last executing test programs: 2m11.886934863s ago: executing program 2 (id=513): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fa9abb870d517ecab21320577271c47748c024d8257abc07e65a0261789fdf09f8a78ce0daf7505b9367cc0e29d1c2e4bb424c167a834a4ff6bccbcf31c5ebe44774b04b3cd07c8de444d475a287d2244d8d48830946d576e547813fb772492c2a203f4a6456d72df3e39d80fe4c71fd80998ea3b3099a01e2e4f45499f6cb6049fa5e40aa6612ce0ae7cf25edd0f1a8c7927bc828f7d48b6098570018138ac693fe5403e6b70605048f9b1bbb1fda928104c0daa76a770e676fb8a06ae9a7822"], 0x20000) 2m11.69757732s ago: executing program 2 (id=515): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f", 0xc}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x15c}, {&(0x7f0000000d00)="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", 0x145}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb677edede912815299a3313b02b4af73d57a5d0a7c01e400c47", 0xb0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f", 0xc8}, {&(0x7f0000000900)="8aa5f18a9e39a6b83142d616b442ebe74739f0c388058ddd3b1b", 0x1a}, {&(0x7f0000000500)="e13427da285b20399111b0413703b3f1f8fe", 0x12}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m10.815762512s ago: executing program 2 (id=520): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) 2m10.683073752s ago: executing program 2 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) chdir(&(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', 0x0) 2m10.064987613s ago: executing program 2 (id=523): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2090) 2m9.794866322s ago: executing program 2 (id=526): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 2m9.756835994s ago: executing program 32 (id=526): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 4.976529594s ago: executing program 5 (id=1441): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="0000800000000000180034800500"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) 4.963323961s ago: executing program 1 (id=1444): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xc0, 0xa0) 4.939062706s ago: executing program 5 (id=1446): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c1", 0x2a}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8ae", 0x30}], 0x4}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608", 0x30}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.061245719s ago: executing program 1 (id=1458): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan3\x00'}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0012100800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x204180, 0x49) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000680)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="00010000150a01080000000000000000010000010c00064000000000000000040900010073797a300000000008000340000000030c0006400000000000000005b2a369e700049d000800af9403a61611d8ec3a648d0ecdc7d879791cc02255af92babdbd6ac2d7c14e787772edb64c3d80a41305506212fd6fc9c7e32cb9bbc5d8977d0d7dfaca6a44f37d40dfda2038e697efda3528de53c8a173a327336ae04220f126161fbe48b49c3fced1d70367b5f94684c404dc760e2492ccbd534d9678cb91d94dac4f5861b14cf6a8d755d9200725ef824f4a5a3f2ded5f5c907b7e6a501bb00139337d85b8a58794a40c2989552400000008000340000000050c00064000000000"], 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x20008040) timerfd_gettime(r4, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0xb4, 0x14, 0xa, 0x107, 0x0, 0x0, {0x1}, [@NFTA_OBJ_USERDATA={0x9d, 0x8, "4af026e1ffff806843750c0c1783dfc56c5b59e5b0368fc2d3076cf731af32754dfe7756247dd6fbeaf15cc87d5b7ead49c31bd6a476397fcb61e7048a935c61af35301ab01da89cfae31e4b10c7c8504456eb92d062ec624bb15345e4ce8a62b69d9221476c66af681c8240a9a5da7001d0d789f93a402d266e0963c75afd318ab3ef268daf8e9cc44ca8dad95cc3170d42ee3e1410901405"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x91) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="030000000400000004000000ffffffff00000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000006fed8bc5ae8b9c4ed6c67e2235b63000000000000000000015e9dca67932bfb144"], 0x50) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 4.002538877s ago: executing program 5 (id=1461): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan3\x00'}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0012100800010001000000"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000680)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x20008040) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0xffff, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x840) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.052188806s ago: executing program 5 (id=1463): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x9a031, 0xffffffffffffffff, 0x5e59b000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x2, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x400000000000004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x4, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.052110496s ago: executing program 3 (id=1464): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="cd0f8e28bcfcc6da0da2c6939d81478a19b232d1f1ef2020f46d976ee2791e1e89dd7e33c709dbdc1d0b663b8b42a2c25d8b54f6aad883824062128c3b7cfc177e710765af1dbd9c2fef622482026330ebe47d3e537756da20840223ae2a0c9470353399914764f21cde404f9daf611de2a9b1098e8e6e0a091d0f4ece8fdbdaff94454bc36aec67b3263942", 0x8c}, {&(0x7f0000000180)="6c41c8a8768d", 0x6}], 0x2, &(0x7f0000000380)=[{0x88, 0x102, 0x4, "fdf8b8da18b70b2fb68f79efc409c501bb6591052daed96d7d232177dedfd55476c1ed4e010ba5098dec35938c407dc2ce97194b33932f9f25a6500083422416baef3d37624bde493081de732b22379c435bd05f047c87090e2bb63849c32336323fec28e58e9ce8f952216c376798452cf89991ab2a"}, {0xc0, 0x84, 0xff, "62c5b6315cb2071feaa86de719690245254a9f9c82029ddd5e046848cf4c430d00e3021229cf077317777eb59299973bcfbc35c183db6a11e5f5058277a81895c424d4aaeb2f4c1d199bb924017240bae2eda13326674bd126f40842f8bb8bba346904f81721d2523c71cb02704ca246b6a0e606de5c688b5554ee236aaa76911bdf84c11e56cfe5d4e76ec48dc99b1a9ec5264caede71517180d5e477cb0d7d0bc7b592cd45a53adb5ed72c85fcc5"}, {0xe8, 0x104, 0x4, "64eee7eb9d75059c7c25ac3218930cdcfe8173c76df692513fa6b0e1b7b73b71b5c2e3257d145ef1b2ee90e73c096a76e9aff461a26883dd20bc0030298b5d4cf1606d6820d04f702ff97042bfba24fc3a3ee6abfc924520bd83df6e71f90c6993c2eba096bb2e8197f6cb8da2529a9bdf85dd1d84e47548b5fc68cb19dee76f0113ac62192bc338dbbac949a9f2a7e9ee505d76428c9ff87f2aac918617d1dcd6a78fb61163f1c8370bb1b42584009cbf6238a35d09652db724c9f66d28fb0263278b9a18d713b80d375abdc9081bc23acbbead0303"}, {0x18, 0x113, 0x1, "ffd4e753ce63ca"}], 0x248}, 0x400c040) 3.051745436s ago: executing program 1 (id=1465): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0xffffffff, {0xa, 0x0, 0xa1, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}]}, 0x2c}}, 0x0) (fail_nth: 3) 2.994671844s ago: executing program 4 (id=1466): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="cd0f8e28bcfcc6da0da2c6939d81478a19b232d1f1ef2020f46d976ee2791e1e89dd7e33c709dbdc1d0b663b8b42a2c25d8b54f6aad883824062128c3b7cfc177e710765af1dbd9c2fef622482026330ebe47d3e537756da20840223ae2a0c9470353399914764f21cde404f9daf61", 0x6f}, {&(0x7f0000000140)}], 0x2, &(0x7f0000000380)=[{0x88, 0x102, 0x4, "fdf8b8da18b70b2fb68f79efc409c501bb6591052daed96d7d232177dedfd55476c1ed4e010ba5098dec35938c407dc2ce97194b33932f9f25a6500083422416baef3d37624bde493081de732b22379c435bd05f047c87090e2bb63849c32336323fec28e58e9ce8f952216c376798452cf89991ab2a"}, {0xc0, 0x84, 0xff, "62c5b6315cb2071feaa86de719690245254a9f9c82029ddd5e046848cf4c430d00e3021229cf077317777eb59299973bcfbc35c183db6a11e5f5058277a81895c424d4aaeb2f4c1d199bb924017240bae2eda13326674bd126f40842f8bb8bba346904f81721d2523c71cb02704ca246b6a0e606de5c688b5554ee236aaa76911bdf84c11e56cfe5d4e76ec48dc99b1a9ec5264caede71517180d5e477cb0d7d0bc7b592cd45a53adb5ed72c85fcc5"}, {0xe8, 0x104, 0x4, "64eee7eb9d75059c7c25ac3218930cdcfe8173c76df692513fa6b0e1b7b73b71b5c2e3257d145ef1b2ee90e73c096a76e9aff461a26883dd20bc0030298b5d4cf1606d6820d04f702ff97042bfba24fc3a3ee6abfc924520bd83df6e71f90c6993c2eba096bb2e8197f6cb8da2529a9bdf85dd1d84e47548b5fc68cb19dee76f0113ac62192bc338dbbac949a9f2a7e9ee505d76428c9ff87f2aac918617d1dcd6a78fb61163f1c8370bb1b42584009cbf6238a35d09652db724c9f66d28fb0263278b9a18d713b80d375abdc9081bc23acbbead0303"}, {0x18, 0x113, 0x1, "ffd4e753ce63ca"}], 0x248}, 0x400c040) 2.933215142s ago: executing program 4 (id=1467): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.929804211s ago: executing program 0 (id=1468): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x0, 0x400250}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200), &(0x7f0000000240)) (async) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./bus/file0\x00', 0x2000414, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYBLOB="929cb718d040a784cfbe6686e6cdf5c650f7d687b34b39d5e5916d7175b1ba298c759bb03d7adf998974c1a5407cd4b49210264b3310339916da668be0d43e7b8ca5a68495f21267917556ac9174aa3080afa53685eee03f0cc5121eb48f1eb98fb9301eb365e80399117c936f0f1e3e7b8e601036dab6b0729ca71d06f7b7f2880defd232e2fd183f8f2241c9b1af5128c346e753cf6470156692e1af081cf96346f0", @ANYRES8], 0x1, 0x2ba, &(0x7f0000000ac0)="$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") (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x40, 0x1a, 0xa}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000c00)=ANY=[], 0x110) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x8000, 0x10000, 0x8, 0x1, 0x8, 0xfffffffe, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmmsg$inet6(r5, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nogrpid}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@nobh}, {@data_err_abort}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000088000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000500004801400030076657468315f6d6163767461700000000800014000000005"], 0x124}, 0x1, 0x0, 0x0, 0xd4}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x8010000000000084) 2.92519249s ago: executing program 3 (id=1469): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000a40), 0x82, 0x0) pwritev2(r0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000b80)="f5f4", 0x2}], 0x2, 0xdf, 0x5, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x17, &(0x7f0000000080)={0x40, 0x1, 0x7}) 2.714547858s ago: executing program 1 (id=1470): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB="5c0100fcdbdf250a01dd0f0000200a00000000000000004a4b00b5f1000000000002000000004e230202020020e7ffffff000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) shutdown(r0, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00', 0x6, 0xffffffffffffffff) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x36, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f00000000c0)=0xfffffffb, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000800)={{r0}, "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"}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000000c0)={{0x0, 0x1}, 0x0, 0x4, 0x2, {0x4, 0x1}, 0x3, 0x801}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x208810, &(0x7f0000000100), 0xfc, 0x4d4, &(0x7f00000001c0)="$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") 2.697541444s ago: executing program 0 (id=1471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 2.658062106s ago: executing program 3 (id=1472): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan3\x00'}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0012100800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x204180, 0x49) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000680)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x20008040) timerfd_gettime(r4, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0xb4, 0x14, 0xa, 0x107, 0x0, 0x0, {0x1}, [@NFTA_OBJ_USERDATA={0x9d, 0x8, "4af026e1ffff806843750c0c1783dfc56c5b59e5b0368fc2d3076cf731af32754dfe7756247dd6fbeaf15cc87d5b7ead49c31bd6a476397fcb61e7048a935c61af35301ab01da89cfae31e4b10c7c8504456eb92d062ec624bb15345e4ce8a62b69d9221476c66af681c8240a9a5da7001d0d789f93a402d266e0963c75afd318ab3ef268daf8e9cc44ca8dad95cc3170d42ee3e1410901405"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x91) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="030000000400000004000000ffffffff00000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000006fed8bc5ae8b9c4ed6c67e2235b63000000000000000000015e9dca67932bfb144"], 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.548547114s ago: executing program 4 (id=1473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.470550148s ago: executing program 4 (id=1474): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan3\x00'}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0012100800010001000000"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000680)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x20008040) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0xffff, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x840) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.43184659s ago: executing program 3 (id=1475): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) 2.273383268s ago: executing program 5 (id=1476): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r1 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 1.708266514s ago: executing program 0 (id=1478): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="cd0f8e28bcfcc6da0da2c6939d81478a19b232d1f1ef2020f46d976ee2791e1e89dd7e33c709dbdc1d0b663b8b42a2c25d8b54f6aad883824062128c3b7cfc177e710765af1dbd9c2fef622482026330ebe47d3e537756da20840223ae2a0c9470353399914764f21cde404f9d", 0x6d}, {&(0x7f0000000140)}], 0x2, &(0x7f0000000380)=[{0x88, 0x102, 0x4, "fdf8b8da18b70b2fb68f79efc409c501bb6591052daed96d7d232177dedfd55476c1ed4e010ba5098dec35938c407dc2ce97194b33932f9f25a6500083422416baef3d37624bde493081de732b22379c435bd05f047c87090e2bb63849c32336323fec28e58e9ce8f952216c376798452cf89991ab2a"}, {0xc0, 0x84, 0xff, "62c5b6315cb2071feaa86de719690245254a9f9c82029ddd5e046848cf4c430d00e3021229cf077317777eb59299973bcfbc35c183db6a11e5f5058277a81895c424d4aaeb2f4c1d199bb924017240bae2eda13326674bd126f40842f8bb8bba346904f81721d2523c71cb02704ca246b6a0e606de5c688b5554ee236aaa76911bdf84c11e56cfe5d4e76ec48dc99b1a9ec5264caede71517180d5e477cb0d7d0bc7b592cd45a53adb5ed72c85fcc5"}, {0xe8, 0x104, 0x4, "64eee7eb9d75059c7c25ac3218930cdcfe8173c76df692513fa6b0e1b7b73b71b5c2e3257d145ef1b2ee90e73c096a76e9aff461a26883dd20bc0030298b5d4cf1606d6820d04f702ff97042bfba24fc3a3ee6abfc924520bd83df6e71f90c6993c2eba096bb2e8197f6cb8da2529a9bdf85dd1d84e47548b5fc68cb19dee76f0113ac62192bc338dbbac949a9f2a7e9ee505d76428c9ff87f2aac918617d1dcd6a78fb61163f1c8370bb1b42584009cbf6238a35d09652db724c9f66d28fb0263278b9a18d713b80d375abdc9081bc23acbbead0303"}, {0x18, 0x113, 0x1, "ffd4e753ce63ca"}], 0x248}, 0x400c040) 1.598696202s ago: executing program 0 (id=1479): r0 = syz_io_uring_setup(0x18d6, &(0x7f0000001100)={0x0, 0x74c7, 0x0, 0x2001, 0x227}, &(0x7f0000000400), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180)=[0xd, 0x5], 0xfe) 1.53761173s ago: executing program 1 (id=1480): unshare(0x6a040000) inotify_init1(0x80000) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100800000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1.53689359s ago: executing program 3 (id=1481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) (fail_nth: 1) 1.482436049s ago: executing program 0 (id=1482): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x4d, 0x2000000001, 0x0, 0x3, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x20, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0"], 0x34}}, 0x0) 1.481855869s ago: executing program 5 (id=1483): socket$nl_netfilter(0x10, 0x3, 