last executing test programs: 49.43600695s ago: executing program 2 (id=784): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff7, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x8000, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x8004) 49.397344322s ago: executing program 2 (id=785): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 49.304220686s ago: executing program 2 (id=786): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xab, &(0x7f0000000040)={0x1d, 0x0, 0xd, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x9, &(0x7f0000001240)}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 48.317921555s ago: executing program 2 (id=791): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x3a008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x102801, 0xb, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdx:De', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd29, 0x9, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) ioctl$int_out(r0, 0x2, &(0x7f00000001c0)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0x9, 0x8, 0x0) r3 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f000043a000/0x4000)=nil) write$tun(r4, &(0x7f0000000380)={@void, @val={0x3, 0x3, 0x8, 0x406, 0x401, 0x1ff}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x3, 0x600, 0x67, 0x0, 0xff, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0xb, 0x0, 0x7}, {"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"}}}}, 0x60a) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r3, &(0x7f0000304000/0x2000)=nil, 0x1000) 47.790998282s ago: executing program 2 (id=797): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe44bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x7, 0x100}, 0x15108, 0x0, 0x43a1bd76, 0x7, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 47.416503681s ago: executing program 2 (id=800): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) fsopen(0x0, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 32.35426849s ago: executing program 32 (id=800): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) fsopen(0x0, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 15.566223876s ago: executing program 5 (id=1110): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") symlink(0x0, 0x0) mknod(&(0x7f0000000040)='mnt\x00', 0x8001420, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000bbdffc)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB]) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000001c0)={0x9, 0x3fffffffc04, 0x5, 0x9}) quotactl$Q_QUOTAON(0xffffffff80000101, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 15.189191964s ago: executing program 5 (id=1114): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) inotify_init() bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x143142, 0x80) pipe(&(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006800e97800000000000000000a000000000000000800", @ANYRES64=r0], 0x20}}, 0x0) 14.976237074s ago: executing program 5 (id=1116): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x4580, 0x3ff, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = io_uring_setup(0x6572, &(0x7f0000000100)={0x0, 0x76b4, 0x800, 0x0, 0xfffff7ff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close_range(r0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="629e1575f331e4e06453647408aecff9012971ea167e69a8c19eb144aedc8172a830059d233ce81bbd0e20bbbdffe8c9fe3def844ff7967958f1032f64cad87f766f", 0x42, 0x80, 0x0, 0x0) 14.733408057s ago: executing program 5 (id=1119): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$eJzs3c9rHGUfAPDvbJOmb9vXpODBimCgBwulG5vWUkGkogcpVop689Bud7ehZLdbspvShIpWFMGTSPHsj5M3/wFRBL15FDx7kkKRUi+CsDLb2bjt7jabNJtV9/OBCc8zM5tnvjszz/Mkz8NMAGNrNv2Ri9gfER8lEdPZ+iQiJlupiYiTd/e7c/taMV2SaDZf/y1p7ZPmo+MzqT1Z5rGI+O79iEO57nLrK6uLhUqlvJTl5xrVy3P1ldXDF6uFhfJC+dL88WePzp+Yf+bE/JbF+sd7r54/9dVLX9x498dfXnvr1JNJnIy92bbOOLbKbMxm38lk+hXe48WtLmzEklEfAJuS3po77t7lsT+mY0crBQD8l70dEU0AYMwk2n8AGDPt/wO0x/aGMQ72T3brhYjY1Sv+iWzMbldrHHT3neSekZEkIma2oPzZiLj65gdfp0sMaRwSoJd3rkfEuZnZ7vov6ZqzsFFPD7DP7H159R9sn2/T/s+JXv2f3Fr/J3r0f6Z63Lubsf79n7u5BcX0lfb/nuvZ/12btDazI8v9v9Xnm0wuXKyU07rtkYg4GJNTaf7IA8o49vHzP/Tb1tn/S5e0/HZfMDuOmxNT936mVGgUHibmTreuRzw+0Sv+ZO38J336v2cGLKPx/ROf99u2fvzD1fws4qme5//vGW1Jx/zEqeianzjXuh7m2ldFt/yH0/v6lT/q+NPzv/vB8c8knfM16xsv46dP/ny537bNXv87kzda6Z3ZuquFRmPpSMTO5JXu9R1TSNv59v5p/AcPPLj+63X9p38Tnhsw/sVPvzy/+fiHK42/tKHzv/HEgZ+/6R1PM5ttvO75P9ZKHczWDFL/DXqAD/PdAQAAAAAAAAAAAAAAAAAAAAAAAMCgchGxN5Jcfi2dy+Xzd9/h/WjszlVq9cahC7XlS6VovSt7JiZz7SddTnc8D/VI9jz8dn7+vvzRiNgXETem/tfK54u1SmnUwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZk+f9/+nfp0a9dEBAEOza9QHAABsO+0/AIwf7T8AjB/tPwCMH+0/AIwf7T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDdub06XRp/n77WjHNl66sLC/WrhwuleuL+epyMV+sLV3OL9RqC5Vyvlirrvf7KrXa5fnjsXx1rlGuN+bqK6tnq7XlS42zF6uFhfLZ8uS2RAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG1NfWV0sVCrlJQkJCYm1xKhrJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/h78CAAD//6LRHug=") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) fallocate(r1, 0x10, 0x2, 0x7fff) 14.193040034s ago: executing program 5 (id=1123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x8, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000500)="b9", 0x1, 0x48010, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x7}, @window={0x3, 0xa, 0x7}, @timestamp, @window={0x3, 0x0, 0x8}, @window={0x3, 0x8, 0x6}, @timestamp, @mss={0x2, 0xca1a}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 13.688154269s ago: executing program 5 (id=1127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r6, {}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20081054}, 0x24008088) 13.65627607s ago: executing program 33 (id=1127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r6, {}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20081054}, 0x24008088) 8.818690101s ago: executing program 4 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x180862) ioctl$LOOP_GET_STATUS(r2, 0x40081271, 0xfffffffffffffffe) 7.679536868s ago: executing program 4 (id=1166): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000300)="65f38e2d50", 0x5) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 4.975363023s ago: executing program 1 (id=1182): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r1, 0x3}, 0x80, 0x0}, 0x40011) 4.792276572s ago: executing program 1 (id=1184): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xeae7, 0x1000, 0x6, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r1, 0x2afd, 0x308b, 0xc, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c, 0x0}}], 0x1, 0x0) 4.105181206s ago: executing program 1 (id=1185): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x400c080}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x13, 0x0, 0xea66d49, &(0x7f0000000240)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 3.941543264s ago: executing program 3 (id=1187): shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 3.850316809s ago: executing program 3 (id=1188): r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x40000001, 0x343442) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r3, @ANYBLOB="34002f800c000200000000000000000008000100000000001c00038005000200020000000800040002000000080001"], 0x50}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x128, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9a71}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0xac, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2c}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6d8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x20010884) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b8010009eac4fd901006f626a72656600000c00044000000000000007"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = io_uring_setup(0x471b, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) r7 = syz_open_pts(r6, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x80}}, 0x0) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {0x0}], 0x3) 3.838142829s ago: executing program 6 (id=1189): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x40181}, 0x40004) syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc095, 0x4, @perf_bp={0x0, 0x1}, 0xa00, 0x0, 0x20000008, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.655856378s ago: executing program 6 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 2.954756384s ago: executing program 1 (id=1192): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @random="ded7457c2c96", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x8000000, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643f3bb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}, 0xa1}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1}, 0x2}], 0x2, 0x10043, 0x0) 2.934289924s ago: executing program 3 (id=1193): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, 0xffffffffffffffff, 0x0) 2.743595884s ago: executing program 6 (id=1195): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x1, {{}, 0x3}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)="23d1", 0x2}], 0x1, 0x0, 0x0, 0x1}, 0xc0) close_range(r0, 0xffffffffffffffff, 0x0) 2.727597835s ago: executing program 4 (id=1196): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xe369, 0x0, 0x2, 0x400252}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x10003, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000"], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r2, 0xd44, 0x44c1, 0x7, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000000480)=""/177, 0xb1, 0xe3) 2.137765314s ago: executing program 1 (id=1198): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffce0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bind$rds(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) open_by_handle_at(r2, &(0x7f0000000280)=ANY=[], 0x5a9600) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) 2.129776324s ago: executing program 0 (id=1199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r2, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000001800)="04", 0x1}], 0x1}}], 0x2, 0x44801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 2.02398209s ago: executing program 0 (id=1200): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x3, 0x5004) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.003678331s ago: executing program 6 (id=1201): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x9, 0xc64}, 0x10096, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) io_uring_enter(0xffffffffffffffff, 0x1733, 0x6323, 0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) 1.927000935s ago: executing program 3 (id=1202): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) 1.82000612s ago: executing program 4 (id=1203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0x5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x100, 0x9, 0x400da, r1, 0xc, '\x00', r2, r3, 0x0, 0x2, 0x8}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r5, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x12, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2, 0x3}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0x0, 0x40c4080) 1.603626871s ago: executing program 3 (id=1204): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r3 = syz_open_dev$vcsa(0x0, 0x7, 0x80000) statx(r3, &(0x7f00000001c0)='./bus\x00', 0x800, 0x100, &(0x7f00000004c0)) write(r2, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3ffff) 1.513155875s ago: executing program 0 (id=1205): ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0xd120, 0x10000000000, 0xfffffffd, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x89}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x8}, @ldst={0x1, 0x0, 0x4, 0xa, 0xa, 0x80, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @alu={0x7, 0x1, 0x4, 0x4, 0xb, 0x1, 0xffffffffffffffff}, @map_fd={0x18, 0x1}, @exit, @map_val={0x18, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x9b, &(0x7f0000000200)=""/155}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0xffffffff, [{0x0, 0x0, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6}, 0x28) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 1.384340351s ago: executing program 6 (id=1206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 1.362047823s ago: executing program 0 (id=1207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) sendto$inet6(r1, &(0x7f00000004c0)="1d", 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.00309089s ago: executing program 1 (id=1208): bpf$PROG_LOAD(0x5, 0x0, 0x0) getxattr(0x0, &(0x7f0000000080)=@known='user.incfs.metadata\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0423, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x102013, 0x0, 0x7, 0x7, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r4, 0x0, r0, 0x0, 0x1, 0x0) 918.695525ms ago: executing program 0 (id=1209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xff}, 0x14) 694.413126ms ago: executing program 4 (id=1210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x10}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 568.151812ms ago: executing program 3 (id=1211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r2, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000001800)="04", 0x1}], 0x1}}], 0x2, 0x44801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 284.388686ms ago: executing program 6 (id=1212): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000002c0)=0x10, 0x4) creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r2, 0x0, 0x0, 0x8800000) 283.681936ms ago: executing program 4 (id=1213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080)="1834", 0x2, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xff}, 0x14) 0s ago: executing program 0 (id=1214): clock_adjtime(0xffffffd3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) socket(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcb, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}}, 0x5c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ftruncate(r2, 0x80000001) kernel console output (not intermixed with test programs): 2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.552007][ T4361] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.572036][ T4363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 130.726619][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 130.737109][ T4365] netlink: 5 bytes leftover after parsing