3n4icbZefz8ihhr1bz3fbKzpbz6zG8qeg45sJruejCQRMXYC+Y9HxB//8bM/p1Mc8jlk4qkbcAzrzyLi/tj45kZ+z/U/Sa9/g+/eQ77jmm9226ze2G58z+KLdv+BXvpnOv75zv7x39WtocVQ9nfP+Gco3+bcPYp3n/+5lx02PcC16d3S8d/3drzbtj3+23ppbayvGftCNuYbSB48LJfSa9sXI2IiBvJpfCpL2n48NvHmszed8t85/vv4tz//U5p/Ot9OkXvZn4964728RlvMztRmTqLuqdfPIq72t6t/sjX+TTqMf+923OvupvnRd3/5h04p0/qn9W1N++t/uurPI77etv232zLp+n7iZNYdJludoo2/ffD7kU75b7d/Ppun+bf+FzgLafuPdK//WBqqrqzOz5TLpaXq4fP47/PRf3Vat7P/t69/1v93Sfv/YPLTLNzqaU9marWlqYjB5Mf7l9/Y3rYVb6VP6z/xtfbnf6f+n2u+G3t/K9Zd/6vBvzR31bb+mfVO9e82wjq+tP6zh2r/VqB1NLaXVOvNbfYkfvF2vq9T/gdr/+ksNNFccpDr386Sdgsc6aABAAAAAAAAAAAAAAAAAAAAAAAAwCHlIuJyJLnCVjiXKxQav+H95RjJlSvV2rUHleXF2ch+K3ssBnKtr7oc3fF9qFPN78NvxW/siX8rIr4UEb/LD2fxQrFSnu115QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dLu3/9/ms4Khca6D/O9Lh0AcGqGel0AAODMuf8DwMVzuPv/8KmVAwA4O4f+/7+enE5BAIAzc+D7//3TLQcAcHY8/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCU3b1zJ53qn26sFdP47OOV5fnK4+uzpep8YWG5WChWlh4V5iqVuXKpUKwsdNzRemNWrlQeTcfi8pPJWqlam6yurN5bqCwv1u49XJiZK90rDZxZzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg4Korq/Mz5XJpSaBLYLg0fB6KcY4C/XEuirEvsP7/gaxfd00cY+9N5x/skiY5ybyG9y7ZeZUY7sm1CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB98HkAAAD//yofFO0=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x20000000000006) 1.177280133s ago: executing program 1 (id=855): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.130768585s ago: executing program 4 (id=856): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000200)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x11, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 1.058244267s ago: executing program 1 (id=857): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0xfeff, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1.007638438s ago: executing program 4 (id=858): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xf9, 0x1223, &(0x7f0000001840)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x2000006, 0x10003) 800.363745ms ago: executing program 1 (id=859): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xe, 0xa60}, 0x106200, 0x10004, 0x5a, 0x5, 0xa, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 776.395376ms ago: executing program 3 (id=860): syz_open_dev$loop(0x0, 0xf01c, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40010002) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x400000000000126, 0xc040) 765.574096ms ago: executing program 5 (id=861): r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0xfdef}, {0x0, 0xe00}], 0x10000000000000fb) 667.754639ms ago: executing program 3 (id=862): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 667.606799ms ago: executing program 3 (id=863): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) sendto$inet(r0, &(0x7f0000000300)="e7", 0x1, 0x800, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40) 667.398509ms ago: executing program 5 (id=864): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) 594.300431ms ago: executing program 5 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x5}}}}]}, 0x38}}, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x5, 0x7, 0x9, 0x2, 0x2, 0x8, 0x3, 0x4}}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c00"], 0x78}}, 0x0) 564.361492ms ago: executing program 5 (id=866): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r1, 0x17}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="f6", 0x1}], 0x1}, 0x4) 503.919174ms ago: executing program 0 (id=867): r0 = fsopen(&(0x7f0000000480)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x49) lseek(r2, 0x9, 0x1) 484.394395ms ago: executing program 5 (id=868): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x12ac, &(0x7f0000002000)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) time(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfd6d, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 286.039251ms ago: executing program 0 (id=869): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 73.515878ms ago: executing program 0 (id=870): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)) 471.56µs ago: executing program 4 (id=871): getpid() r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x1, 0x0, 0x1, 0x401, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) 0s ago: executing program 0 (id=872): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000340)=""/163, 0xa3}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) kernel console output (not intermixed with test programs): [ 19.038840][ T28] audit: type=1400 audit(1780805427.254:103): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.060913][ T28] audit: type=1400 audit(1780805427.254:104): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.083740][ T28] audit: type=1400 audit(1780805427.254:105): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.106792][ T28] audit: type=1400 audit(1780805427.254:106): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.129947][ T28] audit: type=1400 audit(1780805427.254:107): avc: denied { read } for pid=3181 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.152896][ T28] audit: type=1400 audit(1780805427.254:108): avc: denied { read open } for pid=3181 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.178284][ T28] audit: type=1400 audit(1780805427.254:109): avc: denied { getattr } for pid=3181 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.203426][ T28] audit: type=1400 audit(1780805427.294:110): avc: denied { write } for pid=3180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.226274][ T28] audit: type=1400 audit(1780805427.294:111): avc: denied { add_name } for pid=3180 comm="dhcpcd-run-hook" name="resolv.conf.ifb0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.248766][ T28] audit: type=1400 audit(1780805427.314:112): avc: denied { write } for pid=3191 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 24.087733][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 24.087748][ T28] audit: type=1400 audit(1780805432.304:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.116879][ T28] audit: type=1400 audit(1780805432.334:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.117685][ T3285] cgroup: Unknown subsys name 'net' [ 24.144628][ T28] audit: type=1400 audit(1780805432.364:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.263664][ T3285] cgroup: Unknown subsys name 'cpuset' [ 24.269813][ T3285] cgroup: Unknown subsys name 'rlimit' [ 24.359704][ T28] audit: type=1400 audit(1780805432.574:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.390952][ T28] audit: type=1400 audit(1780805432.574:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.411683][ T28] audit: type=1400 audit(1780805432.574:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.432297][ T28] audit: type=1400 audit(1780805432.574:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.452726][ T28] audit: type=1400 audit(1780805432.584:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.460403][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.477596][ T28] audit: type=1400 audit(1780805432.584:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.509505][ T28] audit: type=1400 audit(1780805432.604:135): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.576770][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.773280][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.780401][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.787658][ T3298] bridge_slave_0: entered allmulticast mode [ 25.794074][ T3298] bridge_slave_0: entered promiscuous mode [ 25.817103][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.824190][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.831460][ T3298] bridge_slave_1: entered allmulticast mode [ 25.837966][ T3298] bridge_slave_1: entered promiscuous mode [ 25.865654][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.872770][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.879886][ T3299] bridge_slave_0: entered allmulticast mode [ 25.886279][ T3299] bridge_slave_0: entered promiscuous mode [ 25.904144][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.911592][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.918736][ T3299] bridge_slave_1: entered allmulticast mode [ 25.925156][ T3299] bridge_slave_1: entered promiscuous mode [ 25.939354][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.963746][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.995067][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.004302][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.011369][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.018502][ T3305] bridge_slave_0: entered allmulticast mode [ 26.024910][ T3305] bridge_slave_0: entered promiscuous mode [ 26.031295][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.038514][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.045683][ T3306] bridge_slave_0: entered allmulticast mode [ 26.052116][ T3306] bridge_slave_0: entered promiscuous mode [ 26.067012][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.080943][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.088082][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.095268][ T3305] bridge_slave_1: entered allmulticast mode [ 26.101651][ T3305] bridge_slave_1: entered promiscuous mode [ 26.107969][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.115059][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.122210][ T3306] bridge_slave_1: entered allmulticast mode [ 26.128635][ T3306] bridge_slave_1: entered promiscuous mode [ 26.134903][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.142026][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.149187][ T3302] bridge_slave_0: entered allmulticast mode [ 26.155609][ T3302] bridge_slave_0: entered promiscuous mode [ 26.162799][ T3298] team0: Port device team_slave_0 added [ 26.180814][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.187978][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.195202][ T3302] bridge_slave_1: entered allmulticast mode [ 26.201784][ T3302] bridge_slave_1: entered promiscuous mode [ 26.208811][ T3298] team0: Port device team_slave_1 added [ 26.215127][ T3299] team0: Port device team_slave_0 added [ 26.238277][ T3299] team0: Port device team_slave_1 added [ 26.249844][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.260269][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.282336][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.292464][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.302945][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.312397][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.319394][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.345385][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.356234][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.363315][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.389290][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.408342][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.422114][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.429123][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.455069][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.465990][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.473013][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.498948][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.528803][ T3305] team0: Port device team_slave_0 added [ 26.535129][ T3306] team0: Port device team_slave_0 added [ 26.541461][ T3302] team0: Port device team_slave_0 added [ 26.548643][ T3302] team0: Port device team_slave_1 added [ 26.559792][ T3305] team0: Port device team_slave_1 added [ 26.566291][ T3306] team0: Port device team_slave_1 added [ 26.602136][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.609143][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.635104][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.654685][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.661661][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.687661][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.700408][ T3299] hsr_slave_0: entered promiscuous mode [ 26.706606][ T3299] hsr_slave_1: entered promiscuous mode [ 26.712797][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.719833][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.745742][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.756695][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.763651][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.789621][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.802345][ T3298] hsr_slave_0: entered promiscuous mode [ 26.808450][ T3298] hsr_slave_1: entered promiscuous mode [ 26.814383][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 26.820085][ T3298] Cannot create hsr debugfs directory [ 26.825849][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.832825][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.858877][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.883110][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.890089][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.915998][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.972561][ T3305] hsr_slave_0: entered promiscuous mode [ 26.978596][ T3305] hsr_slave_1: entered promiscuous mode [ 26.984518][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 26.990234][ T3305] Cannot create hsr debugfs directory [ 27.008573][ T3302] hsr_slave_0: entered promiscuous mode [ 27.014572][ T3302] hsr_slave_1: entered promiscuous mode [ 27.020300][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 27.026035][ T3302] Cannot create hsr debugfs directory [ 27.061076][ T3306] hsr_slave_0: entered promiscuous mode [ 27.067045][ T3306] hsr_slave_1: entered promiscuous mode [ 27.072948][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 27.078681][ T3306] Cannot create hsr debugfs directory [ 27.220632][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.228701][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.236463][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.245053][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.260948][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.269332][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.281816][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.290559][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.311277][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.320146][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.327805][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.336462][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.344099][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.353433][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.360998][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.369689][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.398600][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.407476][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.415322][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.423915][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.431414][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.440231][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.447911][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.456358][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.482857][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.491624][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.499675][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.508201][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.516751][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.525343][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.550631][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.561774][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.570469][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.605152][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.614398][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.622625][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.631287][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.644327][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.653007][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.660588][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.669142][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.679250][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.694736][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.701797][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.710517][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.717735][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.752574][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.770145][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.797052][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.810641][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.821262][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.830653][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.837723][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.852665][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.859784][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.875547][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.882628][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.895006][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.902078][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.912886][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.929216][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.936389][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.950665][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.957901][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.970430][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.000521][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.021646][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.058461][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.065567][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.081256][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.088354][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.100833][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.267177][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.276498][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.299061][ T3299] veth0_vlan: entered promiscuous mode [ 28.319916][ T3299] veth1_vlan: entered promiscuous mode [ 28.350357][ T3299] veth0_macvtap: entered promiscuous mode [ 28.363374][ T3299] veth1_macvtap: entered promiscuous mode [ 28.373797][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.394447][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.405336][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.427579][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.447387][ T3298] veth0_vlan: entered promiscuous mode [ 28.460998][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.470297][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.486241][ T310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.496519][ T310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.510904][ T3305] veth0_vlan: entered promiscuous mode [ 28.522080][ T3298] veth1_vlan: entered promiscuous mode [ 28.528879][ T3305] veth1_vlan: entered promiscuous mode [ 28.573408][ T3298] veth0_macvtap: entered promiscuous mode [ 28.580922][ T3298] veth1_macvtap: entered promiscuous mode [ 28.594347][ T3305] veth0_macvtap: entered promiscuous mode [ 28.603059][ T3305] veth1_macvtap: entered promiscuous mode [ 28.611965][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.619226][ T3302] veth0_vlan: entered promiscuous mode [ 28.639812][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.655356][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.670972][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.681964][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.706101][ T3302] veth1_vlan: entered promiscuous mode [ 28.715490][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.724553][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.748857][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.757622][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.774274][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.792840][ T3306] veth0_vlan: entered promiscuous mode [ 28.807946][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.818013][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.831681][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.844659][ T3306] veth1_vlan: entered promiscuous mode [ 28.859093][ T3302] veth0_macvtap: entered promiscuous mode [ 28.882890][ T3302] veth1_macvtap: entered promiscuous mode [ 28.905955][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.920674][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.935111][ T3306] veth0_macvtap: entered promiscuous mode [ 28.941607][ T3516] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3'. [ 28.974996][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.994104][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.007641][ T3306] veth1_macvtap: entered promiscuous mode [ 29.014985][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.029825][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.041733][ T3522] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 29.055771][ T3524] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 29.066834][ T3522] sch_fq: defrate 16 ignored. [ 29.097488][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.107542][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 29.107556][ T28] audit: type=1400 audit(1780805437.324:184): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.138908][ T28] audit: type=1400 audit(1780805437.324:185): avc: denied { read } for pid=3530 comm="syz.2.15" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.163280][ T28] audit: type=1400 audit(1780805437.324:186): avc: denied { open } for pid=3530 