0xc) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) 1.154885233s ago: executing program 3 (id=1484): r0 = socket(0x11, 0x3, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_genetlink_get_family_id$team(&(0x7f0000000680), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) syz_usb_disconnect(0xffffffffffffffff) 219.035024ms ago: executing program 4 (id=1485): socket$nl_netfilter(0x10, 0x3, 0xc) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) 73.681714ms ago: executing program 1 (id=1486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x10, 0x80, 0x81, 0x333, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x65, 0x0, 0x8, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a48000000060a03047b00000000000000230000050900010073797a31000000001c00048018ea0080080001e0637570000c00028008000173797a0500000000000000001100010000000026000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x24000850}, 0x20008040) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r3, r4+10000000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000001240)='./file0\x00', 0x14001, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x1236, &(0x7f00000024c0)="$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") r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_emit_ethernet(0xc0, &(0x7f0000000380)={@broadcast, @multicast, @void, {@ipv4={0x800, @dccp={{0xb, 0x4, 0x3, 0x9, 0xb2, 0x68, 0x0, 0x7, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ra={0x94, 0x4}, @generic={0x94, 0x12, "4023904c3946e28478840707ddd27f73"}]}}, {{0x4e23, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0x5, 0x6, "91938e", 0x3, "f878d8"}, "14f63d334301cf36cf74c16fdefcd855a85feb08a19de9aff1784bdbbcccf3210772e70429e3bde48c5084818a802ceeba7ccf9ced4f1c33b4dc9de916b8f1b86f809167963d88b2b3aa86fc2c09f419dc8e0d378052897b8effc698290f9fb1858ae8d8e668bd4c7afe5d4bf95ff9617a67b8614b81"}}}}}, 0x0) 0s ago: executing program 0 (id=1487): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x9a031, 0xffffffffffffffff, 0x5e59b000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x2, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x400000000000004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x4, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) kernel console output (not intermixed with test programs): 002b:00007f738107e018 EFLAGS: 00010212 [ 172.649603][ T6094] RAX: 00007f7382501880 RBX: 00007f73828c6090 RCX: 0000000000000000 [ 172.649620][ T6094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.649635][ T6094] RBP: 00007f738107e090 R08: 0000000000000000 R09: 0000000000000000 [ 172.649650][ T6094] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 172.649717][ T6094] R13: 00007f73828c6128 R14: 00007f73828c6090 R15: 00007ffcd92122c8 [ 172.649737][ T6094] [ 172.715409][ T6086] FAT-fs (loop5): Can't find a valid FAT filesystem [ 173.114073][ T6109] loop1: detected capacity change from 0 to 512 [ 173.130175][ T6109] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.674095][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.794'. [ 173.762842][ T6116] loop4: detected capacity change from 0 to 512 [ 173.791422][ T6116] EXT4-fs: Ignoring removed bh option [ 173.821812][ T28] audit: type=1400 audit(173.783:245): avc: denied { create } for pid=6117 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 173.855478][ T6116] EXT4-fs: inline encryption not supported [ 173.893501][ T6116] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.933671][ T28] audit: type=1400 audit(173.793:246): avc: denied { bind } for pid=6117 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.954225][ T6123] tipc: Started in network mode [ 173.968244][ T6123] tipc: Node identity ac14140f, cluster identity 4711 [ 173.985758][ T6123] tipc: New replicast peer: 255.255.255.255 [ 173.992921][ T28] audit: type=1400 audit(173.793:247): avc: denied { ioctl } for pid=6117 comm="syz.3.795" path="socket:[13413]" dev="sockfs" ino=13413 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.017807][ T6123] tipc: Enabled bearer , priority 10 [ 174.024267][ T28] audit: type=1400 audit(173.823:248): avc: denied { map } for pid=6117 comm="syz.3.795" path="/dev/vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 174.207063][ T28] audit: type=1400 audit(174.183:249): avc: denied { setopt } for pid=6131 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.312950][ T28] audit: type=1400 audit(174.213:250): avc: denied { connect } for pid=6133 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 174.332856][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 174.467065][ T6137] loop3: detected capacity change from 0 to 8192 [ 174.515739][ T6137] FAT-fs (loop3): bogus sectors per cluster 0 [ 174.532163][ T6137] FAT-fs (loop3): Can't find a valid FAT filesystem [ 174.554565][ T6143] loop0: detected capacity change from 0 to 4096 [ 174.876163][ T6116] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 174.891206][ T6143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.226417][ T3384] tipc: Node number set to 2886997007 [ 175.256468][ T6116] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.794: bg 0: block 248: padding at end of block bitmap is not set [ 175.380305][ T6116] loop4: lost filesystem error report for type 5 error -117 [ 175.380912][ T6116] Quota error (device loop4): write_blk: dquota write failed [ 175.388998][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 175.389015][ C0] EXT4-fs (loop4): last error at time 175: ext4_validate_block_bitmap:441 [ 175.454754][ T6116] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 175.464941][ T6116] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.794: Failed to acquire dquot type 1 [ 175.479162][ T6116] loop4: lost filesystem error report for type 5 error -117 [ 175.496740][ T6116] EXT4-fs (loop4): 1 truncate cleaned up [ 175.515730][ T6116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 175.684356][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 175.756751][ T6164] loop3: detected capacity change from 0 to 512 [ 175.765199][ T6164] EXT4-fs: Ignoring removed i_version option [ 175.794139][ T6164] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.806431][ T6164] EXT4-fs (loop3): 1 truncate cleaned up [ 175.812568][ T6164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.871383][ T6168] FAULT_INJECTION: forcing a failure. [ 175.871383][ T6168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.899601][ T6168] CPU: 0 UID: 0 PID: 6168 Comm: syz.5.810 Not tainted syzkaller #0 PREEMPT(full) [ 175.899648][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.899664][ T6168] Call Trace: [ 175.899673][ T6168] [ 175.899683][ T6168] __dump_stack+0x1d/0x30 [ 175.899712][ T6168] dump_stack_lvl+0x95/0xd0 [ 175.899742][ T6168] dump_stack+0x15/0x1b [ 175.899847][ T6168] should_fail_ex+0x263/0x280 [ 175.899875][ T6168] should_fail+0xb/0x20 [ 175.899958][ T6168] should_fail_usercopy+0x1a/0x20 [ 175.899985][ T6168] _copy_from_user+0x1c/0xb0 [ 175.900011][ T6168] sctp_setsockopt+0x164/0xea0 [ 175.900101][ T6168] sock_common_setsockopt+0x69/0x80 [ 175.900143][ T6168] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 175.900323][ T6168] __sys_setsockopt+0x184/0x200 [ 175.900352][ T6168] __x64_sys_setsockopt+0x64/0x80 [ 175.900378][ T6168] x64_sys_call+0x2327/0x3020 [ 175.900410][ T6168] do_syscall_64+0x12c/0x370 [ 175.900488][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.900510][ T6168] RIP: 0033:0x7ff7ff71c629 [ 175.900530][ T6168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.900551][ T6168] RSP: 002b:00007ff7fe16f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.900624][ T6168] RAX: ffffffffffffffda RBX: 00007ff7ff995fa0 RCX: 00007ff7ff71c629 [ 175.900646][ T6168] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 175.900662][ T6168] RBP: 00007ff7fe16f090 R08: 000000000000002c R09: 0000000000000000 [ 175.900675][ T6168] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 175.900687][ T6168] R13: 00007ff7ff996038 R14: 00007ff7ff995fa0 R15: 00007ffe6c3e97d8 [ 175.900723][ T6168] [ 175.904350][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.054127][ T6171] loop5: detected capacity change from 0 to 512 [ 176.108281][ T6171] EXT4-fs: Ignoring removed bh option [ 176.113865][ T6171] EXT4-fs: inline encryption not supported [ 176.133806][ T6171] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.184184][ T6171] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 176.208862][ T6171] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.812: bg 0: block 248: padding at end of block bitmap is not set [ 176.223769][ T6171] loop5: lost filesystem error report for type 5 error -117 [ 176.225375][ T6171] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.812: Failed to acquire dquot type 1 [ 176.243955][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 176.243978][ C0] EXT4-fs (loop5): last error at time 176: ext4_validate_block_bitmap:441 [ 176.260071][ T6171] loop5: lost filesystem error report for type 5 error -117 [ 176.260591][ T6171] EXT4-fs (loop5): 1 truncate cleaned up [ 176.274247][ T6171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 176.319050][ T5191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 176.335951][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.344539][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.490713][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.928227][ T6194] loop5: detected capacity change from 0 to 512 [ 177.935128][ T6194] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.310851][ T6196] netlink: 40 bytes leftover after parsing attributes in process `syz.0.818'. [ 178.327100][ T6196] loop0: detected capacity change from 0 to 512 [ 178.432870][ T6196] EXT4-fs: Ignoring removed bh option [ 178.529147][ T6196] EXT4-fs: inline encryption not supported [ 178.539658][ T6196] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.616714][ T6196] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 179.525617][ T6196] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.818: bg 0: block 248: padding at end of block bitmap is not set [ 179.545301][ T6196] loop0: lost filesystem error report for type 5 error -117 [ 179.545798][ T6196] __quota_error: 3 callbacks suppressed [ 179.545810][ T6196] Quota error (device loop0): write_blk: dquota write failed [ 179.559035][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 179.559063][ C0] EXT4-fs (loop0): last error at time 179: ext4_validate_block_bitmap:441 [ 179.755670][ T6196] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 179.766308][ T6196] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.818: Failed to acquire dquot type 1 [ 179.808017][ T6196] loop0: lost filesystem error report for type 5 error -117 [ 179.808461][ T6196] EXT4-fs (loop0): 1 truncate cleaned up [ 179.822007][ T6196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 179.967643][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 179.991520][ T28] audit: type=1400 audit(179.963:252): avc: denied { firmware_load } for pid=6208 comm="syz.1.822" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 180.111053][ T6220] netlink: 'syz.0.826': attribute type 298 has an invalid length. [ 180.195765][ T6223] FAULT_INJECTION: forcing a failure. [ 180.195765][ T6223] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 180.209129][ T6223] CPU: 0 UID: 0 PID: 6223 Comm: syz.0.827 Not tainted syzkaller #0 PREEMPT(full) [ 180.209235][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.209246][ T6223] Call Trace: [ 180.209266][ T6223] [ 180.209274][ T6223] __dump_stack+0x1d/0x30 [ 180.209298][ T6223] dump_stack_lvl+0x95/0xd0 [ 180.209318][ T6223] dump_stack+0x15/0x1b [ 180.209420][ T6223] should_fail_ex+0x263/0x280 [ 180.209450][ T6223] should_fail_alloc_page+0xf2/0x100 [ 180.209469][ T6223] __alloc_frozen_pages_noprof+0x108/0x360 [ 180.209496][ T6223] alloc_pages_bulk_noprof+0x4aa/0x530 [ 180.209558][ T6223] ? __kmalloc_noprof+0x1e3/0x4e0 [ 180.209576][ T6223] ? copy_splice_read+0xc2/0x6c0 [ 180.209607][ T6223] copy_splice_read+0xf3/0x6c0 [ 180.209711][ T6223] ? avc_has_perm+0x101/0x190 [ 180.209787][ T6223] sock_splice_read+0xa5/0xb0 [ 180.209815][ T6223] ? __pfx_sock_splice_read+0x10/0x10 [ 180.209844][ T6223] splice_file_to_pipe+0x237/0x390 [ 180.209913][ T6223] do_splice+0xc46/0x10b0 [ 180.209958][ T6223] ? proc_fail_nth_write+0x13b/0x160 [ 180.210014][ T6223] ? __rcu_read_unlock+0x4e/0x70 [ 180.210042][ T6223] ? __fget_files+0x184/0x1c0 [ 180.210070][ T6223] __se_sys_splice+0x26c/0x3a0 [ 180.210137][ T6223] __x64_sys_splice+0x78/0x90 [ 180.210156][ T6223] x64_sys_call+0x16ef/0x3020 [ 180.210180][ T6223] do_syscall_64+0x12c/0x370 [ 180.210241][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.210260][ T6223] RIP: 0033:0x7f738264c629 [ 180.210274][ T6223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.210300][ T6223] RSP: 002b:00007f738109f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 180.210317][ T6223] RAX: ffffffffffffffda RBX: 00007f73828c5fa0 RCX: 00007f738264c629 [ 180.210329][ T6223] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 180.210340][ T6223] RBP: 00007f738109f090 R08: 0000000000000f3a R09: 0000000000000000 [ 180.210423][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.210434][ T6223] R13: 00007f73828c6038 R14: 00007f73828c5fa0 R15: 00007ffcd92122c8 [ 180.210452][ T6223] [ 180.752115][ T6235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.832'. [ 180.763883][ T6235] gtp0: entered promiscuous mode [ 180.776968][ T6235] syzkaller1: entered allmulticast mode [ 180.888283][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.897038][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.037457][ T6241] loop1: detected capacity change from 0 to 512 [ 181.048837][ T6241] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.257929][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.265160][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.314019][ T6243] batman_adv: batadv0: Interface deactivated: dummy0 [ 183.121802][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.131525][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.182292][ T3446] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.210088][ T3446] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.248126][ T3446] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.290616][ T3446] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.487013][ T28] audit: type=1400 audit(183.443:253): avc: denied { write } for pid=6256 comm="syz.3.837" name="netlink" dev="proc" ino=4026532645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 183.835500][ T28] audit: type=1400 audit(183.803:254): avc: denied { setopt } for pid=6270 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 183.924264][ T6276] FAULT_INJECTION: forcing a failure. [ 183.924264][ T6276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.945871][ T6278] FAULT_INJECTION: forcing a failure. [ 183.945871][ T6278] name failslab, interval 1, probability 0, space 0, times 0 [ 183.963393][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: syz.1.843 Not tainted syzkaller #0 PREEMPT(full) [ 183.963459][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.963481][ T6278] Call Trace: [ 183.963564][ T6278] [ 183.963574][ T6278] __dump_stack+0x1d/0x30 [ 183.963609][ T6278] dump_stack_lvl+0x95/0xd0 [ 183.963641][ T6278] dump_stack+0x15/0x1b [ 183.963668][ T6278] should_fail_ex+0x263/0x280 [ 183.963746][ T6278] should_failslab+0x8c/0xb0 [ 183.963773][ T6278] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 183.963802][ T6278] ? __alloc_skb+0x2d6/0x690 [ 183.963905][ T6278] __alloc_skb+0x2d6/0x690 [ 183.963933][ T6278] ? __alloc_skb+0x200/0x690 [ 183.964006][ T6278] netlink_alloc_large_skb+0xbf/0xf0 [ 183.964037][ T6278] netlink_sendmsg+0x40c/0x6f0 [ 183.964136][ T6278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.964179][ T6278] ____sys_sendmsg+0x5af/0x600 [ 183.964219][ T6278] ___sys_sendmsg+0x195/0x1e0 [ 183.964275][ T6278] __x64_sys_sendmsg+0xd4/0x160 [ 183.964313][ T6278] x64_sys_call+0x194c/0x3020 [ 183.964393][ T6278] do_syscall_64+0x12c/0x370 [ 183.964431][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.964461][ T6278] RIP: 0033:0x7fa28679c629 [ 183.964481][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.964573][ T6278] RSP: 002b:00007fa2851f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.964595][ T6278] RAX: ffffffffffffffda RBX: 00007fa286a15fa0 RCX: 00007fa28679c629 [ 183.964620][ T6278] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 183.964633][ T6278] RBP: 00007fa2851f7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.964645][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.964706][ T6278] R13: 00007fa286a16038 R14: 00007fa286a15fa0 R15: 00007ffdb5f1f428 [ 183.964725][ T6278] [ 184.170253][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.0.841 Not tainted syzkaller #0 PREEMPT(full) [ 184.170288][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.170305][ T6276] Call Trace: [ 184.170325][ T6276] [ 184.170334][ T6276] __dump_stack+0x1d/0x30 [ 184.170434][ T6276] dump_stack_lvl+0x95/0xd0 [ 184.170465][ T6276] dump_stack+0x15/0x1b [ 184.170495][ T6276] should_fail_ex+0x263/0x280 [ 184.170524][ T6276] should_fail+0xb/0x20 [ 184.170603][ T6276] should_fail_usercopy+0x1a/0x20 [ 184.170665][ T6276] _copy_to_iter+0x251/0xea0 [ 184.170697][ T6276] ? netlink_seq_stop+0xe9/0x130 [ 184.170743][ T6276] seq_read_iter+0x776/0x940 [ 184.170787][ T6276] seq_read+0x279/0x2c0 [ 184.170879][ T6276] ? __pfx_seq_read+0x10/0x10 [ 184.170907][ T6276] proc_reg_read+0x128/0x1c0 [ 184.170945][ T6276] ? __pfx_proc_reg_read+0x10/0x10 [ 184.171065][ T6276] vfs_read+0x1ab/0x7f0 [ 184.171118][ T6276] ? mutex_lock+0x57/0x90 [ 184.171150][ T6276] ? mutex_lock+0x57/0x90 [ 184.171185][ T6276] ksys_read+0xdc/0x1a0 [ 184.171293][ T6276] __x64_sys_read+0x40/0x50 [ 184.171334][ T6276] x64_sys_call+0x2886/0x3020 [ 184.171365][ T6276] do_syscall_64+0x12c/0x370 [ 184.171406][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.171435][ T6276] RIP: 0033:0x7f738264c629 [ 184.171491][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.171509][ T6276] RSP: 002b:00007f738105d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.171532][ T6276] RAX: ffffffffffffffda RBX: 00007f73828c6180 RCX: 00007f738264c629 [ 184.171550][ T6276] RDX: 0000000000001000 RSI: 0000200000001180 RDI: 0000000000000006 [ 184.171567][ T6276] RBP: 00007f738105d090 R08: 0000000000000000 R09: 0000000000000000 [ 184.171583][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.171634][ T6276] R13: 00007f73828c6218 R14: 00007f73828c6180 R15: 00007ffcd92122c8 [ 184.171658][ T6276] [ 184.384715][ T28] audit: type=1400 audit(184.353:255): avc: denied { create } for pid=6279 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 184.407313][ T28] audit: type=1400 audit(184.353:256): avc: denied { setopt } for pid=6279 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 184.428211][ T28] audit: type=1400 audit(184.353:257): avc: denied { write } for pid=6279 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 185.631558][ T6304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6304 comm=syz.4.852 [ 185.644465][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.852'. [ 185.655279][ T28] audit: type=1400 audit(185.633:258): avc: denied { bind } for pid=6303 comm="syz.4.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.683368][ T28] audit: type=1400 audit(185.653:259): avc: denied { name_bind } for pid=6303 comm="syz.4.852" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 185.764970][ T6306] loop3: detected capacity change from 0 to 512 [ 185.778996][ T6306] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.097350][ T28] audit: type=1400 audit(185.653:260): avc: denied { node_bind } for pid=6303 comm="syz.4.852" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 186.180054][ T6309] loop0: detected capacity change from 0 to 512 [ 186.260718][ T6309] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.372657][ T6309] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 186.382656][ T28] audit: type=1400 audit(185.653:261): avc: denied { name_connect } for pid=6303 comm="syz.4.852" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 186.424783][ T6309] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.854: invalid indirect mapped block 33554432 (level 0) [ 186.468737][ T6309] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 186.469202][ T6309] EXT4-fs (loop0): Remounting filesystem read-only [ 186.478513][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 186.478536][ C1] EXT4-fs (loop0): initial error at time 186: ext4_free_branches:1023: inode 13 [ 186.478568][ C1] EXT4-fs (loop0): last error at time 186: ext4_free_branches:1023: inode 13 [ 186.618206][ T6309] EXT4-fs (loop0): 1 truncate cleaned up [ 186.635717][ T6309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.742471][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.441581][ T28] audit: type=1400 audit(187.413:262): avc: denied { create } for pid=6344 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 187.513439][ T28] audit: type=1400 audit(187.443:263): avc: denied { write } for pid=6344 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 187.541330][ T28] audit: type=1400 audit(187.463:264): avc: denied { ioctl } for pid=6344 comm="syz.3.861" path="socket:[13726]" dev="sockfs" ino=13726 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 187.699909][ T28] audit: type=1400 audit(187.673:265): avc: denied { bind } for pid=6357 comm="syz.3.863" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.201887][ T6370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.868'. [ 188.214254][ T6370] loop1: detected capacity change from 0 to 512 [ 188.221264][ T6370] EXT4-fs: Ignoring removed bh option [ 188.227100][ T6370] EXT4-fs: inline encryption not supported [ 188.236394][ T6370] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.257292][ T6370] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 188.272119][ T6370] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.868: bg 0: block 248: padding at end of block bitmap is not set [ 188.286554][ T6370] loop1: lost filesystem error report for type 5 error -117 [ 188.286761][ T6370] Quota error (device loop1): write_blk: dquota write failed [ 188.301669][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 188.301701][ C0] EXT4-fs (loop1): last error at time 188: ext4_validate_block_bitmap:441 [ 188.316952][ T6370] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 188.327130][ T6370] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.868: Failed to acquire dquot type 1 [ 188.338763][ T6370] loop1: lost filesystem error report for type 5 error -117 [ 188.343769][ T6370] EXT4-fs (loop1): 1 truncate cleaned up [ 188.357609][ T6370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 188.403719][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 188.429585][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.872'. [ 188.484948][ T6380] loop4: detected capacity change from 0 to 8192 [ 188.497453][ T6380] FAT-fs (loop4): bogus sectors per cluster 0 [ 188.517473][ T6380] FAT-fs (loop4): Can't find a valid FAT filesystem [ 188.734360][ T6390] loop1: detected capacity change from 0 to 512 [ 188.748467][ T6390] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.219552][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 189.314602][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 189.330827][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 189.340181][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 189.461828][ T6397] loop0: detected capacity change from 0 to 1024 [ 189.568025][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.685576][ T6397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.760741][ T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.867710][ T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.907221][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.941412][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.226539][ T6415] loop3: detected capacity change from 0 to 128 [ 190.489415][ T6421] loop0: detected capacity change from 0 to 512 [ 190.503814][ T6421] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 190.729592][ T6421] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.882: corrupted xattr entries [ 190.788464][ T6421] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.789902][ T6421] EXT4-fs (loop0): Remounting filesystem read-only [ 190.799204][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 190.799232][ C1] EXT4-fs (loop0): initial error at time 190: xattr_find_entry:337: inode 15 [ 190.799257][ C1] EXT4-fs (loop0): last error at time 190: xattr_find_entry:337: inode 15 [ 191.027980][ T6421] EXT4-fs (loop0): 1 truncate cleaned up [ 191.034140][ T6421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.067668][ T6421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.882'. [ 191.094696][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.146960][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 191.146975][ T28] audit: type=1400 audit(191.123:271): avc: denied { bind } for pid=6439 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 191.333065][ T28] audit: type=1400 audit(191.303:272): avc: denied { read } for pid=6439 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 192.762265][ T6456] loop4: detected capacity change from 0 to 512 [ 192.773312][ T6456] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.065412][ T28] audit: type=1400 audit(193.023:273): avc: denied { write } for pid=6460 comm="syz.1.899" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 193.120741][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. [ 193.173851][ T6462] sctp: [Deprecated]: syz.1.899 (pid 6462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.173851][ T6462] Use struct sctp_sack_info instead [ 193.356013][ T6463] sctp: [Deprecated]: syz.1.899 (pid 6463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.356013][ T6463] Use struct sctp_sack_info instead [ 193.455937][ T28] audit: type=1400 audit(193.423:274): avc: denied { connect } for pid=6472 comm="syz.0.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.603011][ T6476] netlink: 40 bytes leftover after parsing attributes in process `syz.1.903'. [ 193.665755][ T6476] loop1: detected capacity change from 0 to 512 [ 193.714475][ T6476] EXT4-fs: Ignoring removed bh option [ 193.755056][ T6476] EXT4-fs: inline encryption not supported [ 193.784486][ T6476] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.849591][ T6476] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 193.919535][ T6476] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.903: bg 0: block 248: padding at end of block bitmap is not set [ 193.972973][ T6476] loop1: lost filesystem error report for type 5 error -117 [ 193.973194][ T6476] Quota error (device loop1): write_blk: dquota write failed [ 193.980560][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 193.980575][ C0] EXT4-fs (loop1): last error at time 193: ext4_validate_block_bitmap:441 [ 194.007541][ T6483] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.114868][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.906'. [ 194.134270][ T6476] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 194.166445][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.906'. [ 194.177036][ T6476] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.903: Failed to acquire dquot type 1 [ 194.198649][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 194.220549][ T6476] loop1: lost filesystem error report for type 5 error -117 [ 194.221187][ T6476] EXT4-fs (loop1): 1 truncate cleaned up [ 194.270312][ T6476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 194.326522][ T6493] loop4: detected capacity change from 0 to 128 [ 194.369334][ T6488] loop3: detected capacity change from 0 to 8192 [ 194.393778][ T6488] FAT-fs (loop3): bogus sectors per cluster 0 [ 194.408689][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 194.430355][ T6488] FAT-fs (loop3): Can't find a valid FAT filesystem [ 194.488352][ T6499] loop1: detected capacity change from 0 to 1024 [ 194.512851][ T28] audit: type=1400 audit(194.483:275): avc: denied { remount } for pid=6500 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 194.532401][ T6501] tmpfs: Bad value for 'mpol' [ 194.609635][ T28] audit: type=1400 audit(194.583:276): avc: denied { read } for pid=6502 comm="syz.4.914" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 194.633185][ T28] audit: type=1400 audit(194.583:277): avc: denied { open } for pid=6502 comm="syz.4.914" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 194.687814][ T6511] syz.4.914 (6511) used obsolete PPPIOCDETACH ioctl [ 194.695619][ T28] audit: type=1400 audit(194.633:278): avc: denied { ioctl } for pid=6509 comm="syz.3.915" path="socket:[12895]" dev="sockfs" ino=12895 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.742613][ T6510] netlink: 192 bytes leftover after parsing attributes in process `syz.3.915'. [ 194.843245][ T6518] Invalid ELF header magic: != ELF [ 194.858695][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 195.015867][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.918'. [ 195.028932][ T6520] loop3: detected capacity change from 0 to 512 [ 195.036469][ T6520] EXT4-fs: Ignoring removed bh option [ 195.044830][ T6520] EXT4-fs: inline encryption not supported [ 195.073090][ T6520] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.098108][ T6520] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 195.141280][ T6527] loop0: detected capacity change from 0 to 128 [ 195.157590][ T6529] netlink: 40 bytes leftover after parsing attributes in process `syz.4.921'. [ 195.164072][ T6520] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.918: bg 0: block 248: padding at end of block bitmap is not set [ 195.174686][ T6529] loop4: detected capacity change from 0 to 512 [ 195.189333][ T6520] loop3: lost filesystem error report for type 5 error -117 [ 195.189576][ T6520] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.918: Failed to acquire dquot type 1 [ 195.192027][ T6529] EXT4-fs: Ignoring removed bh option [ 195.197044][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 195.197063][ C1] EXT4-fs (loop3): last error at time 195: ext4_validate_block_bitmap:441 [ 195.197106][ T6520] loop3: lost filesystem error report for type 5 error -117 [ 195.229595][ T6520] EXT4-fs (loop3): 1 truncate cleaned up [ 195.243221][ T6520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 195.282408][ T6529] EXT4-fs: inline encryption not supported [ 195.296533][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 195.330677][ T6529] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.368850][ T6529] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 195.385482][ T6529] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.921: bg 0: block 248: padding at end of block bitmap is not set [ 195.417035][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.434116][ T6529] loop4: lost