attributes in process `syz.1.179'. [ 130.965528][ T28] audit: type=1400 audit(1774533195.115:627): avc: denied { ioctl } for pid=4360 comm="syz.2.178" path="/37/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 131.228736][ T28] audit: type=1400 audit(1774533195.115:628): avc: denied { lock } for pid=4360 comm="syz.2.178" path="/37/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.629887][ T4381] lo: Caught tx_queue_len zero misconfig [ 132.678722][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.839094][ T4392] netlink: 44 bytes leftover after parsing attributes in process `syz.0.183'. [ 132.860613][ T4377] loop1: detected capacity change from 0 to 512 [ 133.013055][ T4377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.156297][ T28] audit: type=1400 audit(1774533197.265:629): avc: denied { setopt } for pid=4389 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.273993][ T4377] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.561688][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.678251][ T28] audit: type=1400 audit(1774533198.845:630): avc: denied { read } for pid=4403 comm="syz.1.189" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 135.152653][ T4407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'. [ 135.260468][ T28] audit: type=1400 audit(1774533199.225:631): avc: denied { open } for pid=4403 comm="syz.1.189" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 135.612505][ T4405] loop1: detected capacity change from 0 to 512 [ 135.812432][ T4405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.837673][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 135.869448][ T4405] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.890583][ T4420] netlink: 5 bytes leftover after parsing attributes in process `syz.3.191'. [ 135.953202][ T4405] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.593146][ T4432] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.188'. [ 136.602663][ T4432] netlink: zone id is out of range [ 136.607921][ T4432] netlink: zone id is out of range [ 136.613392][ T4432] netlink: zone id is out of range [ 136.619066][ T4432] netlink: zone id is out of range [ 136.624575][ T4432] netlink: del zone limit has 8 unknown bytes [ 136.640895][ T4432] loop4: detected capacity change from 0 to 512 [ 136.662829][ T4432] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.188: missing EA_INODE flag [ 136.674514][ T4432] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 136.675252][ T4432] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.188: error while reading EA inode 12 err=-117 [ 136.684460][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 136.684484][ C1] EXT4-fs (loop4): initial error at time 1774533200: ext4_xattr_inode_iget:441: inode 12 [ 136.684519][ C1] EXT4-fs (loop4): last error at time 1774533200: ext4_xattr_inode_iget:441: inode 12 [ 136.722815][ T4432] loop4: lost filesystem error report for type 5 error -117 [ 136.723903][ T4432] EXT4-fs (loop4): 1 orphan inode deleted [ 136.738415][ T4432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.574954][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.605429][ T28] audit: type=1400 audit(1774533201.775:632): avc: denied { read write } for pid=4403 comm="syz.1.189" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 137.664743][ T28] audit: type=1400 audit(1774533201.775:633): avc: denied { open } for pid=4403 comm="syz.1.189" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 137.845797][ T28] audit: type=1400 audit(1774533202.015:634): avc: denied { append } for pid=4462 comm="syz.1.210" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 138.021995][ T4477] loop2: detected capacity change from 0 to 164 [ 138.060499][ T28] audit: type=1400 audit(1774533202.215:635): avc: denied { mount } for pid=4475 comm="syz.2.215" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 138.102817][ T28] audit: type=1400 audit(1774533202.275:636): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 138.111562][ T4476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 138.136607][ T4476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 138.402563][ T4489] netlink: 36 bytes leftover after parsing attributes in process `syz.2.218'. [ 138.426282][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 138.605708][ T4493] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 138.624045][ T4476] netlink: 5 bytes leftover after parsing attributes in process `syz.1.214'. [ 138.652309][ T4495] loop2: detected capacity change from 0 to 256 [ 138.726893][ T4503] loop1: detected capacity change from 0 to 1024 [ 138.734618][ T4503] EXT4-fs: test_dummy_encryption option not supported [ 138.839576][ T4502] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.958935][ T4510] loop4: detected capacity change from 0 to 256 [ 138.966462][ T4510] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.071682][ T4512] loop1: detected capacity change from 0 to 512 [ 139.197437][ T4512] EXT4-fs (loop1): 1 orphan inode deleted [ 139.214203][ T4512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.230401][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 139.241472][ T4512] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.331406][ T3400] IPVS: starting estimator thread 0... [ 139.411123][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 139.471049][ T4510] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.518982][ T4517] IPVS: using max 2208 ests per chain, 110400 per kthread [ 139.748830][ T28] audit: type=1400 audit(1774533203.915:637): avc: denied { create } for pid=4525 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.073124][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 140.086946][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 140.547845][ T4550] loop3: detected capacity change from 0 to 1024 [ 140.592850][ T4550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 140.602697][ T4550] System zones: 0-1, 3-36 [ 140.614100][ T4550] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.240: bad orphan inode 134217728 [ 140.627316][ T4550] loop3: lost filesystem error report for type 5 error -117 [ 140.637788][ T4550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.722531][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.903483][ T28] audit: type=1400 audit(1774533205.075:638): avc: denied { nlmsg_read } for pid=4563 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.903500][ T4565] netlink: 'syz.0.257': attribute type 40 has an invalid length. [ 140.927916][ T4567] loop1: detected capacity change from 0 to 256 [ 140.947899][ T28] audit: type=1400 audit(1774533205.115:639): avc: denied { ioctl } for pid=4569 comm="syz.2.246" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.132408][ T4568] loop4: detected capacity change from 0 to 512 [ 141.164981][ T4587] __nla_validate_parse: 2 callbacks suppressed [ 141.165002][ T4587] netlink: 399 bytes leftover after parsing attributes in process `syz.1.258'. [ 141.189842][ T4587] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 141.201476][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.220517][ T4587] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 141.274266][ T4583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 141.285777][ T4583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 141.356500][ T4599] netlink: 'syz.3.259': attribute type 7 has an invalid length. [ 141.376108][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 141.376240][ T4568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.380131][ T4568] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.388025][ T4583] netlink: 5 bytes leftover after parsing attributes in process `syz.2.253'. [ 141.636419][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.760125][ T4622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 141.770078][ T4622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 142.209775][ T28] audit: type=1400 audit(1774533206.105:640): avc: denied { write } for pid=4619 comm="syz.2.271" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 144.205938][ T4626] loop4: detected capacity change from 0 to 1024 [ 144.235994][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 144.246552][ T4622] netlink: 5 bytes leftover after parsing attributes in process `syz.3.272'. [ 144.277232][ T4626] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 144.324341][ T4626] System zones: 0-1, 3-36 [ 144.352531][ T4626] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.270: bad orphan inode 134217728 [ 144.380764][ T4626] loop4: lost filesystem error report for type 5 error -117 [ 144.383761][ T4658] netlink: 132 bytes leftover after parsing attributes in process `syz.1.282'. [ 144.391325][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 144.391375][ C0] EXT4-fs (loop4): initial error at time 1774533208: ext4_orphan_get:1417 [ 144.391401][ C0] EXT4-fs (loop4): last error at time 1774533208: ext4_orphan_get:1417 [ 144.415717][ T4626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.016186][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.316223][ T28] audit: type=1400 audit(1774533209.475:641): avc: denied { watch watch_reads } for pid=4675 comm="syz.1.290" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 145.345430][ T4701] loop4: detected capacity change from 0 to 256 [ 146.206544][ T4722] __nla_validate_parse: 2 callbacks suppressed [ 146.206570][ T4722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.307'. [ 146.264003][ T4747] x_tables: unsorted underflow at hook 2 [ 146.484292][ T4757] netlink: 'syz.0.321': attribute type 64 has an invalid length. [ 146.606087][ T4762] netlink: 244 bytes leftover after parsing attributes in process `syz.4.323'. [ 147.224232][ T4785] netlink: 'syz.0.334': attribute type 21 has an invalid length. [ 147.242754][ T4784] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.329'. [ 147.252329][ T4784] netlink: zone id is out of range [ 147.257501][ T4784] netlink: zone id is out of range [ 147.262749][ T4784] netlink: zone id is out of range [ 147.268066][ T4784] netlink: zone id is out of range [ 147.273439][ T4784] netlink: del zone limit has 8 unknown bytes [ 147.291349][ T4784] loop4: detected capacity change from 0 to 512 [ 147.390854][ T4784] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.329: missing EA_INODE flag [ 147.402581][ T4784] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 147.403058][ T4784] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.329: error while reading EA inode 12 err=-117 [ 147.412232][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 147.412250][ C1] EXT4-fs (loop4): initial error at time 1774533211: ext4_xattr_inode_iget:441: inode 12 [ 147.412277][ C1] EXT4-fs (loop4): last error at time 1774533211: ext4_xattr_inode_iget:441: inode 12 [ 147.450482][ T4784] loop4: lost filesystem error report for type 5 error -117 [ 147.451277][ T4784] EXT4-fs (loop4): 1 orphan inode deleted [ 147.466453][ T4784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.939553][ T4810] netlink: 168 bytes leftover after parsing attributes in process `syz.0.345'. [ 147.968775][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.085571][ T4826] netlink: 'syz.1.352': attribute type 14 has an invalid length. [ 148.145041][ T28] audit: type=1400 audit(1774533212.315:642): avc: denied { write } for pid=4829 comm="syz.4.354" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 148.236383][ T28] audit: type=1400 audit(1774533212.315:643): avc: denied { open } for pid=4829 comm="syz.4.354" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 148.280803][ T4838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.358'. [ 148.375837][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 148.449287][ T3318] CPU: 0 UID: 0 PID: 3318 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 148.449323][ T3318] Tainted: [W]=WARN [ 148.449332][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.449349][ T3318] Call Trace: [ 148.449357][ T3318] [ 148.449365][ T3318] __dump_stack+0x1d/0x30 [ 148.449412][ T3318] dump_stack_lvl+0x95/0xd0 [ 148.449442][ T3318] dump_stack+0x15/0x1b [ 148.449472][ T3318] dump_header+0x80/0x240 [ 148.449502][ T3318] oom_kill_process+0x295/0x350 [ 148.449604][ T3318] out_of_memory+0x97d/0xb80 [ 148.449628][ T3318] try_charge_memcg+0x62e/0xa10 [ 148.449806][ T3318] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 148.449853][ T3318] __swap_cache_prepare_and_add+0x386/0x530 [ 148.449929][ T3318] swap_cache_alloc_folio+0xa2/0x120 [ 148.449963][ T3318] swap_cluster_readahead+0x36b/0x3d0 [ 148.450027][ T3318] swapin_readahead+0xde/0x840 [ 148.450061][ T3318] ? __rcu_read_unlock+0x4e/0x70 [ 148.450091][ T3318] ? __perf_event_task_sched_in+0xa65/0xad0 [ 148.450123][ T3318] ? __list_add_valid_or_report+0x38/0xe0 [ 148.450235][ T3318] ? __rcu_read_unlock+0x4e/0x70 [ 148.450263][ T3318] ? swap_cache_get_folio+0x26f/0x280 [ 148.450312][ T3318] do_swap_page+0x30d/0x2220 [ 148.450443][ T3318] ? __schedule+0x93c/0xd40 [ 148.450531][ T3318] ? __rcu_read_lock+0x36/0x50 [ 148.450558][ T3318] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 148.450593][ T3318] handle_mm_fault+0xb46/0x3020 [ 148.450704][ T3318] ? vma_start_read+0x1c7/0x2c0 [ 148.450735][ T3318] do_user_addr_fault+0x62f/0x1050 [ 148.450789][ T3318] ? trace_page_fault_user+0x1f/0xe0 [ 148.450832][ T3318] exc_page_fault+0x62/0xa0 [ 148.450909][ T3318] asm_exc_page_fault+0x26/0x30 [ 148.450979][ T3318] RIP: 0033:0x7fd28dee7917 [ 148.451017][ T3318] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 148.451041][ T3318] RSP: 002b:00007ffc92fdf5e0 EFLAGS: 00010202 [ 148.451064][ T3318] RAX: 0000000000000000 RBX: 000055558b122500 RCX: 00007fd28dee7917 [ 148.451082][ T3318] RDX: 00007ffc92fdf620 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.451098][ T3318] RBP: 00007ffc92fdf68c R08: 0000000000000000 R09: 0000000000000000 [ 148.451189][ T3318] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 148.451203][ T3318] R13: 00000000000927c0 R14: 00000000000240b4 R15: 00007ffc92fdf6e0 [ 148.451223][ T3318] [ 148.451230][ T3318] memory: usage 287352kB, limit 307200kB, failcnt 359 [ 148.708849][ T3318] memory+swap: usage 190012kB, limit 9007199254740988kB, failcnt 0 [ 148.737115][ T3318] kmem: usage 171260kB, limit 9007199254740988kB, failcnt 0 [ 148.778980][ T3318] Memory cgroup stats for /syz3: [ 148.779306][ T3318] cache 0 [ 148.810041][ T3318] rss 0 [ 148.812961][ T3318] shmem 0 [ 148.816117][ T3318] mapped_file 0 [ 148.879454][ T3318] dirty 0 [ 148.997206][ T3318] writeback 0 [ 149.009603][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 149.089564][ T3318] workingset_refault_anon 55 [ 149.123285][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 149.170680][ T3318] workingset_refault_file 512 [ 149.231469][ T3318] swap 180224 [ 149.417177][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 149.428739][ T3318] swapcached 184320 [ 149.432580][ T3318] pgpgin 73946 [ 149.435996][ T3318] pgpgout 73943 [ 149.446890][ T4837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.357'. [ 149.456965][ T4860] netlink: 5 bytes leftover after parsing attributes in process `syz.2.365'. [ 149.498567][ T3318] pgfault 69604 [ 149.523368][ T3318] pgmajfault 37 [ 149.545334][ T28] audit: type=1400 audit(1774533213.705:644): avc: denied { create } for pid=4869 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.578634][ T3318] inactive_anon 4096 [ 149.582587][ T3318] active_anon 0 [ 149.637326][ T28] audit: type=1400 audit(1774533213.785:645): avc: denied { getopt } for pid=4869 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.657738][ T3318] inactive_file 8192 [ 149.673509][ T3318] active_file 0 [ 149.714318][ T3318] unevictable 0 [ 149.728130][ T28] audit: type=1400 audit(1774533213.875:646): avc: denied { create } for pid=4875 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.749763][ T3318] hierarchical_memory_limit 314572800 [ 149.755166][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 149.849164][ T28] audit: type=1400 audit(1774533213.885:647): avc: denied { ioctl } for pid=4875 comm="syz.2.369" path="socket:[9235]" dev="sockfs" ino=9235 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.905946][ T3318] total_cache 0 [ 149.927488][ T4886] loop4: detected capacity change from 0 to 128 [ 149.942885][ T3318] total_rss 0 [ 149.987730][ T3318] total_shmem 0 [ 150.002348][ T4886] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.018707][ T3318] total_mapped_file 0 [ 150.022728][ T3318] total_dirty 0 [ 150.037477][ T4892] loop1: detected capacity change from 0 to 512 [ 150.056016][ T4886] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.067522][ T3318] total_writeback 0 [ 150.077764][ T3318] total_workingset_refault_anon 55 [ 150.086593][ T4892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.118754][ T3318] total_workingset_refault_file 512 [ 150.134157][ T3318] total_swap 180224 [ 150.138023][ T3318] total_swapcached 184320 [ 150.148629][ T3318] total_pgpgin 73946 [ 150.154320][ T3318] total_pgpgout 73943 [ 150.158406][ T3318] total_pgfault 69604 [ 150.172794][ T3318] total_pgmajfault 37 [ 150.182880][ T3318] total_inactive_anon 4096 [ 150.193019][ T3318] total_active_anon 0 [ 150.197063][ T3318] total_inactive_file 8192 [ 150.240509][ T28] audit: type=1400 audit(1774533214.415:648): avc: denied { setattr } for pid=4891 comm="syz.1.376" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 150.283219][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.306033][ T3318] total_active_file 0 [ 150.324318][ T3318] total_unevictable 0 [ 150.360330][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.337,pid=4793,uid=0 [ 150.397042][ T4898] loop2: detected capacity change from 0 to 1024 [ 150.406215][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.425072][ T4898] journal_path: Non-blockdev passed as './file1' [ 150.438934][ T3318] Memory cgroup out of memory: Killed process 4793 (syz.3.337) total-vm:96080kB, anon-rss:1224kB, file-rss:22084kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 150.456972][ T4898] EXT4-fs: error: could not find journal device path [ 150.737567][ T4910] Cannot find set identified by id 0 to match [ 150.752405][ T28] audit: type=1400 audit(1774533214.925:649): avc: denied { ioctl } for pid=4915 comm="syz.3.387" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 150.847081][ T4924] loop2: detected capacity change from 0 to 512 [ 150.883557][ T4924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.898695][ T4924] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.923951][ T28] audit: type=1400 audit(1774533215.095:650): avc: denied { setattr } for pid=4921 comm="syz.2.392" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.967551][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.992554][ T4934] loop1: detected capacity change from 0 to 764 [ 151.041590][ T4942] loop1: detected capacity change from 0 to 128 [ 151.103353][ T4952] Cannot find set identified by id 0 to match [ 151.173051][ T4942] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.194522][ T4942] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.208927][ T4942] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 127 (only 1 groups) [ 151.245078][ T4962] __nla_validate_parse: 4 callbacks suppressed [ 151.245096][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 151.262248][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.418036][ T28] audit: type=1400 audit(1774533215.585:651): avc: denied { getopt } for pid=4971 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.492272][ T4978] loop1: detected capacity change from 0 to 1024 [ 151.531532][ T4982] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 151.531532][ T4982] program syz.3.417 not setting count and/or reply_len properly [ 151.551401][ T4984] loop2: detected capacity change from 0 to 512 [ 151.567304][ T4978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.592274][ T4978] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks [ 151.616072][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 151.628284][ T4978] EXT4-fs warning (device loop1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 151.700185][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.799001][ T4970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.411'. [ 151.899384][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 152.002881][ T5040] loop4: detected capacity change from 0 to 128 [ 152.038823][ T5035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.076096][ T5035] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.121828][ T5052] EXT4-fs: Ignoring removed oldalloc option [ 152.139488][ T5035] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.441: bg 0: block 345: padding at end of block bitmap is not set [ 152.167190][ T5035] EXT4-fs (loop1): Remounting filesystem read-only [ 152.183074][ T5052] EXT4-fs (loop2): 1 truncate cleaned up [ 152.216363][ T5052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.258310][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.329068][ T5066] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 152.329077][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.395140][ T5081] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.411281][ T5083] set_capacity_and_notify: 4 callbacks suppressed [ 152.411300][ T5083] loop3: detected capacity change from 0 to 512 [ 152.513806][ T5083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.567572][ T5093] capability: warning: `syz.2.460' uses 32-bit capabilities (legacy support in use) [ 152.597634][ T5083] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.667185][ T5100] random: crng reseeded on system resumption [ 152.697560][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.776163][ T5112] netlink: 136 bytes leftover after parsing attributes in process `syz.0.469'. [ 153.046817][ T5118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 153.085617][ T5148] loop1: detected capacity change from 0 to 128 [ 153.200024][ T5157] loop3: detected capacity change from 0 to 164 [ 153.364722][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 153.364740][ T28] audit: type=1400 audit(1774533217.535:672): avc: denied { read write } for pid=5177 comm="syz.1.499" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 153.384893][ T5181] loop3: detected capacity change from 0 to 512 [ 153.403466][ T5179] deleting an unspecified loop device is not supported. [ 153.411295][ T28] audit: type=1400 audit(1774533217.575:673): avc: denied { open } for pid=5177 comm="syz.1.499" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 153.443390][ T5184] loop2: detected capacity change from 0 to 256 [ 153.470685][ T5181] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 153.501172][ T28] audit: type=1400 audit(1774533217.585:674): avc: denied { ioctl } for pid=5177 comm="syz.1.499" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 153.547374][ T5181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 153.560275][ T5181] System zones: 1-12 [ 153.569468][ T5181] EXT4-fs (loop3): 1 truncate cleaned up [ 153.590575][ T5181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.648104][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.699661][ T5202] loop1: detected capacity change from 0 to 512 [ 153.706456][ T5202] EXT4-fs: Ignoring removed bh option [ 153.754245][ T5202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.767142][ T5202] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.769279][ T28] audit: type=1400 audit(1774533217.935:675): avc: denied { read } for pid=5211 comm="syz.4.514" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 153.844392][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.876446][ T28] audit: type=1400 audit(1774533218.045:676): avc: granted { setsecparam } for pid=5219 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 153.929678][ T28] audit: type=1400 audit(1774533218.045:677): avc: granted { setsecparam } for pid=5219 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 153.966028][ T5231] loop4: detected capacity change from 0 to 512 [ 153.991886][ T5234] loop2: detected capacity change from 0 to 1024 [ 153.998438][ T28] audit: type=1400 audit(1774533218.065:678): avc: denied { read } for pid=5223 comm="syz.4.528" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 154.030509][ T5234] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 154.053726][ T5231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.084074][ T5234] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.522: lblock 2 mapped to illegal pblock 2 (length 1) [ 154.101688][ T5239] loop3: detected capacity change from 0 to 1024 [ 154.118498][ T5231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.120400][ T5239] EXT4-fs: inline encryption not supported [ 154.146407][ T5234] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 154.146605][ T5234] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 154.155736][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 154.155783][ C0] EXT4-fs (loop2): initial error at time 1774533218: ext4_map_blocks:776: inode 3: block 2 [ 154.155830][ C0] EXT4-fs (loop2): last error at time 1774533218: ext4_map_blocks:776: inode 3: block 2 [ 154.171829][ T5239] EXT4-fs: Ignoring removed nobh option [ 154.199850][ T5234] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.522: lblock 0 mapped to illegal pblock 48 (length 1) [ 154.218742][ T5231] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.240789][ T5234] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 154.241158][ T5234] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 154.256556][ T5239] EXT4-fs: Ignoring removed bh option [ 154.276212][ T5239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.297421][ T28] audit: type=1400 audit(1774533218.465:679): avc: denied { create } for pid=5237 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.307640][ T5234] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.522: Failed to acquire dquot type 0 [ 154.319781][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.347225][ T5232] loop1: detected capacity change from 0 to 1024 [ 154.349103][ T5234] loop2: lost filesystem error report for type 5 error -117 [ 154.366457][ T5234] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 154.389973][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.401241][ T5232] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 154.410588][ T5234] loop2: lost filesystem error report for type 5 error -117 [ 154.410769][ T5234] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.522: mark_inode_dirty error [ 154.429985][ T5232] System zones: 0-1, 3-36 [ 154.448651][ T5234] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 154.454404][ T5234] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 154.498930][ T5232] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.520: bad orphan inode 134217728 [ 154.568915][ T5232] loop1: lost filesystem error report for type 5 error -117 [ 154.571962][ T5234] EXT4-fs (loop2): 1 orphan inode deleted [ 154.579696][ T5252] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 154.593060][ T12] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.634540][ T5232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.639669][ T5234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.659702][ T12] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 154.664212][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 154.701557][ T12] loop2: lost filesystem error report for type 5 error -117 [ 154.733237][ T5257] netlink: 11 bytes leftover after parsing attributes in process `syz.4.532'. [ 154.761077][ T5234] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.522: Invalid inode table block 1 in block_group 0 [ 154.787954][ T5234] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 154.890566][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.900219][ T3321] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 154.949434][ T3321] loop2: lost filesystem error report for type 5 error -117 [ 154.952623][ T3321] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 154.992380][ T3321] loop2: lost filesystem error report for type 5 error -117 [ 154.992489][ T3321] EXT4-fs error (device loop2): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 155.024911][ T3321] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.175229][ T5273] IPVS: Scheduler module ip_vs_sip not found [ 155.390086][ T5287] EXT4-fs: inline encryption not supported [ 155.421789][ T5287] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 155.470381][ T5287] EXT4-fs (loop3): 1 truncate cleaned up [ 155.514158][ T5287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.711241][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.720967][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.748622][ T5298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.770062][ T5298] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.886342][ T5304] netlink: 'syz.2.548': attribute type 27 has an invalid length. [ 155.894268][ T5304] netlink: 164 bytes leftover after parsing attributes in process `syz.2.548'. [ 156.327825][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.557631][ T5319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.586399][ T5319] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.608435][ T5319] EXT4-fs: Ignoring sb option on remount [ 156.614338][ T5319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.724423][ T5319] EXT4-fs (loop3): can't enable nombcache during remount [ 156.824906][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.319412][ T5304] rtc_cmos 00:00: Alarms can be up to one day in the future [ 157.752698][ T5348] set_capacity_and_notify: 3 callbacks suppressed [ 157.752798][ T5348] loop2: detected capacity change from 0 to 1024 [ 157.852478][ T5348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.876891][ T3400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 157.884958][ T3400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 157.892795][ T3400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 157.900701][ T3400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 157.915306][ T3400] rtc rtc0: __rtc_set_alarm: err=-22 [ 157.932398][ T5355] bond0: option arp_validate: invalid value (35) [ 158.016997][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.238047][ T5366] program syz.2.575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.348234][ T5370] netlink: 'syz.4.578': attribute type 27 has an invalid length. [ 158.356148][ T5370] netlink: 164 bytes leftover after parsing attributes in process `syz.4.578'. [ 158.382391][ T28] kauditd_printk_skb: 447 callbacks suppressed [ 158.382428][ T28] audit: type=1400 audit(1774533222.545:1126): avc: denied { map_create } for pid=5358 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.598769][ T5373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.579'. [ 158.613538][ T28] audit: type=1400 audit(1774533222.545:1127): avc: denied { prog_load } for pid=5358 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.772497][ T28] audit: type=1400 audit(1774533222.545:1128): avc: denied { bpf } for pid=5358 comm="syz.4.578" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.889944][ T28] audit: type=1400 audit(1774533222.545:1129): avc: denied { perfmon } for pid=5358 comm="syz.4.578" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.067137][ T28] audit: type=1400 audit(1774533222.545:1130): avc: denied { perfmon } for pid=5358 comm="syz.4.578" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.089058][ T28] audit: type=1400 audit(1774533222.555:1131): avc: denied { bpf } for pid=5358 comm="syz.4.578" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.109721][ T28] audit: type=1400 audit(1774533222.555:1132): avc: denied { ioctl } for pid=5358 comm="syz.4.578" path="/newroot/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 159.135565][ T28] audit: type=1400 audit(1774533222.605:1133): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.161895][ T5370] rtc_cmos 00:00: Alarms can be up to one day in the future [ 159.294764][ T28] audit: type=1400 audit(1774533222.605:1134): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.437840][ T28] audit: type=1400 audit(1774533222.605:1135): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.041395][ T3400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 160.330989][ T3400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 160.342251][ T3400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 160.350018][ T3400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 160.357471][ T3400] rtc rtc0: __rtc_set_alarm: err=-22 [ 161.487818][ T5409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.597'. [ 161.751036][ T5456] syz.2.615: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 161.808683][ T5456] CPU: 0 UID: 0 PID: 5456 Comm: syz.2.615 Tainted: G W syzkaller #0 PREEMPT(full) [ 161.808785][ T5456] Tainted: [W]=WARN [ 161.808795][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.808816][ T5456] Call Trace: [ 161.808825][ T5456] [ 161.808833][ T5456] __dump_stack+0x1d/0x30 [ 161.808860][ T5456] dump_stack_lvl+0x95/0xd0 [ 161.808945][ T5456] dump_stack+0x15/0x1b [ 161.809020][ T5456] warn_alloc+0x145/0x1c0 [ 161.809117][ T5456] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 161.809160][ T5456] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 161.809196][ T5456] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 161.809300][ T5456] ? slow_avc_audit+0x14c/0x190 [ 161.809332][ T5456] ? should_fail_ex+0x30/0x280 [ 161.809384][ T5456] ? xskq_create+0x36/0xe0 [ 161.809450][ T5456] vmalloc_user_noprof+0x7d/0xb0 [ 161.809478][ T5456] ? xskq_create+0x80/0xe0 [ 161.809510][ T5456] xskq_create+0x80/0xe0 [ 161.809542][ T5456] xsk_init_queue+0x70/0xb0 [ 161.809650][ T5456] xsk_setsockopt+0x3f5/0x640 [ 161.809674][ T5456] ? __pfx_xsk_setsockopt+0x10/0x10 [ 161.809704][ T5456] __sys_setsockopt+0x184/0x200 [ 161.809777][ T5456] __x64_sys_setsockopt+0x64/0x80 [ 161.809821][ T5456] x64_sys_call+0x2327/0x3020 [ 161.809861][ T5456] do_syscall_64+0x12c/0x370 [ 161.809896][ T5456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.809994][ T5456] RIP: 0033:0x7fcff754c799 [ 161.810037][ T5456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.810062][ T5456] RSP: 002b:00007fcff5fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.810089][ T5456] RAX: ffffffffffffffda RBX: 00007fcff77c5fa0 RCX: 00007fcff754c799 [ 161.810174][ T5456] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 161.810187][ T5456] RBP: 00007fcff75e2c99 R08: 0000000000000004 R09: 0000000000000000 [ 161.810203][ T5456] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.810218][ T5456] R13: 00007fcff77c6038 R14: 00007fcff77c5fa0 R15: 00007ffe3af621e8 [ 161.810240][ T5456] [ 161.811241][ T5456] Mem-Info: [ 162.063879][ T5456] active_anon:30364 inactive_anon:0 isolated_anon:0 [ 162.063879][ T5456] active_file:20655 inactive_file:2628 isolated_file:0 [ 162.063879][ T5456] unevictable:0 dirty:247 writeback:0 [ 162.063879][ T5456] slab_reclaimable:3427 slab_unreclaimable:17864 [ 162.063879][ T5456] mapped:32319 shmem:22876 pagetables:1293 [ 162.063879][ T5456] sec_pagetables:0 bounce:0 [ 162.063879][ T5456] kernel_misc_reclaimable:0 [ 162.063879][ T5456] free:1841917 free_pcp:23768 free_cma:0 [ 162.114172][ T5456] Node 0 active_anon:121456kB inactive_anon:0kB active_file:82620kB inactive_file:10512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129276kB dirty:988kB writeback:0kB shmem:91504kB kernel_stack:3504kB pagetables:5172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 162.171696][ T5456] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.249457][ T5456] lowmem_reserve[]: 0 2879 7857 7857 [ 162.249568][ T5456] Node 0 DMA32 free:2944636kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948160kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 162.249646][ T5456] lowmem_reserve[]: 0 0 4978 4978 [ 162.249729][ T5456] Node 0 Normal free:4408020kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:121456kB inactive_anon:0kB active_file:82620kB inactive_file:10512kB unevictable:0kB writepending:988kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:91248kB local_pcp:9668kB free_cma:0kB [ 162.249807][ T5456] lowmem_reserve[]: 0 0 0 0 [ 162.249898][ T5456] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 162.250094][ T5456] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 4*16kB (M) 5*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944636kB [ 162.250391][ T5456] Node 0 Normal: 539*4kB (UM) 323*8kB (UE) 143*16kB (UME) 389*32kB (UME) 307*64kB (UME) 204*128kB (UME) 112*256kB (UM) 80*512kB (UME) 67*1024kB (UME) 39*2048kB (UME) 1007*4096kB (UM) = 4408020kB [ 162.250866][ T5456] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 162.250890][ T5456] 46149 total pagecache pages [ 162.250900][ T5456] 0 pages in swap cache [ 162.250909][ T5456] Free swap = 124996kB [ 162.250917][ T5456] Total swap = 124996kB [ 162.250927][ T5456] 2097051 pages RAM [ 162.250936][ T5456] 0 pages HighMem/MovableOnly [ 162.250945][ T5456] 81611 pages reserved [ 162.686321][ T5489] netlink: 36 bytes leftover after parsing attributes in process `syz.0.632'. [ 162.771322][ T5487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.627'. [ 162.970780][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 162.981723][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 162.991147][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 163.026624][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 163.064026][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 163.392636][ T28] kauditd_printk_skb: 381 callbacks suppressed [ 163.392759][ T28] audit: type=1400 audit(1774533227.565:1517): avc: denied { execute } for pid=5508 comm="syz.0.639" path="/152/file0" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 163.441872][ T28] audit: type=1400 audit(1774533227.595:1518): avc: denied { open } for pid=5508 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 163.525572][ T28] audit: type=1400 audit(1774533227.605:1519): avc: denied { perfmon } for pid=5508 comm="syz.0.639" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.547289][ T28] audit: type=1400 audit(1774533227.605:1520): avc: denied { kernel } for pid=5508 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 163.591043][ T28] audit: type=1400 audit(1774533227.685:1521): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.697314][ T28] audit: type=1400 audit(1774533227.695:1522): avc: denied { open } for pid=3321 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.724741][ T28] audit: type=1400 audit(1774533227.695:1523): avc: denied { ioctl } for pid=3321 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.841402][ T28] audit: type=1400 audit(1774533227.745:1524): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.939278][ T28] audit: type=1400 audit(1774533227.745:1525): avc: denied { open } for pid=3322 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.996160][ T28] audit: type=1400 audit(1774533227.745:1526): avc: denied { ioctl } for pid=3322 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.212526][ T5542] loop3: detected capacity change from 0 to 512 [ 164.237229][ T5542] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 164.279524][ T5542] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.652: Invalid inode bitmap blk 4 in block_group 0 [ 164.298595][ T5542] loop3: lost filesystem error report for type 5 error -117 [ 164.299592][ T5542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.369514][ T5542] EXT4-fs (loop3): shut down requested (0) [ 164.535072][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.869383][ T5568] program syz.4.665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.914923][ T5570] program syz.3.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.325025][ T5581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.667'. [ 165.608899][ C1] sd 0:0:1:0: [sda] tag#6092 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 165.619361][ C1] sd 0:0:1:0: [sda] tag#6092 CDB: Write(6) 0a 00 4e 22 00 00 [ 165.759446][ T5593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 165.778087][ T5593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 165.788790][ T5593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 165.806619][ T5601] loop2: detected capacity change from 0 to 128 [ 165.818809][ T5593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 165.837717][ T5601] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.901037][ T5601] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.966638][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 165.977766][ T5593] netlink: 5 bytes leftover after parsing attributes in process `syz.3.676'. [ 166.013920][ T5605] program syz.1.680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.233282][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.684'. [ 166.305016][ T5617] program syz.3.685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.332214][ T5618] loop2: detected capacity change from 0 to 512 [ 166.368583][ T5618] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.417601][ T5618] EXT4-fs (loop2): 1 truncate cleaned up [ 166.423923][ T5618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.454327][ T5618] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.2.687: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 166.547280][ T5618] EXT4-fs error (device loop2) in ext4_delete_entry:2737: Corrupt filesystem [ 166.603796][ T5618] EXT4-fs warning (device loop2): ext4_rename_delete:3729: inode #2: comm syz.2.687: Deleting old file: nlink 4, error=-117 [ 166.707776][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.960974][ T5644] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.697'. [ 166.997644][ T5647] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.108249][ T5653] loop3: detected capacity change from 0 to 512 [ 167.195223][ T5653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.227949][ T5653] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.331548][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.437879][ T5663] loop1: detected capacity change from 0 to 1024 [ 167.471819][ T5663] EXT4-fs: inline encryption not supported [ 167.497440][ T5663] EXT4-fs: Ignoring removed i_version option [ 167.593472][ T5663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.713117][ T5663] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 167.756715][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.620321][ T28] kauditd_printk_skb: 491 callbacks suppressed [ 168.620377][ T28] audit: type=1400 audit(1774533232.795:2018): avc: denied { name_bind } for pid=5688 comm="syz.0.715" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 168.829805][ T28] audit: type=1400 audit(1774533232.825:2019): avc: denied { create } for pid=5687 comm="syz.3.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.000097][ T28] audit: type=1400 audit(1774533232.835:2020): avc: denied { prog_load } for pid=5687 comm="syz.3.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 169.138750][ T28] audit: type=1400 audit(1774533232.835:2021): avc: denied { bpf } for pid=5687 comm="syz.3.714" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.285715][ T5709] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.296106][ T3318] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.308216][ T28] audit: type=1400 audit(1774533232.835:2022): avc: denied { create } for pid=5686 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.364040][ T5709] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 169.374636][ T3318] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 169.411257][ T5709] audit: backlog limit exceeded [ 169.682097][ T5728] program syz.2.728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.990478][ T9] kernel write not supported for file /uhid (pid: 9 comm: kworker/0:0) [ 170.280387][ T5757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'. [ 170.512514][ T5775] loop4: detected capacity change from 0 to 128 [ 170.755324][ T5785] loop4: detected capacity change from 0 to 128 [ 170.857558][ T5788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=5788 comm=syz.1.760 [ 170.945514][ T5757] __nla_validate_parse: 1 callbacks suppressed [ 170.945531][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 170.969660][ T5757] netlink: 5 bytes leftover after parsing attributes in process `syz.2.740'. [ 171.265574][ T5807] loop4: detected capacity change from 0 to 512 [ 171.300079][ T5807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.351718][ T5807] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 171.394333][ T5807] System zones: 1-2, 4-12, 8-8 [ 171.415125][ T5813] loop1: detected capacity change from 0 to 128 [ 171.427822][ T5807] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.766: iget: bad i_size value: 38620345925642 [ 171.446969][ T5807] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.447189][ T5807] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.766: couldn't read orphan inode 15 (err -117) [ 171.456588][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 171.456613][ C1] EXT4-fs (loop4): initial error at time 1774533235: ext4_orphan_get:1391: inode 15 [ 171.456651][ C1] EXT4-fs (loop4): last error at time 1774533235: ext4_orphan_get:1391: inode 15 [ 171.497467][ T5807] loop4: lost filesystem error report for type 5 error -117 [ 171.498328][ T5807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.523177][ T5817] loop3: detected capacity change from 0 to 128 [ 171.572401][ T5817] syz.3.770: attempt to access beyond end of device [ 171.572401][ T5817] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 171.586361][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.621963][ T5817] syz.3.770: attempt to access beyond end of device [ 171.621963][ T5817] loop3: rw=2049, sector=161, nr_sectors = 13 limit=128 [ 171.636521][ T5820] loop2: detected capacity change from 0 to 512 [ 171.661267][ T5820] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.686264][ T5820] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 171.704704][ T5820] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 171.717003][ T5824] netlink: 36 bytes leftover after parsing attributes in process `syz.4.771'. [ 171.726192][ T5820] System zones: 0-2, 18-18, 34-35 [ 171.733637][ T5820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 171.778701][ T5820] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 171.840755][ T5820] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 171.848914][ T5820] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 171.906066][ T5820] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.773: bg 0: block 353: padding at end of block bitmap is not set [ 172.051617][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.177311][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 172.424835][ T5847] loop4: detected capacity change from 0 to 1024 [ 172.492990][ T5847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.557234][ T5847] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.792: inode #3237228: comm syz.4.792: iget: illegal inode # [ 172.648060][ T5847] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.792: error while reading EA inode 3237228 err=-117 [ 172.817639][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.420141][ T5862] SELinux: failed to load policy [ 173.679245][ T28] kauditd_printk_skb: 595 callbacks suppressed [ 173.679318][ T28] audit: type=1400 audit(1774533237.855:2614): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.753161][ T28] audit: type=1400 audit(1774533237.885:2615): avc: denied { open } for pid=3321 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.876734][ T28] audit: type=1400 audit(1774533237.885:2616): avc: denied { ioctl } for pid=3321 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.038748][ T28] audit: type=1400 audit(1774533237.905:2617): avc: denied { open } for pid=5874 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 174.102154][ T28] audit: type=1400 audit(1774533237.915:2618): avc: denied { perfmon } for pid=5874 comm="syz.2.791" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.124472][ T28] audit: type=1400 audit(1774533237.915:2619): avc: denied { kernel } for pid=5874 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 174.155324][ T5882] loop4: detected capacity change from 0 to 256 [ 174.236335][ T5882] FAT-fs (loop4): Directory bread(block 64) failed [ 174.268599][ T5882] FAT-fs (loop4): Directory bread(block 65) failed [ 174.306253][ T5885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'. [ 174.319127][ T5882] FAT-fs (loop4): Directory bread(block 66) failed [ 174.339990][ T28] audit: type=1400 audit(1774533237.965:2620): avc: denied { create } for pid=5874 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.383249][ T5882] FAT-fs (loop4): Directory bread(block 67) failed [ 174.398906][ T5889] program syz.3.798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.425886][ T5882] FAT-fs (loop4): Directory bread(block 68) failed [ 174.432609][ T5885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'. [ 174.462001][ T5882] FAT-fs (loop4): Directory bread(block 69) failed [ 174.469287][ T28] audit: type=1400 audit(1774533237.965:2621): avc: denied { create } for pid=5874 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.506893][ T5882] FAT-fs (loop4): Directory bread(block 70) failed [ 174.549963][ T5882] FAT-fs (loop4): Directory bread(block 71) failed [ 174.587149][ T5882] FAT-fs (loop4): Directory bread(block 72) failed [ 174.620711][ T28] audit: type=1400 audit(1774533237.965:2622): avc: denied { write } for pid=5874 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.646963][ T5882] FAT-fs (loop4): Directory bread(block 73) failed [ 174.654028][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 174.724205][ T3318] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.733983][ T5882] syz.4.795: attempt to access beyond end of device [ 174.733983][ T5882] loop4: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 174.747838][ T5890] netlink: 5 bytes leftover after parsing attributes in process `syz.0.796'. [ 175.220119][ T5911] loop1: detected capacity change from 0 to 512 [ 175.624621][ T5927] loop1: detected capacity change from 0 to 512 [ 175.658249][ T5927] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.722060][ T5927] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.815: invalid indirect mapped block 4294967295 (level 1) [ 175.748627][ T5927] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 175.748809][ T5927] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.815: invalid indirect mapped block 4294967295 (level 1) [ 175.759448][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 175.759466][ C0] EXT4-fs (loop1): initial error at time 1774533239: ext4_free_branches:1023: inode 11 [ 175.759492][ C0] EXT4-fs (loop1): last error at time 1774533239: ext4_free_branches:1023: inode 11 [ 175.823560][ T5927] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 175.823883][ T5927] EXT4-fs (loop1): 2 truncates cleaned up [ 175.841712][ T5927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.921350][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.133213][ T5938] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 176.183250][ T5938] netlink: 'syz.1.818': attribute type 2 has an invalid length. [ 176.194564][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.817'. [ 176.225657][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.818'. [ 176.498914][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 176.531962][ T5954] loop1: detected capacity change from 0 to 1024 [ 176.549046][ T5933] netlink: 5 bytes leftover after parsing attributes in process `syz.3.817'. [ 176.575027][ T5954] EXT4-fs: Ignoring removed bh option [ 176.631002][ T5954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 176.678820][ T5954] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.752360][ T5954] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.823: bg 0: block 112: padding at end of block bitmap is not set [ 176.762465][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 176.777941][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 176.794702][ T5965] netlink: 3 bytes leftover after parsing attributes in process `syz.4.827'. [ 176.808876][ T5954] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.823: Freeing blocks not in datazone - block = 0, count = 16 [ 176.836736][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'. [ 176.846025][ T5966] netlink: 5 bytes leftover after parsing attributes in process `syz.0.825'. [ 176.969005][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 176.986447][ T36] EXT4-fs (loop1): This should not happen!! Data will be lost [ 176.986447][ T36] [ 177.026726][ T36] EXT4-fs (loop1): Total free blocks count 0 [ 177.051292][ T36] EXT4-fs (loop1): Free/Dirty block details [ 177.072532][ T36] EXT4-fs (loop1): free_blocks=16 [ 177.093926][ T36] EXT4-fs (loop1): dirty_blocks=16 [ 177.107645][ T36] EXT4-fs (loop1): Block reservation details [ 177.115774][ T5971] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 177.126509][ T36] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 177.144856][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.651623][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 178.083984][ T6005] netlink: 'syz.3.843': attribute type 3 has an invalid length. [ 178.100164][ T6005] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 178.754274][ T28] kauditd_printk_skb: 531 callbacks suppressed [ 178.754293][ T28] audit: type=1400 audit(1774533242.925:3152): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.825215][ T28] audit: type=1400 audit(1774533242.925:3153): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.890948][ T28] audit: type=1400 audit(1774533242.925:3154): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.939881][ T6036] hsr0: entered promiscuous mode [ 178.942774][ T28] audit: type=1400 audit(1774533242.965:3155): avc: denied { create } for pid=6033 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.985814][ T6036] hsr_slave_0: left promiscuous mode [ 179.026345][ T6036] hsr_slave_1: left promiscuous mode [ 179.032632][ T28] audit: type=1400 audit(1774533242.965:3156): avc: denied { bind } for pid=6033 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.063995][ T6036] hsr0 (unregistering): left promiscuous mode [ 179.104386][ T28] audit: type=1400 audit(1774533243.025:3157): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.129504][ T28] audit: type=1400 audit(1774533243.025:3158): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.154973][ T28] audit: type=1400 audit(1774533243.025:3159): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.181745][ T28] audit: type=1400 audit(1774533243.085:3160): avc: denied { create } for pid=6035 comm="syz.3.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.203038][ T28] audit: type=1400 audit(1774533243.095:3161): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.216582][ T6084] xt_hashlimit: size too large, truncated to 1048576 [ 180.955076][ T6096] xt_hashlimit: size too large, truncated to 1048576 [ 181.481923][ T6111] netlink: 'syz.3.882': attribute type 1 has an invalid length. [ 181.519158][ T6111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.644971][ T6113] bond2: (slave geneve2): making interface the new active one [ 181.654644][ T6113] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 181.672869][ T50] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.690752][ T50] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.699721][ T50] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.748770][ T50] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.776905][ T6119] netlink: 'syz.1.885': attribute type 1 has an invalid length. [ 181.811097][ T6119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.886609][ T6119] bond1: (slave geneve2): making interface the new active one [ 181.937165][ T6119] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 181.993246][ T6128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.074604][ T6131] netlink: 'syz.1.889': attribute type 1 has an invalid length. [ 182.104622][ T6131] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 182.118499][ T6131] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 182.133060][ T6131] bond2: (slave ip6gre1): making interface the new active one [ 182.142352][ T6131] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 183.826184][ T6173] syzkaller1: entered promiscuous mode [ 183.833654][ T28] kauditd_printk_skb: 422 callbacks suppressed [ 183.833670][ T28] audit: type=1400 audit(1774533248.005:3584): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.879281][ T6173] syzkaller1: entered allmulticast mode [ 183.914131][ T28] audit: type=1400 audit(1774533248.045:3585): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.990681][ T28] audit: type=1400 audit(1774533248.045:3586): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.026287][ T28] audit: type=1400 audit(1774533248.085:3587): avc: denied { prog_load } for pid=6177 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 184.045650][ T28] audit: type=1400 audit(1774533248.085:3588): avc: denied { bpf } for pid=6177 comm="syz.3.907" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.066400][ T28] audit: type=1400 audit(1774533248.085:3589): avc: denied { prog_load } for pid=6177 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 184.161466][ T28] audit: type=1400 audit(1774533248.085:3590): avc: denied { bpf } for pid=6177 comm="syz.3.907" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.184007][ T28] audit: type=1400 audit(1774533248.115:3591): avc: denied { perfmon } for pid=6177 comm="syz.3.907" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.210411][ T28] audit: type=1400 audit(1774533248.115:3592): avc: denied { prog_load } for pid=6177 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 184.258589][ T28] audit: type=1400 audit(1774533248.115:3593): avc: denied { perfmon } for pid=6177 comm="syz.3.907" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.266551][ T6178] __nla_validate_parse: 13 callbacks suppressed [ 184.266709][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 184.322152][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 184.361138][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 184.372062][ T6181] netlink: 5 bytes leftover after parsing attributes in process `syz.3.907'. [ 184.649658][ T6203] loop3: detected capacity change from 0 to 128 [ 185.814071][ T6230] loop4: detected capacity change from 0 to 512 [ 185.856118][ T6230] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 185.918631][ T6230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 185.941080][ T6230] System zones: 1-12 [ 185.945308][ T6230] EXT4-fs (loop4): orphan cleanup on readonly fs [ 185.977143][ T6234] loop3: detected capacity change from 0 to 4096 [ 185.983987][ T6230] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.925: bg 0: block 361: padding at end of block bitmap is not set [ 186.055884][ T6230] loop4: lost filesystem error report for type 5 error -117 [ 186.056100][ T6230] EXT4-fs (loop4): Remounting filesystem read-only [ 186.063502][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 186.063523][ C0] EXT4-fs (loop4): initial error at time 1774533250: ext4_validate_block_bitmap:441 [ 186.063552][ C0] EXT4-fs (loop4): last error at time 1774533250: ext4_validate_block_bitmap:441 [ 186.111379][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 186.120337][ T6237] netlink: 5 bytes leftover after parsing attributes in process `syz.1.924'. [ 186.131065][ T6230] EXT4-fs (loop4): 1 truncate cleaned up [ 186.137436][ T6230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 186.179128][ T6234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.192449][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 186.419541][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.487279][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 186.590709][ T6236] netlink: 5 bytes leftover after parsing attributes in process `syz.0.923'. [ 186.681318][ T6255] loop1: detected capacity change from 0 to 512 [ 186.717729][ T6258] netlink: 104 bytes leftover after parsing attributes in process `syz.3.932'. [ 186.759079][ T6255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.788981][ T6255] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.849144][ T6255] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.931: corrupted xattr block 33: invalid checksum [ 186.868808][ T6255] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 186.877733][ T6255] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.931: corrupted xattr block 33: invalid checksum [ 186.961811][ T6255] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 186.984506][ T6255] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.931: corrupted xattr block 33: invalid checksum [ 187.003658][ T6255] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 187.013769][ T6255] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.931: corrupted xattr block 33: invalid checksum [ 187.027507][ T6255] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.931: corrupted xattr block 33: invalid checksum [ 187.065899][ T6255] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 187.123320][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.328621][ T6274] loop3: detected capacity change from 0 to 128 [ 187.338327][ T6274] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 187.386781][ T6274] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 187.387715][ T6275] loop1: detected capacity change from 0 to 1024 [ 187.443143][ T6274] FAT-fs (loop3): Filesystem has been set read-only [ 187.455703][ T6275] EXT4-fs: Ignoring removed bh option [ 187.473718][ T6274] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 187.521867][ T6277] loop4: detected capacity change from 0 to 1024 [ 187.521895][ T6275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.558898][ T6275] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.575001][ T6277] EXT4-fs: Ignoring removed oldalloc option [ 187.601992][ T6277] EXT4-fs: Ignoring removed bh option [ 187.607870][ T6275] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.935: bg 0: block 112: padding at end of block bitmap is not set [ 187.677181][ T6277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.798684][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 187.930864][ T6287] loop1: detected capacity change from 0 to 256 [ 187.977928][ T6287] FAT-fs (loop1): Directory bread(block 64) failed [ 187.991150][ T6287] FAT-fs (loop1): Directory bread(block 65) failed [ 188.018356][ T6287] FAT-fs (loop1): Directory bread(block 66) failed [ 188.030789][ T6287] FAT-fs (loop1): Directory bread(block 67) failed [ 188.045145][ T6287] FAT-fs (loop1): Directory bread(block 68) failed [ 188.058668][ T6287] FAT-fs (loop1): Directory bread(block 69) failed [ 188.162957][ T6287] FAT-fs (loop1): Directory bread(block 70) failed [ 188.197476][ T6287] FAT-fs (loop1): Directory bread(block 71) failed [ 188.227602][ T6287] FAT-fs (loop1): Directory bread(block 72) failed [ 188.265036][ T6287] FAT-fs (loop1): Directory bread(block 73) failed [ 188.849002][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.901658][ T28] kauditd_printk_skb: 363 callbacks suppressed [ 188.901675][ T28] audit: type=1400 audit(1774533253.075:3957): avc: denied { ioctl } for pid=6303 comm="syz.3.949" path="socket:[12810]" dev="sockfs" ino=12810 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.031967][ T28] audit: type=1400 audit(1774533253.105:3958): avc: denied { bind } for pid=6303 comm="syz.3.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.118256][ T28] audit: type=1400 audit(1774533253.105:3959): avc: denied { setopt } for pid=6303 comm="syz.3.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.226455][ T28] audit: type=1400 audit(1774533253.105:3960): avc: denied { write } for pid=6303 comm="syz.3.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.277183][ T6313] loop4: detected capacity change from 0 to 1024 [ 189.298593][ T28] audit: type=1400 audit(1774533253.135:3961): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.351975][ T6313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 189.396101][ T28] audit: type=1400 audit(1774533253.135:3962): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.438683][ T28] audit: type=1400 audit(1774533253.135:3963): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.496016][ T28] audit: type=1400 audit(1774533253.145:3964): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.522762][ T28] audit: type=1400 audit(1774533253.145:3965): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.548057][ T28] audit: type=1400 audit(1774533253.145:3966): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.623467][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.049254][ T6336] loop1: detected capacity change from 0 to 512 [ 190.111475][ T6336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.252041][ T6336] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.299767][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.639334][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.875454][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.937567][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.139757][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.155598][ T6365] loop3: detected capacity change from 0 to 512 [ 191.192565][ T50] bridge_slave_1: left allmulticast mode [ 191.204552][ T6365] EXT4-fs: Ignoring removed i_version option [ 191.218618][ T50] bridge_slave_1: left promiscuous mode [ 191.236845][ T6365] EXT4-fs: Ignoring removed bh option [ 191.242021][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.271810][ T6365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.286313][ T50] bridge_slave_0: left allmulticast mode [ 191.294913][ T50] bridge_slave_0: left promiscuous mode [ 191.314405][ T6365] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.319006][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.399897][ T6353] 9pnet_fd: p9_fd_create_tcp (6353): problem connecting socket to 127.0.0.1 [ 191.518109][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.602415][ T6377] loop4: detected capacity change from 0 to 2048 [ 191.611682][ T6377] EXT4-fs: Ignoring removed i_version option [ 191.701747][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.716378][ T6377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.759609][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.781514][ T50] bond0 (unregistering): Released all slaves [ 191.817223][ T6379] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.965376][ T6379] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.034668][ T50] hsr_slave_0: left promiscuous mode [ 192.051474][ T50] hsr_slave_1: left promiscuous mode [ 192.062755][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.077957][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.095744][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.105441][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.129877][ T50] veth1_macvtap: left promiscuous mode [ 192.139837][ T50] veth0_macvtap: left promiscuous mode [ 192.145667][ T50] veth1_vlan: left promiscuous mode [ 192.154369][ T50] veth0_vlan: left promiscuous mode [ 192.240214][ T301] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 192.260527][ T301] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 772 with error 28 [ 192.273159][ T301] EXT4-fs (loop4): This should not happen!! Data will be lost [ 192.273159][ T301] [ 192.283041][ T301] EXT4-fs (loop4): Total free blocks count 0 [ 192.292874][ T301] EXT4-fs (loop4): Free/Dirty block details [ 192.306768][ T301] EXT4-fs (loop4): free_blocks=2415919504 [ 192.316070][ T301] EXT4-fs (loop4): dirty_blocks=1568 [ 192.331452][ T301] EXT4-fs (loop4): Block reservation details [ 192.341185][ T301] EXT4-fs (loop4): i_reserved_data_blocks=49 [ 192.355666][ T301] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 772 with error 28 [ 192.380434][ T50] team0 (unregistering): Port device team_slave_1 removed [ 192.409044][ T50] team0 (unregistering): Port device team_slave_0 removed [ 192.554079][ T6379] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.639891][ T6379] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.678988][ T6325] chnl_net:caif_netlink_parms(): no params data found [ 192.868612][ T301] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.911168][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.928603][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.940250][ T6325] bridge_slave_0: entered allmulticast mode [ 192.977771][ T6325] bridge_slave_0: entered promiscuous mode [ 192.999470][ T301] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.012392][ T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.045685][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.057097][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.090872][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.115565][ T6325] bridge_slave_1: entered allmulticast mode [ 193.152071][ T6325] bridge_slave_1: entered promiscuous mode [ 193.205402][ T6447] loop1: detected capacity change from 0 to 512 [ 193.226208][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.261321][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.290257][ T6325] team0: Port device team_slave_0 added [ 193.294602][ T6447] EXT4-fs (loop1): 1 truncate cleaned up [ 193.306549][ T6447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.329548][ T6325] team0: Port device team_slave_1 added [ 193.351691][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.358888][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.385852][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.400206][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.407243][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.444370][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.568312][ T6325] hsr_slave_0: entered promiscuous mode [ 193.583374][ T6325] hsr_slave_1: entered promiscuous mode [ 193.598892][ T6325] debugfs: 'hsr0' already exists in 'hsr' [ 193.613283][ T6325] Cannot create hsr debugfs directory [ 193.648146][ T301] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 465: padding at end of block bitmap is not set [ 193.672745][ T301] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 193.690810][ T301] EXT4-fs (loop1): This should not happen!! Data will be lost [ 193.690810][ T301] [ 193.705305][ T301] EXT4-fs (loop1): Total free blocks count 0 [ 193.716183][ T301] EXT4-fs (loop1): Free/Dirty block details [ 193.745443][ T301] EXT4-fs (loop1): free_blocks=0 [ 193.758574][ T301] EXT4-fs (loop1): dirty_blocks=8 [ 193.769082][ T301] EXT4-fs (loop1): Block reservation details [ 193.784444][ T301] EXT4-fs (loop1): i_reserved_data_blocks=8 [ 193.799768][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.909144][ T28] kauditd_printk_skb: 693 callbacks suppressed [ 193.909159][ T28] audit: type=1400 audit(1774533258.085:4660): avc: denied { search } for pid=3046 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.953130][ T28] audit: type=1400 audit(1774533258.085:4661): avc: denied { search } for pid=3046 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.975695][ T28] audit: type=1400 audit(1774533258.085:4662): avc: denied { search } for pid=3046 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.058117][ T6325] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.065066][ T28] audit: type=1400 audit(1774533258.105:4663): avc: denied { read } for pid=3046 comm="dhcpcd" name="n28" dev="tmpfs" ino=5130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.090973][ T28] audit: type=1400 audit(1774533258.105:4664): avc: denied { read open } for pid=3046 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=5130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.121590][ T6325] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 194.139017][ T6325] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 194.146018][ T28] audit: type=1400 audit(1774533258.105:4665): avc: denied { getattr } for pid=3046 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=5130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.183882][ T6325] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 194.197276][ T6479] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.212488][ T6474] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.223358][ T6474] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 194.231965][ T6474] audit: backlog limit exceeded [ 194.690036][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.736974][ T6325] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.769112][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.776464][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.858013][ T1752] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.865146][ T1752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.899675][ T6517] loop4: detected capacity change from 0 to 512 [ 194.936592][ T6517] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.001310][ T6517] EXT4-fs (loop4): 1 truncate cleaned up [ 195.007659][ T6517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.046150][ T6517] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.4.995: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 195.071018][ T6517] EXT4-fs error (device loop4) in ext4_delete_entry:2737: Corrupt filesystem [ 195.171126][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.441822][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.753269][ T6541] loop1: detected capacity change from 0 to 2048 [ 195.813589][ T6541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.940294][ T6541] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1001: bg 0: block 234: padding at end of block bitmap is not set [ 195.991851][ T6541] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 620 with error 28 [ 196.060359][ T6541] EXT4-fs (loop1): This should not happen!! Data will be lost [ 196.060359][ T6541] [ 196.169589][ T6541] EXT4-fs (loop1): Total free blocks count 0 [ 196.175814][ T6541] EXT4-fs (loop1): Free/Dirty block details [ 196.206637][ T6541] EXT4-fs (loop1): free_blocks=0 [ 196.221723][ T6541] EXT4-fs (loop1): dirty_blocks=624 [ 196.237792][ T6541] EXT4-fs (loop1): Block reservation details [ 196.257545][ T6541] EXT4-fs (loop1): i_reserved_data_blocks=39 [ 196.335145][ T6325] veth0_vlan: entered promiscuous mode [ 196.377595][ T6325] veth1_vlan: entered promiscuous mode [ 196.451568][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'. [ 196.470501][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.639830][ T6579] syzkaller0: entered promiscuous mode [ 196.660597][ T6579] syzkaller0: entered allmulticast mode [ 196.717719][ T6325] veth0_macvtap: entered promiscuous mode [ 196.808875][ T6325] veth1_macvtap: entered promiscuous mode [ 196.880852][ T6594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1015'. [ 196.898432][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.956995][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.014861][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.065120][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.094961][ T6588] xt_hashlimit: size too large, truncated to 1048576 [ 197.101924][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.121006][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.229795][ T6602] loop3: detected capacity change from 0 to 1024 [ 197.295326][ T6602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.335991][ T6606] loop4: detected capacity change from 0 to 2048 [ 197.344215][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.459899][ T6606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.550667][ T6451] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 197.636326][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 544 with error 28 [ 197.692372][ T36] EXT4-fs (loop4): This should not happen!! Data will be lost [ 197.692372][ T36] [ 197.737741][ T36] EXT4-fs (loop4): Total free blocks count 0 [ 197.760871][ T36] EXT4-fs (loop4): Free/Dirty block details [ 197.766825][ T36] EXT4-fs (loop4): free_blocks=0 [ 197.798625][ T36] EXT4-fs (loop4): dirty_blocks=560 [ 197.803885][ T36] EXT4-fs (loop4): Block reservation details [ 197.848766][ T36] EXT4-fs (loop4): i_reserved_data_blocks=35 [ 198.000932][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.261513][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 198.277036][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 198.757823][ T6661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.765123][ T6661] IPv6: NLM_F_CREATE should be set when creating new route [ 198.840474][ T6664] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1038'. [ 198.857882][ T6662] loop4: detected capacity change from 0 to 8192 [ 198.925107][ T28] kauditd_printk_skb: 715 callbacks suppressed [ 198.925171][ T28] audit: type=1400 audit(1774533263.095:5379): avc: denied { execute } for pid=6641 comm="syz.3.1029" name="file0" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 198.988125][ T28] audit: type=1400 audit(1774533263.135:5380): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 199.091195][ T28] audit: type=1400 audit(1774533263.135:5381): avc: denied { execute } for pid=6641 comm="syz.3.1029" name="file0" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.135204][ T28] audit: type=1400 audit(1774533263.145:5382): avc: denied { module_request } for pid=6665 comm="syz.5.1039" kmod=72746E6C2D6C696E6B2D6272696467655F736C618C65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 199.165655][ T28] audit: type=1400 audit(1774533263.145:5383): avc: denied { execute } for pid=6641 comm="syz.3.1029" name="file0" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.260805][ T28] audit: type=1400 audit(1774533263.155:5384): avc: denied { execute } for pid=6641 comm="syz.3.1029" name="file0" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.292493][ T28] audit: type=1400 audit(1774533263.155:5385): avc: denied { execute } for pid=6641 comm="syz.3.1029" name="file0" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.384948][ T28] audit: type=1400 audit(1774533263.155:5386): avc: denied { execute } for pid=6641 comm="syz.3.1029" name="file0" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.412341][ T28] audit: type=1400 audit(1774533263.195:5387): avc: denied { module_request } for pid=6665 comm="syz.5.1039" kmod=72746E6C2D6C696E6B2D6272696467655F736C618C65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 199.437775][ T28] audit: type=1400 audit(1774533263.205:5388): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.566115][ T6691] loop3: detected capacity change from 0 to 1024 [ 199.613838][ T6691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.655079][ T6692] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20001 [ 199.773701][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.873615][ T6706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1050'. [ 200.093000][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 200.140221][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 200.705890][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1055'. [ 200.743112][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1055'. [ 202.002449][ T6750] Set syz1 is full, maxelem 65536 reached [ 202.154606][ T6792] __nla_validate_parse: 1 callbacks suppressed [ 202.154626][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 202.858705][ T6814] xt_hashlimit: size too large, truncated to 1048576 [ 203.266741][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1087'. [ 203.350559][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1087'. [ 203.869829][ T6843] loop5: detected capacity change from 0 to 512 [ 203.919429][ T6843] EXT4-fs: Ignoring removed nobh option [ 203.956605][ T6843] EXT4-fs (loop5): orphan cleanup on readonly fs [ 203.964134][ T6843] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.1094: EA inode hash validation failed [ 203.979248][ T6843] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 204.051257][ T6843] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1094: corrupted inode contents [ 204.066403][ T28] kauditd_printk_skb: 776 callbacks suppressed [ 204.066422][ T28] audit: type=1400 audit(1774533268.245:6165): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.096969][ T28] audit: type=1400 audit(1774533268.245:6166): avc: denied { open } for pid=3322 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.148229][ T6843] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.148536][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 204.162444][ T28] audit: type=1400 audit(1774533268.245:6167): avc: denied { ioctl } for pid=3322 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.164430][ C1] EXT4-fs (loop5): initial error at time 1774533268: ext4_do_update_inode:5569: inode 15 [ 204.200407][ C1] EXT4-fs (loop5): last error at time 1774533268: ext4_do_update_inode:5569: inode 15 [ 204.210169][ T6843] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.1094: mark_inode_dirty error [ 204.258595][ T6843] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.275375][ T6843] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1094: corrupted inode contents [ 204.281181][ T28] audit: type=1400 audit(1774533268.315:6168): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.306759][ T6843] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.368592][ T6843] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.1094: mark_inode_dirty error [ 204.386134][ T28] audit: type=1400 audit(1774533268.315:6169): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.429520][ T6843] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.435354][ T6843] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.1094: mark inode dirty (error -117) [ 204.483721][ T28] audit: type=1400 audit(1774533268.315:6170): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.490930][ T6843] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.548738][ T6843] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 204.563089][ T28] audit: type=1400 audit(1774533268.405:6171): avc: denied { prog_load } for pid=6845 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.599675][ T6843] EXT4-fs (loop5): 1 orphan inode deleted [ 204.614723][ T6843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 204.638015][ T28] audit: type=1400 audit(1774533268.405:6172): avc: denied { bpf } for pid=6845 comm="syz.4.1096" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.687748][ T6858] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.696332][ T28] audit: type=1400 audit(1774533268.445:6173): avc: denied { prog_load } for pid=6845 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.966150][ T6325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.487089][ T6926] loop5: detected capacity change from 0 to 512 [ 206.558008][ T6926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.570943][ T6926] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.609048][ T6926] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.1110: corrupted inode contents [ 206.665110][ T6926] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.1110: mark_inode_dirty error [ 206.679343][ T6926] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.1110: corrupted inode contents [ 206.723419][ T6926] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.1110: mark_inode_dirty error [ 206.810202][ T6325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.337465][ T6957] loop5: detected capacity change from 0 to 2048 [ 207.380307][ T6957] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.386845][ T6957] EXT4-fs: Ignoring removed i_version option [ 207.486697][ T6957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.810988][ T6325] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 207.885288][ T6325] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 208.230671][ T6325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.286837][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.412449][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.494433][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.578267][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.877447][ T12] bridge_slave_1: left allmulticast mode [ 208.900801][ T12] bridge_slave_1: left promiscuous mode [ 208.906510][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.974643][ T12] bridge_slave_0: left allmulticast mode [ 208.980411][ T12] bridge_slave_0: left promiscuous mode [ 209.000710][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.079788][ T28] kauditd_printk_skb: 921 callbacks suppressed [ 209.079803][ T28] audit: type=1400 audit(1774533273.255:7000): avc: denied { search } for pid=7015 comm="sed" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.171015][ T28] audit: type=1400 audit(1774533273.285:7001): avc: denied { search } for pid=7015 comm="sed" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.203124][ T28] audit: type=1400 audit(1774533273.285:7002): avc: denied { read } for pid=7015 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.306017][ T28] audit: type=1400 audit(1774533273.285:7003): avc: denied { read open } for pid=7015 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.644230][ T7007] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.695889][ T7007] audit: audit_lost=43 audit_rate_limit=0 audit_backlog_limit=64 [ 209.752795][ T7007] audit: backlog limit exceeded [ 209.774301][ T7007] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.804748][ T7007] audit: audit_lost=44 audit_rate_limit=0 audit_backlog_limit=64 [ 209.821703][ T28] audit: type=1400 audit(1774533273.285:7004): avc: denied { getattr } for pid=7015 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.876498][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.941748][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.995174][ T12] bond0 (unregistering): Released all slaves [ 210.208563][ T12] hsr_slave_0: left promiscuous mode [ 210.230500][ T12] hsr_slave_1: left promiscuous mode [ 210.248977][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.282053][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.333540][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.368648][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.418885][ T12] veth1_macvtap: left promiscuous mode [ 210.429696][ T12] veth0_macvtap: left promiscuous mode [ 210.446307][ T12] veth1_vlan: left promiscuous mode [ 210.455572][ T12] veth0_vlan: left promiscuous mode [ 210.611420][ T12] team0 (unregistering): Port device team_slave_1 removed [ 210.624110][ T12] team0 (unregistering): Port device team_slave_0 removed [ 210.843039][ T7074] netlink: 'syz.0.1142': attribute type 5 has an invalid length. [ 210.990810][ T6991] chnl_net:caif_netlink_parms(): no params data found [ 211.733586][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.749779][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.757445][ T6991] bridge_slave_0: entered allmulticast mode [ 211.765196][ T6991] bridge_slave_0: entered promiscuous mode [ 211.778406][ T6991] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.788167][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.796362][ T6991] bridge_slave_1: entered allmulticast mode [ 211.804871][ T6991] bridge_slave_1: entered promiscuous mode [ 211.834680][ T6991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.863599][ T6991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.945863][ T6991] team0: Port device team_slave_0 added [ 211.965834][ T6991] team0: Port device team_slave_1 added [ 212.018100][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.025286][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.104210][ T6991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.396869][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.526557][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.653210][ T6991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.722200][ T6991] hsr_slave_0: entered promiscuous mode [ 212.741787][ T6991] hsr_slave_1: entered promiscuous mode [ 212.750650][ T6991] debugfs: 'hsr0' already exists in 'hsr' [ 212.763598][ T6991] Cannot create hsr debugfs directory [ 213.215056][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 213.235550][ T6991] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 213.264183][ T6991] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 213.440296][ T6991] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 213.492245][ T6991] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 213.666213][ T6991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.704015][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'. [ 213.717416][ T6991] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.727553][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'. [ 213.727563][ T2006] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.727629][ T2006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.763612][ T1752] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.770741][ T1752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.884790][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 213.908218][ T7160] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1161'. [ 214.036377][ T6991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.092863][ T28] kauditd_printk_skb: 892 callbacks suppressed [ 214.092936][ T28] audit: type=1400 audit(1774533278.255:7875): avc: denied { read write open } for pid=3320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.201417][ T28] audit: type=1400 audit(1774533278.255:7876): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.286815][ T28] audit: type=1400 audit(1774533278.325:7877): avc: denied { sys_module } for pid=6991 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 214.369007][ T28] audit: type=1400 audit(1774533278.335:7878): avc: denied { module_request } for pid=6991 comm="syz-executor" kmod="netdevsim6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 214.433224][ T28] audit: type=1400 audit(1774533278.345:7879): avc: denied { allowed } for pid=7177 comm="syz.3.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 214.487954][ T28] audit: type=1400 audit(1774533278.345:7880): avc: denied { create } for pid=7177 comm="syz.3.1163" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.569254][ T28] audit: type=1400 audit(1774533278.355:7881): avc: denied { map } for pid=7177 comm="syz.3.1163" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.662630][ T28] audit: type=1400 audit(1774533278.355:7882): avc: denied { read write } for pid=7177 comm="syz.3.1163" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.773098][ T28] audit: type=1400 audit(1774533278.365:7883): avc: denied { map } for pid=7177 comm="syz.3.1163" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.879875][ T28] audit: type=1400 audit(1774533278.365:7884): avc: denied { read write } for pid=7177 comm="syz.3.1163" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 215.222492][ T6991] veth0_vlan: entered promiscuous mode [ 215.258937][ T6991] veth1_vlan: entered promiscuous mode [ 215.279432][ T6991] veth0_macvtap: entered promiscuous mode [ 215.286636][ T6991] veth1_macvtap: entered promiscuous mode [ 215.310998][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1169'. [ 215.332447][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.364151][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.394100][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.444026][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.456927][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.481508][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.604644][ T7248] delete_channel: no stack [ 218.100123][ T7268] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.180884][ T7268] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.251821][ T7268] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.312566][ T7268] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.496125][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.637893][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.697808][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.716027][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'. [ 218.775032][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.108087][ T28] kauditd_printk_skb: 407 callbacks suppressed [ 219.108105][ T28] audit: type=1400 audit(1774533283.265:8292): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.188595][ T28] audit: type=1400 audit(1774533283.265:8293): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.234614][ T28] audit: type=1400 audit(1774533283.265:8294): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.358617][ T28] audit: type=1400 audit(1774533283.325:8295): avc: denied { map_create } for pid=7284 comm="syz.1.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 219.438567][ T28] audit: type=1400 audit(1774533283.325:8296): avc: denied { map_read map_write } for pid=7284 comm="syz.1.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 219.505420][ T28] audit: type=1400 audit(1774533283.325:8297): avc: denied { prog_load } for pid=7284 comm="syz.1.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 219.590741][ T28] audit: type=1400 audit(1774533283.325:8298): avc: denied { bpf } for pid=7284 comm="syz.1.1192" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 219.650931][ T28] audit: type=1400 audit(1774533283.325:8299): avc: denied { prog_load } for pid=7284 comm="syz.1.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 219.688751][ T28] audit: type=1400 audit(1774533283.325:8300): avc: denied { perfmon } for pid=7284 comm="syz.1.1192" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 219.729632][ T28] audit: type=1400 audit(1774533283.325:8301): avc: denied { bpf } for pid=7284 comm="syz.1.1192" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 220.140778][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.148232][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.245800][ T7324] xt_hashlimit: size too large, truncated to 1048576 [ 220.313268][ T7318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.325716][ T7318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.408583][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 220.465473][ T7326] tipc: Started in network mode [ 220.471046][ T7326] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 220.480593][ T7326] tipc: Enabled bearer , priority 10 [ 220.487434][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.497474][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.518639][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.525736][ T7329] loop3: detected capacity change from 0 to 1024 [ 220.538099][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.587166][ T7329] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 220.626545][ T7329] System zones: 0-1, 3-36 [ 220.770208][ T7329] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1204: bad orphan inode 134217728 [ 220.792963][ T7329] loop3: lost filesystem error report for type 5 error -117 [ 220.797856][ T7329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.374118][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.478579][ T9] tipc: Node number set to 4269801494 [ 221.846559][ T7364] syzkaller0: entered promiscuous mode [ 221.858881][ T7364] syzkaller0: entered allmulticast mode [ 221.952471][ T7363] loop6: detected capacity change from 0 to 8192 [ 222.203966][ T7363] ================================================================== [ 222.212227][ T7363] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 222.219732][ T7363] [ 222.222075][ T7363] read-write to 0xffffc900016dfe28 of 8 bytes by task 7362 on cpu 1: [ 222.230164][ T7363] shmem_writeout+0x2f1/0x920 [ 222.234881][ T7363] shrink_folio_list+0x1f1f/0x2820 [ 222.240037][ T7363] evict_folios+0x2a60/0x35c0 [ 222.244743][ T7363] try_to_shrink_lruvec+0x81b/0xbf0 [ 222.249970][ T7363] shrink_lruvec+0x255/0x1c60 [ 222.254784][ T7363] shrink_node+0x67a/0x2130 [ 222.259437][ T7363] do_try_to_free_pages+0x408/0xc80 [ 222.264687][ T7363] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 222.270632][ T7363] try_charge_memcg+0x37e/0xa10 [ 222.275620][ T7363] obj_cgroup_charge_pages+0x23/0xc0 [ 222.281039][ T7363] __memcg_kmem_charge_page+0x9e/0x170 [ 222.286714][ T7363] __alloc_frozen_pages_noprof+0x18a/0x360 [ 222.292563][ T7363] alloc_pages_mpol+0xb3/0x260 [ 222.297359][ T7363] alloc_pages_noprof+0x8f/0x130 [ 222.302334][ T7363] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 222.308263][ T7363] __kvmalloc_node_noprof+0x3d4/0x650 [ 222.313691][ T7363] ip_set_alloc+0x24/0x30 [ 222.318073][ T7363] hash_netiface_create+0x282/0x740 [ 222.323412][ T7363] ip_set_create+0x3cf/0x970 [ 222.328050][ T7363] nfnetlink_rcv_msg+0x509/0x5d0 [ 222.333028][ T7363] netlink_rcv_skb+0x123/0x220 [ 222.337826][ T7363] nfnetlink_rcv+0x167/0x1720 [ 222.342531][ T7363] netlink_unicast+0x5c0/0x690 [ 222.347332][ T7363] netlink_sendmsg+0x5c8/0x6f0 [ 222.352219][ T7363] ____sys_sendmsg+0x563/0x5b0 [ 222.357027][ T7363] ___sys_sendmsg+0x195/0x1e0 [ 222.361828][ T7363] __x64_sys_sendmsg+0xd4/0x160 [ 222.366718][ T7363] x64_sys_call+0x194c/0x3020 [ 222.371546][ T7363] do_syscall_64+0x12c/0x370 [ 222.376157][ T7363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.382094][ T7363] [ 222.384441][ T7363] read to 0xffffc900016dfe28 of 8 bytes by task 7363 on cpu 0: [ 222.392003][ T7363] shmem_fallocate+0x5c0/0x920 [ 222.396980][ T7363] vfs_fallocate+0x3b6/0x450 [ 222.401592][ T7363] __x64_sys_fallocate+0x7a/0xd0 [ 222.406569][ T7363] x64_sys_call+0x298e/0x3020 [ 222.411289][ T7363] do_syscall_64+0x12c/0x370 [ 222.415900][ T7363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.421822][ T7363] [ 222.424169][ T7363] value changed: 0x0000000000000095 -> 0x0000000000000098 [ 222.431300][ T7363] [ 222.433776][ T7363] Reported by Kernel Concurrency Sanitizer on: [ 222.439964][ T7363] CPU: 0 UID: 0 PID: 7363 Comm: syz.6.1212 Tainted: G W syzkaller #0 PREEMPT(full) [ 222.450944][ T7363] Tainted: [W]=WARN [ 222.454766][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.464836][ T7363] ================================================================== [ 222.902581][ T7362] syz.6.1212 (7362) used greatest stack depth: 7256 bytes left [ 224.674697][ T28] kauditd_printk_skb: 477 callbacks suppressed [ 224.674724][ T28] audit: type=1400 audit(1774533288.845:8779): avc: denied { search } for pid=7396 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.704326][ T28] audit: type=1400 audit(1774533288.845:8780): avc: denied { search } for pid=7396 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.727948][ T28] audit: type=1400 audit(1774533288.845:8781): avc: denied { search } for pid=7396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.751888][ T28] audit: type=1400 audit(1774533288.845:8782): avc: denied { search } for pid=7396 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.776381][ T28] audit: type=1400 audit(1774533288.865:8783): avc: denied { search } for pid=7397 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.800269][ T28] audit: type=1400 audit(1774533288.865:8784): avc: denied { search } for pid=7397 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.824218][ T28] audit: type=1400 audit(1774533288.865:8785): avc: denied { search } for pid=7397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.848235][ T28] audit: type=1400 audit(1774533288.865:8786): avc: denied { read open } for pid=7397 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.874605][ T28] audit: type=1400 audit(1774533288.865:8787): avc: denied { getattr } for pid=7397 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.901552][ T28] audit: type=1400 audit(1774533288.865:8788): avc: denied { getattr } for pid=7397 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1