comm="syz.2.15" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.187156][ T28] audit: type=1400 audit(1780805437.324:187): avc: denied { ioctl } for pid=3530 comm="syz.2.15" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.227747][ T28] audit: type=1400 audit(1780805437.384:188): avc: denied { open } for pid=3532 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.267508][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.286689][ T3533] netlink: 'syz.2.17': attribute type 3 has an invalid length. [ 29.301180][ T28] audit: type=1400 audit(1780805437.384:189): avc: denied { kernel } for pid=3532 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.321035][ T28] audit: type=1400 audit(1780805437.494:190): avc: denied { write } for pid=3538 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.371304][ T28] audit: type=1400 audit(1780805437.584:191): avc: denied { create } for pid=3543 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.373305][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.399987][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.409099][ T28] audit: type=1400 audit(1780805437.584:192): avc: denied { setopt } for pid=3543 comm="syz.3.20" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.439955][ T28] audit: type=1400 audit(1780805437.624:193): avc: denied { write } for pid=3543 comm="syz.3.20" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.487771][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.501421][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.600699][ T3556] capability: warning: `syz.2.25' uses deprecated v2 capabilities in a way that may be insecure [ 29.656928][ T3561] Illegal XDP return value 4150683272 on prog (id 4) dev syz_tun, expect packet loss! [ 29.667123][ T3556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3556 comm=syz.2.25 [ 29.700772][ T3565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.830925][ T3584] loop2: detected capacity change from 0 to 512 [ 29.863654][ T3584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.871070][ T3582] netlink: 168 bytes leftover after parsing attributes in process `syz.1.36'. [ 29.923222][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.120316][ T3608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.43'. [ 30.136985][ T3610] loop2: detected capacity change from 0 to 128 [ 30.160342][ T3608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.43'. [ 30.175271][ T3608] netlink: 6 bytes leftover after parsing attributes in process `syz.3.43'. [ 30.195189][ T3616] loop2: detected capacity change from 0 to 512 [ 30.201864][ T3608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.43'. [ 30.211059][ T3608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.43'. [ 30.221176][ T3616] ======================================================= [ 30.221176][ T3616] WARNING: The mand mount option has been deprecated and [ 30.221176][ T3616] and is ignored by this kernel. Remove the mand [ 30.221176][ T3616] option from the mount to silence this warning. [ 30.221176][ T3616] ======================================================= [ 30.257275][ T3608] netlink: 6 bytes leftover after parsing attributes in process `syz.3.43'. [ 30.266203][ T3608] Zero length message leads to an empty skb [ 30.339492][ T3619] loop3: detected capacity change from 0 to 512 [ 30.366079][ T3619] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.406909][ T3619] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 30.617988][ T3648] loop3: detected capacity change from 0 to 1024 [ 30.659347][ T3648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 30.671625][ T3648] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.689062][ T3648] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 1: comm syz.3.62: lblock 1 mapped to illegal pblock 1 (length 5) [ 30.712195][ T3648] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 30.724957][ T3648] EXT4-fs (loop3): This should not happen!! Data will be lost [ 30.724957][ T3648] [ 30.736828][ T3648] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.62: bg 0: block 112: padding at end of block bitmap is not set [ 30.752838][ T3648] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 3 with error 28 [ 30.778045][ T3648] EXT4-fs (loop3): This should not happen!! Data will be lost [ 30.778045][ T3648] [ 30.788325][ T3648] EXT4-fs (loop3): Total free blocks count 0 [ 30.794481][ T3648] EXT4-fs (loop3): Free/Dirty block details [ 30.796151][ T3658] netlink: 'syz.0.65': attribute type 1 has an invalid length. [ 30.800476][ T3648] EXT4-fs (loop3): free_blocks=0 [ 30.813160][ T3648] EXT4-fs (loop3): dirty_blocks=32 [ 30.818333][ T3648] EXT4-fs (loop3): Block reservation details [ 30.864657][ T3662] loop0: detected capacity change from 0 to 512 [ 30.876255][ T3662] EXT4-fs: Ignoring removed oldalloc option [ 30.881580][ T3664] vcan0: tx address claim with dlc 0 [ 30.889997][ T3662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.907879][ T3648] syz.3.62 (3648) used greatest stack depth: 9584 bytes left [ 30.916477][ T12] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 30.932665][ T3662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.947200][ T3662] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.959006][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.968427][ T3302] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 31.009589][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.078930][ T3675] loop1: detected capacity change from 0 to 2048 [ 31.105482][ T3675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.130381][ T3675] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.184246][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.227948][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.343851][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.416194][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.531092][ T3706] Cannot find del_set index 0 as target [ 31.546597][ T39] bridge_slave_1: left allmulticast mode [ 31.552764][ T39] bridge_slave_1: left promiscuous mode [ 31.562569][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.578550][ T39] bridge_slave_0: left allmulticast mode [ 31.584547][ T39] bridge_slave_0: left promiscuous mode [ 31.590382][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.699556][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 31.717672][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 31.733920][ T39] bond0 (unregistering): Released all slaves [ 31.773106][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.781941][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.790963][ T3679] bridge_slave_0: entered allmulticast mode [ 31.804313][ T3679] bridge_slave_0: entered promiscuous mode [ 31.822460][ T39] hsr_slave_0: left promiscuous mode [ 31.832326][ T39] hsr_slave_1: left promiscuous mode [ 31.838815][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.847583][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.861234][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.869948][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.888648][ T39] veth1_macvtap: left promiscuous mode [ 31.900317][ T39] veth0_macvtap: left promiscuous mode [ 31.911652][ T39] veth1_vlan: left promiscuous mode [ 31.922884][ T39] veth0_vlan: left promiscuous mode [ 31.998735][ T39] team0 (unregistering): Port device team_slave_1 removed [ 32.008833][ T39] team0 (unregistering): Port device team_slave_0 removed [ 32.052341][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.060483][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.072007][ T3679] bridge_slave_1: entered allmulticast mode [ 32.079178][ T3679] bridge_slave_1: entered promiscuous mode [ 32.090613][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 32.113614][ T3679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.127303][ T3679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.148265][ T3679] team0: Port device team_slave_0 added [ 32.164253][ T3679] team0: Port device team_slave_1 added [ 32.182862][ T3679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.194633][ T3679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.222282][ T3679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.234888][ T3679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.295002][ T3679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.322959][ T3679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.344883][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 32.364328][ T3679] hsr_slave_0: entered promiscuous mode [ 32.370446][ T3679] hsr_slave_1: entered promiscuous mode [ 32.377357][ T3679] debugfs: 'hsr0' already exists in 'hsr' [ 32.383310][ T3679] Cannot create hsr debugfs directory [ 32.570670][ T3679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 32.621523][ T3679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.632281][ T3679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 32.657346][ T3679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.678075][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 32.705606][ T3679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 32.720504][ T3679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.728189][ T3679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 32.753936][ T3679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.884134][ T3679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.929265][ T3679] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.958060][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.965191][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.997584][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.004706][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.078376][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 33.233054][ T3679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.460426][ T3841] bridge1: entered promiscuous mode [ 33.469653][ T3841] bridge1: entered allmulticast mode [ 33.487849][ T3679] veth0_vlan: entered promiscuous mode [ 33.500581][ T3679] veth1_vlan: entered promiscuous mode [ 33.540920][ T3679] veth0_macvtap: entered promiscuous mode [ 33.555350][ T3679] veth1_macvtap: entered promiscuous mode [ 33.584409][ T3679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.605438][ T3679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.630416][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.639508][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.651068][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.661409][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.750237][ T3861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.109'. [ 34.104915][ T3874] netlink: 'syz.0.115': attribute type 10 has an invalid length. [ 34.116412][ T3874] team0: Port device dummy0 added [ 34.124425][ T3874] netlink: 'syz.0.115': attribute type 10 has an invalid length. [ 34.135681][ T3874] team0: Port device dummy0 removed [ 34.143031][ T3874] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 34.465387][ T3881] loop0: detected capacity change from 0 to 1024 [ 34.485347][ T3881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.500124][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 34.500139][ T28] audit: type=1400 audit(1780805442.724:271): avc: denied { write } for pid=3879 comm="syz.0.127" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.540485][ T28] audit: type=1400 audit(1780805442.754:272): avc: denied { write } for pid=3879 comm="syz.0.127" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.564392][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.617490][ T3890] netlink: 168 bytes leftover after parsing attributes in process `syz.0.118'. [ 34.714627][ T3898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.723117][ T28] audit: type=1400 audit(1780805442.934:273): avc: denied { ioctl } for pid=3897 comm="syz.0.123" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.752375][ T3898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.809895][ T28] audit: type=1400 audit(1780805443.024:274): avc: denied { read write } for pid=3905 comm="syz.3.128" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 34.834271][ T28] audit: type=1400 audit(1780805443.024:275): avc: denied { open } for pid=3905 comm="syz.3.128" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 34.900532][ T28] audit: type=1400 audit(1780805443.114:276): avc: denied { name_connect } for pid=3910 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 34.921068][ T28] audit: type=1400 audit(1780805443.124:277): avc: denied { getopt } for pid=3910 comm="syz.4.130" lport=40672 faddr=100.