last executing test programs: 18.831229911s ago: executing program 2 (id=665): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000077"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 18.583831965s ago: executing program 2 (id=667): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x8000) 18.118609249s ago: executing program 2 (id=676): socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 18.042678113s ago: executing program 2 (id=678): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x909046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88a0a0, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 17.956172858s ago: executing program 2 (id=681): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805) r0 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17.690941622s ago: executing program 2 (id=682): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be", 0x1}], 0x1}}], 0x1, 0x40) 17.673236893s ago: executing program 32 (id=682): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be", 0x1}], 0x1}}], 0x1, 0x40) 15.397293773s ago: executing program 3 (id=718): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000120001bd00000000000000000a0300004e234e2200000100ffff00"/56, @ANYRES32=0x0, @ANYBLOB="050000000300000008000000000000000800030011"], 0x54}}, 0x20004010) 15.294543649s ago: executing program 3 (id=720): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x40000000, 0x0) setuid(0xee01) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 15.036314823s ago: executing program 3 (id=726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010007c0000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 14.965696987s ago: executing program 3 (id=727): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) 14.90329129s ago: executing program 3 (id=728): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) unshare(0x28000600) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 14.376869908s ago: executing program 3 (id=741): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) bpf$ENABLE_STATS(0x20, &(0x7f0000000840)={0x2}, 0x4) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) syz_clone(0xc8085100, 0x0, 0x0, 0x0, 0x0, 0x0) 14.287948433s ago: executing program 33 (id=741): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) bpf$ENABLE_STATS(0x20, &(0x7f0000000840)={0x2}, 0x4) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) syz_clone(0xc8085100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.152276187s ago: executing program 1 (id=869): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) sendfile(r2, r2, 0x0, 0x6fecb1) 4.711337351s ago: executing program 1 (id=875): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 3.77838668s ago: executing program 1 (id=892): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x20000) readv(r0, 0x0, 0x0) pipe(0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x1881) fsetxattr$security_selinux(r0, &(0x7f0000002280), &(0x7f00000022c0)='system_u:object_r:hostname_exec_t:s0\x00', 0x25, 0x2) 3.707682434s ago: executing program 1 (id=895): unshare(0x28040680) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.566868541s ago: executing program 6 (id=896): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 3.498148955s ago: executing program 6 (id=898): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000007140100", @ANYRES32=r1], 0x30}}, 0x40814) 3.357333012s ago: executing program 6 (id=902): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 3.319509625s ago: executing program 6 (id=903): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 3.197731661s ago: executing program 1 (id=904): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x2000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 2.205695034s ago: executing program 1 (id=914): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x8, @v={0x3, 0x5, 0x6, 0xd3, {0x50, 0x4, "8e1c9b236461b247"}, 0x2}}, 0x12) 1.949411287s ago: executing program 0 (id=919): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.688001381s ago: executing program 5 (id=921): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.687419031s ago: executing program 0 (id=931): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x0) getdents64(r2, 0x0, 0x0) 1.621496275s ago: executing program 0 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000005000000000001000900000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x91, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000000, 0x3}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1.528064819s ago: executing program 0 (id=924): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.478122642s ago: executing program 5 (id=925): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@abort}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffbfffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffc, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x278, 0x148, 0x278, 0xb0, 0xb0, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x32}, 0xff, 0xffffff00, 'bond0\x00', 'macsec0\x00', {}, {0xff}, 0x3f, 0x0, 0x60}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'sit0\x00', 'wg2\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x7}}, @common=@socket0={{0x20}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x475) 1.472679813s ago: executing program 0 (id=927): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 1.287555822s ago: executing program 5 (id=929): socket$isdn(0x22, 0x2, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x26, 0x0, 0x0, 0x1f00, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.191876027s ago: executing program 4 (id=930): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x70271, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 1.104292622s ago: executing program 5 (id=932): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 991.843658ms ago: executing program 5 (id=933): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 957.57409ms ago: executing program 5 (id=934): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0xfffffffffffffd87, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r0) 794.947028ms ago: executing program 4 (id=935): r0 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\n', 0x1}], 0x1}, 0x5744935563dc1402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44080) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) 792.178408ms ago: executing program 4 (id=936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, r3, 0x25, 0x0, @val=@tracing={0x0, 0x5a7}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x6b, 0x0, 0x6e, 0x6, 0x0, @private=0xa010100, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x3, 0x2, 0x80, 0x0, 0x1, 0x6, 0x0, 0x2, 0xb, 0x5, 0x0, 0x4e23, 0x4e24}, 0x1, 0x3}, 0x1, 0x3}}}}}}}, 0x0) 759.741561ms ago: executing program 4 (id=937): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x328, 0x5, 0x2, 0x6, r2}, &(0x7f00000001c0)=0x10) 539.386912ms ago: executing program 0 (id=938): ioperm(0x0, 0x7, 0x80006) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 446.175337ms ago: executing program 4 (id=939): ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000840)={0x908, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000340)='/sys/power/reserved_size', 0x40042, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\v\x00\x00'], 0x1eb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 334.307563ms ago: executing program 6 (id=940): unshare(0x22020400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x20000) close(r0) 215.752729ms ago: executing program 6 (id=941): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r2, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) 0s ago: executing program 4 (id=942): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0xe4ff, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x2}}, 0x26) kernel console output (not intermixed with test programs): T28] audit: type=1400 audit(1776487859.469:74): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.441369][ T28] audit: type=1400 audit(1776487859.469:75): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.461838][ T28] audit: type=1400 audit(1776487859.469:76): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.461977][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.482148][ T28] audit: type=1400 audit(1776487859.479:77): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.515725][ T28] audit: type=1400 audit(1776487859.479:78): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.539186][ T28] audit: type=1400 audit(1776487859.489:79): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.568098][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.802280][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 31.829637][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 31.869899][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 31.906535][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 31.915605][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 31.959815][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.967043][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.974309][ T3318] bridge_slave_0: entered allmulticast mode [ 31.980785][ T3318] bridge_slave_0: entered promiscuous mode [ 32.006130][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.013460][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.020549][ T3318] bridge_slave_1: entered allmulticast mode [ 32.027121][ T3318] bridge_slave_1: entered promiscuous mode [ 32.045640][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.052808][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.060002][ T3317] bridge_slave_0: entered allmulticast mode [ 32.066514][ T3317] bridge_slave_0: entered promiscuous mode [ 32.087268][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.094675][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.101759][ T3317] bridge_slave_1: entered allmulticast mode [ 32.108263][ T3317] bridge_slave_1: entered promiscuous mode [ 32.118572][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.144635][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.162092][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.169281][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.176505][ T3320] bridge_slave_0: entered allmulticast mode [ 32.183104][ T3320] bridge_slave_0: entered promiscuous mode [ 32.213055][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.220238][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.227422][ T3320] bridge_slave_1: entered allmulticast mode [ 32.234022][ T3320] bridge_slave_1: entered promiscuous mode [ 32.241630][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.250847][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.258024][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.265346][ T3314] bridge_slave_0: entered allmulticast mode [ 32.271749][ T3314] bridge_slave_0: entered promiscuous mode [ 32.279283][ T3318] team0: Port device team_slave_0 added [ 32.285112][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.292191][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.299419][ T3313] bridge_slave_0: entered allmulticast mode [ 32.305833][ T3313] bridge_slave_0: entered promiscuous mode [ 32.317942][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.327397][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.334502][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.341638][ T3314] bridge_slave_1: entered allmulticast mode [ 32.348034][ T3314] bridge_slave_1: entered promiscuous mode [ 32.355321][ T3318] team0: Port device team_slave_1 added [ 32.361193][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.368431][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.375662][ T3313] bridge_slave_1: entered allmulticast mode [ 32.382187][ T3313] bridge_slave_1: entered promiscuous mode [ 32.422710][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.436868][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.444085][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.470144][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.486461][ T3317] team0: Port device team_slave_0 added [ 32.493155][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.508435][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.517916][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.525019][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.551106][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.563330][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.573744][ T3317] team0: Port device team_slave_1 added [ 32.585041][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.599021][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.618673][ T3320] team0: Port device team_slave_0 added [ 32.645089][ T3320] team0: Port device team_slave_1 added [ 32.656375][ T3314] team0: Port device team_slave_0 added [ 32.662845][ T3313] team0: Port device team_slave_0 added [ 32.668920][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.676172][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.702139][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.723508][ T3314] team0: Port device team_slave_1 added [ 32.729928][ T3313] team0: Port device team_slave_1 added [ 32.740511][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.747554][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.773578][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.791400][ T3318] hsr_slave_0: entered