filesystem error report for type 5 error -117 [ 195.434399][ T6529] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.921: Failed to acquire dquot type 1 [ 195.441783][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 195.441807][ C1] EXT4-fs (loop4): last error at time 195: ext4_validate_block_bitmap:441 [ 195.485884][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.497340][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 195.566136][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 195.575084][ T6529] loop4: lost filesystem error report for type 5 error -117 [ 195.586089][ T6529] EXT4-fs (loop4): 1 truncate cleaned up [ 195.610746][ T6529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 195.640698][ T6553] netlink: 'syz.0.929': attribute type 27 has an invalid length. [ 195.673502][ T6553] ip6gre1: left promiscuous mode [ 195.695387][ T6553] ip6gre1: left allmulticast mode [ 195.721739][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.736981][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.752083][ T6553] batman_adv: batadv0: Interface activated: dummy0 [ 195.760042][ T6553] net_ratelimit: 10 callbacks suppressed [ 195.760067][ T6553] batadv0: mtu less than device minimum [ 195.772373][ T6553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.783201][ T6553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.794150][ T6553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.805123][ T6553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.816187][ T6553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.827077][ T6553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.838291][ T6553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.849246][ T6553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.860303][ T6553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.918795][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 196.072802][ T6568] loop0: detected capacity change from 0 to 1024 [ 196.088903][ T6568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.123835][ T6568] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.934: bg 0: block 112: padding at end of block bitmap is not set [ 196.160001][ T6568] EXT4-fs (loop0): Remounting filesystem read-only [ 196.221850][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 196.266693][ T6574] loop3: detected capacity change from 0 to 8192 [ 196.312731][ T6574] FAT-fs (loop3): bogus sectors per cluster 0 [ 196.321420][ T6574] FAT-fs (loop3): Can't find a valid FAT filesystem [ 196.373693][ T6584] netlink: 'syz.0.941': attribute type 7 has an invalid length. [ 196.416462][ T6586] EXT4-fs: Ignoring removed bh option [ 196.466091][ T6586] EXT4-fs: inline encryption not supported [ 196.479837][ T6586] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.592084][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 196.592103][ T28] audit: type=1400 audit(196.563:290): avc: denied { read } for pid=6589 comm="syz.3.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.633382][ T6586] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 196.655602][ T6586] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.942: bg 0: block 248: padding at end of block bitmap is not set [ 196.685777][ T6586] loop1: lost filesystem error report for type 5 error -117 [ 196.692025][ T6586] Quota error (device loop1): write_blk: dquota write failed [ 196.699486][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 196.699510][ C1] EXT4-fs (loop1): last error at time 196: ext4_validate_block_bitmap:441 [ 196.787699][ T6586] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 196.798474][ T6586] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.942: Failed to acquire dquot type 1 [ 196.810354][ T6586] loop1: lost filesystem error report for type 5 error -117 [ 196.811009][ T6586] EXT4-fs (loop1): 1 truncate cleaned up [ 196.824867][ T6586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 196.974584][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 196.988169][ T6601] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.046357][ T6607] ip_vti0: Master is either lo or non-ether device [ 197.526415][ T28] audit: type=1400 audit(197.423:291): avc: denied { map } for pid=6596 comm="syz.3.945" path="pipe:[13140]" dev="pipefs" ino=13140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 197.843338][ T28] audit: type=1400 audit(197.793:292): avc: denied { connect } for pid=6606 comm="syz.1.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.962255][ T6601] EXT4-fs (loop4): 1 truncate cleaned up [ 197.975709][ T6601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.049173][ T28] audit: type=1400 audit(198.013:293): avc: denied { add_name } for pid=6599 comm="syz.4.947" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.345755][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.632307][ T28] audit: type=1400 audit(198.593:294): avc: denied { map } for pid=6638 comm="syz.0.956" path="/proc/577/attr" dev="proc" ino=13201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 198.780208][ T6663] __nla_validate_parse: 5 callbacks suppressed [ 198.780227][ T6663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.958'. [ 198.799254][ T6663] set_capacity_and_notify: 2 callbacks suppressed [ 198.799270][ T6663] loop3: detected capacity change from 0 to 512 [ 198.843735][ T6663] EXT4-fs: Ignoring removed bh option [ 198.885183][ T6663] EXT4-fs: inline encryption not supported [ 198.905605][ T6663] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.198290][ T6663] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 199.298831][ T6663] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.958: bg 0: block 248: padding at end of block bitmap is not set [ 199.375977][ T6663] loop3: lost filesystem error report for type 5 error -117 [ 199.377258][ T6663] Quota error (device loop3): write_blk: dquota write failed [ 199.392157][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 199.392177][ C1] EXT4-fs (loop3): last error at time 199: ext4_validate_block_bitmap:441 [ 199.450611][ T6663] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 199.460781][ T6663] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.958: Failed to acquire dquot type 1 [ 199.472170][ T6663] loop3: lost filesystem error report for type 5 error -117 [ 199.472924][ T6663] EXT4-fs (loop3): 1 truncate cleaned up [ 199.507061][ T6663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 199.613926][ T6683] loop5: detected capacity change from 0 to 4096 [ 199.836328][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 199.918614][ T6683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.983262][ T6742] loop1: detected capacity change from 0 to 512 [ 200.123685][ T6742] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 200.269946][ T6742] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 200.283358][ T6748] loop0: detected capacity change from 0 to 512 [ 200.332611][ T6748] EXT4-fs: Ignoring removed bh option [ 200.349246][ T6742] EXT4-fs (loop1): 1 truncate cleaned up [ 200.359046][ T5191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.373842][ T6748] EXT4-fs: inline encryption not supported [ 200.384737][ T6742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.417637][ T6748] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.566768][ T6742] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 4: comm syz.1.964: path /184/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 200.604218][ T6748] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 200.625753][ T6742] EXT4-fs (loop1): Remounting filesystem read-only [ 200.635519][ T6748] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.967: bg 0: block 248: padding at end of block bitmap is not set [ 201.014616][ T6748] loop0: lost filesystem error report for type 5 error -117 [ 201.015270][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 201.029112][ C0] EXT4-fs (loop0): last error at time 200: ext4_validate_block_bitmap:441 [ 201.049106][ T6748] Quota error (device loop0): write_blk: dquota write failed [ 201.086708][ T6748] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.967: Failed to acquire dquot type 1 [ 201.499016][ T6748] loop0: lost filesystem error report for type 5 error -117 [ 201.505908][ T6748] EXT4-fs (loop0): 1 truncate cleaned up [ 201.520249][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.560217][ T6748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 201.628174][ T6770] Invalid ELF header magic: != ELF [ 202.659823][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 202.789384][ T6778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.976'. [ 202.828648][ T6778] loop3: detected capacity change from 0 to 512 [ 202.837013][ T6778] EXT4-fs: Ignoring removed bh option [ 202.839888][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.842777][ T6778] EXT4-fs: inline encryption not supported [ 202.867380][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.879539][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.978'. [ 202.888778][ T6778] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.905717][ T6790] netlink: 'syz.0.980': attribute type 13 has an invalid length. [ 202.917564][ T6778] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 202.948532][ T6778] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.976: bg 0: block 248: padding at end of block bitmap is not set [ 202.977025][ T6778] loop3: lost filesystem error report for type 5 error -117 [ 202.977399][ T6778] __quota_error: 1 callbacks suppressed [ 202.977431][ T6778] Quota error (device loop3): write_blk: dquota write failed [ 202.990383][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 202.990414][ C0] EXT4-fs (loop3): last error at time 202: ext4_validate_block_bitmap:441 [ 203.017403][ T6794] loop0: detected capacity change from 0 to 512 [ 203.028786][ T28] audit: type=1400 audit(202.973:295): avc: denied { name_bind } for pid=6788 comm="syz.0.980" src=20068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 203.044334][ T6778] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 203.063836][ T6778] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.976: Failed to acquire dquot type 1 [ 203.077216][ T6790] batman_adv: batadv0: Interface deactivated: dummy0 [ 203.082064][ T6797] loop5: detected capacity change from 0 to 256 [ 203.116570][ T6778] loop3: lost filesystem error report for type 5 error -117 [ 203.117538][ T6778] EXT4-fs (loop3): 1 truncate cleaned up [ 203.130772][ T6794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.980: iget: bad extra_isize 90 (inode size 256) [ 203.155843][ T6778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 203.175298][ T6794] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.175738][ T6794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.980: error while reading EA inode 11 err=-117 [ 203.197302][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 203.197330][ C0] EXT4-fs (loop0): initial error at time 203: ext4_xattr_inode_iget:441: inode 11 [ 203.197382][ C0] EXT4-fs (loop0): last error at time 203: ext4_xattr_inode_iget:441: inode 11 [ 203.222626][ T6794] loop0: lost filesystem error report for type 5 error -117 [ 203.223016][ T6794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.980: iget: bad extra_isize 90 (inode size 256) [ 203.244161][ T6794] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.244561][ T6794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.980: error while reading EA inode 11 err=-117 [ 203.273378][ T6794] loop0: lost filesystem error report for type 5 error -117 [ 203.273628][ T6794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.980: iget: bad extra_isize 90 (inode size 256) [ 203.294847][ T6794] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 203.295172][ T6794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.980: error while reading EA inode 18 err=-117 [ 203.318732][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 203.330573][ T6794] loop0: lost filesystem error report for type 5 error -117 [ 203.331083][ T6794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.980: iget: bad extra_isize 90 (inode size 256) [ 203.351872][ T6794] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 203.352181][ T6794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.980: error while reading EA inode 18 err=-117 [ 203.389599][ T6794] loop0: lost filesystem error report for type 5 error -117 [ 203.389881][ T6794] EXT4-fs (loop0): 1 orphan inode deleted [ 203.403841][ T6794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.427113][ T6802] loop1: detected capacity change from 0 to 1024 [ 203.435785][ T6802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.458395][ T6802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.477268][ T28] audit: type=1400 audit(203.453:296): avc: denied { ioctl } for pid=6784 comm="syz.1.978" path="/186/file1/file1" dev="loop1" ino=15 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 203.503752][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.610690][ T6812] loop0: detected capacity change from 0 to 8192 [ 203.628517][ T6812] FAT-fs (loop0): bogus sectors per cluster 0 [ 203.634912][ T6812] FAT-fs (loop0): Can't find a valid FAT filesystem [ 203.678769][ T6816] loop4: detected capacity change from 0 to 8192 [ 203.690594][ T6816] FAT-fs (loop4): bogus sectors per cluster 0 [ 203.708346][ T6816] FAT-fs (loop4): Can't find a valid FAT filesystem [ 203.816515][ T28] audit: type=1400 audit(203.793:297): avc: denied { write } for pid=6823 comm="syz.4.990" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.846302][ T28] audit: type=1400 audit(203.793:298): avc: denied { open } for pid=6823 comm="syz.4.990" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.881710][ T28] audit: type=1400 audit(203.793:299): avc: denied { ioctl } for pid=6823 comm="syz.4.990" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 204.141418][ T6827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=6827 comm=syz.4.991 [ 204.422513][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.539547][ T6843] loop5: detected capacity change from 0 to 8192 [ 204.546746][ T6843] FAT-fs (loop5): bogus sectors per cluster 0 [ 204.552977][ T6843] FAT-fs (loop5): Can't find a valid FAT filesystem [ 204.581649][ T6846] Invalid ELF header magic: != ELF [ 204.706940][ T6854] IPv6: sit1: Disabled Multicast RS [ 204.768553][ T28] audit: type=1400 audit(204.733:300): avc: denied { create } for pid=6853 comm="syz.1.