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 34.979971][ T3916] netlink: 168 bytes leftover after parsing attributes in process `syz.4.132'. [ 35.117427][ T3922] loop4: detected capacity change from 0 to 128 [ 35.243659][ T28] audit: type=1400 audit(1780805443.464:278): avc: denied { create } for pid=3934 comm="syz.5.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.275771][ T28] audit: type=1400 audit(1780805443.484:279): avc: denied { write } for pid=3934 comm="syz.5.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.310545][ T28] audit: type=1400 audit(1780805443.524:280): avc: denied { create } for pid=3936 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.504298][ T3952] loop5: detected capacity change from 0 to 1024 [ 35.528350][ T3952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.553857][ T3952] SELinux: Context system_u:object_r:nvram_device_t:s0 is not valid (left unmapped). [ 36.260394][ T3975] loop4: detected capacity change from 0 to 128 [ 36.311366][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.392383][ T3980] 9pnet: p9_errstr2errno: server reported unknown error  [ 36.576505][ T3997] netlink: 56 bytes leftover after parsing attributes in process `syz.4.167'. [ 37.594174][ T4088] loop0: detected capacity change from 0 to 512 [ 38.210865][ T4055] syz.4.185 (4055) used greatest stack depth: 8888 bytes left [ 38.339146][ T4134] loop1: detected capacity change from 0 to 128 [ 38.352306][ T4129] loop3: detected capacity change from 0 to 1024 [ 38.371734][ T4134] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.404064][ T4134] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.440401][ T4129] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.479636][ T4129] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 38.524268][ T4129] EXT4-fs (loop3): mount failed [ 38.532140][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.624001][ T3379] hid-generic 99A1:E260D13B:624ADF33.0001: unknown main item tag 0x0 [ 38.657509][ T3379] hid-generic 99A1:E260D13B:624ADF33.0001: unknown main item tag 0x0 [ 38.680643][ T3379] hid-generic 99A1:E260D13B:624ADF33.0001: unknown main item tag 0x0 [ 38.699715][ T3379] hid-generic 99A1:E260D13B:624ADF33.0001: unknown main item tag 0x0 [ 38.719647][ T3379] hid-generic 99A1:E260D13B:624ADF33.0001: unknown main item tag 0x0 [ 38.742747][ T3379] hid-generic 99A1:E260D13B:624ADF33.0001: unknown main item tag 0x0 [ 38.771819][ T3379] hid-generic 99A1:E260D13B:624ADF33.0001: unknown main item tag 0x0 [ 38.792880][ T3379] hid-generic 99A1:E260D13B:624ADF33.0001: unknown main item tag 0x0 [ 38.804960][ T4153] sctp: [Deprecated]: syz.0.227 (pid 4153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 38.804960][ T4153] Use struct sctp_sack_info instead [ 38.811510][ T3379] hid-generic 99A1:E260D13B:624ADF33.0001: unknown main item tag 0x0 [ 38.865167][ T3379] hid-generic 99A1:E260D13B:624ADF33.0001: unknown main item tag 0x0 [ 38.999381][ T3379] hid-generic 99A1:E260D13B:624ADF33.0001: hidraw0: HID v306f9c.17 Device [] on 9OR] K8S?c93;mmf$[g~ [ 39.355356][ T4182] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 39.446964][ T4199] loop1: detected capacity change from 0 to 256 [ 39.496103][ T4199] FAT-fs (loop1): Directory bread(block 64) failed [ 39.509670][ T4199] FAT-fs (loop1): Directory bread(block 65) failed [ 39.526825][ T4199] FAT-fs (loop1): Directory bread(block 66) failed [ 39.544142][ T4199] FAT-fs (loop1): Directory bread(block 67) failed [ 39.562310][ T4199] FAT-fs (loop1): Directory bread(block 68) failed [ 39.569197][ T4199] FAT-fs (loop1): Directory bread(block 69) failed [ 39.584178][ T4199] FAT-fs (loop1): Directory bread(block 70) failed [ 39.598011][ T4199] FAT-fs (loop1): Directory bread(block 71) failed [ 39.612756][ T4199] FAT-fs (loop1): Directory bread(block 72) failed [ 39.629443][ T4199] FAT-fs (loop1): Directory bread(block 73) failed [ 39.729403][ T4204] syz.1.247: attempt to access beyond end of device [ 39.729403][ T4204] loop1: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 39.752823][ T4204] syz.1.247: attempt to access beyond end of device [ 39.752823][ T4204] loop1: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 39.788328][ T4204] syz.1.247: attempt to access beyond end of device [ 39.788328][ T4204] loop1: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 39.824974][ T4204] syz.1.247: attempt to access beyond end of device [ 39.824974][ T4204] loop1: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 39.860159][ T4204] syz.1.247: attempt to access beyond end of device [ 39.860159][ T4204] loop1: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 39.896713][ T4204] syz.1.247: attempt to access beyond end of device [ 39.896713][ T4204] loop1: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 39.932842][ T4204] syz.1.247: attempt to access beyond end of device [ 39.932842][ T4204] loop1: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 39.981136][ T4204] syz.1.247: attempt to access beyond end of device [ 39.981136][ T4204] loop1: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 40.025308][ T4204] syz.1.247: attempt to access beyond end of device [ 40.025308][ T4204] loop1: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 40.038922][ T4204] syz.1.247: attempt to access beyond end of device [ 40.038922][ T4204] loop1: rw=1, sector=2472, nr_sectors = 32 limit=256 [ 42.763200][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 42.763214][ T28] audit: type=1400 audit(1780805450.984:327): avc: denied { read } for pid=4236 comm="syz.0.261" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.807626][ T28] audit: type=1400 audit(1780805450.984:328): avc: denied { open } for pid=4236 comm="syz.0.261" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.831941][ T28] audit: type=1400 audit(1780805450.984:329): avc: denied { name_bind } for pid=4240 comm="syz.1.263" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 43.032610][ T4257] loop5: detected capacity change from 0 to 512 [ 43.039374][ T4248] loop4: detected capacity change from 0 to 32768 [ 43.108539][ T4257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.122781][ T4257] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.152925][ T28] audit: type=1400 audit(1780805451.374:330): avc: denied { write } for pid=4255 comm="syz.5.270" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.223688][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.265702][ T28] audit: type=1400 audit(1780805451.394:331): avc: denied { setopt } for pid=4263 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.298608][ T4266] loop3: detected capacity change from 0 to 4096 [ 43.314077][ T4266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.333143][ T28] audit: type=1400 audit(1780805451.544:332): avc: denied { write } for pid=4265 comm="syz.3.274" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.377904][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.633046][ T28] audit: type=1400 audit(1780805451.844:333): avc: denied { ioctl } for pid=4283 comm="syz.4.283" path="socket:[8356]" dev="sockfs" ino=8356 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.858433][ T28] audit: type=1400 audit(1780805452.074:334): avc: denied { watch } for pid=4296 comm="syz.4.287" path="/proc/132" dev="proc" ino=8365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 43.950689][ T4303] loop4: detected capacity change from 0 to 256 [ 43.993756][ T4303] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 44.030616][ T4303] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 44.070296][ T28] audit: type=1400 audit(1780805452.284:335): avc: denied { write } for pid=4300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.102880][ T4313] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 44.121840][ T28] audit: type=1400 audit(1780805452.314:336): avc: denied { write } for pid=4318 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.224299][ T4332] netlink: 'syz.5.297': attribute type 4 has an invalid length. [ 44.298591][ T2943] hid_parser_main: 3456 callbacks suppressed [ 44.298671][ T2943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 44.317157][ T4338] loop4: detected capacity change from 0 to 1024 [ 44.330315][ T2943] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 44.388138][ T4343] fido_id[4343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.418957][ T4349] process 'syz.4.305' launched '/dev/fd/4' with NULL argv: empty string added [ 44.512382][ T4355] loop0: detected capacity change from 0 to 2048 [ 44.538764][ T4355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.584395][ T4355] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.751690][ T4366] loop3: detected capacity change from 0 to 256 [ 44.764786][ T4366] msdos: Bad value for 'time_offset' [ 44.848030][ T2283] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.096148][ T4400] loop4: detected capacity change from 0 to 256 [ 45.146667][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.147110][ T4400] FAT-fs (loop4): codepage cp855 not found [ 45.192225][ T4412] batadv_slave_0: entered promiscuous mode [ 45.208595][ T4411] batadv_slave_0: left promiscuous mode [ 45.266682][ T4425] loop4: detected capacity change from 0 to 512 [ 45.307772][ T4425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.336952][ T4425] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.406508][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.565237][ T4456] netlink: 104 bytes leftover after parsing attributes in process `syz.4.332'. [ 45.680523][ T4472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.340'. [ 45.750832][ T4476] bridge_slave_1: left allmulticast mode [ 45.765085][ T4476] bridge_slave_1: left promiscuous mode [ 45.778322][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.800037][ T4476] bridge_slave_0: left allmulticast mode [ 45.808945][ T4476] bridge_slave_0: left promiscuous mode [ 45.821408][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.069096][ T4498] tipc: Started in network mode [ 46.082310][ T4498] tipc: Node identity ac14140f, cluster identity 4711 [ 46.090625][ T4498] tipc: New replicast peer: 255.255.255.255 [ 46.096866][ T4498] tipc: Enabled bearer , priority 10 [ 46.276903][ T4512] : entered allmulticast mode [ 46.282065][ T4512] dummy0: entered allmulticast mode [ 46.292369][ T4512] dummy0: entered promiscuous mode [ 46.366495][ T4524] loop0: detected capacity change from 0 to 512 [ 46.376763][ T4524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.388255][ T4524] EXT4-fs: journaled quota format not specified [ 46.423689][ T4527] batadv_slave_0: entered promiscuous mode [ 46.430083][ T4526] batadv_slave_0: left promiscuous mode [ 46.474033][ T4531] lo: entered allmulticast mode [ 46.479769][ T4531] lo: left allmulticast mode [ 46.852736][ T3572] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.212786][ T3379] tipc: Node number set to 2886997007 [ 47.323284][ T4579] netlink: 28 bytes leftover after parsing attributes in process `syz.5.386'. [ 47.333350][ T4579] netlink: 28 bytes leftover after parsing attributes in process `syz.5.386'. [ 47.512129][ T4596] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.525471][ T4596] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.539192][ T4596] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.403: invalid indirect mapped block 32768 (level 2) [ 47.552792][ T4596] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.553188][ T4596] EXT4-fs (loop0): 1 orphan inode deleted [ 47.568046][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 47.568064][ C0] EXT4-fs (loop0): initial error at time 1780805711: ext4_free_branches:1023: inode 16 [ 47.568125][ C0] EXT4-fs (loop0): last error at time 1780805711: ext4_free_branches:1023: inode 16 [ 47.597424][ T4596] EXT4-fs (loop0): 1 truncate cleaned up [ 47.603669][ T4596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.618089][ T4596] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.0.403: path /95/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 47.640050][ T4596] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.403: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 47.696969][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.798622][ T4610] netlink: 7 bytes leftover after parsing attributes in process `syz.3.398'. [ 47.828704][ T4614] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 47.858665][ T4619] ext4: Unknown parameter 'hash' [ 47.879786][ T4621] EXT4-fs: inline encryption not supported [ 47.898203][ T4614] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 47.917943][ T4621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.930838][ T4614] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 47.948605][ T4621] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.966459][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 47.966471][ T28] audit: type=1400 audit(1780805712.189:385): avc: denied { write } for pid=4620 comm="syz.1.404" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.996780][ T4621] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.404: lblock 3 mapped to illegal pblock 3 (length 3) [ 48.010814][ T4374] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 48.017690][ T4621] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 48.032364][ T28] audit: type=1326 audit(1780805712.249:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.5.406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d803ce59 code=0x7ffc0000 [ 48.057779][ T28] audit: type=1326 audit(1780805712.249:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.5.406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d803ce59 code=0x7ffc0000 [ 48.077145][ T4621] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.077145][ T4621] [ 48.083044][ T28] audit: type=1326 audit(1780805712.289:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.5.406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d803ce59 code=0x7ffc0000 [ 48.118185][ T28] audit: type=1326 audit(1780805712.289:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.5.406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d803ce59 code=0x7ffc0000 [ 48.123050][ T4632] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 7: comm syz.1.404: lblock 7 mapped to illegal pblock 7 (length 9) [ 48.146532][ T28] audit: type=1326 audit(1780805712.289:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.5.406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa0d803ce59 code=0x7ffc0000 [ 48.183414][ T4632] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 48.187148][ T28] audit: type=1326 audit(1780805712.289:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.5.406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d803ce59 code=0x7ffc0000 [ 48.221429][ T4632] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.221429][ T4632] [ 48.221529][ T28] audit: type=1326 audit(1780805712.289:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.5.406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d803ce59 code=0x7ffc0000 [ 48.267547][ T28] audit: type=1326 audit(1780805712.289:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.5.406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d803ce59 code=0x7ffc0000 [ 48.300567][ T28] audit: type=1326 audit(1780805712.289:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.5.406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d803ce59 code=0x7ffc0000 [ 48.300919][ T3299] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 48.339898][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.415936][ T2283] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.783372][ T4664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4664 comm=syz.5.418 [ 48.950895][ T4686] set_capacity_and_notify: 5 callbacks suppressed [ 48.950912][ T4686] loop0: detected capacity change from 0 to 512 [ 48.997712][ T4686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.011628][ T4686] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.058265][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.925474][ T4710] loop5: detected capacity change from 0 to 512 [ 50.454377][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 50.460426][ T4374] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.699445][ T4739] loop3: detected capacity change from 0 to 512 [ 52.753192][ T4739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.801988][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.854842][ T4756] loop3: detected capacity change from 0 to 512 [ 52.863855][ T4756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.889689][ T4756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.907242][ T4756] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.926725][ T4756] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.460: bg 0: block 217: padding at end of block bitmap is not set [ 52.941614][ T4756] EXT4-fs (loop3): Remounting filesystem read-only [ 52.957590][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.011252][ T4772] loop3: detected capacity change from 0 to 128 [ 53.019818][ T4772] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 53.061269][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 53.061284][ T28] audit: type=1400 audit(1780805717.279:424): avc: denied { bind } for pid=4774 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.087485][ T28] audit: type=1400 audit(1780805717.279:425): avc: denied { connect } for pid=4774 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.107951][ T28] audit: type=1400 audit(1780805717.279:426): avc: denied { write } for pid=4774 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.230206][ T28] audit: type=1400 audit(1780805717.449:427): avc: denied { mount } for pid=4782 comm="syz.0.472" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 53.261232][ T4779] netlink: 'syz.1.470': attribute type 3 has an invalid length. [ 53.269480][ T4785] loop5: detected capacity change from 0 to 128 [ 53.276576][ T4779] netlink: 4496 bytes leftover after parsing attributes in process `syz.1.470'. [ 53.290927][ T4785] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.293230][ T4779] netlink: 'syz.1.470': attribute type 3 has an invalid length. [ 53.304739][ T4785] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.322778][ T4779] netlink: 4496 bytes leftover after parsing attributes in process `syz.1.470'. [ 53.388259][ T28] audit: type=1400 audit(1780805717.609:428): avc: denied { write } for pid=4784 comm="syz.5.473" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.422927][ T28] audit: type=1400 audit(1780805717.639:429): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 53.447254][ T28] audit: type=1400 audit(1780805717.669:430): avc: denied { create } for pid=4787 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.451889][ T3679] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.480549][ T28] audit: type=1400 audit(1780805717.699:431): avc: denied { bind } for pid=4787 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.511215][ T4790] batadv_slave_1: entered promiscuous mode [ 53.527304][ T4789] batadv_slave_1: left promiscuous mode [ 53.527551][ T28] audit: type=1400 audit(1780805717.699:432): avc: denied { connect } for pid=4787 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.585438][ T4793] loop5: detected capacity change from 0 to 512 [ 53.592423][ T4793] EXT4-fs: Ignoring removed oldalloc option [ 53.599548][ T3413] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.600785][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 53.608447][ T3413] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.630679][ T3378] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 53.644223][ T4793] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 53.673166][ T4802] fido_id[4802]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.676624][ T4793] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.476: invalid indirect mapped block 83886080 (level 1) [ 53.700572][ T4800] loop3: detected capacity change from 0 to 4096 [ 53.708406][ T4793] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 53.710182][ T4793] EXT4-fs (loop5): Remounting filesystem read-only [ 53.719331][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 53.719348][ C1] EXT4-fs (loop5): initial error at time 1780805717: ext4_free_branches:1023: inode 16 [ 53.719373][ C1] EXT4-fs (loop5): last error at time 1780805717: ext4_free_branches:1023: inode 16 [ 53.778999][ T4800] EXT4-fs: test_dummy_encryption option not supported [ 53.794978][ T4793] EXT4-fs (loop5): 1 orphan inode deleted [ 53.801351][ T4793] EXT4-fs (loop5): 1 truncate cleaned up [ 53.807445][ T4793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.875521][ T28] audit: type=1400 audit(1780805718.089:433): avc: denied { connect } for pid=4815 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.878662][ T4819] Invalid argument reading file caps for ./file0 [ 53.902995][ T4793] bond0: option arp_interval: invalid value (18446744073708876847) [ 53.916238][ T4793] bond0: option arp_interval: allowed values 0 - 2147483647 [ 53.974174][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.118234][ T3378] IPVS: starting estimator thread 0... [ 54.212770][ T4839] IPVS: using max 2256 ests per chain, 112800 per kthread [ 54.274222][ T4847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.498'. [ 54.301237][ T4847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.498'. [ 54.314579][ T4849] loop4: detected capacity change from 0 to 1024 [ 54.355284][ T4849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.367695][ T4849] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.388393][ T4849] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.499: lblock 3 mapped to illegal pblock 3 (length 3) [ 54.412338][ T4834] loop5: detected capacity change from 0 to 1764 [ 54.428056][ T4849] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 54.459919][ T4834] iso9660: Bad value for 'uid' [ 54.477927][ T4834] iso9660: Bad value for 'uid' [ 54.483139][ T4849] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.483139][ T4849] [ 54.511249][ T4856] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm syz.4.499: lblock 8 mapped to illegal pblock 8 (length 8) [ 54.579266][ T4856] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 54.634199][ T4856] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.634199][ T4856] [ 54.697056][ T4856] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.499: bg 0: block 112: padding at end of block bitmap is not set [ 54.735697][ T4856] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28 [ 54.790463][ T4856] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.790463][ T4856] [ 54.822834][ T4856] EXT4-fs (loop4): Total free blocks count 0 [ 54.828943][ T4856] EXT4-fs (loop4): Free/Dirty block details [ 54.835141][ T4856] EXT4-fs (loop4): free_blocks=0 [ 54.848188][ T4865] loop3: detected capacity change from 0 to 4096 [ 54.873676][ T4865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.902662][ T4865] EXT4-fs (loop3): shut down requested (2) [ 57.689274][ T4865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.697709][ T3306] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 57.807185][ T4885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.513'. [ 57.904792][ T4901] loop1: detected capacity change from 0 to 256 [ 57.911688][ T4901] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.042516][ T4907] loop4: detected capacity change from 0 to 512 [ 58.051938][ T4909] loop3: detected capacity change from 0 to 512 [ 58.053859][ T4907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.070360][ T4909] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 58.079113][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 58.079127][ T28] audit: type=1400 audit(1780805722.289:450): avc: denied { create } for pid=4910 comm="syz.5.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.107609][ T4907] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 58.116857][ T28] audit: type=1400 audit(1780805722.299:451): avc: denied { write } for pid=4908 comm="syz.3.525" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.152515][ T4907] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.170713][ T4907] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 58.179735][ T28] audit: type=1400 audit(1780805722.299:452): avc: denied { ioctl } for pid=4908 comm="syz.3.525" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.205360][ T4907] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 58.205782][ T28] audit: type=1400 audit(1780805722.309:453): avc: denied { setopt } for pid=4910 comm="syz.5.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.245793][ T4907] EXT4-fs (loop4): 1 truncate cleaned up [ 58.261474][ T4907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.324904][ T4924] loop3: detected capacity change from 0 to 256 [ 58.363458][ T4926] netlink: 9 bytes leftover after parsing attributes in process `syz.1.532'. [ 58.375977][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.390131][ T4926] netlink: 9 bytes leftover after parsing attributes in process `syz.1.532'. [ 58.415001][ T4931] loop3: detected capacity change from 0 to 512 [ 58.425512][ T4932] loop4: detected capacity change from 0 to 512 [ 58.432884][ T4931] EXT4-fs: Ignoring removed oldalloc option [ 58.445423][ T4931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.498823][ T4931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.515320][ T28] audit: type=1400 audit(1780805722.739:454): avc: denied { allowed } for pid=4938 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.556831][ T4931] ext4 filesystem being mounted at /92/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.571566][ T28] audit: type=1400 audit(1780805722.789:455): avc: denied { write } for pid=4944 comm="syz.4.540" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.614581][ T28] audit: type=1400 audit(1780805722.789:456): avc: denied { write } for pid=4930 comm="syz.3.535" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.636205][ T28] audit: type=1400 audit(1780805722.839:457): avc: denied { write } for pid=4930 comm="syz.3.535" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.680369][ T28] audit: type=1400 audit(1780805722.899:458): avc: denied { map } for pid=4949 comm="syz.1.542" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.719822][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.740848][ T28] audit: type=1400 audit(1780805722.899:459): avc: denied { read write } for pid=4949 comm="syz.1.542" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.768203][ T4948] loop0: detected capacity change from 0 to 8192 [ 58.771055][ T4954] xt_hashlimit: size too large, truncated to 1048576 [ 58.814553][ T4957] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 58.843951][ T4957] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 58.863724][ T4957] EXT4-fs (loop1): shut down requested (2) [ 58.924223][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.966490][ T4973] netlink: 288 bytes leftover after parsing attributes in process `syz.4.552'. [ 58.975942][ T4973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.552'. [ 59.024923][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 59.290169][ T5000] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 59.291321][ T3413] IPVS: starting estimator thread 0... [ 59.390188][ T5012] dummy0: entered promiscuous mode [ 59.395437][ T5002] IPVS: using max 2256 ests per chain, 112800 per kthread [ 59.403797][ T5012] gretap0: entered promiscuous mode [ 59.410071][ T5012] hsr1: entered allmulticast mode [ 59.415356][ T5012] dummy0: entered allmulticast mode [ 59.420647][ T5012] gretap0: entered allmulticast mode [ 59.556418][ T5023] set_capacity_and_notify: 1 callbacks suppressed [ 59.556431][ T5023] loop0: detected capacity change from 0 to 256 [ 59.569619][ T5023] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.653189][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.747511][ T3378] IPVS: starting estimator thread 0... [ 59.837847][ T5039] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5039 comm=syz.0.580 [ 59.853725][ T5033] IPVS: using max 2304 ests per chain, 115200 per kthread [ 59.880101][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.887662][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.895665][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.903122][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.199339][ T5071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.232371][ T5071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.262170][ T5071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.276711][ T5071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.285888][ T5071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.327429][ T5070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.356114][ T5078] loop5: detected capacity change from 0 to 512 [ 60.382434][ T5078] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.606: bad orphan inode 15 [ 60.400214][ T5078] loop5: lost filesystem error report for type 5 error -117 [ 60.400405][ T5078] EXT4-fs (loop5): Remounting filesystem read-only [ 60.407761][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 60.407782][ C1] EXT4-fs (loop5): initial error at time 1780805724: ext4_orphan_get:1423 [ 60.407824][ C1] EXT4-fs (loop5): last error at time 1780805724: ext4_orphan_get:1423 [ 60.438813][ T5078] ext4_test_bit(bit=14, block=18) = 1 [ 60.445797][ T5078] is_bad_inode(inode)=0 [ 60.450062][ T5078] NEXT_ORPHAN(inode)=1023 [ 60.455680][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.456854][ T5078] max_ino=32 [ 60.464158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.467366][ T5078] i_nlink=0 [ 60.479740][ T5078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.493315][ T5078] ext4 filesystem being mounted at /103/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 60.535625][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.712557][ T5096] loop0: detected capacity change from 0 to 512 [ 60.748624][ T5096] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.600: bg 0: block 127: padding at end of block bitmap is not set [ 60.763778][ T5098] loop1: detected capacity change from 0 to 512 [ 60.770504][ T5098] ext4: Unknown parameter 'appraise_type' [ 60.777594][ T5096] loop0: lost filesystem error report for type 5 error -117 [ 60.778004][ T5096] ------------[ cut here ]------------ [ 60.785342][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 60.785364][ C1] EXT4-fs (loop0): initial error at time 1780805724: ext4_validate_block_bitmap:441 [ 60.785390][ C1] EXT4-fs (loop0): last error at time 1780805724: ext4_validate_block_bitmap:441 [ 60.815912][ T5096] EA inode 11 i_nlink=0 [ 60.815944][ T5096] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.0.600/5096 [ 60.830781][ T5096] Modules linked in: [ 60.834786][ T5096] CPU: 1 UID: 0 PID: 5096 Comm: syz.0.600 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.844009][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 60.854161][ T5096] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 60.860796][ T5096] Code: 24 52 98 ff 4c 8d 2d 3d 5e 5c 05 49 8d 7e 40 e8 e4 14 b6 ff 49 8b 6e 40 4c 89 e7 e8 18 10 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 7f 94 d8 03 66 66 66 66 66 66 2e [ 60.880443][ T5096] RSP: 0018:ffffc900071db778 EFLAGS: 00010246 [ 60.886620][ T5096] RAX: ffff888100bd6000 RBX: ffff88810863e698 RCX: ffffffff81c0e2c8 [ 