last executing test programs: 13.086986197s ago: executing program 0 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)={0x60, r1, 0x1, 0xffffffff, 0x0, {0x37}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xfcb3ae1e096881cb}, 0x8006) 13.039172752s ago: executing program 0 (id=51): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) 12.95558517s ago: executing program 0 (id=52): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000040)="fffff0000000000000000000000000000000000001") 12.929794173s ago: executing program 0 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x38ff817, 0x0) umount2(&(0x7f0000000600)='./file0/../file0\x00', 0x1) 12.86343292s ago: executing program 0 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a07000000000000000000020000000900010073797a300000000040000000030a01020000000000000000020000000900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000009c000000060a01040000000000000000020000000900010073797a30000000000900020073797a3000000000700004802c0001800e000100696d6d6564696174650000001800028008000140000000080c000280060001"], 0x124}}, 0x0) 12.777414309s ago: executing program 0 (id=59): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) 12.649105852s ago: executing program 32 (id=59): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) 12.345428123s ago: executing program 1 (id=70): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000ffff26bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="090a050000000000280012800b00010065727370616e00001800028004001200080015005ec8050c"], 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000200), 0x4000000000001f2, 0x0) 12.287410629s ago: executing program 1 (id=72): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001700)=@newtaction={0x4c, 0x32, 0x871a15abc695fb3d, 0x0, 0x25dfdbfb, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 12.267499561s ago: executing program 1 (id=74): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x28a1, 0x48001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x9b}, @IFLA_BOND_PRIMARY={0x8}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 12.199466618s ago: executing program 1 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f0000000ac0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000b80)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000bc0)='./file0/file0/file0\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000c80)='./file0\x00', 0x0, 0x185093, 0x0) 12.199333128s ago: executing program 1 (id=77): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000cc0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket(0x10, 0x1, 0x2) 12.019560386s ago: executing program 1 (id=80): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 12.013360967s ago: executing program 33 (id=80): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 3.113393061s ago: executing program 5 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto(r4, &(0x7f0000000400)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 2.511363492s ago: executing program 2 (id=205): r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000440)=[{}], 0x1, &(0x7f0000000480), 0x0, 0x0) 2.511209552s ago: executing program 2 (id=207): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x20000, 0x0, 0x0, @by_dev={r2}, [@thin_pool={0x0, 0x1008, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '129', 0x20, 0x2, ' 0'}}]}) 2.362979658s ago: executing program 2 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 2.267543517s ago: executing program 3 (id=216): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0xfffc, 0x20, 0x0, 0x81}) 2.147288509s ago: executing program 3 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x24, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x4}]]}, 0x60}}, 0x0) 2.130148971s ago: executing program 3 (id=223): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000b40)='syzkaller\x00'}, 0x94) 2.079214327s ago: executing program 3 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000900)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000dc0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000e00), 0x80002c1, 0x2, 0x0) r3 = socket(0x11, 0xa, 0x2) getsockname$packet(r3, 0x0, &(0x7f0000000fc0)) syz_mount_image$ext4(&(0x7f00000010c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x22000402, &(0x7f0000000340)={[], [], 0x2c}, 0x1, 0x4ef, &(0x7f0000001240)="$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") getsockname$inet6(r3, 0x0, &(0x7f0000000100)) 1.995143265s ago: executing program 5 (id=229): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}}, &(0x7f00000000c0)=""/9, 0x2a, 0x9, 0x1, 0x5}, 0x28) 1.995072745s ago: executing program 5 (id=230): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') pread64(r0, 0x0, 0x0, 0x300) 1.994959135s ago: executing program 5 (id=231): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300), 0x2, 0x790, &(0x7f0000000700)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000f80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001080), 0x651, 0x0) recvmmsg(r1, &(0x7f00000010c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001140)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001180)={0x1, &(0x7f00000011c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.471501979s ago: executing program 2 (id=234): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000380), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000440)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000540)=""/253, 0xfd, 0x1) 941.128993ms ago: executing program 2 (id=236): socket$netlink(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) 847.772133ms ago: executing program 6 (id=241): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x9213}}, 0x30) syz_emit_ethernet(0xfeb6, &(0x7f00000004c0)=ANY=[], 0x0) 847.664073ms ago: executing program 6 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x8002, 0xa2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) r2 = syz_open_pts(r1, 0x101000) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x12) write(r0, &(0x7f0000000140)='7', 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000004cc0), 0x0, &(0x7f0000004d00)=ANY=[]) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 847.300913ms ago: executing program 3 (id=243): mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000940)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x6) r3 = io_uring_setup(0x6cee, &(0x7f0000000740)={0x0, 0x1e49, 0x80, 0x800006, 0x2c2}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, 0xffffffffffffffff, 0xffffffffffffffe4) 763.192692ms ago: executing program 4 (id=244): openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 619.437696ms ago: executing program 4 (id=245): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 619.233836ms ago: executing program 4 (id=246): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2000000, &(0x7f00000003c0), 0x1, 0x445, &(0x7f0000000400)="$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") ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xd2942, 0x4) io_setup(0x20ff, &(0x7f0000000100)=0x0) io_submit(r1, 0x3, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='p', 0x8200, 0x600}]) 414.803558ms ago: executing program 6 (id=247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000c00)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000c40)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) shutdown(r1, 0x1) 406.803068ms ago: executing program 6 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./mnt\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./mnt/trace_marker\x00', 0x1, 0x5a) write$P9_RREADDIR(r0, &(0x7f0000000080)={0x2a, 0x29, 0x1, {0x4, [{{0x10}, 0x7, 0x1, 0x7, './file0'}]}}, 0x2a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000009c0)=""/16384, 0x4000) 355.444773ms ago: executing program 6 (id=249): syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x18, &(0x7f00000000c0), 0x0, 0x4a5, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1000, 0x190) getdents64(r0, 0x0, 0x0) 355.268304ms ago: executing program 4 (id=250): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x24c11, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@mirror={0x0, 0x40, 0x0, 0x68, 'mirror\x00', {'core 2 64 nosync', 0x20, 0x2, [{0x20, {@ram={'/dev/ram', 