promiscuous mode [ 32.797434][ T3318] hsr_slave_1: entered promiscuous mode [ 32.815846][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.822843][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.848850][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.872105][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.879211][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.905572][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.917395][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.924477][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.950466][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.964662][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.971672][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.997687][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.008816][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.015859][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.042327][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.061116][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.068305][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.094471][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.128400][ T3320] hsr_slave_0: entered promiscuous mode [ 33.134539][ T3320] hsr_slave_1: entered promiscuous mode [ 33.140616][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 33.146410][ T3320] Cannot create hsr debugfs directory [ 33.166868][ T3317] hsr_slave_0: entered promiscuous mode [ 33.172948][ T3317] hsr_slave_1: entered promiscuous mode [ 33.178956][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 33.184927][ T3317] Cannot create hsr debugfs directory [ 33.223649][ T3314] hsr_slave_0: entered promiscuous mode [ 33.230008][ T3314] hsr_slave_1: entered promiscuous mode [ 33.236154][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 33.241966][ T3314] Cannot create hsr debugfs directory [ 33.258726][ T3313] hsr_slave_0: entered promiscuous mode [ 33.265038][ T3313] hsr_slave_1: entered promiscuous mode [ 33.271047][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 33.277301][ T3313] Cannot create hsr debugfs directory [ 33.479030][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.487879][ T3318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.495753][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.504575][ T3318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.512425][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.521244][ T3318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.531183][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.540277][ T3318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.559337][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.568804][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.577489][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.586220][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.594040][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.602854][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.610647][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.619686][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.654949][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.663853][ T3317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.671751][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.680956][ T3317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.688834][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.697607][ T3317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.710038][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.719206][ T3317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.777263][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.786966][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.795664][ T3314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.803649][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.812406][ T3314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.821966][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.831008][ T3314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.838767][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.848056][ T3314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.873734][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.886180][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.898233][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.905336][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.920339][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.929132][ T3313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.937329][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.945936][ T3313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.955310][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.962462][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.975061][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.983856][ T3313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.991532][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.000438][ T3313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.016572][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.030755][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.037869][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.059718][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.066904][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.085843][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.104275][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.114048][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.121160][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.141341][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.148474][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.203469][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.229012][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.241424][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.253102][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.262447][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.280535][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.287706][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.302601][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.309795][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.358313][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.368465][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.381776][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.388929][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.402429][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.409585][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.440668][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.523546][ T3320] veth0_vlan: entered promiscuous mode [ 34.548770][ T3320] veth1_vlan: entered promiscuous mode [ 34.568030][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.611525][ T3318] veth0_vlan: entered promiscuous mode [ 34.618348][ T3320] veth0_macvtap: entered promiscuous mode [ 34.636216][ T3318] veth1_vlan: entered promiscuous mode [ 34.643149][ T3320] veth1_macvtap: entered promiscuous mode [ 34.658708][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.679666][ T3317] veth0_vlan: entered promiscuous mode [ 34.690617][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.707910][ T3317] veth1_vlan: entered promiscuous mode [ 34.716395][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.724849][ T3318] veth0_macvtap: entered promiscuous mode [ 34.732359][ T3318] veth1_macvtap: entered promiscuous mode [ 34.750630][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.766840][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.776232][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.790009][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.807999][ T3317] veth0_macvtap: entered promiscuous mode [ 34.815564][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.828086][ T3317] veth1_macvtap: entered promiscuous mode [ 34.841889][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.865233][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.874187][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.893169][ T3314] veth0_vlan: entered promiscuous mode [ 34.894695][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.907780][ T3314] veth1_vlan: entered promiscuous mode [ 34.927169][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.936152][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.949753][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.969299][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.000415][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.009416][ T1586] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.027717][ T1586] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.037325][ T1586] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.071564][ T3314] veth0_macvtap: entered promiscuous mode [ 35.089744][ T3409] IPVS: starting estimator thread 0... [ 35.109823][ T3314] veth1_macvtap: entered promiscuous mode [ 35.123189][ T3313] veth0_vlan: entered promiscuous mode [ 35.137284][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.153175][ T3313] veth1_vlan: entered promiscuous mode [ 35.161918][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.175044][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 35.175075][ T28] audit: type=1400 audit(1776487864.259:106): avc: denied { prog_load } for pid=3489 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.186817][ T3492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'. [ 35.203554][ T3487] IPVS: using max 2208 ests per chain, 110400 per kthread [ 35.218147][ T28] audit: type=1400 audit(1776487864.259:107): avc: denied { bpf } for pid=3489 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.243894][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.252898][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.266734][ T28] audit: type=1400 audit(1776487864.259:108): avc: denied { create } for pid=3490 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.289751][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.299106][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.309329][ T28] audit: type=1400 audit(1776487864.259:109): avc: denied { write } for pid=3490 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.334692][ T3494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3494 comm=syz.3.4 [ 35.350230][ T28] audit: type=1400 audit(1776487864.299:110): avc: denied { open } for pid=3489 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.369947][ T28] audit: type=1400 audit(1776487864.299:111): avc: denied { perfmon } for pid=3489 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.391355][ T28] audit: type=1400 audit(1776487864.299:112): avc: denied { kernel } for pid=3489 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.416760][ T3313] veth0_macvtap: entered promiscuous mode [ 35.435400][ T3313] veth1_macvtap: entered promiscuous mode [ 35.438625][ T28] audit: type=1400 audit(1776487864.349:113): avc: denied { write } for pid=3489 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.466934][ T3496] serio: Serial port ttyS3 [ 35.471831][ T28] audit: type=1400 audit(1776487864.499:114): avc: denied { tracepoint } for pid=3495 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.498215][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.521740][ T28] audit: type=1400 audit(1776487864.599:115): avc: denied { allowed } for pid=3498 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.542414][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.559659][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.574319][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.590479][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.608710][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.729390][ T3510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 35.760615][ T3512] dvmrp0: entered allmulticast mode [ 35.849311][ T3409] IPVS: starting estimator thread 0... [ 35.857067][ T3518] IPVS: sed: FWM 3 0x00000003 - no destination available [ 35.953900][ T3519] IPVS: using max 2208 ests per chain, 110400 per kthread [ 35.965739][ T3523] loop4: detected capacity change from 0 to 8192 [ 35.977591][ T3523] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.604067][ T3532] netlink: 'syz.2.21': attribute type 4 has an invalid length. [ 36.814770][ T3556] loop4: detected capacity change from 0 to 32768 [ 36.865792][ T3556] loop4: p1 p3 < > [ 37.042210][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 37.054703][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 37.204122][ T3606] loop0: detected capacity change from 0 to 512 [ 37.221964][ T3606] EXT4-fs: Ignoring removed nobh option [ 37.242153][ T3606] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.256057][ T3606] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.284513][ T3606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c028, mo2=0002] [ 37.293809][ T3606] System zones: 1-12 [ 37.314012][ T3606] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.366312][ T3606] EXT4-fs (loop0): 1 truncate cleaned up [ 37.388177][ T3606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.431104][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.528579][ T3604] loop2: detected capacity change from 0 to 32768 [ 38.156658][ T3655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 39.227410][ T3704] netlink: 'syz.0.89': attribute type 3 has an invalid length. [ 39.270178][ T3704] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 39.302461][ T3704] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.89'. [ 39.398887][ T3713] syz.0.93 uses obsolete (PF_INET,SOCK_PACKET) [ 39.635824][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 39.748078][ T3735] team1: entered promiscuous mode [ 39.768025][ T3735] team1: entered allmulticast mode [ 39.773909][ T3735] 8021q: adding VLAN 0 to HW filter on device team1 [ 40.075719][ T3769] loop4: detected capacity change from 0 to 1024 [ 40.088468][ T3769] ======================================================= [ 40.088468][ T3769] WARNING: The mand mount option has been deprecated and [ 40.088468][ T3769] and is ignored by this kernel. Remove the mand [ 40.088468][ T3769] option from the mount to silence this warning. [ 40.088468][ T3769] ======================================================= [ 40.135883][ T3753] syz.3.108 (3753) used greatest stack depth: 10864 bytes left [ 40.148133][ T3769] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.173967][ T3769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.186180][ T3769] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.211959][ T3769] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.115: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 40.231444][ T3769] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.231773][ T3769] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.115: couldn't read orphan inode 11 (err -117) [ 40.241010][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 40.241030][ C0] EXT4-fs (loop4): initial error at time 1776487869: ext4_ext_check_inode:521: inode 11 [ 40.241077][ C0] EXT4-fs (loop4): last error at time 1776487869: ext4_ext_check_inode:521: inode 11 [ 40.278869][ T3769] loop4: lost filesystem error report for type 5 error -117 [ 40.279981][ T3780] syzkaller1: entered promiscuous mode [ 40.294985][ T3769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.308805][ T3780] syzkaller1: entered allmulticast mode [ 40.334964][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.437355][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 40.437375][ T28] audit: type=1400 audit(1776487869.519:216): avc: denied { cpu } for pid=3784 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.475934][ T3787] netlink: 'syz.3.121': attribute type 13 has an invalid length. [ 40.485152][ T28] audit: type=1400 audit(1776487869.529:217): avc: denied { create } for pid=3784 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.489644][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 40.518887][ T28] audit: type=1400 audit(1776487869.529:218): avc: denied { bind } for pid=3784 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.548965][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.558007][ T3787] netlink: 'syz.3.121': attribute type 13 has an invalid length. [ 40.567385][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.585047][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 40.596616][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.615575][ T3787] Zero length message leads to an empty skb [ 40.622293][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.651276][ T28] audit: type=1400 audit(1776487869.549:219): avc: denied { listen } for pid=3784 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.703979][ T28] audit: type=1400 audit(1776487869.549:220): avc: denied { accept } for pid=3784 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.731807][ T28] audit: type=1400 audit(1776487869.629:221): avc: denied { setopt } for pid=3784 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.799383][ T3794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'. [ 40.817170][ T3794] ipvlan2: entered promiscuous mode [ 40.947763][ T28] audit: type=1400 audit(1776487870.029:222): avc: denied { mount } for pid=3801 comm="syz.2.127" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 40.978479][ T28] audit: type=1400 audit(1776487870.059:223): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 41.347642][ T28] audit: type=1400 audit(1776487870.429:224): avc: denied { setopt } for pid=3817 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 41.380911][ T28] audit: type=1400 audit(1776487870.449:225): avc: denied { connect } for pid=3817 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 41.444955][ T3825] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 41.460403][ T3825] bond1 (unregistering): Released all slaves [ 41.564538][ T3831] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 41.570585][ T3831] syzkaller1: Linktype set failed because interface is up [ 41.641716][ T3843] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.649086][ T3843] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.766609][ T3836] ------------[ cut here ]------------ [ 41.772218][ T3836] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.2.139/3836 [ 41.781927][ T3836] Modules linked in: [ 41.785863][ T3836] CPU: 1 UID: 0 PID: 3836 Comm: syz.2.139 Not tainted syzkaller #0 PREEMPT(full) [ 41.795084][ T3836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 41.805217][ T3836] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 41.810979][ T3836] Code: 8b 05 f1 eb f8 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 94 e9 63 04 cc e8 1e 11 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 10 11 1e 00 90 0f 0b 90 e9 af fa ff ff [ 41.830681][ T3836] RSP: 0018:ffffc90000ff7dd8 EFLAGS: 00010093 [ 41.836808][ T3836] RAX: ffffffff813b3452 RBX: ffff8881050a6600 RCX: ffff8881050a6600 [ 41.844807][ T3836] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 41.852851][ T3836] RBP: 0000000000000080 R08: ffff8881050a70f8 R09: 0000000000000000 [ 41.860850][ T3836] R10: ffffc90000ff7df0 R11: 0001c90000ff7df0 R12: ffff8881050a6600 [ 41.868845][ T3836] R13: ffff8881050a6e28 R14: ffff888104fd7190 R15: 0000000000000080 [ 41.876854][ T3836] FS: 0000000000000000(0000) GS:ffff8882ae9d2000(0000) knlGS:0000000000000000 [ 41.885810][ T3836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.892484][ T3836] CR2: 00007f349b3b5ff8 CR3: 0000000105110000 CR4: 00000000003506f0 [ 41.900562][ T3836] Call Trace: [ 41.903919][ T3836] [ 41.906868][ T3836] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 41.912384][ T3836] ? __list_add_valid_or_report+0x38/0xe0 [ 41.918144][ T3836] do_exit+0xc13/0x1530 [ 41.922359][ T3836] ? switch_fpu_return+0xe7/0x1b0 [ 41.927419][ T3836] __x64_sys_exit+0x1f/0x20 [ 41.932010][ T3836] x64_sys_call+0x301d/0x3020 [ 41.936719][ T3836] do_syscall_64+0x12c/0x3b0 [ 41.941424][ T3836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.947606][ T3836] RIP: 0033:0x7f5df926c819 [ 41.952094][ T3836] Code: Unable to access opcode bytes at 0x7f5df926c7ef. [ 41.959188][ T3836] RSP: 002b:00007f5df7cc6fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 41.967627][ T3836] RAX: ffffffffffffffda RBX: 00007f5df94e5fa0 RCX: 00007f5df926c819 [ 41.975624][ T3836] RDX: 00007f5df7cc79c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.983810][ T3836] RBP: 00007f5df9302c91 R08: 0000000000000000 R09: 0000000000000000 [ 41.991814][ T3836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.999819][ T3836] R13: 00007f5df94e6038 R14: 00007f5df94e5fa0 R15: 00007ffe44ee90a8 [ 42.007822][ T3836] [ 42.010859][ T3836] ---[ end trace 0000000000000000 ]--- [ 42.023800][ T3660] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.389538][ T3841] syz.3.143 (3841) used greatest stack depth: 10768 bytes left [ 42.712650][ T3876] netlink: 168 bytes leftover after parsing attributes in process `syz.1.158'. [ 42.830231][ T3885] netlink: 'syz.0.162': attribute type 1 has an invalid length. [ 42.881558][ T3885] bond1 (unregistering): Released all slaves [ 44.218701][ T3965] loop4: detected capacity change from 0 to 512 [ 44.239540][ T3965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.273493][ T3965] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.299303][ T3965] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 44.317544][ T3965] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.187: Allocating blocks 41-42 which overlap fs metadata [ 44.336529][ T3965] loop4: lost filesystem error report for type 5 error -117 [ 44.337182][ T3965] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.187: Failed to acquire dquot type 1 [ 44.344581][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 44.344606][ C1] EXT4-fs (loop4): initial error at time 1776487873: ext4_mb_mark_diskspace_used:4222 [ 44.344637][ C1] EXT4-fs (loop4): last error at time 1776487873: ext4_mb_mark_diskspace_used:4222 [ 44.387298][ T3965] loop4: lost filesystem error report for type 5 error -117 [ 44.397543][ T3965] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 44.412632][ T3965] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.187: corrupted inode contents [ 44.426781][ T3965] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 44.427863][ T3965] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.187: mark_inode_dirty error [ 44.452864][ T3965] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 44.453212][ T3965] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.187: corrupted inode contents [ 44.474500][ T3965] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 44.474910][ T3965] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.187: mark_inode_dirty error [ 44.496613][ T3965] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 44.496836][ T3965] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.187: corrupted inode contents [ 44.518227][ T3965] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 44.519083][ T3965] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 44.537503][ T3965] loop4: lost filesystem error report for type 5 error -117 [ 44.538579][ T3965] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.187: corrupted inode contents [ 44.558026][ T3965] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 44.558629][ T3965] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.187: mark_inode_dirty error [ 44.579143][ T3965] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 44.579465][ T3965] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 44.597673][ T3978] tls_set_device_offload: netdev not found [ 44.606033][ T3965] loop4: lost filesystem error report for type 5 error -117 [ 44.606391][ T3965] EXT4-fs (loop4): 1 truncate cleaned up [ 44.648034][ T3965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.697282][ T3983] netlink: 'syz.1.192': attribute type 298 has an invalid length. [ 44.701864][ T3984] gretap1: entered promiscuous mode [ 44.715230][ T3965] syz.4.187 (3965) used greatest stack depth: 10016 bytes left [ 44.751620][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.763658][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 44.795233][ T30] loop4: lost filesystem error report for type 5 error -5 [ 44.871839][ T3994] syzkaller0: entered allmulticast mode [ 45.080522][ T4001] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 45.105464][ T4001] bond1: (slave geneve2): making interface the new active one [ 45.113942][ T4001] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 45.122712][ T1586] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 45.136691][ T1586] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 45.158983][ T1586] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 45.169289][ T1586] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 45.208765][ T3993] syzkaller0: left allmulticast mode [ 45.247630][ T4006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.204'. [ 45.269240][ T4006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.204'. [ 45.316657][ T4011] geneve2: entered promiscuous mode [ 45.402843][ T4018] syzkaller1: entered promiscuous mode [ 45.410429][ T4018] syzkaller1: entered allmulticast mode [ 45.443833][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 45.443850][ T28] audit: type=1400 audit(1776487874.529:253): avc: denied { write } for pid=4022 comm="syz.3.212" path="socket:[6632]" dev="sockfs" ino=6632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 45.518401][ T28] audit: type=1400 audit(1776487874.599:254): avc: denied { read write } for pid=4028 comm="syz.1.214" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.577086][ T4033] loop3: detected capacity change from 0 to 512 [ 45.590344][ T28] audit: type=1400 audit(1776487874.599:255): avc: denied { open } for pid=4028 comm="syz.1.214" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.630788][ T4033] EXT4-fs (loop3): 1 truncate cleaned up [ 45.644481][ T4033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.675088][ T28] audit: type=1400 audit(1776487874.759:256): avc: denied { remove_name } for pid=4032 comm="syz.3.217" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.700589][ T28] audit: type=1400 audit(1776487874.759:257): avc: denied { rename } for pid=4032 comm="syz.3.217" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.722945][ T28] audit: type=1400 audit(1776487874.759:258): avc: denied { unlink } for pid=4032 comm="syz.3.217" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.746057][ T28] audit: type=1400 audit(1776487874.769:259): avc: denied { read write } for pid=4032 comm="syz.3.217" name="file1" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.768686][ T28] audit: type=1400 audit(1776487874.769:260): avc: denied { open } for pid=4032 comm="syz.3.217" path="/38/file1/file1" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.800331][ T4038] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.217: invalid indirect mapped block 4294967295 (level 1) [ 45.814577][ T4038] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.217: invalid indirect mapped block 65535 (level 2) [ 45.881474][ T28] audit: type=1400 audit(1776487874.959:261): avc: denied { listen } for pid=4043 comm="syz.2.218" laddr=172.20.20.38 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.946551][ T28] audit: type=1400 audit(1776487875.029:262): avc: denied { shutdown } for pid=4050 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.139191][ T4062] xt_hashlimit: size too large, truncated to 1048576 [ 46.188171][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.545517][ T4074] process 'syz.1.230' launched './file1' with NULL argv: empty string added [ 47.753072][ T4127] loop0: detected capacity change from 0 to 2048 [ 47.788205][ T4127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.808430][ T4127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.952086][ T4135] netlink: 76 bytes leftover after parsing attributes in process `syz.4.255'. [ 48.142366][ T4150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.262'. [ 48.240002][ T4154] loop4: detected capacity change from 0 to 164 [ 48.282351][ T4154] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 48.706131][ T4174] loop1: detected capacity change from 0 to 512 [ 48.736510][ T4174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 48.754351][ T4174] ext4 filesystem being mounted at /61/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.776465][ T4174] capability: warning: `syz.1.272' uses 32-bit capabilities (legacy support in use) [ 48.799200][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 48.879255][ T4183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.896397][ T4183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.904623][ T4185] loop1: detected capacity change from 0 to 512 [ 48.922141][ T4185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.076524][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.246309][ T4193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 49.264999][ T4193] bridge_slave_0 (unregistering): left allmulticast mode [ 49.283485][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.390266][ T4197] team0: No ports can be present during mode change [ 49.544072][ T4205] syzkaller0: entered allmulticast mode [ 49.566762][ T4204] syzkaller0: left allmulticast mode [ 49.650739][ T4213] loop3: detected capacity change from 0 to 256 [ 49.682690][ T4213] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.762922][ T4224] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 49.771820][ T4224] FAT-fs (loop3): Filesystem has been set read-only [ 49.786014][ T4224] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 49.794505][ T4224] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 49.826171][ T4228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.293'. [ 49.843451][ T4224] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 49.879509][ T4224] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 49.909253][ T4224] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 49.917687][ T4224] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 49.979271][ T4236] loop1: detected capacity change from 0 to 1024 [ 50.017303][ T4236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.036793][ T4236] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.052831][ T4236] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.297: lblock 3 mapped to illegal pblock 3 (length 3) [ 50.067351][ T4236] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 50.080348][ T4236] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.080348][ T4236] [ 50.100733][ T4242] loop4: detected capacity change from 0 to 512 [ 50.108197][ T30] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 3) [ 50.120225][ T4242] EXT4-fs (loop4): 1 truncate cleaned up [ 50.127894][ T4242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.178344][ T30] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 50.213474][ T30] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.213474][ T30] [ 50.216361][ T4246] syz.4.300 (4246) used greatest stack depth: 9976 bytes left [ 50.234362][ T30] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:1: lblock 4 mapped to illegal pblock 4 (length 2) [ 50.251909][ T4249] syzkaller0: entered allmulticast mode [ 50.269028][ T30] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 50.284326][ T4247] syzkaller0: left allmulticast mode [ 50.289839][ T30] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.289839][ T30] [ 50.293960][ T4248] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.300: invalid indirect mapped block 4294967295 (level 1) [ 50.318157][ T3320] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 50.334541][ T4248] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.300: invalid indirect mapped block 65535 (level 2) [ 50.342939][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.420224][ T4256] loop1: detected capacity change from 0 to 512 [ 50.433694][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.458465][ T4256] EXT4-fs: Ignoring removed bh option [ 50.469260][ T4256] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 50.495649][ T4256] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.302: corrupted in-inode xattr: e_value size too large [ 50.523668][ T4256] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.523919][ T4256] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.302: couldn't read orphan inode 15 (err -117) [ 50.544929][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 50.544954][ C1] EXT4-fs (loop1): initial error at time 1776487879: ext4_iget_extra_inode:5128: inode 15 [ 50.544982][ C1] EXT4-fs (loop1): last error at time 1776487879: ext4_iget_extra_inode:5128: inode 15 [ 50.575856][ T4256] loop1: lost filesystem error report for type 5 error -117 [ 50.579597][ T4256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.608158][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 50.608175][ T28] audit: type=1400 audit(1776487879.689:301): avc: denied { create } for pid=4255 comm="syz.1.302" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.630231][ T4256] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.302: Unrecognised inode hash code 4 [ 50.678344][ T4256] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.302: Corrupt directory, running e2fsck is recommended [ 50.740055][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.872370][ T28] audit: type=1400 audit(1776487879.949:302): avc: denied { create } for pid=4272 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.897945][ T28] audit: type=1400 audit(1776487879.949:303): avc: denied { bind } for pid=4272 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.927841][ T28] audit: type=1400 audit(1776487879.969:304): avc: denied { setopt } for pid=4272 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.001227][ T28] audit: type=1400 audit(1776487879.979:305): avc: denied { write } for pid=4272 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.039653][ T4283] loop1: detected capacity change from 0 to 4096 [ 51.059213][ T4288] program syz.4.316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.070539][ T28] audit: type=1400 audit(1776487880.129:306): avc: denied { append } for pid=4287 comm="syz.4.316" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.119320][ T4283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.133090][ T4290] program syz.4.316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.172374][ T28] audit: type=1400 audit(1776487880.129:307): avc: denied { open } for pid=4287 comm="syz.4.316" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.215327][ T28] audit: type=1400 audit(1776487880.209:308): avc: denied { read } for pid=4287 comm="syz.4.316" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.220987][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.239710][ T28] audit: type=1400 audit(1776487880.249:309): avc: denied { append } for pid=4282 comm="syz.1.314" path="/77/file0/io.stat" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.274278][ T28] audit: type=1400 audit(1776487880.249:310): avc: denied { setattr } for pid=4282 comm="syz.1.314" name="file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.337083][ T4300] tipc: Started in network mode [ 51.342223][ T4300] tipc: Node identity fff, cluster identity 4711 [ 51.348766][ T4300] tipc: Node number set to 4095 [ 51.418572][ T4308] loop4: detected capacity change from 0 to 512 [ 51.496222][ T4308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.526449][ T4308] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.792853][ T4308] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 51.827518][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.509803][ T4350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 52.693289][ T4354] loop3: detected capacity change from 0 to 164 [ 52.816463][ T4376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 52.835250][ T4354] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 53.019316][ T4386] loop0: detected capacity change from 0 to 512 [ 53.056789][ T4384] syzkaller0: entered allmulticast mode [ 53.069087][ T4386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.087757][ T4381] syzkaller0: left allmulticast mode [ 53.095991][ T4386] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.223281][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.294954][ T4405] loop2: detected capacity change from 0 to 164 [ 53.377575][ T4405] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82 [ 53.677782][ T4426] loop1: detected capacity change from 0 to 4096 [ 53.701677][ T4426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.941592][ T4430] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 53.958444][ T4430] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 53.978917][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.996581][ T4430] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 54.265995][ T4442] geneve2: entered promiscuous mode [ 54.281492][ T4442] geneve2: entered allmulticast mode [ 54.302823][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.334954][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.364969][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.389059][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.398009][ T4446] program syz.4.387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.671048][ T4463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.769571][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.087776][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 55.217014][ T4448] syz.3.389 (4448) used greatest stack depth: 9728 bytes left [ 55.401418][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.409143][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.458616][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.469335][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.524444][ T60] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.544943][ T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.563410][ T60] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 55.582689][ T60] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.596118][ T60] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.622436][ T60] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 55.645976][ T60] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.663565][ T60] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.688578][ T60] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 55.704348][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 55.704439][ T28] audit: type=1400 audit(1776487885.790:334): avc: denied { name_bind } for pid=4516 comm="syz.1.427" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 55.741448][ T60] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.766046][ T60] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.788923][ T60] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 55.822241][ T4527] set_capacity_and_notify: 1 callbacks suppressed [ 55.822262][ T4527] loop1: detected capacity change from 0 to 256 [ 55.848049][ T28] audit: type=1400 audit(1776487885.930:335): avc: denied { ioctl } for pid=4528 comm="syz.0.421" path="socket:[9180]" dev="sockfs" ino=9180 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.914048][ T28] audit: type=1400 audit(1776487886.000:336): avc: denied { ioctl } for pid=4530 comm="syz.0.422" path="socket:[9402]" dev="sockfs" ino=9402 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.963206][ T28] audit: type=1400 audit(1776487886.040:337): avc: denied { getopt } for pid=4530 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.035082][ T4533] xt_hashlimit: size too large, truncated to 1048576 [ 56.070668][ T4536] loop0: detected capacity change from 0 to 512 [ 56.099122][ T4536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.147932][ T28] audit: type=1400 audit(1776487886.230:338): avc: denied { add_name } for pid=4534 comm="syz.0.424" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.273303][ T28] audit: type=1400 audit(1776487886.350:339): avc: denied { connect } for pid=4543 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.439978][ T4551] syzkaller1: entered promiscuous mode [ 56.470150][ T4551] syzkaller1: entered allmulticast mode [ 56.610495][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.769544][ T4567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.437'. [ 56.783889][ T4567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.437'. [ 56.801587][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 56.826296][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 56.950785][ T28] audit: type=1400 audit(1776487887.030:340): avc: denied { override_creds } for pid=4572 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.211559][ T4581] netlink: 96 bytes leftover after parsing attributes in process `syz.3.443'. [ 57.444751][ T4595] ref_ctr_offset mismatch. inode: 0x239 offset: 0x0 ref_ctr_offset(old): 0x14 ref_ctr_offset(new): 0x0 [ 57.492700][ T4603] loop2: detected capacity change from 0 to 2048 [ 57.530454][ T4603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.620485][ T28] audit: type=1400 audit(1776487888.698:341): avc: denied { map } for pid=4602 comm="syz.2.452" path="/84/file0/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.626758][ T4603] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.452: bg 0: block 234: padding at end of block bitmap is not set [ 57.673959][ T4603] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1304 with error 28 [ 57.713415][ T4603] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.713415][ T4603] [ 57.743415][ T4603] EXT4-fs (loop2): Total free blocks count 0 [ 57.759607][ T4603] EXT4-fs (loop2): Free/Dirty block details [ 57.787049][ T4603] EXT4-fs (loop2): free_blocks=0 [ 57.804879][ T4603] EXT4-fs (loop2): dirty_blocks=1312 [ 57.821801][ T4603] EXT4-fs (loop2): Block reservation details [ 57.850381][ T4603] EXT4-fs (loop2): i_reserved_data_blocks=82 [ 57.907490][ T4623] loop1: detected capacity change from 0 to 4096 [ 57.948290][ T4623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.105968][ T3318] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 58.139572][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.281370][ T4642] loop2: detected capacity change from 0 to 1024 [ 58.293593][ T4633] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 58.318014][ T4633] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 58.335040][ T4642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.391975][ T4633] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 58.423976][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.491310][ T4623] syz.1.462 (4623) used greatest stack depth: 9280 bytes left [ 58.560766][ T4650] loop2: detected capacity change from 0 to 1024 [ 58.577627][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.630959][ T4650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.732443][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.751457][ T28] audit: type=1400 audit(1776487890.817:342): avc: denied { write } for pid=4657 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.187574][ T4684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 59.410420][ T4693] loop1: detected capacity change from 0 to 512 [ 59.468533][ T4693] ------------[ cut here ]------------ [ 59.474103][ T4693] EA inode 11 i_nlink=2 [ 59.474128][ T4693] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.489/4693 [ 59.489048][ T4693] Modules linked in: [ 59.493008][ T4693] CPU: 1 UID: 0 PID: 4693 Comm: syz.1.489 Tainted: G W syzkaller #0 PREEMPT(full) [ 59.504080][ T4693] Tainted: [W]=WARN [ 59.508006][ T4693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 59.518136][ T4693] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 59.524911][ T4693] Code: b4 ab 98 ff 4c 8d 2d 3d e3 5c 05 49 8d 7e 40 e8 e4 69 b6 ff 49 8b 6e 40 4c 89 e7 e8 18 65 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 6f 2d dd 03 66 66 66 66 66 66 2e [ 59.544742][ T4693] RSP: 0018:ffffc9001087f778 EFLAGS: 00010246 [ 59.550959][ T4693] RAX: ffff888101f93df8 RBX: ffff888107e5b718 RCX: ffffffff81c099d8 [ 59.559049][ T4693] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d7d00 [ 59.567118][ T4693] RBP: 000000000000000b R08: 0001888107e5b6cb R09: 0000000000000000 [ 59.575166][ T4693] R10: ffffc9001087f6a8 R11: 0001c9001087f6a8 R12: ffff888107e5b6c8 [ 59.583186][ T4693] R13: ffffffff871d7d00 R14: ffff888107e5b680 R15: 0000000000000001 [ 59.591327][ T4693] FS: 00007f4423aae6c0(0000) GS:ffff8882ae9d2000(0000) knlGS:0000000000000000 [ 59.600334][ T4693] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.606992][ T4693] CR2: 00007f709df05000 CR3: 000000011e91a000 CR4: 00000000003506f0 [ 59.615540][ T4693] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.623657][ T4693] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 59.631771][ T4693] Call Trace: [ 59.635123][ T4693] [ 59.638087][ T4693] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 59.644071][ T4693] ? errseq_check+0x2c/0x50 [ 59.648812][ T4693] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 59.654454][ T4693] ? ext4_truncate+0x89f/0xa10 [ 59.659300][ T4693] ext4_evict_inode+0xb16/0xe30 [ 59.664394][ T4693] ? __pfx_ext4_evict_inode+0x10/0x10 [ 59.669836][ T4693] evict+0x2af/0x510 [ 59.673901][ T4693] ? __dquot_initialize+0x146/0x7c0 [ 59.679188][ T4693] iput+0x41a/0x580 [ 59.683063][ T4693] ext4_process_orphan+0x1a9/0x1c0 [ 59.688328][ T4693] ext4_orphan_cleanup+0x69c/0x9f0 [ 59.693622][ T4693] ext4_fill_super+0x3408/0x37c0 [ 59.698705][ T4693] ? set_blocksize+0x14c/0x270 [ 59.703574][ T4693] ? setup_bdev_super+0x30e/0x370 [ 59.708757][ T4693] ? __pfx_ext4_fill_super+0x10/0x10 [ 59.714217][ T4693] get_tree_bdev_flags+0x291/0x300 [ 59.719503][ T4693] ? __pfx_ext4_fill_super+0x10/0x10 [ 59.724886][ T4693] get_tree_bdev+0x1f/0x30 [ 59.729352][ T4693] ext4_get_tree+0x1c/0x30 [ 59.733995][ T4693] vfs_get_tree+0x57/0x1d0 [ 59.738461][ T4693] do_new_mount+0x288/0x8d0 [ 59.743017][ T4693] path_mount+0x4d0/0xbc0 [ 59.747472][ T4693] __se_sys_mount+0x28c/0x2e0 [ 59.752193][ T4693] __x64_sys_mount+0x67/0x80 [ 59.756897][ T4693] x64_sys_call+0x2d61/0x3020 [ 59.761667][ T4693] do_syscall_64+0x12c/0x3b0 [ 59.766359][ T4693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.772298][ T4693] RIP: 0033:0x7f442507da8a [ 59.776805][ T4693] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.796493][ T4693] RSP: 002b:00007f4423aade58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.805023][ T4693] RAX: ffffffffffffffda RBX: 00007f4423aadee0 RCX: 00007f442507da8a [ 59.813097][ T4693] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f4423aadea0 [ 59.821154][ T4693] RBP: 00002000000009c0 R08: 00007f4423aadee0 R09: 0000000000800718 [ 59.829286][ T4693] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 59.837425][ T4693] R13: 00007f4423aadea0 R14: 000000000000048d R15: 0000200000000200 [ 59.845637][ T4693] [ 59.848739][ T4693] ---[ end trace 0000000000000000 ]--- [ 59.871158][ T4693] EXT4-fs (loop1): 1 orphan inode deleted [ 59.877828][ T4693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.970844][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.994344][ T28] audit: type=1400 audit(1776487892.077:343): avc: denied { create } for pid=4702 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 60.106115][ T4708] loop1: detected capacity change from 0 to 4096 [ 60.121660][ T4708] EXT4-fs: inline encryption not supported [ 60.145350][ T4708] EXT4-fs: test_dummy_encryption option not supported [ 60.776645][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 60.776664][ T28] audit: type=1400 audit(1776487892.857:346): avc: denied { map } for pid=4717 comm="syz.3.500" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.850687][ T28] audit: type=1400 audit(1776487892.927:347): avc: denied { setopt } for pid=4727 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.906010][ T28] audit: type=1400 audit(1776487892.987:348): avc: denied { watch watch_reads } for pid=4729 comm="syz.2.503" path="/93/file0" dev="tmpfs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.996169][ T4732] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.504'. [ 61.329776][ T4748] netlink: 'syz.1.510': attribute type 10 has an invalid length. [ 61.339137][ T4748] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.510'. [ 61.779793][ T4776] loop3: detected capacity change from 0 to 512 [ 61.807113][ T28] audit: type=1400 audit(1776487893.887:349): avc: denied { create } for pid=4777 comm="syz.1.520" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 61.859216][ T4776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.183145][ T28] audit: type=1400 audit(1776487894.257:350): avc: denied { associate } for pid=4787 comm="syz.1.522" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.260708][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.302004][ T4794] loop3: detected capacity change from 0 to 512 [ 62.309092][ T4795] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 62.313114][ T4791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 62.326086][ T4794] ext4: Unknown parameter 'smackfstransmute' [ 62.409358][ T4795] gretap1: entered allmulticast mode [ 62.417625][ T4795] bond1: (slave gretap1): making interface the new active one [ 62.425881][ T4795] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 62.441155][ T4791] team1: entered promiscuous mode [ 62.460253][ T4791] team1: entered allmulticast mode [ 62.472734][ T4802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.531'. [ 62.488728][ T4791] 8021q: adding VLAN 0 to HW filter on device team1 [ 62.543054][ T4804] loop4: detected capacity change from 0 to 4096 [ 62.564747][ T4804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.587204][ T28] audit: type=1400 audit(1776487894.667:351): avc: denied { append } for pid=4811 comm="syz.3.534" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.646202][ T4817] loop2: detected capacity change from 0 to 512 [ 62.695470][ T4817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.733274][ T28] audit: type=1400 audit(1776487894.797:352): avc: denied { read } for pid=4820 comm="syz.1.538" path="socket:[9776]" dev="sockfs" ino=9776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.762906][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.914284][ T4837] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 62.928425][ T4837] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 62.945250][ T4837] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 63.015885][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.037940][ T4840] Illegal XDP return value 4294967294 on prog (id 106) dev syz_tun, expect packet loss! [ 63.175405][ T28] audit: type=1400 audit(1776487895.257:353): avc: denied { load_policy } for pid=4849 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.196635][ T4851] SELinux: failed to load policy [ 63.345472][ T4859] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 63.448240][ T28] audit: type=1400 audit(1776487895.527:354): avc: denied { read } for pid=4862 comm="syz.2.557" path="socket:[10841]" dev="sockfs" ino=10841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.736600][ T28] audit: type=1400 audit(1776487895.817:355): avc: denied { create } for pid=4872 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.797991][ T4873] loop2: detected capacity change from 0 to 4096 [ 63.842021][ T4875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.852256][ T4875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.958752][ T4873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.976191][ T4878] loop4: detected capacity change from 0 to 512 [ 64.011795][ T4878] EXT4-fs: Ignoring removed bh option [ 64.044943][ T4878] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 64.080600][ T4878] EXT4-fs (loop4): 1 truncate cleaned up [ 64.106964][ T4878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.126040][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.238833][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.253679][ T4892] loop1: detected capacity change from 0 to 2048 [ 64.260775][ T4892] EXT4-fs: Ignoring removed nobh option [ 64.268186][ T4892] EXT4-fs: Ignoring removed oldalloc option [ 64.289527][ T4892] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c028, mo2=0002] [ 64.310626][ T4892] System zones: 0-7 [ 64.315462][ T4892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.413232][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.670409][ T4915] netlink: 36 bytes leftover after parsing attributes in process `syz.1.578'. [ 64.939650][ T4925] SELinux: policydb version 1580590173 does not match my version range 15-35 [ 64.968119][ T4927] loop3: detected capacity change from 0 to 512 [ 64.976229][ T4925] SELinux: failed to load policy [ 64.990550][ T4927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.008125][ T4927] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.044875][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.378683][ T4942] loop1: detected capacity change from 0 to 512 [ 65.395962][ T4942] EXT4-fs: test_dummy_encryption option not supported [ 65.500103][ T4949] sctp: [Deprecated]: syz.3.592 (pid 4949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.500103][ T4949] Use struct sctp_sack_info instead [ 65.647875][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 65.697003][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 65.729500][ T4960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 65.778866][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 65.815724][ T4960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 65.850774][ T4974] sctp: [Deprecated]: syz.4.601 (pid 4974) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.850774][ T4974] Use struct sctp_sack_info instead [ 66.287443][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 66.287462][ T28] audit: type=1400 audit(1776487898.367:361): avc: denied { write } for pid=4993 comm="syz.0.608" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.658444][ T5001] loop2: detected capacity change from 0 to 512 [ 66.674791][ T5001] ext4: Unknown parameter 'smackfstransmute' [ 66.872471][ T5009] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 66.886485][ T5009] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 66.899825][ T5009] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 67.091418][ T5020] __nla_validate_parse: 1 callbacks suppressed [ 67.091436][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 67.109785][ T5022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.621'. [ 67.118951][ T5022] netlink: 'syz.2.621': attribute type 7 has an invalid length. [ 67.126961][ T5022] netlink: 'syz.2.621': attribute type 8 has an invalid length. [ 67.134911][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 67.327436][ T28] audit: type=1400 audit(1776487899.407:362): avc: denied { bind } for pid=5034 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.405683][ T5038] loop1: detected capacity change from 0 to 512 [ 67.440789][ T5038] ext4: Unknown parameter 'smackfstransmute' [ 67.579920][ T5047] loop4: detected capacity change from 0 to 512 [ 67.903043][ T28] audit: type=1400 audit(1776487899.977:363): avc: denied { create } for pid=5064 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 68.047292][ T28] audit: type=1400 audit(1776487900.127:364): avc: denied { read write } for pid=5072 comm="syz.3.644" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 68.109933][ T28] audit: type=1400 audit(1776487900.157:365): avc: denied { open } for pid=5072 comm="syz.3.644" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 68.334994][ T5090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 68.356117][ T5090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.392339][ T5090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.554870][ T28] audit: type=1400 audit(1776487900.637:366): avc: denied { read write } for pid=5109 comm="syz.0.659" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.585300][ T3417] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.612753][ T3417] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.633239][ T28] audit: type=1400 audit(1776487900.667:367): avc: denied { open } for pid=5109 comm="syz.0.659" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.710615][ T5115] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 68.735938][ T5117] syzkaller0: entered allmulticast mode [ 68.754123][ T28] audit: type=1400 audit(1776487900.827:368): avc: denied { write } for pid=5114 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.773668][ T5117] syzkaller0: entered promiscuous mode [ 68.806822][ T5117] syzkaller0 (unregistering): left allmulticast mode [ 68.826201][ T28] audit: type=1400 audit(1776487900.877:369): avc: denied { allowed } for pid=5118 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.851490][ T5117] syzkaller0 (unregistering): left promiscuous mode [ 68.947041][ T5128] loop3: detected capacity change from 0 to 4096 [ 68.975850][ T5128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.166194][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.313541][ T5133] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 69.335740][ T5133] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 69.360583][ T5133] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 69.513267][ T28] audit: type=1400 audit(1776487901.587:370): avc: denied { mount } for pid=5145 comm="syz.0.673" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 70.390083][ T5167] chnl_net:caif_netlink_parms(): no params data found [ 70.474496][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.487971][ T5193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 70.498603][ T5167] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.509682][ T5167] bridge_slave_0: entered allmulticast mode [ 70.526693][ T5167] bridge_slave_0: entered promiscuous mode [ 70.555952][ T5193] ipvlan2: entered allmulticast mode [ 70.567702][ T5193] syz_tun: entered allmulticast mode [ 70.589980][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.606917][ T5167] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.624838][ T5167] bridge_slave_1: entered allmulticast mode [ 70.634933][ T5167] bridge_slave_1: entered promiscuous mode [ 70.698956][ T5167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.717178][ T5167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.740660][ T5167] team0: Port device team_slave_0 added [ 70.748326][ T5167] team0: Port device team_slave_1 added [ 70.782556][ T5167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.821094][ T5167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.854800][ T5167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.866628][ T5167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.874071][ T5167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.900849][ T5167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.938118][ T5167] hsr_slave_0: entered promiscuous mode [ 70.952378][ T5167] hsr_slave_1: entered promiscuous mode [ 70.958614][ T5167] debugfs: 'hsr0' already exists in 'hsr' [ 70.965486][ T5167] Cannot create hsr debugfs directory [ 71.039348][ T1702] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.054997][ T3660] Bluetooth: hci0: unexpected event 0x07 length: 0 < 255 [ 71.175742][ T5167] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.190385][ T5167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.198234][ T5167] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.208990][ T5167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.219372][ T5167] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.231886][ T5167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.240420][ T5167] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.250512][ T5167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.320776][ T5167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.347436][ T5167] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.358781][ T5237] loop1: detected capacity change from 0 to 1024 [ 71.375706][ T5237] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 71.403879][ T1586] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.411180][ T1586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.443447][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.450647][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.517956][ T5167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.636885][ T5167] veth0_vlan: entered promiscuous mode [ 71.645712][ T5167] veth1_vlan: entered promiscuous mode [ 71.664237][ T5167] veth0_macvtap: entered promiscuous mode [ 71.672295][ T5167] veth1_macvtap: entered promiscuous mode [ 71.684359][ T5167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.697100][ T5167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.709159][ T1702] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.718124][ T1702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.727321][ T1702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.738913][ T1702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.169613][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 72.169627][ T28] audit: type=1400 audit(1776487904.247:405): avc: denied { execute } for pid=5281 comm="syz.4.715" name="file0" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.216353][ T28] audit: type=1400 audit(1776487904.277:406): avc: denied { execute_no_trans } for pid=5281 comm="syz.4.715" path="/146/file0" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.435141][ T5300] loop1: detected capacity change from 0 to 1024 [ 72.464160][ T5300] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 72.518479][ T28] audit: type=1400 audit(1776487904.597:407): avc: denied { getopt } for pid=5299 comm="syz.1.722" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.667556][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 72.760151][ T5313] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 73.103438][ T3660] Bluetooth: hci0: command 0x1003 tx timeout [ 73.103455][ T3754] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.189400][ T28] audit: type=1400 audit(1776487905.267:408): avc: denied { read write } for pid=5334 comm="syz.0.736" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 73.246587][ T5339] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 73.256287][ T28] audit: type=1400 audit(1776487905.267:409): avc: denied { open } for pid=5334 comm="syz.0.736" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 73.303229][ T5342] netlink: 136 bytes leftover after parsing attributes in process `syz.0.740'. [ 73.316282][ T5342] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 73.551965][ T28] audit: type=1400 audit(1776487905.627:410): avc: denied { connect } for pid=5350 comm="syz.1.745" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.609900][ T28] audit: type=1400 audit(1776487905.647:411): avc: denied { bind } for pid=5350 comm="syz.1.745" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.767506][ T5366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 73.791858][ T5366] netlink: 48 bytes leftover after parsing attributes in process `syz.0.748'. [ 73.827812][ T28] audit: type=1400 audit(1776487905.907:412): avc: denied { name_bind } for pid=5369 comm="syz.5.749" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 74.055695][ T5377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.752'. [ 74.117254][ T5352] chnl_net:caif_netlink_parms(): no params data found [ 74.282162][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.289459][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.296897][ T5352] bridge_slave_0: entered allmulticast mode [ 74.303809][ T5352] bridge_slave_0: entered promiscuous mode [ 74.311045][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.319695][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.327008][ T5352] bridge_slave_1: entered allmulticast mode [ 74.334086][ T5352] bridge_slave_1: entered promiscuous mode [ 74.354217][ T5352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.365156][ T5352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.386278][ T5352] team0: Port device team_slave_0 added [ 74.393230][ T5352] team0: Port device team_slave_1 added [ 74.411277][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.418825][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.451681][ T5352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.468282][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.475446][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.508531][ T5352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.558547][ T5352] hsr_slave_0: entered promiscuous mode [ 74.564149][ T5351] syz.1.745 (5351) used greatest stack depth: 8808 bytes left [ 74.613889][ T5352] hsr_slave_1: entered promiscuous mode [ 74.636115][ T5352] debugfs: 'hsr0' already exists in 'hsr' [ 74.651488][ T5352] Cannot create hsr debugfs directory [ 75.160948][ T5352] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.180188][ T5352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.201112][ T5352] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 75.218947][ T5352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.234978][ T5352] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 75.255045][ T5352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.262900][ T5352] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 75.273883][ T5352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.356510][ T5352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.376340][ T5352] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.386884][ T28] audit: type=1400 audit(1776487907.467:413): avc: denied { ioctl } for pid=5409 comm="syz.5.759" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.417259][ T1586] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.424448][ T1586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.446440][ T1586] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.453734][ T1586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.641715][ T5352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.945176][ T5352] veth0_vlan: entered promiscuous mode [ 75.967819][ T5352] veth1_vlan: entered promiscuous mode [ 76.003113][ T5438] loop1: detected capacity change from 0 to 512 [ 76.016203][ T5352] veth0_macvtap: entered promiscuous mode [ 76.026209][ T5440] loop5: detected capacity change from 0 to 512 [ 76.035618][ T5438] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.046374][ T5352] veth1_macvtap: entered promiscuous mode [ 76.069636][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.078788][ T5438] EXT4-fs (loop1): 1 truncate cleaned up [ 76.085018][ T5438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.109490][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.134410][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.170483][ T5440] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.188891][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.230033][ T5440] EXT4-fs (loop5): orphan cleanup on readonly fs [ 76.251053][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.284407][ T5440] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 76.304241][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.363974][ T5440] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 76.386317][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.406819][ T5440] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 76.423417][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 76.429902][ C0] EXT4-fs (loop5): initial error at time 1776487908: ext4_mb_generate_buddy:1317 [ 76.439093][ C0] EXT4-fs (loop5): last error at time 1776487908: ext4_mb_generate_buddy:1317 [ 76.453852][ T5440] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.764: corrupted inode contents [ 76.511283][ T5440] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 76.512252][ T5440] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #12: comm syz.5.764: mark_inode_dirty error [ 76.609389][ T5440] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 76.611072][ T5440] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.764: corrupted inode contents [ 76.636670][ T5452] loop1: detected capacity change from 0 to 256 [ 76.654921][ T5440] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 76.656702][ T5440] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.764: mark_inode_dirty error [ 76.706294][ T5440] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 76.706559][ T5440] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.764: corrupted inode contents [ 76.763415][ T5440] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 76.765006][ T5440] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 76.816119][ T5440] loop5: lost filesystem error report for type 5 error -117 [ 76.816327][ T5440] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.764: corrupted inode contents [ 76.843519][ T5440] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 76.843725][ T5440] EXT4-fs error (device loop5): ext4_truncate:4690: inode #12: comm syz.5.764: mark_inode_dirty error [ 76.891941][ T5440] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 76.892114][ T5440] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 76.950533][ T5440] loop5: lost filesystem error report for type 5 error -117 [ 76.950803][ T5440] EXT4-fs (loop5): 1 truncate cleaned up [ 76.984127][ T5440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.997953][ T28] audit: type=1400 audit(1776487909.077:414): avc: denied { read } for pid=5457 comm="syz.1.769" path="socket:[15537]" dev="sockfs" ino=15537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.112554][ T5463] loop1: detected capacity change from 0 to 128 [ 77.140082][ T5463] EXT4-fs: Ignoring removed orlov option [ 77.152296][ T5440] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 77.162109][ T3307] udevd[3307]: incorrect ext4 checksum on /dev/loop1 [ 77.184375][ T5463] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 77.210256][ T5440] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 77.235986][ T3307] udevd[3307]: incorrect ext4 checksum on /dev/loop1 [ 77.236344][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 77.294672][ T5167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.363980][ T5476] loop1: detected capacity change from 0 to 1024 [ 77.408940][ T5476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.459576][ T5476] SELinux: Context system_u:object_r:syslog_conf_t:s0 is not valid (left unmapped). [ 77.469292][ T28] audit: type=1400 audit(1776487909.537:415): avc: denied { mac_admin } for pid=5473 comm="syz.1.776" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.514814][ T28] audit: type=1400 audit(1776487909.587:416): avc: denied { relabelto } for pid=5473 comm="syz.1.776" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 77.541642][ T28] audit: type=1400 audit(1776487909.597:417): avc: denied { read write } for pid=5473 comm="syz.1.776" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 77.546406][ T5483] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 77.569499][ T28] audit: type=1400 audit(1776487909.597:418): avc: denied { open } for pid=5473 comm="syz.1.776" path="/188/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 77.628800][ T5483] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 77.699266][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.835597][ T5492] loop0: detected capacity change from 0 to 4096 [ 77.855150][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.787'. [ 77.872588][ T5492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.004040][ T28] audit: type=1400 audit(1776487910.087:419): avc: denied { ioctl } for pid=5511 comm="syz.4.791" path="socket:[15010]" dev="sockfs" ino=15010 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.054282][ T28] audit: type=1400 audit(1776487910.137:420): avc: denied { mounton } for pid=5519 comm="syz.5.795" path="/29/file0" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.231685][ T5534] loop5: detected capacity change from 0 to 256 [ 78.265274][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.487408][ T28] audit: type=1400 audit(1776487910.567:421): avc: denied { bind } for pid=5551 comm="syz.5.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.572149][ T28] audit: type=1400 audit(1776487910.587:422): avc: denied { name_bind } for pid=5551 comm="syz.5.808" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 78.632825][ T28] audit: type=1400 audit(1776487910.587:423): avc: denied { node_bind } for pid=5551 comm="syz.5.808" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 79.145177][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.810'. [ 79.321925][ T5567] loop5: detected capacity change from 0 to 4096 [ 79.333030][ T5572] loop0: detected capacity change from 0 to 2048 [ 79.355384][ T5567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.395965][ T5572] Alternate GPT is invalid, using primary GPT. [ 79.411608][ T5572] loop0: p1 p2 p3 [ 79.419469][ T5572] loop0: partition table partially beyond EOD, truncated [ 79.627916][ T5583] loop4: detected capacity change from 0 to 512 [ 79.646951][ T5583] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.665189][ T5583] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.813: corrupted in-inode xattr: e_value size too large [ 79.680894][ T5583] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.682173][ T5583] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.813: couldn't read orphan inode 15 (err -117) [ 79.691449][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 79.691473][ C0] EXT4-fs (loop4): initial error at time 1776487911: ext4_iget_extra_inode:5128: inode 15 [ 79.691509][ C0] EXT4-fs (loop4): last error at time 1776487911: ext4_iget_extra_inode:5128: inode 15 [ 79.729859][ T5583] loop4: lost filesystem error report for type 5 error -117 [ 79.732595][ T5583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.757122][ T28] audit: type=1400 audit(1776487911.837:424): avc: denied { create } for pid=5582 comm="syz.4.813" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.820346][ T5167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.820709][ T5585] loop0: detected capacity change from 0 to 8192 [ 79.877593][ T5590] loop5: detected capacity change from 0 to 512 [ 79.888595][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.969767][ T5596] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 80.105068][ T5604] loop6: detected capacity change from 0 to 512 [ 80.142408][ T5602] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 80.157840][ T5604] EXT4-fs (loop6): 1 truncate cleaned up [ 80.183229][ T5604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.203768][ T5602] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 80.224729][ T5597] syz.5.821: attempt to access beyond end of device [ 80.224729][ T5597] loop5: rw=0, sector=432, nr_sectors = 128 limit=512 [ 80.384635][ T5604] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.451564][ T60] kworker/u8:4: attempt to access beyond end of device [ 80.451564][ T60] loop5: rw=1, sector=560, nr_sectors = 9984 limit=512 [ 80.477055][ T60] kworker/u8:4: attempt to access beyond end of device [ 80.477055][ T60] loop5: rw=1, sector=10544, nr_sectors = 2056 limit=512 [ 80.494206][ T5352] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.506495][ T60] kworker/u8:4: attempt to access beyond end of device [ 80.506495][ T60] loop5: rw=1, sector=12600, nr_sectors = 2048 limit=512 [ 80.553438][ T60] kworker/u8:4: attempt to access beyond end of device [ 80.553438][ T60] loop5: rw=1, sector=14648, nr_sectors = 1816 limit=512 [ 80.815441][ T5641] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 80.835976][ T5641] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 80.854151][ T5641] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.843'. [ 80.891983][ T5646] loop0: detected capacity change from 0 to 512 [ 81.029038][ T5653] syzkaller1: entered promiscuous mode [ 81.041972][ T5653] syzkaller1: entered allmulticast mode [ 81.190171][ T5651] syz.0.844: attempt to access beyond end of device [ 81.190171][ T5651] loop0: rw=0, sector=432, nr_sectors = 128 limit=512 [ 81.391789][ T60] kworker/u8:4: attempt to access beyond end of device [ 81.391789][ T60] loop0: rw=1, sector=560, nr_sectors = 3456 limit=512 [ 81.412648][ T60] kworker/u8:4: attempt to access beyond end of device [ 81.412648][ T60] loop0: rw=1, sector=4016, nr_sectors = 3128 limit=512 [ 81.444228][ T60] kworker/u8:4: attempt to access beyond end of device [ 81.444228][ T60] loop0: rw=1, sector=7144, nr_sectors = 2544 limit=512 [ 81.481724][ T60] kworker/u8:4: attempt to access beyond end of device [ 81.481724][ T60] loop0: rw=1, sector=9688, nr_sectors = 6776 limit=512 [ 81.523106][ T5682] loop6: detected capacity change from 0 to 512 [ 81.541727][ T5682] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.576355][ T5682] EXT4-fs (loop6): orphan cleanup on readonly fs [ 81.598754][ T5687] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.599463][ T5682] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 81.627530][ T5682] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 81.636214][ T5687] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.860: Invalid block bitmap block 0 in block_group 0 [ 81.649656][ T5687] loop4: lost filesystem error report for type 5 error -117 [ 81.650834][ T5687] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 81.658278][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 81.658294][ C0] EXT4-fs (loop4): initial error at time 1776487913: ext4_read_block_bitmap_nowait:483 [ 81.658341][ C0] EXT4-fs (loop4): last error at time 1776487913: ext4_read_block_bitmap_nowait:483 [ 81.659012][ T5685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.677557][ T5687] loop4: lost filesystem error report for type 5 error -117 [ 81.704212][ T5682] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, [ 81.706594][ T5687] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.860: attempt to clear invalid blocks 983261 len 1 [ 81.712238][ T5682] block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 81.721209][ T5687] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.743477][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 81.759154][ C1] EXT4-fs (loop6): initial error at time 1776487913: ext4_mb_generate_buddy:1317 [ 81.765440][ T5687] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.860: Invalid inode table block 0 in block_group 0 [ 81.768317][ C1] EXT4-fs (loop6): last error at time 1776487913: ext4_mb_generate_buddy:1317 [ 81.790466][ T5687] loop4: lost filesystem error report for type 5 error -117 [ 81.790641][ T5687] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 81.815565][ T5682] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.858: corrupted inode contents [ 81.833020][ T5687] loop4: lost filesystem error report for type 5 error -117 [ 81.833234][ T5687] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 81.862257][ T5682] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 81.862345][ T5687] loop4: lost filesystem error report for type 5 error -117 [ 81.871777][ T5682] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.858: mark_inode_dirty error [ 81.888805][ T5687] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.860: Invalid inode table block 0 in block_group 0 [ 81.890809][ T5682] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 81.904077][ T5682] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.858: corrupted inode contents [ 81.926747][ T5687] loop4: lost filesystem error report for type 5 error -117 [ 81.927074][ T5687] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 81.945527][ T5693] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 81.954638][ T5687] loop4: lost filesystem error report for type 5 error -117 [ 81.964301][ T5682] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 81.972104][ T5687] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.860: mark_inode_dirty error [ 81.987891][ T5693] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 82.008536][ T5693] EXT4-fs (loop5): This should not happen!! Data will be lost [ 82.008536][ T5693] [ 82.014043][ T5692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.018783][ T5693] EXT4-fs (loop5): Total free blocks count 0 [ 82.034420][ T5682] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.858: mark_inode_dirty error [ 82.038612][ T5693] EXT4-fs (loop5): Free/Dirty block details [ 82.047677][ T5687] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.053787][ T5693] EXT4-fs (loop5): free_blocks=4096 [ 82.054294][ T5687] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 82.063048][ T5693] EXT4-fs (loop5): dirty_blocks=512 [ 82.077578][ T5687] loop4: lost filesystem error report for type 5 error -117 [ 82.083604][ T5687] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.860: Invalid inode table block 0 in block_group 0 [ 82.101140][ T5693] EXT4-fs (loop5): Block reservation details [ 82.103880][ T5687] loop4: lost filesystem error report for type 5 error -117 [ 82.109629][ T5682] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 82.117245][ T5687] EXT4-fs (loop4): 1 truncate cleaned up [ 82.124157][ T5682] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.858: corrupted inode contents [ 82.127649][ T5687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.142431][ T5693] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 82.164823][ T5682] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 82.165033][ T5682] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 82.190946][ T5691] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 82.212787][ T5682] loop6: lost filesystem error report for type 5 error -117 [ 82.212951][ T5691] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 244 with error 28 [ 82.233017][ T5682] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.858: corrupted inode contents [ 82.245245][ T5691] EXT4-fs (loop0): This should not happen!! Data will be lost [ 82.245245][ T5691] [ 82.255231][ T5682] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 82.255341][ T5691] EXT4-fs (loop0): Total free blocks count 0 [ 82.274312][ T5682] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.858: mark_inode_dirty error [ 82.289981][ T5691] EXT4-fs (loop0): Free/Dirty block details [ 82.296079][ T5691] EXT4-fs (loop0): free_blocks=4096 [ 82.301328][ T5691] EXT4-fs (loop0): dirty_blocks=256 [ 82.306810][ T5682] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 82.306910][ T5691] EXT4-fs (loop0): Block reservation details [ 82.322260][ T5682] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 82.331607][ T5691] EXT4-fs (loop0): i_reserved_data_blocks=16 [ 82.337893][ T5682] loop6: lost filesystem error report for type 5 error -117 [ 82.338609][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.359591][ T5682] EXT4-fs (loop6): 1 truncate cleaned up [ 82.375176][ T5682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.431549][ T70] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 82.453698][ T5703] syz_tun: entered allmulticast mode [ 82.461631][ T5167] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 82.523536][ T5706] EXT4-fs: inline encryption not supported [ 82.553936][ T70] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 496 with error 28 [ 82.567348][ T5712] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.577830][ T5706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.590413][ T5706] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.598763][ T5712] EXT4-fs (loop1): 1 truncate cleaned up [ 82.602672][ T5682] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 82.619687][ T5712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.641234][ T3314] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 82.650342][ T5706] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.865: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.667254][ T5682] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 82.688727][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 82.688742][ T28] audit: type=1400 audit(1776487914.767:434): avc: denied { sqpoll } for pid=5715 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.717561][ T5706] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 82.741749][ T5706] EXT4-fs (loop5): This should not happen!! Data will be lost [ 82.741749][ T5706] [ 82.780392][ T5721] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 82.805902][ T5721] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 82.813611][ T5167] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 82.829264][ T5352] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.843897][ T5167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.908292][ T5727] set_capacity_and_notify: 5 callbacks suppressed [ 82.908327][ T5727] loop6: detected capacity change from 0 to 256 [ 82.977617][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.071275][ T5735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5735 comm=syz.5.876 [ 83.120981][ T5735] netlink: 'syz.5.876': attribute type 1 has an invalid length. [ 83.155401][ T5740] loop6: detected capacity change from 0 to 512 [ 83.211274][ T5743] bond1: (slave bridge1): making interface the new active one [ 83.234236][ T5743] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 83.437241][ T5755] loop0: detected capacity change from 0 to 512 [ 83.447874][ T5755] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.487293][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.886'. [ 83.496502][ T5755] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.516076][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.886'. [ 83.518089][ T5755] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 83.525382][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.886'. [ 83.553469][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.886'. [ 83.566472][ T5755] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 83.586787][ T5755] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 83.603375][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 83.609870][ C1] EXT4-fs (loop0): initial error at time 1776487915: ext4_mb_generate_buddy:1317 [ 83.619056][ C1] EXT4-fs (loop0): last error at time 1776487915: ext4_mb_generate_buddy:1317 [ 83.624504][ T5755] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.884: corrupted inode contents [ 83.648044][ T5763] capability: warning: `syz.5.888' uses deprecated v2 capabilities in a way that may be insecure [ 83.661458][ T5755] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 83.673505][ T5755] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #12: comm syz.0.884: mark_inode_dirty error [ 83.715723][ T5765] loop4: detected capacity change from 0 to 256 [ 83.722343][ T5755] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.884: corrupted inode contents [ 83.766490][ T5755] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.884: mark_inode_dirty error [ 83.791196][ T5755] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.884: corrupted inode contents [ 83.805588][ T5755] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 83.814365][ T5755] loop0: lost filesystem error report for type 5 error -117 [ 83.814570][ T5755] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.884: corrupted inode contents [ 83.834217][ T5755] EXT4-fs error (device loop0): ext4_truncate:4690: inode #12: comm syz.0.884: mark_inode_dirty error [ 83.845614][ T5755] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 83.854799][ T5755] loop0: lost filesystem error report for type 5 error -117 [ 83.855053][ T5755] EXT4-fs (loop0): 1 truncate cleaned up [ 83.870772][ T5755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.922214][ T5771] SELinux: Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped). [ 83.943446][ T28] audit: type=1400 audit(1776487916.017:435): avc: denied { relabelto } for pid=5770 comm="syz.1.892" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 83.961850][ T5773] loop6: detected capacity change from 0 to 128 [ 84.006375][ T5773] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.016083][ T5755] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 84.029794][ T28] audit: type=1400 audit(1776487916.017:436): avc: denied { associate } for pid=5770 comm="syz.1.892" name="loop9" dev="devtmpfs" ino=109 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hostname_exec_t:s0" [ 84.066866][ T5755] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 84.122579][ T1586] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.152250][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.229275][ T28] audit: type=1400 audit(1776487916.307:437): avc: denied { create } for pid=5786 comm="syz.6.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.234335][ T5787] netlink: 32 bytes leftover after parsing attributes in process `syz.6.898'. [ 84.285940][ T28] audit: type=1400 audit(1776487916.317:438): avc: denied { write } for pid=5786 comm="syz.6.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.370294][ T5793] loop4: detected capacity change from 0 to 512 [ 84.518348][ T5803] loop0: detected capacity change from 0 to 512 [ 84.549100][ T5803] EXT4-fs (loop0): 1 truncate cleaned up [ 84.572696][ T5803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.725357][ T5806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 84.785814][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.842195][ T5812] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 84.897240][ T5812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.975024][ T5815] bond2: (slave veth0_to_bond): making interface the new active one [ 85.063872][ T5815] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 85.173185][ T5819] syz_tun: entered allmulticast mode [ 85.364035][ T5825] pimreg: entered allmulticast mode [ 85.402142][ T5825] pimreg: left allmulticast mode [ 85.767846][ T5843] loop5: detected capacity change from 0 to 512 [ 85.784017][ T5843] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.806557][ T5843] EXT4-fs (loop5): 1 truncate cleaned up [ 85.813295][ T5843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.003996][ T5167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.125183][ T28] audit: type=1400 audit(1776487918.207:439): avc: denied { write } for pid=5853 comm="syz.4.923" path="socket:[16156]" dev="sockfs" ino=16156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 86.239976][ T5858] loop5: detected capacity change from 0 to 512 [ 86.269087][ T5858] EXT4-fs (loop5): 1 truncate cleaned up [ 86.282023][ T5858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.375221][ T5858] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.401985][ T5167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.477344][ T28] audit: type=1400 audit(1776487918.557:440): avc: denied { write } for pid=5876 comm="syz.5.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 86.477865][ T5876] delete_channel: no stack [ 86.530563][ T28] audit: type=1400 audit(1776487918.607:441): avc: denied { bind } for pid=5877 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.574244][ T28] audit: type=1400 audit(1776487918.607:442): avc: denied { write } for pid=5877 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.629541][ T28] audit: type=1400 audit(1776487918.707:443): avc: denied { ioctl } for pid=5886 comm="syz.5.932" path="socket:[16629]" dev="sockfs" ino=16629 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.406994][ T5974] loop4: detected capacity change from 0 to 512 [ 87.583095][ T5974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.601906][ T5974] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.693193][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.709799][ T3003] ================================================================== [ 87.718041][ T3003] BUG: KCSAN: data-race in set_nlink / set_nlink [ 87.724403][ T3003] [ 87.726760][ T3003] read to 0xffff888107cb2048 of 4 bytes by task 3307 on cpu 0: [ 87.734333][ T3003] set_nlink+0x29/0xb0 [ 87.738438][ T3003] kernfs_iop_permission+0x1e5/0x220 [ 87.743766][ T3003] inode_permission+0x31f/0x3b0 [ 87.748656][ T3003] link_path_walk+0x779/0xe30 [ 87.753461][ T3003] path_openat+0x1c6/0x2050 [ 87.758014][ T3003] do_file_open+0x16c/0x290 [ 87.762563][ T3003] do_sys_openat2+0x94/0x130 [ 87.767192][ T3003] __x64_sys_openat+0xf2/0x120 [ 87.771998][ T3003] x64_sys_call+0x1e39/0x3020 [ 87.776739][ T3003] do_syscall_64+0x12c/0x3b0 [ 87.781377][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.787301][ T3003] [ 87.789642][ T3003] write to 0xffff888107cb2048 of 4 bytes by task 3003 on cpu 1: [ 87.797287][ T3003] set_nlink+0x99/0xb0 [ 87.801408][ T3003] kernfs_iop_permission+0x1e5/0x220 [ 87.806736][ T3003] inode_permission+0x31f/0x3b0 [ 87.811620][ T3003] link_path_walk+0x779/0xe30 [ 87.816411][ T3003] path_lookupat+0x8c/0x500 [ 87.820946][ T3003] filename_lookup+0x190/0x390 [ 87.825739][ T3003] vfs_statx+0x96/0x170 [ 87.829919][ T3003] vfs_fstatat+0x118/0x170 [ 87.834382][ T3003] __se_sys_newfstatat+0x55/0x3e0 [ 87.839455][ T3003] __x64_sys_newfstatat+0x55/0x70 [ 87.844519][ T3003] x64_sys_call+0x2c64/0x3020 [ 87.849229][ T3003] do_syscall_64+0x12c/0x3b0 [ 87.853852][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.859775][ T3003] [ 87.862137][ T3003] value changed: 0x00000009 -> 0x00000008 [ 87.867875][ T3003] [ 87.870216][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 87.876408][ T3003] CPU: 1 UID: 0 PID: 3003 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 87.886886][ T3003] Tainted: [W]=WARN [ 87.890707][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 87.900816][ T3003] ================================================================== [ 88.509988][ T5828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512