60.894638][ T5096] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d40f0 [ 60.902634][ T5096] RBP: 000000000000000b R08: 000188810863e64b R09: 0000000000000000 [ 60.910717][ T5096] R10: 0000000000000406 R11: 0000000000000002 R12: ffff88810863e648 [ 60.918749][ T5096] R13: ffffffff871d40f0 R14: ffff88810863e600 R15: 0000000000000001 [ 60.926769][ T5096] FS: 00007ff9ea47f6c0(0000) GS:ffff8882ae9f6000(0000) knlGS:0000000000000000 [ 60.935826][ T5096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.942415][ T5096] CR2: 00007f703bd25fc0 CR3: 000000011630c000 CR4: 00000000003506f0 [ 60.950430][ T5096] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.958463][ T5096] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 60.966486][ T5096] Call Trace: [ 60.969777][ T5096] [ 60.972732][ T5096] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 60.978792][ T5096] ? errseq_check+0x2c/0x50 [ 60.983333][ T5096] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 60.988822][ T5096] ext4_evict_inode+0xb16/0xe30 [ 60.993779][ T5096] ? __pfx_ext4_evict_inode+0x10/0x10 [ 60.999171][ T5096] evict+0x2af/0x510 [ 61.003116][ T5096] ? __dquot_initialize+0x146/0x7c0 [ 61.008325][ T5096] iput+0x41a/0x580 [ 61.012199][ T5096] ext4_process_orphan+0x1a9/0x1c0 [ 61.017405][ T5096] ext4_orphan_cleanup+0x69c/0x9f0 [ 61.022554][ T5096] ext4_fill_super+0x3408/0x37c0 [ 61.022798][ T4374] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.027547][ T5096] ? set_blocksize+0x14c/0x270 [ 61.034028][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 61.038348][ T5096] ? setup_bdev_super+0x30e/0x370 [ 61.049440][ T5096] ? __pfx_ext4_fill_super+0x10/0x10 [ 61.054801][ T5096] get_tree_bdev_flags+0x291/0x300 [ 61.059953][ T5096] ? __pfx_ext4_fill_super+0x10/0x10 [ 61.065267][ T5096] get_tree_bdev+0x1f/0x30 [ 61.069802][ T5096] ext4_get_tree+0x1c/0x30 [ 61.074311][ T5096] vfs_get_tree+0x57/0x1d0 [ 61.078919][ T5096] do_new_mount+0x288/0x8d0 [ 61.083535][ T5096] path_mount+0x4d0/0xbc0 [ 61.087876][ T5096] __se_sys_mount+0x28c/0x2e0 [ 61.092589][ T5096] __x64_sys_mount+0x67/0x80 [ 61.097652][ T5096] x64_sys_call+0x2d61/0x3020 [ 61.102372][ T5096] do_syscall_64+0x12c/0x3b0 [ 61.107001][ T5096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.112945][ T5096] RIP: 0033:0x7ff9eba2e0ca [ 61.117359][ T5096] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.137031][ T5096] RSP: 002b:00007ff9ea47ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 61.145474][ T5096] RAX: ffffffffffffffda RBX: 00007ff9ea47eee0 RCX: 00007ff9eba2e0ca [ 61.153637][ T5096] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007ff9ea47eea0 [ 61.161649][ T5096] RBP: 0000200000000180 R08: 00007ff9ea47eee0 R09: 0000000000000000 [ 61.169748][ T5096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 61.177756][ T5096] R13: 00007ff9ea47eea0 R14: 000000000000047a R15: 00002000000001c0 [ 61.185866][ T5096] [ 61.188893][ T5096] ---[ end trace 0000000000000000 ]--- [ 61.199884][ T5096] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.600: bit already cleared for inode 11 [ 61.211063][ T5096] loop0: lost filesystem error report for type 5 error -117 [ 61.222490][ T5096] EXT4-fs (loop0): 1 orphan inode deleted [ 61.248001][ T5096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.348689][ T5096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 61.359016][ T5096] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 61.420746][ T5096] netlink: 96 bytes leftover after parsing attributes in process `syz.0.600'. [ 61.568404][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.711280][ T5144] netlink: 27 bytes leftover after parsing attributes in process `syz.0.628'. [ 61.954488][ T5163] netlink: 'syz.0.629': attribute type 3 has an invalid length. [ 62.094524][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 62.363291][ T5202] netlink: 51 bytes leftover after parsing attributes in process `syz.4.645'. [ 62.400621][ T5204] vlan2: entered allmulticast mode [ 62.412237][ T5204] bond_slave_1: entered allmulticast mode [ 62.453017][ T5208] vlan2: entered allmulticast mode [ 62.541810][ T5212] loop4: detected capacity change from 0 to 1024 [ 62.602501][ T5212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.619312][ T5212] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.746700][ T12] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 6) [ 62.782074][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 62.794831][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.794831][ T12] [ 62.806557][ T12] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 62.845552][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 62.859105][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.859105][ T12] [ 62.869406][ T3306] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 62.881704][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 64.287394][ T5391] netlink: 'syz.1.678': attribute type 39 has an invalid length. [ 64.408492][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 64.408507][ T28] audit: type=1400 audit(1780805728.629:514): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.469177][ T28] audit: type=1400 audit(1780805728.629:515): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.494054][ T28] audit: type=1400 audit(1780805728.629:516): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.522277][ T28] audit: type=1400 audit(1780805728.649:517): avc: denied { create } for pid=5403 comm="syz.0.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.543038][ T28] audit: type=1400 audit(1780805728.649:518): avc: denied { write } for pid=5403 comm="syz.0.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.563843][ T28] audit: type=1400 audit(1780805728.659:519): avc: denied { read } for pid=5403 comm="syz.0.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.629257][ T28] audit: type=1400 audit(1780805728.679:520): avc: denied { prog_load } for pid=5406 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.670325][ T5417] __nla_validate_parse: 1 callbacks suppressed [ 64.670342][ T5417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 64.698691][ T28] audit: type=1400 audit(1780805728.679:521): avc: denied { bpf } for pid=5406 comm="syz.0.685" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.719293][ T28] audit: type=1400 audit(1780805728.679:522): avc: denied { create } for pid=5408 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.729183][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.739216][ T28] audit: type=1400 audit(1780805728.679:523): avc: denied { setopt } for pid=5408 comm="syz.4.686" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.852780][ T3400] net_ratelimit: 5 callbacks suppressed [ 64.852796][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.682009][ T5446] loop3: detected capacity change from 0 to 512 [ 65.699455][ T5446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.729413][ T5446] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.703: iget: bad i_size value: 38620345925642 [ 65.745639][ T5446] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.745990][ T5446] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.703: couldn't read orphan inode 15 (err -117) [ 65.755167][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 65.755203][ C0] EXT4-fs (loop3): initial error at time 1780805729: ext4_orphan_get:1397: inode 15 [ 65.755235][ C0] EXT4-fs (loop3): last error at time 1780805729: ext4_orphan_get:1397: inode 15 [ 65.792385][ T5446] loop3: lost filesystem error report for type 5 error -117 [ 65.793135][ T5446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.836857][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.879849][ T2184] Bluetooth: hci1: Frame reassembly failed (-84) [ 65.892847][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.534218][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.782828][ T4374] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.900923][ T5502] loop5: detected capacity change from 0 to 512 [ 66.934702][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.945275][ T5502] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.962825][ T5502] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 66.973142][ T5502] System zones: 1-12 [ 66.985141][ T5502] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.034197][ T5502] EXT4-fs (loop5): 1 truncate cleaned up [ 67.040295][ T5502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.198287][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.232838][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.733'. [ 67.504395][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.556990][ T5529] loop4: detected capacity change from 0 to 736 [ 67.633098][ T5527] loop0: detected capacity change from 0 to 8192 [ 67.636302][ T5521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.650127][ T5521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.902758][ T42] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 67.909002][ T3572] Bluetooth: hci1: command 0x1003 tx timeout [ 67.946532][ T5551] veth0: entered promiscuous mode [ 67.957094][ T5551] bond0: entered promiscuous mode [ 67.967956][ T5551] bond_slave_0: entered promiscuous mode [ 67.974118][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.992642][ T5551] bond_slave_1: entered promiscuous mode [ 68.018113][ T5550] bond0: left promiscuous mode [ 68.030403][ T5550] bond_slave_0: left promiscuous mode [ 68.044786][ T5550] bond_slave_1: left promiscuous mode [ 68.056359][ T5550] veth0: left promiscuous mode [ 68.397802][ T5593] atomic_op ffff88811baeb928 conn xmit_atomic 0000000000000000 [ 68.409479][ T5597] loop0: detected capacity change from 0 to 512 [ 68.448406][ T5597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.476852][ T5597] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.564861][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.633221][ T35] IPVS: starting estimator thread 0... [ 68.697266][ T5617] loop0: detected capacity change from 0 to 512 [ 68.722815][ T5609] IPVS: using max 2352 ests per chain, 117600 per kthread [ 68.743737][ T5617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.770260][ T5617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.794700][ T5617] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.909422][ T5619] loop4: detected capacity change from 0 to 32768 [ 68.949149][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.966262][ T5619] loop4: p1 p3 < > [ 68.987134][ T5632] loop3: detected capacity change from 0 to 1024 [ 69.013052][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.021514][ T5632] EXT4-fs: Ignoring removed orlov option [ 69.078552][ T5632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.195202][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.364758][ T5652] loop1: detected capacity change from 0 to 1024 [ 69.410263][ T5652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.450323][ T5652] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.488104][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 