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.845055][ T6866] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1008'. [ 204.959896][ T6881] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1013'. [ 205.060272][ T6886] loop0: detected capacity change from 0 to 8192 [ 205.335641][ T6886] FAT-fs (loop0): bogus sectors per cluster 0 [ 205.359143][ T6886] FAT-fs (loop0): Can't find a valid FAT filesystem [ 205.563805][ T6890] Invalid ELF header magic: != ELF [ 205.594760][ T28] audit: type=1400 audit(205.563:301): avc: denied { connect } for pid=6892 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 205.622128][ T6884] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1014'. [ 205.655165][ T28] audit: type=1400 audit(205.623:302): avc: denied { write } for pid=6892 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 206.069121][ T6914] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1022'. [ 206.156787][ T6930] loop0: detected capacity change from 0 to 128 [ 206.245399][ T6930] sit1: entered promiscuous mode [ 206.407939][ T6937] loop0: detected capacity change from 0 to 8192 [ 206.416889][ T6937] FAT-fs (loop0): bogus sectors per cluster 0 [ 206.424018][ T6937] FAT-fs (loop0): Can't find a valid FAT filesystem [ 206.567013][ T6941] loop4: detected capacity change from 0 to 512 [ 206.575091][ T6941] EXT4-fs: Ignoring removed bh option [ 206.581975][ T6941] EXT4-fs: inline encryption not supported [ 206.593637][ T6941] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 206.673834][ T6941] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 206.689351][ T6941] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1030: bg 0: block 248: padding at end of block bitmap is not set [ 206.704374][ T6941] loop4: lost filesystem error report for type 5 error -117 [ 206.704619][ T6941] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1030: Failed to acquire dquot type 1 [ 206.712005][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 206.712048][ C0] EXT4-fs (loop4): last error at time 206: ext4_validate_block_bitmap:441 [ 206.738681][ T6941] loop4: lost filesystem error report for type 5 error -117 [ 206.740197][ T6941] EXT4-fs (loop4): 1 truncate cleaned up [ 206.755122][ T6941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 206.897829][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 207.531849][ T6959] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1036'. [ 207.768735][ T6972] loop3: detected capacity change from 0 to 512 [ 207.795671][ T6972] EXT4-fs: Ignoring removed bh option [ 207.808270][ T6970] loop0: detected capacity change from 0 to 8192 [ 207.845441][ T6972] EXT4-fs: inline encryption not supported [ 207.938754][ T6972] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.949168][ T6970] FAT-fs (loop0): bogus sectors per cluster 0 [ 207.968544][ T6970] FAT-fs (loop0): Can't find a valid FAT filesystem [ 208.055951][ T6972] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 208.108036][ T6972] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1041: bg 0: block 248: padding at end of block bitmap is not set [ 208.166057][ T6972] loop3: lost filesystem error report for type 5 error -117 [ 208.166384][ T6972] __quota_error: 4 callbacks suppressed [ 208.166401][ T6972] Quota error (device loop3): write_blk: dquota write failed [ 208.179373][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 208.179396][ C1] EXT4-fs (loop3): last error at time 208: ext4_validate_block_bitmap:441 [ 208.224178][ T6972] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 208.234281][ T6972] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.1041: Failed to acquire dquot type 1 [ 208.256361][ T6972] loop3: lost filesystem error report for type 5 error -117 [ 208.267553][ T6972] EXT4-fs (loop3): 1 truncate cleaned up [ 208.317832][ T6972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 208.403241][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 208.718380][ T28] audit: type=1400 audit(208.693:305): avc: denied { connect } for pid=7002 comm="syz.1.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.750679][ T6997] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1050'. [ 209.393386][ T7015] loop0: detected capacity change from 0 to 512 [ 209.414078][ T7015] EXT4-fs: Ignoring removed bh option [ 209.455349][ T7015] EXT4-fs: inline encryption not supported [ 209.476502][ T7015] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.527341][ T7015] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 209.569973][ T7015] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1055: bg 0: block 248: padding at end of block bitmap is not set [ 209.596872][ T7015] loop0: lost filesystem error report for type 5 error -117 [ 209.597172][ T7015] Quota error (device loop0): write_blk: dquota write failed [ 209.612350][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 209.612381][ C0] EXT4-fs (loop0): last error at time 209: ext4_validate_block_bitmap:441 [ 209.652412][ T7015] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 209.663057][ T7015] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1055: Failed to acquire dquot type 1 [ 209.674618][ T7015] loop0: lost filesystem error report for type 5 error -117 [ 209.675417][ T7015] EXT4-fs (loop0): 1 truncate cleaned up [ 209.689118][ T7015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 209.939215][ T7029] loop4: detected capacity change from 0 to 512 [ 209.946478][ T7029] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 210.041018][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 210.515871][ T7056] EXT4-fs (loop1): unable to read superblock [ 210.623748][ T7067] loop3: detected capacity change from 0 to 512 [ 210.630831][ T7067] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.658035][ T7067] EXT4-fs (loop3): 1 truncate cleaned up [ 210.668536][ T7071] loop1: detected capacity change from 0 to 512 [ 210.675480][ T7067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.691557][ T7071] EXT4-fs: Ignoring removed bh option [ 210.697141][ T7071] EXT4-fs: inline encryption not supported [ 210.703823][ T7071] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.785230][ T7071] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 210.800151][ T7071] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1072: bg 0: block 248: padding at end of block bitmap is not set [ 210.814553][ T7071] loop1: lost filesystem error report for type 5 error -117 [ 210.814759][ T7071] Quota error (device loop1): write_blk: dquota write failed [ 210.822125][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 210.822150][ C0] EXT4-fs (loop1): last error at time 210: ext4_validate_block_bitmap:441 [ 210.845345][ T7071] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 210.855467][ T7071] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1072: Failed to acquire dquot type 1 [ 210.866780][ T7071] loop1: lost filesystem error report for type 5 error -117 [ 210.978083][ T7071] EXT4-fs (loop1): 1 truncate cleaned up [ 211.016115][ T7071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 211.124067][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 211.151025][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.300778][ T7081] loop1: detected capacity change from 0 to 4096 [ 211.317902][ T7081] EXT4-fs: Ignoring removed bh option [ 211.360310][ T7081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.360701][ T7085] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1076'. [ 211.422751][ T7081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7081 comm=syz.1.1074 [ 211.465360][ T28] audit: type=1400 audit(211.433:306): avc: denied { write open } for pid=7080 comm="syz.1.1074" path="/208/file3/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 211.509587][ T28] audit: type=1400 audit(211.433:307): avc: denied { read append } for pid=7080 comm="syz.1.1074" path="/208/file3/blkio.throttle.io_service_bytes_recursive" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 211.559438][ T28] audit: type=1400 audit(211.523:308): avc: denied { create } for pid=7080 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 211.616470][ T7092] loop3: detected capacity change from 0 to 1024 [ 211.687336][ T7092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.724151][ T7092] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 211.756506][ T7092] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 211.802173][ T7092] EXT4-fs (loop3): This should not happen!! Data will be lost [ 211.802173][ T7092] [ 211.841117][ T7092] EXT4-fs (loop3): Total free blocks count 0 [ 211.864836][ T7092] EXT4-fs (loop3): Free/Dirty block details [ 211.903240][ T7092] EXT4-fs (loop3): free_blocks=2588934144 [ 211.944768][ T7092] EXT4-fs (loop3): dirty_blocks=80 [ 211.962416][ T7092] EXT4-fs (loop3): Block reservation details [ 211.986495][ T7092] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 211.999668][ T7096] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 212.200185][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.264564][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 212.287761][ T7124] Invalid ELF header magic: != ELF [ 212.297268][ T7121] loop1: detected capacity change from 0 to 512 [ 212.303906][ T7121] EXT4-fs: Ignoring removed bh option [ 212.328608][ T7121] EXT4-fs: inline encryption not supported [ 212.339387][ T7121] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 212.349536][ T7125] geneve2: entered promiscuous mode [ 212.382344][ T7125] geneve2: entered allmulticast mode [ 212.392760][ T7121] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 212.440962][ T7127] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1089'. [ 212.455343][ T7121] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1084: bg 0: block 248: padding at end of block bitmap is not set [ 212.680650][ T7121] loop1: lost filesystem error report for type 5 error -117 [ 212.682648][ T7121] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1084: Failed to acquire dquot type 1 [ 212.690199][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 212.690224][ C1] EXT4-fs (loop1): last error at time 212: ext4_validate_block_bitmap:441 [ 212.822738][ T7143] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1092'. [ 212.889190][ T7143] ip6gre1: entered promiscuous mode [ 212.898114][ T7121] loop1: lost filesystem error report for type 5 error -117 [ 212.900022][ T7121] EXT4-fs (loop1): 1 truncate cleaned up [ 212.934968][ T7144] loop5: detected capacity change from 0 to 512 [ 212.949944][ T7121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 212.967572][ T7143] ip6gre1: entered allmulticast mode [ 212.979541][ T7144] EXT4-fs: Ignoring removed bh option [ 212.985308][ T7144] EXT4-fs: inline encryption not supported [ 212.994778][ T7144] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.023794][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 213.035432][ T7144] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 213.050212][ T7144] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1092: bg 0: block 248: padding at end of block bitmap is not set [ 213.065128][ T7144] loop5: lost filesystem error report for type 5 error -117 [ 213.078646][ T7144] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1092: Failed to acquire dquot type 1 [ 213.086068][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 213.086147][ C0] EXT4-fs (loop5): last error at time 213: ext4_validate_block_bitmap:441 [ 213.113286][ T7144] loop5: lost filesystem error report for type 5 error -117 [ 213.145934][ T7144] EXT4-fs (loop5): 1 truncate cleaned up [ 213.159709][ T7144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 213.223519][ T7153] loop1: detected capacity change from 0 to 512 [ 213.229054][ T7154] tipc: Enabling of bearer rejected, media not registered [ 213.245865][ T7153] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 213.261423][ T7153] EXT4-fs (loop1): 1 truncate cleaned up [ 213.280992][ T5191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 213.304348][ T7153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.428494][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.458614][ T7170] loop4: detected capacity change from 0 to 512 [ 213.475694][ T7170] EXT4-fs: Ignoring removed bh option [ 213.500084][ T7170] EXT4-fs: inline encryption not supported [ 213.506766][ T7170] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.540395][ T7172] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1101'. [ 213.561087][ T7170] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 213.612703][ T7170] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1103: bg 0: block 248: padding at end of block bitmap is not set [ 213.628993][ T7170] loop4: lost filesystem error report for type 5 error -117 [ 213.635277][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 213.649124][ C1] EXT4-fs (loop4): last error at time 213: ext4_validate_block_bitmap:441 [ 213.660923][ T7170] __quota_error: 5 callbacks suppressed [ 213.660944][ T7170] Quota error (device loop4): write_blk: dquota write failed [ 213.674052][ T7170] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 213.684112][ T7170] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1103: Failed to acquire dquot type 1 [ 213.695751][ T7170] loop4: lost filesystem error report for type 5 error -117 [ 213.696395][ T7170] EXT4-fs (loop4): 1 truncate cleaned up [ 213.730220][ T7170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 213.786655][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 213.839928][ T28] audit: type=1400 audit(213.813:310): avc: denied { write } for pid=7192 comm="syz.4.1110" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 213.865826][ T28] audit: type=1400 audit(213.813:311): avc: denied { open } for pid=7192 comm="syz.4.1110" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 213.890205][ T28] audit: type=1400 audit(213.813:312): avc: denied { ioctl } for pid=7192 comm="syz.4.1110" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 213.923504][ T7195] loop1: detected capacity change from 0 to 512 [ 213.932394][ T7195] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 213.947700][ T7195] EXT4-fs (loop1): 1 truncate cleaned up [ 213.962837][ T7195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.981267][ T28] audit: type=1400 audit(213.953:313): avc: denied { mount } for pid=7196 comm="syz.4.1112" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 214.073506][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.104987][ T28] audit: type=1400 audit(214.073:314): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 214.267241][ T7208] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1115'. [ 214.317807][ T7213] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.378680][ T7213] FAULT_INJECTION: forcing a failure. [ 214.378680][ T7213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.402739][ T7213] CPU: 0 UID: 0 PID: 7213 Comm: syz.0.1116 Not tainted syzkaller #0 PREEMPT(full) [ 214.402820][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.402838][ T7213] Call Trace: [ 214.402847][ T7213] [ 214.402855][ T7213] __dump_stack+0x1d/0x30 [ 214.402882][ T7213] dump_stack_lvl+0x95/0xd0 [ 214.402956][ T7213] dump_stack+0x15/0x1b [ 214.402978][ T7213] should_fail_ex+0x263/0x280 [ 214.403068][ T7213] should_fail+0xb/0x20 [ 214.403092][ T7213] should_fail_usercopy+0x1a/0x20 [ 214.403199][ T7213] _copy_to_user+0x20/0xa0 [ 214.403291][ T7213] fat_ioctl_filldir+0x1c0/0x3f0 [ 214.403385][ T7213] ? __pfx_fat_ioctl_filldir+0x10/0x10 [ 214.403427][ T7213] __fat_readdir+0x93b/0xd70 [ 214.403601][ T7213] ? do_vfs_ioctl+0x7f0/0xe70 [ 214.403788][ T7213] fat_dir_ioctl+0x15f/0x1f0 [ 214.403818][ T7213] ? __pfx_fat_ioctl_filldir+0x10/0x10 [ 214.403899][ T7213] ? __pfx_fat_dir_ioctl+0x10/0x10 [ 214.403994][ T7213] __se_sys_ioctl+0xce/0x140 [ 214.404032][ T7213] __x64_sys_ioctl+0x43/0x50 [ 214.404069][ T7213] x64_sys_call+0x1563/0x3020 [ 214.404170][ T7213] do_syscall_64+0x12c/0x370 [ 214.404213][ T7213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.404241][ T7213] RIP: 0033:0x7f738264c629 [ 214.404331][ T7213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.404353][ T7213] RSP: 002b:00007f738109f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.404372][ T7213] RAX: ffffffffffffffda RBX: 00007f73828c5fa0 RCX: 00007f738264c629 [ 214.404386][ T7213] RDX: 0000200000000740 RSI: 0000000082307202 RDI: 0000000000000004 [ 214.404398][ T7213] RBP: 00007f738109f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.404479][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.404492][ T7213] R13: 00007f73828c6038 R14: 00007f73828c5fa0 R15: 00007ffcd92122c8 [ 214.404512][ T7213] [ 216.469590][ T28] audit: type=1400 audit(216.443:315): avc: denied { create } for pid=7238 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 216.495579][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.510043][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.541676][ T7243] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1127'. [ 216.638466][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'. [ 218.348042][ T7278] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.365315][ T28] audit: type=1400 audit(218.333:316): avc: denied { ioctl } for pid=7279 comm="syz.4.1138" path="socket:[16072]" dev="sockfs" ino=16072 ioctlcmd=0x1284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 219.446864][ T7296] set_capacity_and_notify: 2 callbacks suppressed [ 219.446882][ T7296] loop4: detected capacity change from 0 to 128 [ 219.664380][ T28] audit: type=1400 audit(219.633:317): avc: denied { mount } for pid=7302 comm="syz.1.1147" name="/" dev="autofs" ino=15211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 221.108350][ T28] audit: type=1400 audit(221.083:318): avc: denied { create } for pid=7327 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 221.510030][ T7336] FAULT_INJECTION: forcing a failure. [ 221.510030][ T7336] name failslab, interval 1, probability 0, space 0, times 0 [ 221.538510][ T7341] loop5: detected capacity change from 0 to 512 [ 221.558410][ T7341] ext4: Unknown parameter 'obj_type' [ 221.582146][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.0.1158 Not tainted syzkaller #0 PREEMPT(full) [ 221.582182][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.582197][ T7336] Call Trace: [ 221.582206][ T7336] [ 221.582216][ T7336] __dump_stack+0x1d/0x30 [ 221.582296][ T7336] dump_stack_lvl+0x95/0xd0 [ 221.582393][ T7336] dump_stack+0x15/0x1b [ 221.582417][ T7336] should_fail_ex+0x263/0x280 [ 221.582498][ T7336] should_failslab+0x8c/0xb0 [ 221.582523][ T7336] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 221.582545][ T7336] ? __d_alloc+0x37/0x340 [ 221.582643][ T7336] __d_alloc+0x37/0x340 [ 221.582677][ T7336] d_alloc_parallel+0x54/0xce0 [ 221.582776][ T7336] ? lockref_get_not_dead+0x120/0x1c0 [ 221.582814][ T7336] ? __rcu_read_unlock+0x4e/0x70 [ 221.582888][ T7336] ? try_to_unlazy+0x39d/0x580 [ 221.582956][ T7336] __lookup_slow+0x96/0x260 [ 221.582984][ T7336] lookup_slow+0x3c/0x60 [ 221.583016][ T7336] path_lookupat+0x2f7/0x500 [ 221.583124][ T7336] filename_lookup+0x190/0x390 [ 221.583173][ T7336] user_path_at+0x3e/0x100 [ 221.583299][ T7336] __se_sys_inotify_add_watch+0x100/0x780 [ 221.583394][ T7336] ? mutex_unlock+0x4e/0x90 [ 221.583428][ T7336] ? fput+0x8f/0xc0 [ 221.583476][ T7336] ? ksys_write+0x194/0x1a0 [ 221.583558][ T7336] __x64_sys_inotify_add_watch+0x43/0x50 [ 221.583590][ T7336] x64_sys_call+0x296d/0x3020 [ 221.583618][ T7336] do_syscall_64+0x12c/0x370 [ 221.583733][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.583759][ T7336] RIP: 0033:0x7f738264c629 [ 221.583779][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.583799][ T7336] RSP: 002b:00007f738109f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 221.583875][ T7336] RAX: ffffffffffffffda RBX: 00007f73828c5fa0 RCX: 00007f738264c629 [ 221.583893][ T7336] RDX: 00000000810004c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 221.583907][ T7336] RBP: 00007f738109f090 R08: 0000000000000000 R09: 0000000000000000 [ 221.583919][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.583931][ T7336] R13: 00007f73828c6038 R14: 00007f73828c5fa0 R15: 00007ffcd92122c8 [ 221.583950][ T7336] [ 221.867946][ T7349] loop1: detected capacity change from 0 to 512 [ 221.946605][ T7349] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 221.954815][ T7349] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 221.963753][ T7349] EXT4-fs (loop1): 1 truncate cleaned up [ 221.970427][ T7349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.986088][ T7349] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 4: comm syz.1.1163: path /229/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 222.006881][ T7349] EXT4-fs (loop1): Remounting filesystem read-only [ 222.069157][ T7341] loop5: detected capacity change from 0 to 256 [ 222.076862][ T7341] vfat: Unknown parameter 'ÿÿ00000000000000000000004' [ 222.197857][ T28] audit: type=1400 audit(222.173:319): avc: denied { create } for pid=7340 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 222.523369][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.652851][ T7382] loop5: detected capacity change from 0 to 512 [ 223.666532][ T7382] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 223.981957][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'. [ 224.437058][ T7389] loop3: detected capacity change from 0 to 8192 [ 224.457345][ T7389] FAT-fs (loop3): bogus sectors per cluster 0 [ 224.473254][ T7389] FAT-fs (loop3): Can't find a valid FAT filesystem [ 224.521778][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 224.704344][ T7397] FAULT_INJECTION: forcing a failure. [ 224.704344][ T7397] name failslab, interval 1, probability 0, space 0, times 0 [ 224.725369][ T28] audit: type=1400 audit(224.673:320): avc: denied { mounton } for pid=7395 comm="syz.3.1181" path="/proc/631/task" dev="proc" ino=16448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 224.761131][ T7391] loop0: detected capacity change from 0 to 8192 [ 224.787156][ T7397] CPU: 1 UID: 0 PID: 7397 Comm: syz.3.1181 Not tainted syzkaller #0 PREEMPT(full) [ 224.787196][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.787213][ T7397] Call Trace: [ 224.787276][ T7397] [ 224.787283][ T7397] __dump_stack+0x1d/0x30 [ 224.787319][ T7397] dump_stack_lvl+0x95/0xd0 [ 224.787350][ T7397] dump_stack+0x15/0x1b [ 224.787385][ T7397] should_fail_ex+0x263/0x280 [ 224.787409][ T7397] ? __pfx_proc_alloc_inode+0x10/0x10 [ 224.787449][ T7397] should_failslab+0x8c/0xb0 [ 224.787515][ T7397] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 224.787542][ T7397] ? proc_alloc_inode+0x34/0x90 [ 224.787579][ T7397] ? __pfx_proc_alloc_inode+0x10/0x10 [ 224.787608][ T7397] proc_alloc_inode+0x34/0x90 [ 224.787688][ T7397] alloc_inode+0x40/0x170 [ 224.787709][ T7397] new_inode+0x1d/0xe0 [ 224.787811][ T7397] proc_pid_make_inode+0x1f/0xd0 [ 224.787837][ T7397] proc_map_files_instantiate+0x81/0x120 [ 224.787869][ T7397] proc_fill_cache+0x1e5/0x260 [ 224.787888][ T7397] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 224.787970][ T7397] proc_map_files_readdir+0x521/0x6a0 [ 224.788087][ T7397] iterate_dir+0x114/0x330 [ 224.788151][ T7397] __se_sys_getdents64+0xd2/0x230 [ 224.788170][ T7397] ? __pfx_filldir64+0x10/0x10 [ 224.788190][ T7397] __x64_sys_getdents64+0x43/0x50 [ 224.788211][ T7397] x64_sys_call+0x2408/0x3020 [ 224.788245][ T7397] do_syscall_64+0x12c/0x370 [ 224.788361][ T7397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.788390][ T7397] RIP: 0033:0x7f9c24adc629 [ 224.788410][ T7397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.788507][ T7397] RSP: 002b:00007f9c23537028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 224.788527][ T7397] RAX: ffffffffffffffda RBX: 00007f9c24d55fa0 RCX: 00007f9c24adc629 [ 224.788544][ T7397] RDX: 00000000000000f4 RSI: 0000200000000180 RDI: 0000000000000004 [ 224.788580][ T7397] RBP: 00007f9c23537090 R08: 0000000000000000 R09: 0000000000000000 [ 224.788597][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.788619][ T7397] R13: 00007f9c24d56038 R14: 00007f9c24d55fa0 R15: 00007ffebcb129b8 [ 224.788646][ T7397] [ 225.061019][ T7391] FAT-fs (loop0): bogus sectors per cluster 0 [ 225.069855][ T7402] loop4: detected capacity change from 0 to 512 [ 225.077009][ T7391] FAT-fs (loop0): Can't find a valid FAT filesystem [ 225.109731][ T7404] loop3: detected capacity change from 0 to 512 [ 225.135286][ T7402] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 225.657977][ T7404] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 225.668367][ T7402] EXT4-fs (loop4): 1 truncate cleaned up [ 225.711002][ T7402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.737270][ T7404] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 225.812719][ T7404] EXT4-fs (loop3): 1 truncate cleaned up [ 225.850728][ T7404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.972158][ T7404] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 4: comm syz.3.1184: path /215/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 226.105933][ T7404] EXT4-fs (loop3): Remounting filesystem read-only [ 226.128169][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.258381][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.309005][ T28] audit: type=1400 audit(226.283:321): avc: denied { allowed } for pid=7421 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 226.478095][ T28] audit: type=1400 audit(226.443:322): avc: denied { mounton } for pid=7418 comm="syz.4.1187" path="/274/file0" dev="tmpfs" ino=1467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 228.538445][ T28] audit: type=1400 audit(228.513:323): avc: denied { create } for pid=7452 comm="syz.5.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.635447][ T28] audit: type=1400 audit(228.543:324): avc: denied { setopt } for pid=7452 comm="syz.5.1199" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.745198][ T28] audit: type=1400 audit(228.543:325): avc: denied { write } for pid=7452 comm="syz.5.1199" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.957024][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 229.031231][ T7476] loop4: detected capacity change from 0 to 8192 [ 229.039949][ T7476] FAT-fs (loop4): bogus sectors per cluster 0 [ 229.058641][ T7476] FAT-fs (loop4): Can't find a valid FAT filesystem [ 230.778346][ T7494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1216'. [ 230.812732][ T7494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1216'. [ 230.864089][ T7498] loop0: detected capacity change from 0 to 512 [ 230.897860][ T7498] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 230.947999][ T7498] EXT4-fs (loop0): 1 truncate cleaned up [ 230.957823][ T7498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.038064][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 231.120080][ T28] audit: type=1400 audit(231.091:326): avc: denied { sqpoll } for pid=7511 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 231.172820][ T7506] loop1: detected capacity change from 0 to 8192 [ 231.236688][ T7512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.281907][ T7506] FAT-fs (loop1): bogus sectors per cluster 0 [ 231.315441][ T7506] FAT-fs (loop1): Can't find a valid FAT filesystem [ 231.455941][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.629551][ T7529] loop5: detected capacity change from 0 to 512 [ 231.648939][ T7529] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 231.677624][ T7529] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 231.700355][ T7529] EXT4-fs (loop5): 1 truncate cleaned up [ 231.714099][ T7529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.749414][ T7529] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 4: comm syz.5.1230: path /119/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 231.771577][ T7529] EXT4-fs (loop5): Remounting filesystem read-only [ 231.854553][ T5191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.902641][ T28] audit: type=1400 audit(231.871:327): avc: denied { ioctl } for pid=7533 comm="syz.3.1232" path="socket:[16355]" dev="sockfs" ino=16355 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.615643][ T28] audit: type=1400 audit(233.581:328): avc: denied { bind } for pid=7551 comm="syz.3.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.730981][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 233.746230][ T7558] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1237'. [ 233.755543][ T28] audit: type=1400 audit(233.581:329): avc: denied { node_bind } for pid=7551 comm="syz.3.1235" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 233.837617][ T28] audit: type=1400 audit(233.581:330): avc: denied { connect } for pid=7551 comm="syz.3.1235" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.922194][ T7557] loop3: detected capacity change from 0 to 8192 [ 233.942221][ T28] audit: type=1400 audit(233.581:331): avc: denied { connect } for pid=7551 comm="syz.3.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 233.978740][ T7557] FAT-fs (loop3): bogus sectors per cluster 0 [ 234.014044][ T7557] FAT-fs (loop3): Can't find a valid FAT filesystem [ 234.127068][ T7567] loop3: detected capacity change from 0 to 512 [ 234.166754][ T7567] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 234.210022][ T7567] EXT4-fs (loop3): 1 truncate cleaned up [ 234.227228][ T7567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.413030][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.617357][ T28] audit: type=1400 audit(234.581:332): avc: denied { read } for pid=7573 comm="syz.4.1243" laddr=::ffff:172.20.20.170 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 235.080281][ T7586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.213708][ T7586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.286930][ T7586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.319122][ T7596] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1250'. [ 235.336788][ T7586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.424451][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1252'. [ 235.445891][ T6715] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.461456][ T6715] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.481972][ T28] audit: type=1400 audit(235.451:333): avc: denied { bind } for pid=7598 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.487705][ T6715] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.544641][ T7601] loop4: detected capacity change from 0 to 8192 [ 235.578167][ T7601] FAT-fs (loop4): bogus sectors per cluster 0 [ 235.588502][ T7601] FAT-fs (loop4): Can't find a valid FAT filesystem [ 235.643657][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1255'. [ 235.684401][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1255'. [ 235.700159][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1256'. [ 236.480838][ T7716] loop0: detected capacity change from 0 to 512 [ 236.507028][ T7716] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 236.515302][ T7716] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 236.524109][ T7716] EXT4-fs (loop0): 1 truncate cleaned up [ 236.530764][ T7716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.653499][ T28] audit: type=1400 audit(236.611:334): avc: denied { read write } for pid=7724 comm="syz.4.1267" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 236.653549][ T28] audit: type=1400 audit(236.611:335): avc: denied { open } for pid=7724 comm="syz.4.1267" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 237.003099][ T7592] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.032723][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.046616][ T7592] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.077613][ T7735] __nla_validate_parse: 1 callbacks suppressed [ 237.077632][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 237.096978][ T7592] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.156717][ T7744] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1274'. [ 237.166693][ T7744] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1274'. [ 237.193831][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1275'. [ 237.204026][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1275'. [ 237.291325][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'. [ 237.309903][ T56] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.322648][ T56] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.339555][ T56] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.352618][ T56] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.366941][ T7742] loop0: detected capacity change from 0 to 8192 [ 237.405617][ T3503] loop0: p1 p2 p3 p4[DM] [ 237.410241][ T3503] loop0: p1 size 835329 extends beyond EOD, truncated [ 237.418773][ T3503] loop0: p3 start 134217728 is beyond EOD, truncated [ 237.425834][ T3503] loop0: p4 size 262144 extends beyond EOD, truncated [ 237.436595][ T7742] loop0: p1 p2 p3 p4[DM] [ 237.441557][ T7742] loop0: p1 size 835329 extends beyond EOD, truncated [ 237.451761][ T7742] loop0: p3 start 134217728 is beyond EOD, truncated [ 237.465155][ T7742] loop0: p4 size 262144 extends beyond EOD, truncated [ 237.476503][ T7758] tmpfs: Bad value for 'mpol' [ 237.681966][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1285'. [ 237.691811][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1285'. [ 237.729062][ T7773] FAULT_INJECTION: forcing a failure. [ 237.729062][ T7773] name failslab, interval 1, probability 0, space 0, times 0 [ 237.741950][ T7773] CPU: 1 UID: 0 PID: 7773 Comm: syz.4.1286 Not tainted syzkaller #0 PREEMPT(full) [ 237.741983][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.742001][ T7773] Call Trace: [ 237.742010][ T7773] [ 237.742020][ T7773] __dump_stack+0x1d/0x30 [ 237.742055][ T7773] dump_stack_lvl+0x95/0xd0 [ 237.742166][ T7773] dump_stack+0x15/0x1b [ 237.742195][ T7773] should_fail_ex+0x263/0x280 [ 237.742219][ T7773] should_failslab+0x8c/0xb0 [ 237.742263][ T7773] kmem_cache_alloc_noprof+0x66/0x400 [ 237.742291][ T7773] ? alloc_empty_file+0x76/0x200 [ 237.742326][ T7773] alloc_empty_file+0x76/0x200 [ 237.742387][ T7773] path_openat+0x65/0x2050 [ 237.742430][ T7773] ? _parse_integer_limit+0x170/0x190 [ 237.742475][ T7773] ? _parse_integer+0x27/0x40 [ 237.742541][ T7773] ? kstrtoull+0x111/0x140 [ 237.742643][ T7773] ? kstrtouint+0x76/0xc0 [ 237.742708][ T7773] do_file_open+0x16c/0x290 [ 237.742764][ T7773] do_sys_openat2+0x94/0x130 [ 237.742854][ T7773] __x64_sys_openat+0xf2/0x120 [ 237.742886][ T7773] x64_sys_call+0x1e39/0x3020 [ 237.742927][ T7773] do_syscall_64+0x12c/0x370 [ 237.743002][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.743031][ T7773] RIP: 0033:0x7f86642bcece [ 237.743122][ T7773] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.743190][ T7773] RSP: 002b:00007f8662d4eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.743216][ T7773] RAX: ffffffffffffffda RBX: 00007f8662d4f6c0 RCX: 00007f86642bcece [ 237.743236][ T7773] RDX: 0000000000000002 RSI: 00007f8662d4ef90 RDI: ffffffffffffff9c [ 237.743252][ T7773] RBP: 00007f8662d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 237.743341][ T7773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.743358][ T7773] R13: 00007f8664576038 R14: 00007f8664575fa0 R15: 00007ffebf23df08 [ 237.743385][ T7773] [ 238.106242][ T7779] loop1: detected capacity change from 0 to 8192 [ 238.144817][ T7779] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 238.153480][ T7779] FAT-fs (loop1): Filesystem has been set read-only [ 238.183232][ T7786] FAULT_INJECTION: forcing a failure. [ 238.183232][ T7786] name failslab, interval 1, probability 0, space 0, times 0 [ 238.209502][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.5.1290 Not tainted syzkaller #0 PREEMPT(full) [ 238.209535][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.209553][ T7786] Call Trace: [ 238.209560][ T7786] [ 238.209570][ T7786] __dump_stack+0x1d/0x30 [ 238.209683][ T7786] dump_stack_lvl+0x95/0xd0 [ 238.209715][ T7786] dump_stack+0x15/0x1b [ 238.209746][ T7786] should_fail_ex+0x263/0x280 [ 238.209796][ T7786] ? __se_sys_mount+0xef/0x2e0 [ 238.209875][ T7786] should_failslab+0x8c/0xb0 [ 238.209902][ T7786] __kmalloc_cache_noprof+0x5f/0x410 [ 238.209934][ T7786] ? memdup_user+0x99/0xd0 [ 238.210060][ T7786] __se_sys_mount+0xef/0x2e0 [ 238.210099][ T7786] ? restore_fpregs_from_fpstate+0x61/0x110 [ 238.210133][ T7786] ? switch_fpu_return+0xe7/0x1e0 [ 238.210165][ T7786] __x64_sys_mount+0x67/0x80 [ 238.210222][ T7786] x64_sys_call+0x2d61/0x3020 [ 238.210256][ T7786] do_syscall_64+0x12c/0x370 [ 238.210315][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.210344][ T7786] RIP: 0033:0x7ff7ff71c629 [ 238.210367][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.210391][ T7786] RSP: 002b:00007ff7fe16f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 238.210417][ T7786] RAX: ffffffffffffffda RBX: 00007ff7ff995fa0 RCX: 00007ff7ff71c629 [ 238.210433][ T7786] RDX: 0000200000000280 RSI: 0000200000000140 RDI: 0000000000000000 [ 238.210507][ T7786] RBP: 00007ff7fe16f090 R08: 00002000000000c0 R09: 0000000000000000 [ 238.210527][ T7786] R10: 0000000003000c11 R11: 0000000000000246 R12: 0000000000000001 [ 238.210544][ T7786] R13: 00007ff7ff996038 R14: 00007ff7ff995fa0 R15: 00007ffe6c3e97d8 [ 238.210627][ T7786] [ 238.409265][ T7790] loop5: detected capacity change from 0 to 512 [ 238.420507][ T7790] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 238.440727][ T7790] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 238.451050][ T7790] EXT4-fs (loop5): failed to initialize system zone (-117) [ 238.461220][ T7790] EXT4-fs (loop5): mount failed [ 238.553590][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1296'. [ 238.586298][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1296'. [ 238.662381][ T7811] tmpfs: Bad value for 'mpol' [ 238.715016][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.730903][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.759739][ T7819] tmpfs: Unknown parameter 'mpoXïàfault' [ 238.770765][ T28] audit: type=1400 audit(238.741:336): avc: denied { read } for pid=7817 comm="syz.3.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 239.653582][ T28] audit: type=1400 audit(239.621:337): avc: denied { write } for pid=7857 comm="syz.3.1317" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.678455][ T7859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.692381][ T7859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.704492][ T7858] netlink: 'syz.3.1317': attribute type 63 has an invalid length. [ 239.717536][ T28] audit: type=1400 audit(239.661:338): avc: denied { ioctl } for pid=7857 comm="syz.3.1317" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.742135][ T7858] lo: entered promiscuous mode [ 239.750820][ T7858] lo: entered allmulticast mode [ 239.998973][ T28] audit: type=1400 audit(239.971:339): avc: denied { read } for pid=7861 comm="syz.5.1319" dev="sockfs" ino=17973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.100452][ T28] audit: type=1400 audit(240.001:340): avc: denied { map } for pid=7861 comm="syz.5.1319" path="socket:[17973]" dev="sockfs" ino=17973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.518502][ T7873] loop3: detected capacity change from 0 to 8192 [ 240.527808][ T7873] FAT-fs (loop3): bogus sectors per cluster 0 [ 240.545997][ T7873] FAT-fs (loop3): Can't find a valid FAT filesystem [ 242.009685][ T7922] FAULT_INJECTION: forcing a failure. [ 242.009685][ T7922] name failslab, interval 1, probability 0, space 0, times 0 [ 242.022534][ T7922] CPU: 1 UID: 0 PID: 7922 Comm: syz.3.1341 Not tainted syzkaller #0 PREEMPT(full) [ 242.022565][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.022637][ T7922] Call Trace: [ 242.022646][ T7922] [ 242.022653][ T7922] __dump_stack+0x1d/0x30 [ 242.022686][ T7922] dump_stack_lvl+0x95/0xd0 [ 242.022719][ T7922] dump_stack+0x15/0x1b [ 242.022738][ T7922] should_fail_ex+0x263/0x280 [ 242.022764][ T7922] ? sctp_add_bind_addr+0x71/0x1e0 [ 242.022789][ T7922] should_failslab+0x8c/0xb0 [ 242.022807][ T7922] __kmalloc_cache_noprof+0x5f/0x410 [ 242.022832][ T7922] sctp_add_bind_addr+0x71/0x1e0 [ 242.022887][ T7922] sctp_do_bind+0x427/0x4b0 [ 242.022940][ T7922] sctp_connect_new_asoc+0x153/0x3a0 [ 242.022959][ T7922] sctp_sendmsg+0xfff/0x1d60 [ 242.022997][ T7922] ? selinux_socket_sendmsg+0x192/0x1c0 [ 242.023050][ T7922] ? __pfx_sctp_sendmsg+0x10/0x10 [ 242.023079][ T7922] inet_sendmsg+0xc5/0xd0 [ 242.023135][ T7922] __sys_sendto+0x3f4/0x4d0 [ 242.023165][ T7922] __x64_sys_sendto+0x76/0x90 [ 242.023187][ T7922] x64_sys_call+0x2d35/0x3020 [ 242.023211][ T7922] do_syscall_64+0x12c/0x370 [ 242.023340][ T7922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.023414][ T7922] RIP: 0033:0x7f9c24adc629 [ 242.023452][ T7922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.023535][ T7922] RSP: 002b:00007f9c23537028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 242.023554][ T7922] RAX: ffffffffffffffda RBX: 00007f9c24d55fa0 RCX: 00007f9c24adc629 [ 242.023571][ T7922] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000005 [ 242.023583][ T7922] RBP: 00007f9c23537090 R08: 000020000005ffe4 R09: 000000000000001c [ 242.023595][ T7922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.023606][ T7922] R13: 00007f9c24d56038 R14: 00007f9c24d55fa0 R15: 00007ffebcb129b8 [ 242.023642][ T7922] [ 242.220291][ T7923] SELinux: Context : is not valid (left unmapped). [ 242.227023][ T28] audit: type=1400 audit(242.201:341): avc: denied { mac_admin } for pid=7917 comm="syz.4.1339" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 242.254660][ T28] audit: type=1400 audit(242.201:342): avc: denied { relabelto } for pid=7917 comm="syz.4.1339" name="rdma.current" dev="tmpfs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 242.284343][ T28] audit: type=1400 audit(242.201:343): avc: denied { associate } for pid=7917 comm="syz.4.1339" name="rdma.current" dev="tmpfs" ino=1675 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 242.327169][ T28] audit: type=1400 audit(242.301:344): avc: denied { unlink } for pid=3311 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 242.832992][ T7946] __nla_validate_parse: 8 callbacks suppressed [ 242.833019][ T7946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1349'. [ 243.629212][ T7940] loop5: detected capacity change from 0 to 1024 [ 243.975295][ T28] audit: type=1400 audit(243.941:345): avc: denied { map } for pid=7955 comm="syz.1.1351" path="socket:[18155]" dev="sockfs" ino=18155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.049749][ T28] audit: type=1400 audit(243.941:346): avc: denied { accept } for pid=7955 comm="syz.1.1351" path="socket:[18155]" dev="sockfs" ino=18155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.119981][ T28] audit: type=1400 audit(243.941:347): avc: denied { write } for pid=7955 comm="syz.1.1351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 244.470180][ T7940] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 244.501855][ T7940] System zones: 0-1, 3-36 [ 244.657340][ T7940] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1346: bad orphan inode 134217728 [ 244.669332][ T7940] loop5: lost filesystem error report for type 5 error -117 [ 244.682647][ T7940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.856554][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.885122][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.795134][ T5191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.848810][ T7996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1362'. [ 246.907413][ T8019] netlink: 'syz.4.1372': attribute type 63 has an invalid length. [ 247.501932][ T8019] lo: entered promiscuous mode [ 247.579743][ T8019] lo: entered allmulticast mode [ 249.081244][ T8039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1376'. [ 250.050633][ T8043] loop5: detected capacity change from 0 to 8192 [ 250.215411][ T28] audit: type=1400 audit(250.181:348): avc: denied { create } for pid=8042 comm="syz.5.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 251.208816][ T28] audit: type=1400 audit(250.221:349): avc: denied { bind } for pid=8042 comm="syz.5.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 251.228669][ T28] audit: type=1400 audit(250.231:350): avc: denied { read } for pid=8053 comm="syz.0.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 251.247477][ T28] audit: type=1400 audit(250.691:351): avc: denied { map } for pid=8050 comm="syz.4.1380" path="pipe:[18250]" dev="pipefs" ino=18250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 251.390276][ T28] audit: type=1400 audit(251.361:352): avc: denied { execute } for pid=8064 comm="syz.3.1384" name=616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161610180C2 dev="tmpfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 252.570155][ T8083] loop4: detected capacity change from 0 to 128 [ 252.626416][ T8083] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 252.737576][ T28] audit: type=1400 audit(252.711:353): avc: denied { setattr } for pid=8082 comm="syz.4.1390" path="/325/mnt/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.820175][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.265403][ T8103] FAULT_INJECTION: forcing a failure. [ 253.265403][ T8103] name failslab, interval 1, probability 0, space 0, times 0 [ 253.287478][ T8101] capability: warning: `syz.0.1396' uses 32-bit capabilities (legacy support in use) [ 253.305899][ T8101] program syz.0.1396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.315666][ T8103] CPU: 0 UID: 0 PID: 8103 Comm: syz.1.1397 Not tainted syzkaller #0 PREEMPT(full) [ 253.315745][ T8103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.315762][ T8103] Call Trace: [ 253.315770][ T8103] [ 253.315780][ T8103] __dump_stack+0x1d/0x30 [ 253.315862][ T8103] dump_stack_lvl+0x95/0xd0 [ 253.315893][ T8103] dump_stack+0x15/0x1b [ 253.315920][ T8103] should_fail_ex+0x263/0x280 [ 253.315947][ T8103] ? sctp_add_bind_addr+0x71/0x1e0 [ 253.315982][ T8103] should_failslab+0x8c/0xb0 [ 253.316087][ T8103] __kmalloc_cache_noprof+0x5f/0x410 [ 253.316121][ T8103] sctp_add_bind_addr+0x71/0x1e0 [ 253.316171][ T8103] sctp_do_bind+0x427/0x4b0 [ 253.316192][ T8103] sctp_connect_new_asoc+0x153/0x3a0 [ 253.316218][ T8103] sctp_sendmsg+0xfff/0x1d60 [ 253.316264][ T8103] ? selinux_socket_sendmsg+0x192/0x1c0 [ 253.316348][ T8103] ? __pfx_sctp_sendmsg+0x10/0x10 [ 253.316394][ T8103] inet_sendmsg+0xc5/0xd0 [ 253.316423][ T8103] __sys_sendto+0x3f4/0x4d0 [ 253.316572][ T8103] __x64_sys_sendto+0x76/0x90 [ 253.316596][ T8103] x64_sys_call+0x2d35/0x3020 [ 253.316625][ T8103] do_syscall_64+0x12c/0x370 [ 253.316729][ T8103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.316754][ T8103] RIP: 0033:0x7fa28679c629 [ 253.316774][ T8103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.316795][ T8103] RSP: 002b:00007fa2851f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 253.316868][ T8103] RAX: ffffffffffffffda RBX: 00007fa286a15fa0 RCX: 00007fa28679c629 [ 253.316961][ T8103] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 253.317021][ T8103] RBP: 00007fa2851f7090 R08: 000020000005ffe4 R09: 000000000000001c [ 253.317038][ T8103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.317053][ T8103] R13: 00007fa286a16038 R14: 00007fa286a15fa0 R15: 00007ffdb5f1f428 [ 253.317073][ T8103] [ 253.564391][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'. [ 254.093724][ T8113] loop4: detected capacity change from 0 to 512 [ 254.213481][ T8113] EXT4-fs: Ignoring removed bh option [ 254.283115][ T8113] EXT4-fs: inline encryption not supported [ 254.515652][ T8113] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.798147][ T8113] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 255.798451][ T8113] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1400: bg 0: block 248: padding at end of block bitmap is not set [ 255.798538][ T8113] loop4: lost filesystem error report for type 5 error -117 [ 255.798848][ T8113] Quota error (device loop4): write_blk: dquota write failed [ 255.798932][ T8113] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 255.798995][ T8113] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1400: Failed to acquire dquot type 1 [ 255.799044][ T8113] loop4: lost filesystem error report for type 5 error -117 [ 255.805254][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 255.805283][ C0] EXT4-fs (loop4): last error at time 255: ext4_acquire_dquot:7001 [ 255.876573][ T8113] EXT4-fs (loop4): 1 truncate cleaned up [ 256.463389][ T8113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 256.584752][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 256.637253][ T28] audit: type=1400 audit(256.611:354): avc: denied { ioctl } for pid=8141 comm="syz.4.1407" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 256.734341][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1411'. [ 256.875314][ T28] audit: type=1400 audit(256.841:355): avc: denied { mount } for pid=8152 comm="syz.5.1413" name="/" dev="configfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 257.009314][ T28] audit: type=1400 audit(256.981:356): avc: denied { write } for pid=8155 comm="syz.5.1414" lport=49184 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 257.032859][ T28] audit: type=1400 audit(256.981:357): avc: denied { setopt } for pid=8155 comm="syz.5.1414" lport=49184 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 257.251231][ T8171] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1418'. [ 257.370416][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 257.380013][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 257.382329][ T8175] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1419'. [ 259.222503][ T8213] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1432'. [ 259.328687][ T8221] loop1: detected capacity change from 0 to 512 [ 259.337241][ T8221] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 259.356038][ T8221] EXT4-fs (loop1): 1 truncate cleaned up [ 259.362442][ T8221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.395446][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.415340][ T28] audit: type=1400 audit(259.351:358): avc: denied { ioctl } for pid=8220 comm="syz.1.1435" path="/271/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 259.610463][ T8230] bond1: option mode: invalid value (9) [ 259.630818][ T8230] bond1 (unregistering): Released all slaves [ 259.655719][ T8240] program syz.4.1439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.682812][ T8242] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 259.696730][ T8231] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 259.860524][ T28] audit: type=1400 audit(259.831:359): avc: denied { ioctl } for pid=8259 comm="syz.3.1447" path="socket:[19053]" dev="sockfs" ino=19053 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 259.905318][ T28] audit: type=1400 audit(259.831:360): avc: denied { bind } for pid=8259 comm="syz.3.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 259.924252][ T28] audit: type=1400 audit(259.831:361): avc: denied { connect } for pid=8259 comm="syz.3.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 259.982674][ T8267] FAULT_INJECTION: forcing a failure. [ 259.982674][ T8267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.996920][ T8267] CPU: 0 UID: 0 PID: 8267 Comm: syz.0.1448 Not tainted syzkaller #0 PREEMPT(full) [ 259.997012][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.997030][ T8267] Call Trace: [ 259.997038][ T8267] [ 259.997047][ T8267] __dump_stack+0x1d/0x30 [ 259.997077][ T8267] dump_stack_lvl+0x95/0xd0 [ 259.997170][ T8267] dump_stack+0x15/0x1b [ 259.997200][ T8267] should_fail_ex+0x263/0x280 [ 259.997234][ T8267] should_fail+0xb/0x20 [ 259.997309][ T8267] should_fail_usercopy+0x1a/0x20 [ 259.997340][ T8267] _copy_from_user+0x1c/0xb0 [ 259.997372][ T8267] __se_sys_rt_tgsigqueueinfo+0x2d7/0x420 [ 259.997412][ T8267] __x64_sys_rt_tgsigqueueinfo+0x55/0x70 [ 259.997518][ T8267] x64_sys_call+0x150e/0x3020 [ 259.997558][ T8267] do_syscall_64+0x12c/0x370 [ 259.997605][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.997627][ T8267] RIP: 0033:0x7f738264c629 [ 259.997643][ T8267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.997661][ T8267] RSP: 002b:00007f738109f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 259.997740][ T8267] RAX: ffffffffffffffda RBX: 00007f73828c5fa0 RCX: 00007f738264c629 [ 259.997755][ T8267] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.997771][ T8267] RBP: 00007f738109f090 R08: 0000000000000000 R09: 0000000000000000 [ 259.997787][ T8267] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 259.997866][ T8267] R13: 00007f73828c6038 R14: 00007f73828c5fa0 R15: 00007ffcd92122c8 [ 259.997892][ T8267] [ 260.358480][ T8274] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1450'. [ 260.562192][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1454'. [ 260.571307][ T8285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1454'. [ 260.808360][ T8303] loop0: detected capacity change from 0 to 128 [ 261.742203][ T8322] FAULT_INJECTION: forcing a failure. [ 261.742203][ T8322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.783274][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 261.783292][ T28] audit: type=1400 audit(261.751:363): avc: denied { write } for pid=8324 comm="syz.3.1469" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 261.796818][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.1.1465 Not tainted syzkaller #0 PREEMPT(full) [ 261.796932][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.797021][ T8322] Call Trace: [ 261.797042][ T8322] [ 261.797123][ T8322] __dump_stack+0x1d/0x30 [ 261.797215][ T8322] dump_stack_lvl+0x95/0xd0 [ 261.797289][ T8322] dump_stack+0x15/0x1b [ 261.797455][ T8322] should_fail_ex+0x263/0x280 [ 261.797528][ T8322] should_fail+0xb/0x20 [ 261.797554][ T8322] should_fail_usercopy+0x1a/0x20 [ 261.797680][ T8322] _copy_from_iter+0xcf/0xea0 [ 261.797762][ T8322] ? __alloc_skb+0x4f6/0x690 [ 261.797837][ T8322] ? __alloc_skb+0x200/0x690 [ 261.797934][ T8322] netlink_sendmsg+0x4ae/0x6f0 [ 261.798132][ T8322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.798228][ T8322] ____sys_sendmsg+0x5af/0x600 [ 261.798391][ T8322] ___sys_sendmsg+0x195/0x1e0 [ 261.798523][ T8322] __x64_sys_sendmsg+0xd4/0x160 [ 261.798620][ T8322] x64_sys_call+0x194c/0x3020 [ 261.798694][ T8322] do_syscall_64+0x12c/0x370 [ 261.798938][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.799032][ T8322] RIP: 0033:0x7fa28679c629 [ 261.799093][ T8322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.799156][ T8322] RSP: 002b:00007fa2851f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.799226][ T8322] RAX: ffffffffffffffda RBX: 00007fa286a15fa0 RCX: 00007fa28679c629 [ 261.799329][ T8322] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 261.799390][ T8322] RBP: 00007fa2851f7090 R08: 0000000000000000 R09: 0000000000000000 [ 261.799447][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.799488][ T8322] R13: 00007fa286a16038 R14: 00007fa286a15fa0 R15: 00007ffdb5f1f428 [ 261.799537][ T8322] [ 262.030240][ T28] audit: type=1400 audit(261.971:364): avc: denied { shutdown } for pid=8334 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.050597][ T28] audit: type=1400 audit(261.971:365): avc: denied { read } for pid=8334 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.069436][ T8338] dns_resolver: Unsupported server list version (0) [ 262.138343][ T8340] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1472'. [ 262.161954][ T8343] loop1: detected capacity change from 0 to 512 [ 262.185869][ T8343] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 262.210252][ T8343] EXT4-fs (loop1): group descriptors corrupted! [ 262.285527][ T28] audit: type=1400 audit(262.051:366): avc: denied { write } for pid=8334 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.190492][ T8371] FAULT_INJECTION: forcing a failure. [ 263.190492][ T8371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.238720][ T8371] CPU: 0 UID: 0 PID: 8371 Comm: syz.3.1481 Not tainted syzkaller #0 PREEMPT(full) [ 263.238831][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.238848][ T8371] Call Trace: [ 263.238856][ T8371] [ 263.238865][ T8371] __dump_stack+0x1d/0x30 [ 263.238901][ T8371] dump_stack_lvl+0x95/0xd0 [ 263.238983][ T8371] dump_stack+0x15/0x1b [ 263.239011][ T8371] should_fail_ex+0x263/0x280 [ 263.239041][ T8371] should_fail+0xb/0x20 [ 263.239063][ T8371] should_fail_usercopy+0x1a/0x20 [ 263.239087][ T8371] _copy_from_user+0x1c/0xb0 [ 263.239144][ T8371] ___sys_sendmsg+0xc1/0x1e0 [ 263.239199][ T8371] __x64_sys_sendmsg+0xd4/0x160 [ 263.239264][ T8371] x64_sys_call+0x194c/0x3020 [ 263.239297][ T8371] do_syscall_64+0x12c/0x370 [ 263.239345][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.239423][ T8371] RIP: 0033:0x7f9c24adc629 [ 263.239439][ T8371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.239464][ T8371] RSP: 002b:00007f9c23537028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.239490][ T8371] RAX: ffffffffffffffda RBX: 00007f9c24d55fa0 RCX: 00007f9c24adc629 [ 263.239504][ T8371] RDX: 0000000020008000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 263.239517][ T8371] RBP: 00007f9c23537090 R08: 0000000000000000 R09: 0000000000000000 [ 263.239586][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.239603][ T8371] R13: 00007f9c24d56038 R14: 00007f9c24d55fa0 R15: 00007ffebcb129b8 [ 263.239634][ T8371] [ 263.422101][ T8373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1482'. [ 263.442795][ T8373] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1482'. [ 263.452381][ T8373] netlink: 'syz.0.1482': attribute type 5 has an invalid length. [ 263.460345][ T8373] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1482'. [ 263.671373][ T8377] loop0: detected capacity change from 0 to 512 [ 263.710245][ T8372] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1482'. [ 263.803838][ T8377] EXT4-fs: Ignoring removed nobh option [ 263.867188][ T8372] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1482'. [ 263.867892][ T8377] EXT4-fs (loop0): orphan cleanup on readonly fs [ 263.933232][ T8372] netlink: 'syz.0.1482': attribute type 5 has an invalid length. [ 263.975750][ T8377] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1482: EA inode hash validation failed [ 264.026626][ T8372] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1482'. [ 264.106340][ T8377] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 264.129879][ T8377] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1482: corrupted inode contents [ 264.155598][ T8377] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.155815][ T8377] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.1482: mark_inode_dirty error [ 264.176383][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 264.176427][ C1] EXT4-fs (loop0): initial error at time 264: ext4_do_update_inode:5569: inode 15 [ 264.176461][ C1] EXT4-fs (loop0): last error at time 264: ext4_do_update_inode:5569: inode 15 [ 264.252149][ T8377] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.252327][ T8377] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1482: corrupted inode contents [ 264.293892][ T8377] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.294152][ T8377] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.1482: mark_inode_dirty error [ 264.335355][ T8377] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.335546][ T8377] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.1482: mark inode dirty (error -117) [ 264.335573][ T8377] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.335791][ T8377] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 264.335848][ T8377] EXT4-fs (loop0): 1 orphan inode deleted [ 264.336315][ T8377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 264.655125][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.655138][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1486'. [ 264.655246][ T3315] ================================================================== [ 264.655275][ T3315] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 264.655306][ T3315] [ 264.655313][ T3315] write to 0xffffffff8939a44d of 53 bytes by task 8388 on cpu 1: [ 264.655334][ T3315] vsnprintf+0x2ce/0x860 [ 264.655361][ T3315] vscnprintf+0x41/0x90 [ 264.655388][ T3315] printk_sprint+0x30/0x2e0 [ 264.655412][ T3315] vprintk_store+0x57b/0x910 [ 264.655435][ T3315] vprintk_emit+0x1a4/0x600 [ 264.655457][ T3315] vprintk_default+0x26/0x30 [ 264.655482][ T3315] vprintk+0x1d/0x30 [ 264.655508][ T3315] _printk+0x79/0xa0 [ 264.655525][ T3315] __nla_validate_parse+0x1735/0x1cf0 [ 264.655553][ T3315] __nla_parse+0x40/0x60 [ 264.655579][ T3315] nfnetlink_rcv+0xbd9/0x1720 [ 264.655605][ T3315] netlink_unicast+0x5c0/0x690 [ 264.655633][ T3315] netlink_sendmsg+0x5c8/0x6f0 [ 264.655667][ T3315] ____sys_sendmsg+0x5af/0x600 [ 264.655707][ T3315] ___sys_sendmsg+0x195/0x1e0 [ 264.655738][ T3315] __x64_sys_sendmsg+0xd4/0x160 [ 264.655771][ T3315] x64_sys_call+0x194c/0x3020 [ 264.655807][ T3315] do_syscall_64+0x12c/0x370 [ 264.655848][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.655875][ T3315] [ 264.655882][ T3315] read to 0xffffffff8939a460 of 8 bytes by task 3315 on cpu 0: [ 264.655906][ T3315] data_push_tail+0x100/0x470 [ 264.655932][ T3315] data_alloc+0x11b/0x390 [ 264.655971][ T3315] prb_reserve+0x8d7/0xae0 [ 264.656012][ T3315] vprintk_store+0x54a/0x910 [ 264.656033][ T3315] vprintk_emit+0x1a4/0x600 [ 264.656056][ T3315] vprintk_default+0x26/0x30 [ 264.656083][ T3315] vprintk+0x1d/0x30 [ 264.656118][ T3315] _printk+0x79/0xa0 [ 264.656144][ T3315] __ext4_msg+0x1aa/0x1c0 [ 264.656169][ T3315] ext4_put_super+0x90/0x7d0 [ 264.656199][ T3315] generic_shutdown_super+0xee/0x220 [ 264.656228][ T3315] kill_block_super+0x2a/0x70 [ 264.656261][ T3315] ext4_kill_sb+0x42/0x80 [ 264.656303][ T3315] deactivate_locked_super+0x75/0x1c0 [ 264.656338][ T3315] deactivate_super+0x97/0xa0 [ 264.656369][ T3315] cleanup_mnt+0x2bb/0x330 [ 264.656392][ T3315] __cleanup_mnt+0x19/0x20 [ 264.656415][ T3315] task_work_run+0x130/0x1a0 [ 264.656434][ T3315] exit_to_user_mode_loop+0x1f4/0x6f0 [ 264.656455][ T3315] do_syscall_64+0x249/0x370 [ 264.656485][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.656505][ T3315] [ 264.656510][ T3315] value changed: 0x00000000ffffe526 -> 0x676e697372617020 [ 264.656522][ T3315] [ 264.656527][ T3315] Reported by Kernel Concurrency Sanitizer on: [ 264.656538][ T3315] CPU: 0 UID: 0 PID: 3315 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 264.656561][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.656573][ T3315] ================================================================== [ 265.839231][ T8392] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 265.869799][ T8392] 9p: Bad value for 'wfdno' [ 265.899785][ T8392] loop5: detected capacity change from 0 to 512 [ 265.963946][ T8388] loop1: detected capacity change from 0 to 8192 [ 265.993922][ T8388] FAT-fs (loop1): bogus sectors per cluster 0 [ 266.028787][ T8388] FAT-fs (loop1): Can't find a valid FAT filesystem