0x0}, 0x20, '8'}}, {0x20, {@ram={'/dev/ram', 0x1}, 0x20, '16'}}]}}]}) 355.169064ms ago: executing program 4 (id=251): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007c, @dev={0xfe, 0x80, '\x00', 0x60}, 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 351.999684ms ago: executing program 4 (id=252): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x1af7c3, 0x0) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@bsdgroups}, {@nobarrier}, {@noinit_itable}]}, 0xfc, 0x574, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x143442, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a80), 0x58, 0x0) recvmmsg(r2, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x6) memfd_create(&(0x7f0000000b40)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcdX\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9=\t\xbb\x0e\xbb\xb5\x02\x95u\x94r\xfd\x00\xb9\xf8z\xa0\xe6\xcc\x85QO\x1dD\xd5\xe2\xa56j\\', 0x1) pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) 268.921102ms ago: executing program 6 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) 127.965257ms ago: executing program 5 (id=254): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000740)={0xc0}) 19.528838ms ago: executing program 2 (id=255): r0 = syz_mount_image$ext4(&(0x7f0000000e00)='ext4\x00', &(0x7f0000000e40)='./file0\x00', 0x2000759, &(0x7f0000000e80)={[{@jqfmt_vfsold}, {@noblock_validity}, {@nobh}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@noacl}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@lazytime}, {@resuid}, {@dax_always}, {@quota}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@grpid}, {@data_journal}], [], 0x2c}, 0x0, 0x520, &(0x7f0000000fc0)="$eJzs3E1vFOcdAPD/rtc2LlC79I23li20qtWqGJvXQw+AWolLpUqtKnrc2gZRDFTYlcCyiqkqkHpIxCfIyy1SPkFOySVKohwS5RqUaxQJRb5Acogmmt2Zza53116btS3j30/a5ZnZZ2ae/8w8+HnZ2QB2rHL6VojYExGfRsRwbbE5Q7n2z7OlhcmvlhYmC5Ekf/myUM33dGlhMs+ab7c7WxgtRhT/V4hDrYcdnL07f70yMzN9O1sxNlfMUjcqV6evTt+cOHfu1Mmhs2cmTvckzrRMTw/+59bhA5f+/uhPk5cf/eP9N9PyJtnnjXHUjFTfB7o+Ql/LmnKUm89lg191X/RtYW9DulBK34tbVxi6lt616eXqr9b/4eirLtUMxx//u6WFAzZUkiTJYMva+t+yxaRRoVDbIEnuJ8ALoBDd5Rs9utElATZX/of+6VLaU12YbO0Hv9ieXIhqDyiN+1n2qn1SqvZgyyO1vlH/Bh3/RxFxefHrV9JXtB2HAADorbcvRDy8WGt35K/aJ8X4SUO+72dzQyMR8YOI2BcRP8zaLz+OqOb9aUTsb9hmbxezAOVly63tn4+HskRjc7Vn0vbf77O5reb2X73kI33Z0t5q/P2FK9dmpk9k52Q0+gfT5fHWXdeH1d75wycvdzp+uaH9l77S4+dtwawcX5SWDdBNVeYqzxt37sn96om91xp/IUqFPBVxICIOrmP/6Tm79ps3Dnf6vCn+NM6W+F/qvPPSOgq0TPJaxK9r138xqvHnY5+14Aey1NjcjX+Nzd6d/921xvnJ8bNnJk6P7YqZ6RNj+V3R6oOPHvw5S7Z0I5qvf5I0XP+8amzoRFp6/b/X9v6vz1yOpKn6fO3s2o/x4PHDjn2a9d7/A4W/VtP5/Oydytzc7fGIgcJi6/qJ77a9Uxlqyp/GP3qsff3fF/HNq9l2hyIivYl/FhE/j4gjWdl/ERFHI+LYCvG/d/GX/+zUhVw9/o2Vxj+1put/d34oskR9TZo4/2FE85o80Xf93bdaDvz/ckv8/dHp+p+qpkazNVOVuV2rxdWmgG0Tz30CAQAAYBs4EhF7olA8ng007Yli8fjxiN31EZTZud9eufXvm1O1ZwRGor+Yj3QNN4yHjmdjw+lyutVEw3L6+cnquHGSJMlQupz232f2b23osOPt7lD/U5+3PtICvGjWNI/W6Yk2YFtaXv8fd71l77+QAWyuHnyPBtim1H/Yubqu/xv1FBywZdrV/3sRz7agKMAma1f//9ay5vymlAXYXO3qv7l/2BnWP/7nywCw3Rn/hx2pq4fk15HYd2mFPIVSd/spdf0Y/2qJYqz8KwAjUf9Ng7xNs/IOPytG9OaM9fX0zA81XdNi2zy7ohfHiuKqeUpr+CGGzU0UKzMz+QMuW16ewYhY5e6t32z38sT8Rhesem5e37r/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj2wAAAP//5EfM1A==") symlinkat(&(0x7f0000001600)='./file0\x00', r0, &(0x7f0000001640)='./file0\x00') 19.367378ms ago: executing program 5 (id=256): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd, @flat=@weak_binder={0x77622a85, 0x110a, 0x5}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}]}) 0s ago: executing program 3 (id=257): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001f80), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000002040)={0x14, r1, 0x301}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. [ 18.129469][ T30] audit: type=1400 audit(1792746256.570:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.130593][ T277] cgroup: Unknown subsys name 'net' [ 18.133421][ T30] audit: type=1400 audit(1792746256.570:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.137967][ T30] audit: type=1400 audit(1792746256.580:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.138141][ T277] cgroup: Unknown subsys name 'devices' [ 18.202215][ T277] cgroup: Unknown subsys name 'hugetlb' [ 18.207833][ T277] cgroup: Unknown subsys name 'rlimit' [ 18.314478][ T30] audit: type=1400 audit(1792746256.760:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.327391][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 18.337642][ T30] audit: type=1400 audit(1792746256.760:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.355695][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.371138][ T30] audit: type=1400 audit(1792746256.760:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.402732][ T30] audit: type=1400 audit(1792746256.800:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.428142][ T30] audit: type=1400 audit(1792746256.800:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.453812][ T30] audit: type=1400 audit(1792746256.800:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.479442][ T30] audit: type=1400 audit(1792746256.800:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.919959][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.927072][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.934588][ T286] device bridge_slave_0 entered promiscuous mode [ 18.963499][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.970548][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.978053][ T286] device bridge_slave_1 entered promiscuous mode [ 18.998105][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.005192][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.012680][ T287] device bridge_slave_0 entered promiscuous mode [ 19.020976][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.028005][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.035530][ T287] device bridge_slave_1 entered promiscuous mode [ 19.055076][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.062143][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.069526][ T285] device bridge_slave_0 entered promiscuous mode [ 19.084176][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.091378][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.098797][ T285] device bridge_slave_1 entered promiscuous mode [ 19.136969][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.144094][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.151728][ T289] device bridge_slave_0 entered promiscuous mode [ 19.170608][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.177671][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.185071][ T289] device bridge_slave_1 entered promiscuous mode [ 19.243351][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.250400][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.257806][ T288] device bridge_slave_0 entered promiscuous mode [ 19.267218][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.274493][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.281937][ T288] device bridge_slave_1 entered promiscuous mode [ 19.380748][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.387816][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.395405][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.402432][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.410824][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.417987][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.425268][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.432384][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.443192][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.450231][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.457520][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.464544][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.505078][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.512150][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.519414][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.526449][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.537954][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.546045][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.553242][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.560517][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.568039][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.575328][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.583020][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.590299][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.597804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.605238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.615435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.634997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.642885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 19.651375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.659542][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.666599][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.674242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 19.682631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.690918][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.697965][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.705376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.713644][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.720683][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.728409][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.744978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.753821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.761848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.769719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.778059][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.785097][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.792677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.800890][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.807896][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.815274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.823422][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.830462][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.837858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.846033][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.853069][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.874314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.882280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.890176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.898524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.906827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.915129][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.922305][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.942392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.953620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.961239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.970402][ T285] device veth0_vlan entered promiscuous mode [ 19.982535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 19.990466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.998506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.006657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.014775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.023037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.031072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.038501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.057866][ T287] device veth0_vlan entered promiscuous mode [ 20.064836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.073413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.081733][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.088764][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.096230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.104682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.112927][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.119938][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.127368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.135795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.144214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.152565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.160854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.168690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.177362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.184941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.193587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.201923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.214416][ T286] device veth0_vlan entered promiscuous mode [ 20.222016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.229961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.238100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.245748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.259495][ T287] device veth1_macvtap entered promiscuous mode [ 20.266526][ T285] device veth1_macvtap entered promiscuous mode [ 20.275055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.282712][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.290912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.298975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.306807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.315225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.323515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.331520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.342900][ T289] device veth0_vlan entered promiscuous mode [ 20.357897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.365840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.373957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.382207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.390096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.398581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.407166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.415833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.424290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.432508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.440816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.448315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.459872][ T286] device veth1_macvtap entered promiscuous mode [ 20.467882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.475630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.484063][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.496276][ T289] device veth1_macvtap entered promiscuous mode [ 20.507389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.515671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.524219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.532545][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.540796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.548318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.556596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.565040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.573457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.590010][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 20.605853][ T288] device veth0_vlan entered promiscuous mode [ 20.613128][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.621733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.629997][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.638059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.646123][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.654579][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.662903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.671033][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.679273][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.686945][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.712276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.726967][ T311] loop1: detected capacity change from 0 to 256 [ 20.734413][ T288] device veth1_macvtap entered promiscuous mode [ 20.755922][ T316] device-mapper: table: 253:0: flakey: unknown target type [ 20.763621][ T316] device-mapper: ioctl: error adding target to table [ 20.871307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.879550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.992462][ T324] Zero length message leads to an empty skb [ 21.082750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.123966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.356750][ T331] FAULT_INJECTION: forcing a failure. [ 21.356750][ T331] name failslab, interval 1, probability 0, space 0, times 1 [ 21.389694][ T331] CPU: 0 PID: 331 Comm: syz.0.7 Not tainted syzkaller #0 [ 21.396758][ T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 21.406936][ T331] Call Trace: [ 21.410218][ T331] [ 21.413163][ T331] __dump_stack+0x21/0x30 [ 21.417602][ T331] dump_stack_lvl+0x110/0x170 [ 21.422280][ T331] ? show_regs_print_info+0x20/0x20 [ 21.427478][ T331] ? kernfs_xattr_get+0x81/0x90 [ 21.432339][ T331] ? selinux_kernfs_init_security+0x143/0x450 [ 21.438414][ T331] dump_stack+0x15/0x20 [ 21.442571][ T331] should_fail+0x3ab/0x500 [ 21.446993][ T331] __should_failslab+0xa4/0xe0 [ 21.451766][ T331] should_failslab+0x9/0x20 [ 21.456271][ T331] slab_pre_alloc_hook+0x39/0xd0 [ 21.461213][ T331] ? __kernfs_new_node+0xe1/0x670 [ 21.466251][ T331] kmem_cache_alloc+0x44/0x260 [ 21.471021][ T331] __kernfs_new_node+0xe1/0x670 [ 21.475878][ T331] ? kernfs_new_node+0x260/0x260 [ 21.480816][ T331] ? rwsem_write_trylock+0x136/0x300 [ 21.486112][ T331] ? rwsem_write_trylock+0x136/0x300 [ 21.491403][ T331] ? up_write+0x7b/0x290 [ 21.495647][ T331] ? kernfs_activate+0x35e/0x370 [ 21.500595][ T331] kernfs_new_node+0x150/0x260 [ 21.505366][ T331] __kernfs_create_file+0x4e/0x270 [ 21.510489][ T331] sysfs_add_file_mode_ns+0x29a/0x350 [ 21.515884][ T331] internal_create_group+0x492/0xd00 [ 21.521177][ T331] ? up_write+0x7b/0x290 [ 21.525436][ T331] ? sysfs_create_group+0x30/0x30 [ 21.530473][ T331] ? __kasan_check_write+0x14/0x20 [ 21.535587][ T331] ? kernfs_put+0x44f/0x480 [ 21.540092][ T331] sysfs_create_groups+0x58/0x120 [ 21.545115][ T331] device_add_attrs+0x14b/0x710 [ 21.549975][ T331] ? device_add+0x781/0xe90 [ 21.554578][ T331] device_add+0x5a2/0xe90 [ 21.558921][ T331] netdev_register_kobject+0x18e/0x330 [ 21.564386][ T331] ? raw_notifier_call_chain+0xe9/0x100 [ 21.569946][ T331] register_netdevice+0xeaa/0x1490 [ 21.575099][ T331] ? netif_stacked_transfer_operstate+0x220/0x220 [ 21.581565][ T331] wg_newlink+0x4f1/0x7a0 [ 21.585911][ T331] ? wg_setup+0x390/0x390 [ 21.590258][ T331] rtnl_newlink+0x137f/0x1900 [ 21.592514][ T324] syz.2.3 (324) used greatest stack depth: 21384 bytes left [ 21.594945][ T331] ? rtnl_setlink+0x4d0/0x4d0 [ 21.606909][ T331] ? __kernel_text_address+0xa0/0x100 [ 21.612300][ T331] ? unwind_get_return_address+0x4d/0x90 [ 21.617937][ T331] ? stack_trace_save+0xf0/0xf0 [ 21.622799][ T331] ? memcpy+0x56/0x70 [ 21.626791][ T331] ? unwind_get_return_address+0x4d/0x90 [ 21.632430][ T331] ? stack_trace_save+0xf0/0xf0 [ 21.637297][ T331] ? __kasan_check_write+0x14/0x20 [ 21.642409][ T331] ? wait_for_completion_killable_timeout+0x10/0x10 [ 21.648998][ T331] ? ns_capable+0x8c/0xf0 [ 21.653333][ T331] ? netlink_net_capable+0x125/0x160 [ 21.658622][ T331] ? rtnl_setlink+0x4d0/0x4d0 [ 21.663308][ T331] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 21.668245][ T331] ? rtnetlink_bind+0x80/0x80 [ 21.672920][ T331] ? avc_has_perm_noaudit+0x390/0x490 [ 21.678295][ T331] ? memcpy+0x56/0x70 [ 21.682276][ T331] ? avc_has_perm_noaudit+0x30a/0x490 [ 21.687645][ T331] ? arch_stack_walk+0xee/0x140 [ 21.692501][ T331] ? avc_denied+0x1b0/0x1b0 [ 21.697003][ T331] ? stack_trace_save+0xa6/0xf0 [ 21.701854][ T331] ? avc_has_perm+0x163/0x250 [ 21.706528][ T331] ? avc_has_perm_noaudit+0x490/0x490 [ 21.711900][ T331] ? x64_sys_call+0x4b/0x9a0 [ 21.716493][ T331] ? selinux_nlmsg_lookup+0x38f/0x440 [ 21.721865][ T331] netlink_rcv_skb+0x1e9/0x430 [ 21.726637][ T331] ? rtnetlink_bind+0x80/0x80 [ 21.731310][ T331] ? netlink_ack+0xb10/0xb10 [ 21.735901][ T331] ? _copy_from_iter+0x4a4/0x10a0 [ 21.740927][ T331] ? __netlink_lookup+0x387/0x3b0 [ 21.745959][ T331] rtnetlink_rcv+0x1c/0x20 [ 21.750464][ T331] netlink_unicast+0x86c/0xa30 [ 21.755230][ T331] netlink_sendmsg+0x879/0xb80 [ 21.759996][ T331] ? netlink_getsockopt+0x530/0x530 [ 21.765196][ T331] ? alloc_file+0x59/0x580 [ 21.769609][ T331] ? security_socket_sendmsg+0x82/0xa0 [ 21.775067][ T331] ? netlink_getsockopt+0x530/0x530 [ 21.780267][ T331] ____sys_sendmsg+0x5be/0x8f0 [ 21.785027][ T331] ? __sys_sendmsg_sock+0x40/0x40 [ 21.790050][ T331] ? import_iovec+0x7c/0xb0 [ 21.794551][ T331] ___sys_sendmsg+0x236/0x2e0 [ 21.799227][ T331] ? __sys_sendmsg+0x280/0x280 [ 21.803990][ T331] ? percpu_counter_add_batch+0x13c/0x160 [ 21.809713][ T331] ? __fdget+0x1a1/0x230 [ 21.813976][ T331] __x64_sys_sendmsg+0x201/0x2d0 [ 21.818917][ T331] ? ___sys_sendmsg+0x2e0/0x2e0 [ 21.823777][ T331] ? __kasan_check_write+0x14/0x20 [ 21.828896][ T331] ? switch_fpu_return+0x15d/0x2c0 [ 21.834011][ T331] x64_sys_call+0x4b/0x9a0 [ 21.838430][ T331] do_syscall_64+0x4c/0xa0 [ 21.842852][ T331] ? clear_bhb_loop+0x50/0xa0 [ 21.847530][ T331] ? clear_bhb_loop+0x50/0xa0 [ 21.852204][ T331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 21.858098][ T331] RIP: 0033:0x7f2a51269559 [ 21.862512][ T331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 21.882113][ T331] RSP: 002b:00007f2a4fcc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 21.890544][ T331] RAX: ffffffffffffffda RBX: 00007f2a514effa0 RCX: 00007f2a51269559 [ 21.898512][ T331] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 21.906483][ T331] RBP: 00007f2a51300b20 R08: 0000000000000000 R09: 0000000000000000 [ 21.914454][ T331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 21.922426][ T331] R13: 00007f2a514f0038 R14: 00007f2a514effa0 R15: 00007ffd1434f038 [ 21.930409][ T331] [ 22.504508][ T351] loop2: detected capacity change from 0 to 8192 [ 22.531568][ T351] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 22.593204][ T351] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 22.611050][ T351] FAT-fs (loop2): Filesystem has been set read-only [ 22.626185][ T361] loop0: detected capacity change from 0 to 512 [ 22.707726][ T361] EXT4-fs (loop0): Ignoring removed bh option [ 22.727103][ T361] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 22.766218][ T361] EXT4-fs error (device loop0): ext4_iget_extra_inode:4604: inode #15: comm syz.0.18: corrupted in-inode xattr [ 22.780947][ T361] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.18: couldn't read orphan inode 15 (err -117) [ 22.911455][ T361] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000873,init_itable=0x0000000000000009,init_itable,usrjquota=,max_batch_time=0x0000000000000000,norecovery,acl,,errors=continue. Quota mode: none. [ 23.030211][ T383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 23.137162][ T406] loop3: detected capacity change from 0 to 128 [ 23.152255][ T406] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 23.163820][ T406] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 23.184568][ T406] EXT4-fs (loop3): shut down requested (1) [ 23.187291][ T410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'. [ 23.192982][ T406] fscrypt (loop3, inode 12): Error -5 getting encryption context [ 23.207525][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 23.207536][ T30] audit: type=1400 audit(1792746261.660:131): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 23.236512][ T30] audit: type=1400 audit(1792746261.660:132): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.258748][ T30] audit: type=1400 audit(1792746261.660:133): avc: denied { write } for pid=411 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 23.277569][ T30] audit: type=1400 audit(1792746261.670:134): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.277590][ T30] audit: type=1400 audit(1792746261.670:135): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.277606][ T30] audit: type=1400 audit(1792746261.670:136): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 23.277623][ T30] audit: type=1400 audit(1792746261.670:137): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 23.277642][ T30] audit: type=1400 audit(1792746261.670:138): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 23.277660][ T30] audit: type=1400 audit(1792746261.680:139): avc: denied { ioctl } for pid=413 comm="syz.0.40" path="socket:[15762]" dev="sockfs" ino=15762 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 23.277679][ T30] audit: type=1400 audit(1792746261.680:140): avc: denied { read } for pid=415 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.626962][ T449] loop2: detected capacity change from 0 to 128 [ 23.662165][ T449] ======================================================= [ 23.662165][ T449] WARNING: The mand mount option has been deprecated and [ 23.662165][ T449] and is ignored by this kernel. Remove the mand [ 23.662165][ T449] option from the mount to silence this warning. [ 23.662165][ T449] ======================================================= [ 23.670773][ T456] device-mapper: table: 253:1: striped: Invalid chunk_size [ 23.705297][ T456] device-mapper: ioctl: error adding target to table [ 23.762320][ T449] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 23.774034][ T449] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 23.777919][ T462] loop3: detected capacity change from 0 to 256 [ 24.183478][ T484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 24.323763][ T501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=501 comm=syz.2.75 [ 24.347921][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.360804][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.373470][ T480] device bridge_slave_0 entered promiscuous mode [ 24.388304][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.416609][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.430604][ T480] device bridge_slave_1 entered promiscuous mode [ 24.442795][ T286] syz-executor (286) used greatest stack depth: 20864 bytes left [ 24.459161][ T10] device bridge_slave_1 left promiscuous mode [ 24.465701][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.481719][ T10] device bridge_slave_0 left promiscuous mode [ 24.494355][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.511272][ T10] device veth1_macvtap left promiscuous mode [ 24.521823][ T10] device veth0_vlan left promiscuous mode [ 26.379654][ C0] sched: RT throttling activated [ 27.583743][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.591087][ T510] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.598562][ T510] device bridge_slave_0 entered promiscuous mode [ 27.613018][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.620822][ T510] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.628326][ T510] device bridge_slave_1 entered promiscuous mode [ 27.683933][ T526] loop2: detected capacity change from 0 to 512 [ 27.714990][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.727304][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.783894][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.831336][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.850044][ T539] loop4: detected capacity change from 0 to 128 [ 27.875021][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.882626][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.908266][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.911171][ T545] loop2: detected capacity change from 0 to 2048 [ 27.925086][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.933753][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.940818][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.948260][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.958627][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.967091][ T539] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000005,,errors=continue. Quota mode: none. [ 27.981550][ T545] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.998588][ T545] EXT4-fs (loop2): shut down requested (2) [ 28.005919][ T539] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.016468][ T545] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 28.026154][ T545] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 28.035701][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.037718][ T545] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 28.082177][ T480] device veth0_vlan entered promiscuous mode [ 28.090686][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.106814][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.115629][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.124449][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.152964][ T480] device veth1_macvtap entered promiscuous mode [ 28.160584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.168799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.177300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.186086][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.193162][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.201896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.210563][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.217611][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.235179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.269987][ T608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 28.297130][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 28.297146][ T30] audit: type=1400 audit(1792746266.702:172): avc: denied { mount } for pid=605 comm="syz.2.114" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 28.340063][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.353387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.356501][ T30] audit: type=1400 audit(1792746266.702:173): avc: denied { search } for pid=605 comm="syz.2.114" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 28.374663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.383103][ T30] audit: type=1400 audit(1792746266.702:174): avc: denied { read write } for pid=605 comm="syz.2.114" name="filter" dev="tracefs" ino=2549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 28.392258][ T625] loop2: detected capacity change from 0 to 1024 [ 28.420107][ T30] audit: type=1400 audit(1792746266.702:175): avc: denied { open } for pid=605 comm="syz.2.114" path="/23/trace/events/sched/sched_switch/filter" dev="tracefs" ino=2549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 28.420827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.447696][ T30] audit: type=1400 audit(1792746266.702:176): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 28.474711][ T30] audit: type=1400 audit(1792746266.772:177): avc: denied { create } for pid=616 comm="syz.2.119" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.495861][ T30] audit: type=1400 audit(1792746266.772:178): avc: denied { read write } for pid=616 comm="syz.2.119" name="md0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.518656][ T30] audit: type=1400 audit(1792746266.772:179): avc: denied { open } for pid=616 comm="syz.2.119" path="/28/md0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.541411][ T30] audit: type=1400 audit(1792746266.782:180): avc: denied { unlink } for pid=287 comm="syz-executor" name="md0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.564035][ T625] EXT4-fs (loop2): Ignoring removed bh option [ 28.564068][ T611] netlink: 22 bytes leftover after parsing attributes in process `syz.3.113'. [ 28.587170][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.592587][ T625] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 28.596147][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.631960][ T30] audit: type=1400 audit(1792746267.072:181): avc: denied { ioctl } for pid=624 comm="syz.2.123" path="socket:[16972]" dev="sockfs" ino=16972 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.641637][ T635] tipc: Enabling of bearer rejected, failed to enable media [ 28.674805][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.685468][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.693974][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.702077][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.716339][ T639] loop5: detected capacity change from 0 to 512 [ 28.723560][ T510] device veth0_vlan entered promiscuous mode [ 28.735577][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.743936][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.754835][ T639] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.769854][ T510] device veth1_macvtap entered promiscuous mode [ 28.779244][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.786998][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.795646][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.799396][ T639] EXT4-fs (loop5): 1 orphan inode deleted [ 28.809926][ T639] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 28.822422][ T639] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.852450][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.896957][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.920586][ T660] loop6: detected capacity change from 0 to 512 [ 28.953828][ T668] loop5: detected capacity change from 0 to 256 [ 28.986914][ T660] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 29.468266][ T683] FAULT_INJECTION: forcing a failure. [ 29.468266][ T683] name failslab, interval 1, probability 0, space 0, times 0 [ 29.494411][ T10] device bridge_slave_1 left promiscuous mode [ 29.502479][ T683] CPU: 1 PID: 683 Comm: syz.5.141 Not tainted syzkaller #0 [ 29.509710][ T683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.513389][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.519768][ T683] Call Trace: [ 29.519774][ T683] [ 29.519780][ T683] __dump_stack+0x21/0x30 [ 29.519801][ T683] dump_stack_lvl+0x110/0x170 [ 29.519816][ T683] ? show_regs_print_info+0x20/0x20 [ 29.547161][ T683] ? kernfs_xattr_get+0x81/0x90 [ 29.552002][ T683] ? selinux_kernfs_init_security+0x143/0x450 [ 29.558059][ T683] dump_stack+0x15/0x20 [ 29.562216][ T683] should_fail+0x3ab/0x500 [ 29.566634][ T683] __should_failslab+0xa4/0xe0 [ 29.571583][ T683] should_failslab+0x9/0x20 [ 29.576093][ T683] slab_pre_alloc_hook+0x39/0xd0 [ 29.581034][ T683] ? __kernfs_new_node+0xe1/0x670 [ 29.586052][ T683] kmem_cache_alloc+0x44/0x260 [ 29.590902][ T683] __kernfs_new_node+0xe1/0x670 [ 29.595760][ T683] ? kernfs_new_node+0x260/0x260 [ 29.600688][ T683] ? rwsem_write_trylock+0x136/0x300 [ 29.605988][ T683] ? up_write+0x7b/0x290 [ 29.610242][ T683] ? kernfs_activate+0x35e/0x370 [ 29.615186][ T683] kernfs_new_node+0x150/0x260 [ 29.619945][ T683] __kernfs_create_file+0x4e/0x270 [ 29.625045][ T683] sysfs_add_file_mode_ns+0x29a/0x350 [ 29.630405][ T683] internal_create_group+0x492/0xd00 [ 29.636016][ T683] ? sysfs_create_group+0x30/0x30 [ 29.641030][ T683] ? __kasan_check_write+0x14/0x20 [ 29.646145][ T683] ? kernfs_put+0x44f/0x480 [ 29.650635][ T683] sysfs_create_groups+0x58/0x120 [ 29.655643][ T683] device_add_attrs+0x89/0x710 [ 29.660420][ T683] ? device_add+0x781/0xe90 [ 29.664915][ T683] device_add+0x5a2/0xe90 [ 29.669242][ T683] device_create+0x26c/0x300 [ 29.673826][ T683] ? root_device_unregister+0x80/0x80 [ 29.679208][ T683] ? vsnprintf+0x189d/0x1990 [ 29.683785][ T683] bdi_register_va+0x90/0x5f0 [ 29.688445][ T683] super_setup_bdi_name+0xf2/0x200 [ 29.693563][ T683] ? vfs_get_tree+0x260/0x260 [ 29.698524][ T683] ? _raw_spin_unlock+0x4d/0x70 [ 29.703369][ T683] ? fuse_dev_install+0x176/0x1b0 [ 29.708392][ T683] fuse_fill_super_common+0x9f4/0x1980 [ 29.713848][ T683] ? up_write+0x7b/0x290 [ 29.718078][ T683] ? register_shrinker_prepared+0xd7/0x100 [ 29.723902][ T683] fuse_fill_super+0xd2/0x250 [ 29.728599][ T683] get_tree_nodev+0xb3/0x160 [ 29.733186][ T683] ? fuse_reconfigure+0xb0/0xb0 [ 29.738116][ T683] fuse_get_tree+0x2d6/0x4e0 [ 29.742716][ T683] vfs_get_tree+0x89/0x260 [ 29.747115][ T683] do_new_mount+0x251/0xb40 [ 29.751598][ T683] ? security_capable+0x87/0xb0 [ 29.756439][ T683] path_mount+0x640/0xff0 [ 29.760764][ T683] __se_sys_mount+0x320/0x390 [ 29.765431][ T683] ? __x64_sys_mount+0xd0/0xd0 [ 29.770186][ T683] __x64_sys_mount+0xbf/0xd0 [ 29.774789][ T683] x64_sys_call+0x6bf/0x9a0 [ 29.779289][ T683] do_syscall_64+0x4c/0xa0 [ 29.783702][ T683] ? clear_bhb_loop+0x50/0xa0 [ 29.788380][ T683] ? clear_bhb_loop+0x50/0xa0 [ 29.793041][ T683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.798935][ T683] RIP: 0033:0x7f2d132627ca [ 29.803335][ T683] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.823011][ T683] RSP: 002b:00007f2d11cb8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 29.831417][ T683] RAX: ffffffffffffffda RBX: 00007f2d11cb8ee0 RCX: 00007f2d132627ca [ 29.839693][ T683] RDX: 00002000000002c0 RSI: 0000200000000300 RDI: 0000000000000000 [ 29.847757][ T683] RBP: 00002000000002c0 R08: 00007f2d11cb8ee0 R09: 0000000000000000 [ 29.855744][ T683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000300 [ 29.863784][ T683] R13: 00007f2d11cb8ea0 R14: 0000000000000000 R15: 0000200000000340 [ 29.871745][ T683] [ 29.947191][ T691] loop6: detected capacity change from 0 to 512 [ 29.950568][ T10] device bridge_slave_0 left promiscuous mode [ 29.986335][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.999744][ T703] loop2: detected capacity change from 0 to 256 [ 30.002088][ T691] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 30.023929][ T10] device veth1_macvtap left promiscuous mode [ 30.030189][ T10] device veth0_vlan left promiscuous mode [ 30.060865][ T691] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.175143][ T712] loop2: detected capacity change from 0 to 256 [ 30.209186][ T712] FAT-fs (loop2): Directory bread(block 64) failed [ 30.215740][ T712] FAT-fs (loop2): Directory bread(block 65) failed [ 30.222513][ T712] FAT-fs (loop2): Directory bread(block 66) failed [ 30.229059][ T712] FAT-fs (loop2): Directory bread(block 67) failed [ 30.235674][ T712] FAT-fs (loop2): Directory bread(block 68) failed [ 30.242196][ T712] FAT-fs (loop2): Directory bread(block 69) failed [ 30.248878][ T712] FAT-fs (loop2): Directory bread(block 70) failed [ 30.255806][ T712] FAT-fs (loop2): Directory bread(block 71) failed [ 30.262385][ T712] FAT-fs (loop2): Directory bread(block 72) failed [ 30.269144][ T712] FAT-fs (loop2): Directory bread(block 73) failed [ 31.734200][ T719] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 32.007363][ T736] bridge0: port 1(bridge_slave_0) entered listening state [ 32.023493][ T736] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.968436][ T747] set_capacity_and_notify: 1 callbacks suppressed [ 32.968452][ T747] loop5: detected capacity change from 0 to 512 [ 33.063658][ T757] loop6: detected capacity change from 0 to 512 [ 33.064619][ T753] loop2: detected capacity change from 0 to 8192 [ 33.127069][ T531] loop2: p1[EZD] p3 p4 [ 33.140021][ T531] loop2: p3 start 150994944 is beyond EOD, truncated [ 33.157602][ T757] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 33.158115][ T753] loop2: p1[EZD] p3 p4 [ 33.168908][ T757] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.189204][ T753] loop2: p3 start 150994944 is beyond EOD, truncated [ 33.198390][ T782] loop5: detected capacity change from 0 to 512 [ 33.205392][ T783] netlink: 'syz.4.181': attribute type 4 has an invalid length. [ 33.228348][ T783] syz.4.181 (783) used greatest stack depth: 19840 bytes left [ 33.242809][ T789] futex_wake_op: syz.6.182 tries to shift op by 32; fix this program [ 33.247791][ T782] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 33.263662][ T782] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.288835][ T782] EXT4-fs error (device loop5): ext4_get_first_dir_block:3599: inode #12: comm syz.5.180: Directory hole found for htree leaf block 0 [ 33.304697][ T797] loop6: detected capacity change from 0 to 512 [ 33.316705][ T797] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.347652][ T759] udevd[759]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 33.362369][ T532] udevd[532]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 33.384087][ T759] udevd[759]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 33.398300][ T532] udevd[532]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 33.427535][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 33.427549][ T30] audit: type=1400 audit(1792746271.884:211): avc: denied { bind } for pid=816 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.453339][ T815] FAULT_INJECTION: forcing a failure. [ 33.453339][ T815] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 33.469274][ T815] CPU: 0 PID: 815 Comm: syz.6.193 Not tainted syzkaller #0 [ 33.477120][ T815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.487517][ T815] Call Trace: [ 33.490904][ T815] [ 33.493910][ T815] __dump_stack+0x21/0x30 [ 33.498426][ T815] dump_stack_lvl+0x110/0x170 [ 33.503094][ T815] ? show_regs_print_info+0x20/0x20 [ 33.508938][ T815] ? ttwu_do_activate+0x179/0x2a0 [ 33.514655][ T815] dump_stack+0x15/0x20 [ 33.519151][ T815] should_fail+0x3ab/0x500 [ 33.524031][ T815] should_fail_alloc_page+0x55/0x80 [ 33.530193][ T815] prepare_alloc_pages+0x13f/0x590 [ 33.535575][ T815] ? __alloc_pages_bulk+0xab0/0xab0 [ 33.540949][ T815] __alloc_pages+0x11d/0x460 [ 33.545723][ T815] ? unlock_page_memcg+0x114/0x130 [ 33.551445][ T815] ? prep_new_page+0x110/0x110 [ 33.556207][ T815] ? page_remove_rmap+0xc6d/0xf40 [ 33.561223][ T815] ? page_add_file_rmap+0x700/0x700 [ 33.566575][ T815] ? mark_page_accessed+0x3a8/0x8e0 [ 33.572727][ T815] __get_free_pages+0x10/0x30 [ 33.577850][ T815] __tlb_remove_page_size+0x18a/0x310 [ 33.583666][ T815] unmap_page_range+0x1059/0x1e00 [ 33.588944][ T815] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 33.595810][ T815] unmap_vmas+0x26d/0x380 [ 33.600131][ T815] ? unmap_page_range+0x1e00/0x1e00 [ 33.605877][ T815] ? __kasan_check_write+0x14/0x20 [ 33.611275][ T815] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 33.616943][ T815] exit_mmap+0x412/0x8b0 [ 33.621588][ T815] ? vm_brk+0x30/0x30 [ 33.625753][ T815] ? mutex_unlock+0x8f/0x230 [ 33.630338][ T815] ? uprobe_clear_state+0x2c6/0x320 [ 33.635675][ T815] __mmput+0x92/0x300 [ 33.640712][ T815] mmput+0x50/0x150 [ 33.644519][ T815] do_exit+0xacc/0x29a0 [ 33.649146][ T815] ? avc_denied+0x1b0/0x1b0 [ 33.653640][ T815] ? put_task_struct+0x90/0x90 [ 33.658734][ T815] ? __kasan_check_write+0x14/0x20 [ 33.664045][ T815] ? mutex_unlock+0x8f/0x230 [ 33.669341][ T815] ? __kasan_check_write+0x14/0x20 [ 33.675239][ T815] ? _raw_spin_lock_irq+0x95/0xf0 [ 33.680264][ T815] do_group_exit+0x149/0x310 [ 33.685202][ T815] ? __kasan_check_write+0x14/0x20 [ 33.690501][ T815] ? recalc_sigpending+0x1ac/0x230 [ 33.696913][ T815] get_signal+0x64f/0x1430 [ 33.702060][ T815] arch_do_signal_or_restart+0xe2/0x1100 [ 33.707954][ T815] ? __kasan_check_write+0x14/0x20 [ 33.714856][ T815] ? mutex_unlock+0x8f/0x230 [ 33.720702][ T815] ? __kasan_check_write+0x14/0x20 [ 33.726075][ T815] ? get_sigframe_size+0x10/0x10 [ 33.731455][ T815] ? __se_sys_futex+0x135/0x330 [ 33.737175][ T815] exit_to_user_mode_loop+0xa7/0xe0 [ 33.742453][ T815] exit_to_user_mode_prepare+0x87/0xd0 [ 33.748345][ T815] syscall_exit_to_user_mode+0x1a/0x30 [ 33.753798][ T815] do_syscall_64+0x58/0xa0 [ 33.758265][ T815] ? clear_bhb_loop+0x50/0xa0 [ 33.764419][ T815] ? clear_bhb_loop+0x50/0xa0 [ 33.769238][ T815] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.775576][ T815] RIP: 0033:0x7fd15a73f559 [ 33.780028][ T815] Code: Unable to access opcode bytes at RIP 0x7fd15a73f52f. [ 33.787769][ T815] RSP: 002b:00007fd1591970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 33.796889][ T815] RAX: fffffffffffffe00 RBX: 00007fd15a9c5fa8 RCX: 00007fd15a73f559 [ 33.805892][ T815] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd15a9c5fa8 [ 33.815037][ T815] RBP: 00007fd15a9c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 33.825648][ T815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.834069][ T815] R13: 00007fd15a9c6038 R14: 00007ffe0fe00890 R15: 00007ffe0fe00978 [ 33.842786][ T815] [ 33.863085][ T471] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.875779][ T30] audit: type=1400 audit(1792746271.884:212): avc: denied { setopt } for pid=816 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.879866][ T471] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.925646][ T30] audit: type=1400 audit(1792746272.315:213): avc: denied { read write } for pid=824 comm="syz.2.199" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.972040][ T30] audit: type=1400 audit(1792746272.315:214): avc: denied { open } for pid=824 comm="syz.2.199" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 34.010195][ T828] fido_id[828]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.031681][ T841] device-mapper: table: 253:2: thin-pool: unknown target type [ 34.044717][ T30] audit: type=1400 audit(1792746272.375:215): avc: denied { mount } for pid=829 comm="syz.2.202" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 34.072314][ T841] device-mapper: ioctl: error adding target to table [ 34.089249][ T30] audit: type=1400 audit(1792746272.425:216): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 34.111899][ T30] audit: type=1400 audit(1792746272.535:217): avc: denied { search } for pid=850 comm="syz.6.211" name="/" dev="configfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 34.137322][ T30] audit: type=1400 audit(1792746272.545:218): avc: denied { unmount } for pid=510 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 34.198434][ T857] netlink: 60 bytes leftover after parsing attributes in process `syz.3.215'. [ 34.290458][ T30] audit: type=1400 audit(1792746272.745:219): avc: denied { create } for pid=862 comm="syz.6.217" dev="anon_inodefs" ino=17746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.344245][ T30] audit: type=1400 audit(1792746272.765:220): avc: denied { ioctl } for pid=862 comm="syz.6.217" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17746 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.493251][ T887] loop6: detected capacity change from 0 to 256 [ 34.500860][ T886] netlink: 36 bytes leftover after parsing attributes in process `syz.4.227'. [ 34.512066][ T886] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.519985][ T886] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.558669][ T893] loop5: detected capacity change from 0 to 2048 [ 34.883385][ T893] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.597885][ T913] tipc: Started in network mode [ 35.611147][ T913] tipc: Node identity 4, cluster identity 4711 [ 35.625623][ T913] tipc: Node number set to 4 [ 35.686694][ T916] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 35.741781][ T924] FAULT_INJECTION: forcing a failure. [ 35.741781][ T924] name failslab, interval 1, probability 0, space 0, times 0 [ 35.754763][ T924] CPU: 0 PID: 924 Comm: syz.6.242 Not tainted syzkaller #0 [ 35.762189][ T924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.773351][ T924] Call Trace: [ 35.776686][ T924] [ 35.780058][ T924] __dump_stack+0x21/0x30 [ 35.784883][ T924] dump_stack_lvl+0x110/0x170 [ 35.790463][ T924] ? show_regs_print_info+0x20/0x20 [ 35.796731][ T924] ? __kasan_check_write+0x14/0x20 [ 35.803650][ T924] dump_stack+0x15/0x20 [ 35.808634][ T924] should_fail+0x3ab/0x500 [ 35.814976][ T924] __should_failslab+0xa4/0xe0 [ 35.821069][ T924] should_failslab+0x9/0x20 [ 35.826029][ T924] slab_pre_alloc_hook+0x39/0xd0 [ 35.831862][ T924] __kmalloc+0x6d/0x2c0 [ 35.836761][ T924] ? __kasan_check_write+0x14/0x20 [ 35.842436][ T924] ? __tty_buffer_request_room+0x1da/0x4f0 [ 35.848642][ T924] __tty_buffer_request_room+0x1da/0x4f0 [ 35.854835][ T924] tty_insert_flip_string_and_push_buffer+0x82/0x390 [ 35.863124][ T924] ? __kasan_check_write+0x14/0x20 [ 35.868739][ T924] ? wait_for_completion_killable_timeout+0x10/0x10 [ 35.877095][ T924] pty_write+0xae/0xf0 [ 35.882123][ T924] n_tty_write+0x5d5/0x1220 [ 35.887680][ T924] ? n_tty_read+0x1a40/0x1a40 [ 35.893550][ T924] ? wait_woken+0x170/0x170 [ 35.899413][ T924] ? __check_object_size+0x2dd/0x3b0 [ 35.906841][ T924] file_tty_write+0x523/0x8c0 [ 35.912196][ T924] ? n_tty_read+0x1a40/0x1a40 [ 35.917320][ T924] tty_write+0x3c/0x50 [ 35.922219][ T924] vfs_write+0x831/0xfd0 [ 35.927617][ T924] ? file_end_write+0x1b0/0x1b0 [ 35.933395][ T924] ? __fget_files+0x2e1/0x340 [ 35.938669][ T924] ? __fdget_pos+0x1f7/0x380 [ 35.944005][ T924] ? ksys_write+0x70/0x260 [ 35.949296][ T924] ksys_write+0x14a/0x260 [ 35.953708][ T924] ? __ia32_sys_read+0x90/0x90 [ 35.958482][ T924] ? __kasan_check_write+0x14/0x20 [ 35.964206][ T924] ? switch_fpu_return+0x15d/0x2c0 [ 35.969425][ T924] __x64_sys_write+0x7b/0x90 [ 35.974010][ T924] x64_sys_call+0x8ef/0x9a0 [ 35.978495][ T924] do_syscall_64+0x4c/0xa0 [ 35.983621][ T924] ? clear_bhb_loop+0x50/0xa0 [ 35.988575][ T924] ? clear_bhb_loop+0x50/0xa0 [ 35.993268][ T924] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.999232][ T924] RIP: 0033:0x7fd15a73f559 [ 36.004116][ T924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.024786][ T924] RSP: 002b:00007fd159197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 36.033854][ T924] RAX: ffffffffffffffda RBX: 00007fd15a9c5fa0 RCX: 00007fd15a73f559 [ 36.042880][ T924] RDX: 000000000000bfb3 RSI: 00002000000001c0 RDI: 0000000000000004 [ 36.051184][ T924] RBP: 00007fd15a7d6b20 R08: 0000000000000000 R09: 0000000000000000 [ 36.059846][ T924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.067889][ T924] R13: 00007fd15a9c6038 R14: 00007fd15a9c5fa0 R15: 00007ffe0fe00978 [ 36.075855][ T924] [ 36.126995][ T942] loop6: detected capacity change from 0 to 512 [ 36.147074][ T942] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 36.159449][ T942] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.249: bg 0: block 104: invalid block bitmap [ 36.172349][ T942] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 36.182224][ T942] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.249: invalid indirect mapped block 1 (level 1) [ 36.197069][ T942] EXT4-fs (loop6): 1 truncate cleaned up [ 36.203092][ T942] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.217751][ T942] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 36.227531][ T942] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 36.242286][ T942] overlayfs: failed to look up (fi) for ino (-13) [ 36.497410][ T959] loop2: detected capacity change from 0 to 512 [ 36.528496][ T959] EXT4-fs (loop2): Ignoring removed nobh option [ 36.541111][ T959] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 36.545307][ T961] ------------[ cut here ]------------ [ 36.556295][ T961] kernel BUG at drivers/android/binder.c:1330! [ 36.562470][ T961] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 36.568884][ T961] CPU: 1 PID: 961 Comm: syz.5.256 Not tainted syzkaller #0 [ 36.576603][ T961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.586755][ T961] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 36.593275][ T961] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 c4 de 10 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 2d 5e d1 fd <0f> 0b 65 8b 05 2c 94 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 68 5b e9 [ 36.613848][ T961] RSP: 0018:ffffc90000b47370 EFLAGS: 00010283 [ 36.619929][ T961] RAX: ffffffff83987d13 RBX: 0000000000000000 RCX: 0000000000080000 [ 36.628091][ T961] RDX: ffffc90001169000 RSI: 0000000000000037 RDI: 0000000000000038 [ 36.636251][ T961] RBP: ffffc90000b47410 R08: ffff8881323fe13f R09: ffff8881323fe130 [ 36.644330][ T961] R10: dffffc0000000000 R11: ffffed102647fc28 R12: dffffc0000000000 [ 36.652566][ T961] R13: ffff8881323fe728 R14: ffff8881323fe710 R15: 0000000000000000 [ 36.660643][ T961] FS: 00007f2d11cb96c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.669753][ T961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.671743][ T959] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 36.676433][ T961] CR2: 00007fc1a0ec7ff8 CR3: 000000013349a000 CR4: 00000000003506a0 [ 36.676455][ T961] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.676464][ T961] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.676474][ T961] Call Trace: [ 36.676480][ T961] [ 36.676489][ T961] binder_thread_write+0x1497/0x6fe0 [ 36.685031][ T959] EXT4-fs (loop2): orphan cleanup on readonly fs [ 36.692879][ T961] ? __kasan_check_write+0x14/0x20 [ 36.692913][ T961] ? binder_ioctl_get_freezer_info+0x470/0x470 [ 36.702429][ T959] EXT4-fs (loop2): ext4_process_orphan: truncating inode 11 to 17031 bytes [ 36.709626][ T961] ? finish_task_switch+0x16b/0x790 [ 36.709654][ T961] ? switch_mm_irqs_off+0x2f0/0x960 [ 36.709669][ T961] ? __schedule+0xbd7/0x14a0 [ 36.709687][ T961] ? release_firmware_map_entry+0x190/0x190 [ 36.709703][ T961] ? check_preempt_wakeup+0x725/0xbb0 [ 36.713673][ T959] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.255: attempt to clear invalid blocks 1024 len 1 [ 36.716018][ T961] ? __kasan_check_write+0x14/0x20 [ 36.716042][ T961] ? _copy_from_user+0x95/0xd0 [ 36.716057][ T961] binder_ioctl_write_read+0x203/0x6700 [ 36.722434][ T959] EXT4-fs (loop2): Remounting filesystem read-only [ 36.728165][ T961] ? schedule_preempt_disabled+0x20/0x20 [ 36.728192][ T961] ? ttwu_do_wakeup+0x100/0x470 [ 36.728208][ T961] ? preempt_schedule_thunk+0x16/0x18 [ 36.728225][ T961] ? try_to_wake_up+0x632/0x1150 [ 36.728242][ T961] ? __kasan_check_write+0x14/0x20 [ 36.728259][ T961] ? wake_up_q+0x106/0x1b0 [ 36.734040][ T959] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.255: bg 0: block 361: padding at end of block bitmap is not set [ 36.740913][ T961] ? futex_wake+0x64b/0x8f0 [ 36.740941][ T961] ? binder_has_work_ilocked+0x3e0/0x3e0 [ 36.740957][ T961] ? avc_has_extended_perms+0x869/0xed0 [ 36.740973][ T961] ? memcpy+0x56/0x70 [ 36.740990][ T961] ? avc_has_extended_perms+0x9d5/0xed0 [ 36.750395][ T959] EXT4-fs (loop2): Remounting filesystem read-only [ 36.755008][ T961] ? __kasan_check_write+0x14/0x20 [ 36.755032][ T961] ? avc_flush+0x2b0/0x2b0 [ 36.755046][ T961] ? do_futex+0xdd3/0x2800 [ 36.755062][ T961] ? __kasan_check_write+0x14/0x20 [ 36.760599][ T959] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 36.764984][ T961] ? _raw_spin_lock+0x94/0xf0 [ 36.765004][ T961] ? _raw_spin_trylock_bh+0x150/0x150 [ 36.765019][ T961] ? _raw_spin_unlock+0x4d/0x70 [ 36.765034][ T961] binder_ioctl+0x36c/0x1df0 [ 36.771436][ T959] EXT4-fs (loop2): Remounting filesystem read-only [ 36.776512][ T961] ? vma_link+0x1a0/0x1f0 [ 36.776533][ T961] ? ioctl_has_perm+0x1b8/0x4f0 [ 36.776549][ T961] ? binder_poll+0x2d0/0x2d0 [ 36.792018][ T959] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.255: invalid indirect mapped block 1811939328 (level 0) [ 36.800912][ T961] ? has_cap_mac_admin+0x370/0x370 [ 36.800943][ T961] ? selinux_file_ioctl+0x3ad/0x4c0 [ 36.800960][ T961] ? selinux_file_alloc_security+0x120/0x120 [ 36.800976][ T961] ? __fget_files+0x2e1/0x340 [ 36.800991][ T961] ? security_file_ioctl+0x84/0xa0 [ 36.811418][ T959] EXT4-fs (loop2): Remounting filesystem read-only [ 36.816889][ T961] ? binder_poll+0x2d0/0x2d0 [ 36.816910][ T961] __se_sys_ioctl+0x121/0x1a0 [ 36.816930][ T961] __x64_sys_ioctl+0x7b/0x90 [ 36.816946][ T961] x64_sys_call+0x2f/0x9a0 [ 36.823873][ T959] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.255: invalid indirect mapped block 2185560079 (level 1) [ 36.829501][ T961] do_syscall_64+0x4c/0xa0 [ 36.829527][ T961] ? clear_bhb_loop+0x50/0xa0 [ 36.829541][ T961] ? clear_bhb_loop+0x50/0xa0 [ 36.829555][ T961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.829570][ T961] RIP: 0033:0x7f2d13261559 [ 36.829584][ T961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.835190][ T959] EXT4-fs (loop2): Remounting filesystem read-only [ 36.840386][ T961] RSP: 002b:00007f2d11cb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.840411][ T961] RAX: ffffffffffffffda RBX: 00007f2d134e7fa0 RCX: 00007f2d13261559 [ 36.840423][ T961] RDX: 00002000000004c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 36.846085][ T959] EXT4-fs (loop2): 1 truncate cleaned up [ 36.850780][ T961] RBP: 00007f2d132f8b20 R08: 0000000000000000 R09: 0000000000000000 [ 36.850796][ T961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.850805][ T961] R13: 00007f2d134e8038 R14: 00007f2d134e7fa0 R15: 00007ffc8ebbf208 [ 36.855642][ T959] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 36.869896][ T961] [ 36.869907][ T961] Modules linked in: [ 36.870233][ T961] ---[ end trace bc8b773cf90bbf6b ]--- [ 37.197766][ T961] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 37.204290][ T961] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 c4 de 10 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 2d 5e d1 fd <0f> 0b 65 8b 05 2c 94 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 68 5b e9 [ 37.224279][ T961] RSP: 0018:ffffc90000b47370 EFLAGS: 00010283 [ 37.230766][ T961] RAX: ffffffff83987d13 RBX: 0000000000000000 RCX: 0000000000080000 [ 37.239199][ T961] RDX: ffffc90001169000 RSI: 0000000000000037 RDI: 0000000000000038 [ 37.247693][ T961] RBP: ffffc90000b47410 R08: ffff8881323fe13f R09: ffff8881323fe130 [ 37.255842][ T961] R10: dffffc0000000000 R11: ffffed102647fc28 R12: dffffc0000000000 [ 37.264034][ T961] R13: ffff8881323fe728 R14: ffff8881323fe710 R15: 0000000000000000 [ 37.272014][ T961] FS: 00007f2d11cb96c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.280944][ T961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.287539][ T961] CR2: 00007fc1a0ec7ff8 CR3: 000000013349a000 CR4: 00000000003506a0 [ 37.295696][ T961] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.304006][ T961] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.312745][ T961] Kernel panic - not syncing: Fatal exception [ 37.319023][ T961] Kernel Offset: disabled [ 37.323434][ T961] Rebooting in 86400 seconds..