69.488155][ T28] audit: type=1400 audit(1780805733.709:650): avc: denied { map } for pid=5655 comm="syz.3.788" path="socket:[11456]" dev="sockfs" ino=11456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 69.574216][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.588463][ T28] audit: type=1400 audit(1780805733.709:651): avc: denied { write } for pid=5651 comm="syz.1.786" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.639548][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 69.661626][ T5666] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 69.681457][ T5354] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 6) [ 69.716149][ T5354] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 69.735157][ T5670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.794'. [ 69.744225][ T28] audit: type=1400 audit(1780805733.949:652): avc: denied { create } for pid=5669 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.747394][ T5668] loop4: detected capacity change from 0 to 8192 [ 69.771130][ T5354] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.771130][ T5354] [ 69.795001][ T5354] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 69.812068][ T28] audit: type=1400 audit(1780805733.959:653): avc: denied { write } for pid=5669 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.843288][ T5354] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 69.864630][ T5354] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.864630][ T5354] [ 69.883234][ T3299] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 69.897966][ T5670] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.898008][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.914211][ T5670] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.983949][ T28] audit: type=1400 audit(1780805734.209:654): avc: denied { create } for pid=5674 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 70.040209][ T28] audit: type=1400 audit(1780805734.229:655): avc: denied { ioctl } for pid=5674 comm="syz.1.795" path="socket:[12404]" dev="sockfs" ino=12404 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 70.066494][ T2943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.083367][ T5677] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.108763][ T5677] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.145225][ T5677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.168167][ T28] audit: type=1400 audit(1780805734.389:656): avc: denied { write } for pid=5676 comm="syz.1.796" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.170855][ T5670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.199540][ T5670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.260747][ T28] audit: type=1400 audit(1780805734.479:657): avc: denied { write } for pid=5676 comm="syz.1.796" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.261868][ T5356] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.291598][ T5683] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.796: bg 0: block 234: padding at end of block bitmap is not set [ 70.302826][ T28] audit: type=1400 audit(1780805734.479:658): avc: denied { write } for pid=5676 comm="syz.1.796" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.332901][ T5683] EXT4-fs (loop1): Remounting filesystem read-only [ 70.371584][ T5356] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.407008][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.409602][ T5356] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.451213][ T5686] netlink: 'syz.1.797': attribute type 14 has an invalid length. [ 70.478324][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 70.481422][ T5356] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.526129][ T28] audit: type=1400 audit(1780805734.749:659): avc: denied { write } for pid=5689 comm="syz.0.799" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.567232][ T5686] netlink: 'syz.1.797': attribute type 14 has an invalid length. [ 70.578366][ T5356] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.584997][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 70.602376][ T5356] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.657213][ T5356] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.677015][ T5702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.684102][ T5356] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.693089][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.707954][ T5702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.724521][ T5702] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.766065][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.092901][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.166880][ T5714] rdma_op ffff88811be41180 conn xmit_rdma 0000000000000000 [ 71.337948][ T5723] netlink: 'syz.3.812': attribute type 83 has an invalid length. [ 71.390482][ T5727] set_capacity_and_notify: 2 callbacks suppressed [ 71.390499][ T5727] loop5: detected capacity change from 0 to 512 [ 71.404391][ T5727] EXT4-fs: Ignoring removed bh option [ 71.410915][ T5727] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 71.434033][ T5727] EXT4-fs (loop5): 1 truncate cleaned up [ 71.444846][ T5727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.515956][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.135040][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.137562][ T5913] loop0: detected capacity change from 0 to 512 [ 73.168361][ T5913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.173583][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.204648][ T5913] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.232263][ T5913] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.846: corrupted inode contents [ 73.274081][ T5913] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #2: comm syz.0.846: mark_inode_dirty error [ 73.310097][ T5925] EXT4-fs (loop0): shut down requested (2) [ 73.310377][ T5913] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.846: corrupted inode contents [ 73.366250][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.542320][ T5954] loop4: detected capacity change from 0 to 128 [ 73.605907][ T5957] loop0: detected capacity change from 0 to 2048 [ 73.647691][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.655991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.656885][ T5957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 73.679906][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.688267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.696531][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.823607][ T5979] loop4: detected capacity change from 0 to 8192 [ 73.899691][ T5979] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.113296][ T6026] netlink: 'syz.5.865': attribute type 22 has an invalid length. [ 74.148217][ T6026] bond0: option ad_select: unable to set because the bond device is up [ 74.350208][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 74.369777][ T6032] loop5: detected capacity change from 0 to 8192 [ 74.476679][ T6037] netlink: 'syz.0.869': attribute type 3 has an invalid length. [ 74.508462][ T6037] netlink: 'syz.0.869': attribute type 3 has an invalid length. [ 74.533284][ T6037] netlink: 'syz.0.869': attribute type 3 has an invalid length. [ 74.556811][ T6037] netlink: 'syz.0.869': attribute type 3 has an invalid length. [ 74.575847][ T6010] netlink: 'syz.1.859': attribute type 13 has an invalid length. [ 74.587107][ T6037] netlink: 'syz.0.869': attribute type 3 has an invalid length. [ 74.744102][ T3306] ================================================================== [ 74.752229][ T3306] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 74.759632][ T3306] [ 74.761965][ T3306] read-write to 0xffff88811b538230 of 8 bytes by interrupt on cpu 0: [ 74.770045][ T3306] __xa_clear_mark+0xf5/0x1e0 [ 74.774739][ T3306] __folio_end_writeback+0xf4/0x360 [ 74.779950][ T3306] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 74.786208][ T3306] folio_end_writeback+0x1c/0x70 [ 74.791155][ T3306] mpage_write_end_io+0x245/0x4c0 [ 74.796181][ T3306] bio_endio+0x35b/0x3f0 [ 74.800420][ T3306] blk_update_request+0x338/0x710 [ 74.805437][ T3306] blk_mq_end_request+0x26/0x50 [ 74.810280][ T3306] lo_complete_rq+0x98/0x140 [ 74.814865][ T3306] blk_done_softirq+0x77/0xb0 [ 74.819532][ T3306] handle_softirqs+0xb9/0x280 [ 74.824194][ T3306] run_ksoftirqd+0x1c/0x30 [ 74.828598][ T3306] smpboot_thread_fn+0x32a/0x510 [ 74.833530][ T3306] kthread+0x22a/0x280 [ 74.837584][ T3306] ret_from_fork+0x146/0x330 [ 74.842168][ T3306] ret_from_fork_asm+0x1a/0x30 [ 74.846922][ T3306] [ 74.849236][ T3306] read to 0xffff88811b538230 of 8 bytes by task 3306 on cpu 1: [ 74.856762][ T3306] xas_find_marked+0x213/0x620 [ 74.861522][ T3306] filemap_get_folios_tag+0xfa/0x430 [ 74.866801][ T3306] filemap_fdatawait_keep_errors+0x6c/0x190 [ 74.872693][ T3306] sync_inodes_sb+0x424/0x4d0 [ 74.877363][ T3306] sync_filesystem+0x102/0x190 [ 74.882117][ T3306] generic_shutdown_super+0x4c/0x220 [ 74.887395][ T3306] kill_block_super+0x2a/0x70 [ 74.892073][ T3306] deactivate_locked_super+0x75/0x1c0 [ 74.897435][ T3306] deactivate_super+0x97/0xa0 [ 74.902104][ T3306] cleanup_mnt+0x2bb/0x330 [ 74.906512][ T3306] __cleanup_mnt+0x19/0x20 [ 74.910916][ T3306] task_work_run+0x130/0x1a0 [ 74.915500][ T3306] exit_to_user_mode_loop+0x211/0x820 [ 74.920857][ T3306] do_syscall_64+0x232/0x3b0 [ 74.925443][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.931323][ T3306] [ 74.933633][ T3306] value changed: 0xfffffffffc000000 -> 0xfffffffc00000000 [ 74.940722][ T3306] [ 74.943031][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 74.949172][ T3306] CPU: 1 UID: 0 PID: 3306 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 74.960181][ T3306] Tainted: [W]=WARN [ 74.963971][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 74.974009][ T3306] ================================================================== [ 75.007224][ T6041] rdma_op ffff88811baeb580 conn xmit_rdma 0000000000000000 [ 75.132118][ T6010] : left allmulticast mode [ 75.136803][ T6010] dummy0: left allmulticast mode [ 75.254234][ T3413] net_ratelimit: 6 callbacks suppressed [ 75.254247][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.302876][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.772932][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.092862][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.332788][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.373435][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.412828][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.815099][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.452837][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.493147][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.533153][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.853245][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.572779][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.622856][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog