last executing test programs: 2m56.560846794s ago: executing program 0 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, 0xffffffffffffffff}, &(0x7f0000000680)=0x2000000, &(0x7f00000006c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r3, &(0x7f0000000740), 0x0}, 0x20) 2m56.394153321s ago: executing program 0 (id=23): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000a00)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='dir0\x00', &(0x7f0000000a80)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) poll(&(0x7f0000000b00)=[{r0, 0x4004}], 0x1, 0x1) 2m56.349000386s ago: executing program 0 (id=25): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) open(&(0x7f0000000340)='./tracing/events/enable\x00', 0x2c00, 0x0) 2m56.266360374s ago: executing program 0 (id=29): mkdir(&(0x7f0000000300)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 2m56.173871644s ago: executing program 0 (id=32): r0 = getpgrp(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_pidfd_open(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) pidfd_send_signal(r1, 0x1c, 0x0, 0x0) 2m55.400885802s ago: executing program 0 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x340200c4}, 0x0) close(r2) 2m55.400778433s ago: executing program 32 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x340200c4}, 0x0) close(r2) 2m39.251557465s ago: executing program 5 (id=351): setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) setreuid(0xee01, 0xee01) 2m38.99589527s ago: executing program 5 (id=358): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f00000000c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTVtFTxUPIhgoaBn27DZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7aXabbM3uhubzgck+z8xsnue7z8wzz+wMOwHsWWPpn0zEoYj4MIkYqc1PImKgkuqPOFld787aai6dklhff+P3pLLO7bXVXDS8J3WglnkyIn54L+JwZnO5peWVuelCIb9Yy0+U5y9MlJZXjpyfn57Nz+YXjk9OTR09cezE8Z2L9c+fVw7e+OjVZ78++fe7T1z74MckTsbB2rLGOHbKWIzVPpOB9CPc4JWdLqzHko3Zfb2qB+1Jd82+6l4eh2Ik+iqpFoa6WTMAoFPWAYC9651eVwAA6Jb69wC311Zz9am330h0182XI2J/Nf769c3qkv7aNbv9leugw7eTDVdGkogY3YHyxyLi82/f+jKdotYOyQ78X4CtXL4SEWdHxzb3/8mmexba9dyDFq4PVl7G7pu9144/0EvfpeOfF5qN/zJ3xz/RZPwz2GTffRhb7/+Z67VE3w4Ut0k6/nup4d62Ow3x14z21XL/q4z5BpJz5wv5tG/7f0SMx8Bgmp+srNp85DZ+659brcpvHP/98fHbX6Tlp6/31shc7x/c+J6Z6fL0f4277uaViKf6m8Wf3G3/pMX49/Q2y3jtxfc/a7UsjT+Ntz5tjr+z1q9GPNO0/e+1ZdLy/sT+YyeOT1Q2h4n6RtHEN798Otyq/Mb2T6e0/Pq5QDek7T/84PhHk8b7NUvtl/HT1ZHvWy3bOv7m2/++5M1Kun6j4aXpcnlxMmJf8vrm+Ufvvbeer6+fxj/+dPP9v1ps8+0/PSc8u834+2/89tXDx99ZafwzbbV/+4lrd+Za9t3ba/+pSmq8Nmc7/d8W9bocD701AwAAAAAAAAAAAAAAAAAAAAAAAED7MhFxMJJM9m46k8lmq8/wfjyGM4ViqXz4XHFpYSYqz8oejYFM/acuRxp+D3Wy9nv49fzR+/LPR8RjEfHJ4FAln80VCzO9Dh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAag60eP5/6tfBXtcOAOiY/b2uAADQdY7/ALD3tHf8H+pYPQCA7nH+DwB7z7aP/2c7Ww8AoHvaPf/v61A9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGSdPnUqndb/WlvNpfmZi8tLc8WLR2bypbns/FIumysuXsjOFouzhXw2V5xv+Y8uV18KxeKFqVhYujRRzpfKE6XllTPzxaWF8pnz89Oz+TP5ga5FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbV1pemZsuFPKLEg9MDO2OauyaRH/simo8Com+2BXVuD/R2EsM9a6DAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/g0AAP//3BEuHw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000001e40)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001e80)='./file1\x00', 0x48042, 0x18c) fallocate(r1, 0x0, 0x5, 0x1857f) 2m38.779530473s ago: executing program 5 (id=365): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2m37.783187144s ago: executing program 5 (id=373): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 2m37.589043814s ago: executing program 5 (id=376): openat(0xffffffffffffff9c, 0x0, 0x8042, 0xb) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x100, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 2m37.322401342s ago: executing program 5 (id=384): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x321081a, &(0x7f00000005c0)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./bus\x00', 0xc842, 0x0) rename(&(0x7f00000016c0)='./bus\x00', &(0x7f0000001700)='./file1\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 2m37.296371824s ago: executing program 33 (id=384): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x321081a, &(0x7f00000005c0)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./bus\x00', 0xc842, 0x0) rename(&(0x7f00000016c0)='./bus\x00', &(0x7f0000001700)='./file1\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 53.712591137s ago: executing program 4 (id=1924): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0xffffffff, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x5, &(0x7f0000000600)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 53.634058626s ago: executing program 4 (id=1927): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4601f5f014ab0800000000000002003e00010000809a010000380000008b0000000600000005002000029f"], 0x78) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0xd5, 0x1, 0x2, 0x3, 0x3, 0xf, 0x1e8, 0x40, 0x155, 0xf5, 0x3ff, 0x38, 0x1, 0x1ff, 0xff7f, 0x4}, [{0x70000000, 0x6, 0x7, 0x5, 0x8, 0x4, 0x2, 0x7}]}, 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r0, 0x0) 53.550216294s ago: executing program 4 (id=1928): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0xb, &(0x7f0000000a40)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0xe, 0x0, &(0x7f0000000b80)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.790760132s ago: executing program 4 (id=1933): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) mkdir(&(0x7f0000002bc0)='./file0\x00', 0x18b) mount$bind(&(0x7f0000002c80)='.\x00', &(0x7f0000002cc0)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) mount$bpf(0x0, &(0x7f0000002d00)='./file0\x00', 0x0, 0x84000, 0x0) 52.698518721s ago: executing program 4 (id=1936): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x92, 0x6}, 0xb093, 0x800000, 0xffffffff, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002340)='./proc\x00', &(0x7f0000002380)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000023c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000002400)='\\x01020304 2000000000 0 0 0 krb5 x000', 0x26) 52.274190774s ago: executing program 4 (id=1939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 52.084787414s ago: executing program 34 (id=1939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 51.354836299s ago: executing program 6 (id=1948): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000019c0), 0x0, 0x10, &(0x7f0000001a00), 0xfffffffffffffd00}, 0x48) 49.982611019s ago: executing program 6 (id=1953): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x5, 0x901, 0xffffffff, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x7, 0x74, 0x1, {0x77359400}, {}, {}, 0x1, @can={{}, 0x7, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044) 49.708858057s ago: executing program 6 (id=1954): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 48.472493543s ago: executing program 6 (id=1967): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000003c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x2, 0x3, &(0x7f0000002f40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000002f80)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002fc0)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000003000)='./file2\x00', &(0x7f0000003040)=[0x2], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) 48.004247661s ago: executing program 6 (id=1960): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x1000668) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000001600)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 47.686242283s ago: executing program 6 (id=1962): r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1451c2, 0x1) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000bc0)=""/4096, 0x20001b80}, {&(0x7f0000001bc0)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 47.509219112s ago: executing program 35 (id=1962): r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1451c2, 0x1) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000bc0)=""/4096, 0x20001b80}, {&(0x7f0000001bc0)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 6.661630789s ago: executing program 2 (id=2541): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='p:mygrou-/myevent ./dummy:0', 0x1b) 6.590447746s ago: executing program 2 (id=2543): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close(r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x41, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0xacd3}}, {@nodiscard}, {@lazytime}, {@nolazytime}, {@grpjquota}, {@acl}, {@abort}, {@debug}, {@usrjquota}]}, 0x64, 0x50f, &(0x7f0000002a80)="$eJzs3c9rXFsdAPDvnczUJk1f8tSFPvD59D1Ji3YmaWwbXNQKoquCWvc1JpMQMsmEzKRtQtEU/wBBRAVXunEj+AcIUnDjUoSCrhUVRbTVhQvtfczMTZqmM8m0nWbSzOcDN/ec++t7zoR7Zs69h3sDGFjvRMS1iHicpun5iBjLlueyKbZbU2O7Rw/vzjWmJNL0xj+TSLJlO8dKsvmZbLfTEfG1L0d8M3k2bm1za3m2UimvZ/lSfWWtVNvcurC0MrtYXiyvTk9PXZ65MnNpZrIn9TwbEVe/+NcffPdnX7r6q8/c/tPNv5/7VqNYo9n6vfV4TvmDVraqXmh+Fnt3WH/BYMdRvlnDzHC7LYaeWXLvFZcJAID2Gr/xPxgRn4yI8zEWQwf/nAUAAABeQ+nnR+N/SUTa3qkOywEAAIDXSK45BjbJFbOxAKORyxWLrTG8H46RXKVaq396obqxOt8aKzsehdzCUqU8mY0VHo9C0shPNdNP8hf35acj4s2I+P7YcDNfnKtW5vt98QMAAAAGxJl9/f//jLX6/wAAAMAJM97vAgAAAACvnP4/AAAAnHz6/wAAAHCifeX69caU7rz/ev7W5sZy9daF+XJtubiyMVecq66vFRer1cXmM/tWDjtepVpd+2ysbtwp1cu1eqm2uXVzpbqxWr+59NQrsAEAAIAj9ObH7/8hiYjtzw03p4ZT3e3a5WbAcZXfTSXZvM1p/cc3WvO/HFGhgCMx1O8CAH2T73cBgL4p7MuP9KkcQP8kh6zvOHjnt9n8E70tDwAA0HsTH+18/z934J7bB68Gjj0nMQyu/ff/tQcwOJr3/7sdyatxgBOlYAQgDLyXvv9/qDR9rgIBAAA9N9qcklwxu7w3GrlcsRhxtvlagEKysFQpT0bEGxHx+7HCBxr5qeaeyaF9BgAAAAAAAAAAAAAAAAAAAAAAAACgJU2TSAEAAIATLSL3t+TXrWf5T4y9N7r/+sCp5L9jkb0i9PaPb/zwzmy9vj7VWP6v3eX1H2XLL/bjCgYAAAAMhOd6gf9OP32nHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvfTo4d25neko4/7jCxEx3i5+Pk4356ejEBEj/04iv2e/JCKGehB/uPHnI+3iJ41i7YZsF3+4B/G37x0YP8azT6Fd/DM9iA+D7H6j/bnW7vzLxTvNefvzLx/xVP5FdW7/Yrf9G+pw/p/tMsZbD35R6hj/XsRb+fbtz078pEP8d7uM/42vb211Wpf+JGKi7fdP8lSsUn1lrVTb3LqwtDK7WF4sr05PT12euTJzaWaytLBUKWd/28b43sd++fig+o90iD9+SP3f67L+/39w5+GHWslCu/jn3m0T/zc/zbZ4Nn4u++77VJZurJ/YSW+30nu9/fPfvX1Q/ec71P+w//+5Lut//qvf+XOXmwIAR6C2ubU8W6mU109sotFLPwbFkDiGiW/39IBpmqaNc+oljpPEcfhYmol+t0wAAECvPfnR3++SAAAAAAAAAAAAAAAAAAAAwOA6iseJ7Y+5vZtKevEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnng/AAD//9eZ2WE=") perf_event_open(&(0x7f0000003100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.336514963s ago: executing program 2 (id=2545): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) timer_create(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x14443, &(0x7f0000003f00)={[{@init_itable_val={'init_itable', 0x3d, 0x22}}, {@data_journal}, {@usrjquota}, {@oldalloc}, {@jqfmt_vfsold}, {@nomblk_io_submit}]}, 0x0, 0x445, &(0x7f0000000500)="$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") 5.694703288s ago: executing program 8 (id=2559): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 5.687308559s ago: executing program 2 (id=2561): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 5.58002192s ago: executing program 8 (id=2550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.57991405s ago: executing program 2 (id=2551): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e262) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 5.499107828s ago: executing program 2 (id=2552): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.260804322s ago: executing program 36 (id=2552): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.136509565s ago: executing program 3 (id=2558): r0 = syz_open_dev$usbfs(&(0x7f0000000540), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000580), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000600)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000640)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/4096, 0x79c5}], 0x1) 5.126934246s ago: executing program 1 (id=2560): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4084}, 0x810) r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0xfff9, 0x4}, 0x90) 4.926308567s ago: executing program 3 (id=2563): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) timer_create(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x14443, &(0x7f0000003f00)={[{@init_itable_val={'init_itable', 0x3d, 0x22}}, {@data_journal}, {@usrjquota}, {@oldalloc}, {@jqfmt_vfsold}, {@nomblk_io_submit}]}, 0x0, 0x445, &(0x7f0000000500)="$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") 4.925247797s ago: executing program 8 (id=2572): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0xd2, &(0x7f000000c2c0)={@multicast, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "104b9f4cfa6ec4ab256145d9dd058d7fd0a4bf07baa79e4b7740062b447e7930", "fece9ecc614796f4cba4c88cb0a78107fc8426f5b78fe4e344cb0f1fb9f7f1d5a0ccff7594570986cc6d3b76f162ac65", "d3d824fb8ac8e92a433a6264e0d787bca511cf13b84b3c6e61c6eac6", {'\x00', "1a72ed7a3c019ed85ce4007969ae0e5a"}}}}}}}}, 0x0) 4.89274383s ago: executing program 1 (id=2564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x30bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0xfd6f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0x4, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x0) fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) kexec_load(0x2, 0x8, &(0x7f00000007c0)=[{0x0, 0xb, 0x8000000000, 0x80000000}], 0x3e0000000000) 4.833762506s ago: executing program 7 (id=2565): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32], 0x30}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.788671261s ago: executing program 8 (id=2566): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 4.371564153s ago: executing program 7 (id=2567): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001a340)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32000000000102000000000202000000000200ff001404010010"], 0x0) 4.081041153s ago: executing program 3 (id=2568): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x9, {{0xa, 0x4e24, 0xffffffc0, @mcast2, 0x2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) 3.850188537s ago: executing program 7 (id=2569): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) close(0x3) 1.144557333s ago: executing program 9 (id=2556): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000d00)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000d40)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='X', 0x8030000}], 0x11) ppoll(&(0x7f0000000e00)=[{r0, 0x8292}], 0x1, &(0x7f0000000e40)={0x0, 0x3938700}, 0x0, 0x0) 1.143623294s ago: executing program 8 (id=2580): perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x58080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x4, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setuid(0xee01) setrlimit(0x40000000000008, &(0x7f0000000280)={0x4, 0x9}) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 1.139701604s ago: executing program 1 (id=2581): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000002080)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000020c0)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000002140)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.136887124s ago: executing program 3 (id=2582): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000500)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000005c0)={0x2, &(0x7f0000000600)=[{0x50, 0x1, 0x7, 0x80000000}, {0x6, 0x80, 0xfd, 0x3}]}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1b0000001a00", 0x6}], 0x1}, 0x4000000) 1.134281684s ago: executing program 7 (id=2583): syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000140)) 259.513444ms ago: executing program 9 (id=2570): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22001b2f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x6, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 256.731294ms ago: executing program 3 (id=2571): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 256.544564ms ago: executing program 7 (id=2573): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_bp={0x0}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) unlink(0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x20000000) 251.381485ms ago: executing program 8 (id=2585): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x30bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0xfd6f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0x4, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x0) fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) kexec_load(0x2, 0x8, &(0x7f00000007c0)=[{0x0, 0xb, 0x8000000000, 0x80000000}], 0x3e0000000000) 251.175895ms ago: executing program 1 (id=2574): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x2c409, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_config_ext={0xffff, 0x5}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44410, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) 148.900565ms ago: executing program 3 (id=2575): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000440)=""/222, 0x0, 0x8}, 0x78) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000c80)={0x2, 0x4e23, @local}, 0x10) 106.11266ms ago: executing program 1 (id=2576): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000640)={r2, 0xffffffff}, 0x8) 48.038715ms ago: executing program 7 (id=2577): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4084}, 0x810) r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0xfff9, 0x4}, 0x90) 0s ago: executing program 1 (id=2578): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=""/19, 0x13}}], 0x1, 0x100, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000400)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): 0000000. [ 166.823403][ T6622] bond0 (unregistering): Released all slaves [ 166.852486][ T6622] bond1 (unregistering): Released all slaves [ 167.107466][ T6622] hsr_slave_0: left promiscuous mode [ 167.121834][ T6622] hsr_slave_1: left promiscuous mode [ 167.159262][ T6622] veth1_macvtap: left promiscuous mode [ 167.159302][ T6622] veth0_macvtap: left promiscuous mode [ 167.159414][ T6622] veth1_vlan: left promiscuous mode [ 167.159457][ T6622] veth0_vlan: left promiscuous mode [ 167.333833][ T29] audit: type=1400 audit(1793071914.836:1126): avc: denied { write } for pid=8803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.402914][ T29] audit: type=1400 audit(1793071914.906:1127): avc: denied { write } for pid=8814 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.461640][ T3017] 8021q: adding VLAN 0 to HW filter on device eth9 [ 167.505264][ T8773] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.738105][ T29] audit: type=1400 audit(1793071915.246:1128): avc: denied { write } for pid=8819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.809309][ T29] audit: type=1400 audit(1793071915.316:1129): avc: denied { write } for pid=8833 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.870586][ T3017] 8021q: adding VLAN 0 to HW filter on device eth10 [ 167.894994][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.895040][ T8773] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.895570][ T8773] bridge_slave_0: entered allmulticast mode [ 167.897177][ T8773] bridge_slave_0: entered promiscuous mode [ 167.900298][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.900404][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.900985][ T8773] bridge_slave_1: entered allmulticast mode [ 167.902336][ T8773] bridge_slave_1: entered promiscuous mode [ 167.968054][ T8773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.978374][ T8773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.011111][ T8773] team0: Port device team_slave_0 added [ 168.018599][ T8773] team0: Port device team_slave_1 added [ 168.048814][ T8773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.048837][ T8773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.048911][ T8773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.051118][ T8773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.051140][ T8773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.051223][ T8773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.134149][ T8773] hsr_slave_0: entered promiscuous mode [ 168.151756][ T8773] hsr_slave_1: entered promiscuous mode [ 168.152820][ T8773] debugfs: 'hsr0' already exists in 'hsr' [ 168.152839][ T8773] Cannot create hsr debugfs directory [ 168.313304][ T29] audit: type=1400 audit(1793071915.816:1130): avc: denied { write } for pid=8839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.382876][ T29] audit: type=1400 audit(1793071915.886:1131): avc: denied { write } for pid=8851 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.395087][ T8773] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 168.416502][ T8773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.417468][ T8773] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 168.422034][ T8773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.422943][ T8773] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 168.455620][ T8773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.456466][ T8773] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 168.461446][ T8773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.487047][ T3017] 8021q: adding VLAN 0 to HW filter on device eth11 [ 168.579311][ T8773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.611919][ T8773] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.630004][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.630061][ T6626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.658450][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.658571][ T6632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.732389][ T29] audit: type=1400 audit(1793071916.236:1132): avc: denied { write } for pid=8860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.795394][ T29] audit: type=1400 audit(1793071916.306:1133): avc: denied { write } for pid=8871 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.852850][ T3017] 8021q: adding VLAN 0 to HW filter on device eth12 [ 169.061392][ T8773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.295993][ T8773] veth0_vlan: entered promiscuous mode [ 169.303083][ T8773] veth1_vlan: entered promiscuous mode [ 169.341649][ T8773] veth0_macvtap: entered promiscuous mode [ 169.353930][ T8773] veth1_macvtap: entered promiscuous mode [ 169.376042][ T8773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.387118][ T8773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.434873][ T6632] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.435166][ T6632] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.435262][ T6632] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.462292][ T6626] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.583531][ T8912] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 169.583560][ T8912] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.583595][ T8912] vhci_hcd vhci_hcd.4: default hub control req: 0017 v0014 i0003 l0 [ 170.543074][ T8922] loop2: detected capacity change from 0 to 512 [ 170.571311][ T8922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.571498][ T8922] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.601043][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 170.601063][ T29] audit: type=1400 audit(1793071918.106:1148): avc: denied { write } for pid=8918 comm="syz.2.1984" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.792752][ T8933] veth0_to_bond: Caught tx_queue_len zero misconfig [ 170.792800][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1988'. [ 170.853491][ T8937] bond0: unable to remove nonexistent ARP target 192.0.2.1 [ 170.853530][ T8937] bond0: option arp_ip_target: invalid value (-192.0.2.1) [ 170.897666][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.950782][ T8940] loop1: detected capacity change from 0 to 512 [ 170.977376][ T8940] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 170.999881][ T53] IPVS: starting estimator thread 0... [ 171.038873][ T8940] EXT4-fs (loop1): 1 orphan inode deleted [ 171.039696][ T8940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.051850][ T8940] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.076928][ T6628] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 171.076982][ T6628] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:13: Failed to release dquot type 1 [ 171.085751][ T8944] IPVS: using max 1824 ests per chain, 91200 per kthread [ 171.151957][ T8948] Cannot find set identified by id 0 to match [ 171.170649][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1999'. [ 171.170707][ T8951] bond0: ARP target 8.4.0.0 is already present [ 171.170760][ T8951] bond0: option arp_ip_target: invalid value (1032) [ 171.235966][ T8952] md: md2 stopped. [ 171.284566][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.444515][ T8959] loop3: detected capacity change from 0 to 8192 [ 171.462121][ T8959] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.673788][ T8981] FAULT_INJECTION: forcing a failure. [ 171.673788][ T8981] name failslab, interval 1, probability 0, space 0, times 0 [ 171.673891][ T8981] CPU: 1 UID: 0 PID: 8981 Comm: syz.1.2013 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 171.673986][ T8981] Tainted: [Y]=FORCED_BIND [ 171.673997][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 171.674018][ T8981] Call Trace: [ 171.674030][ T8981] [ 171.674043][ T8981] __dump_stack+0x1d/0x30 [ 171.674081][ T8981] dump_stack_lvl+0x95/0xd0 [ 171.674126][ T8981] dump_stack+0x15/0x1b [ 171.674202][ T8981] should_fail_ex+0x262/0x280 [ 171.674239][ T8981] ? copy_net_ns+0xd6/0x490 [ 171.674290][ T8981] should_failslab+0x8c/0xb0 [ 171.674331][ T8981] __kmalloc_noprof+0xb6/0x4b0 [ 171.674377][ T8981] ? copy_net_ns+0xd6/0x490 [ 171.674404][ T8981] copy_net_ns+0xd6/0x490 [ 171.674435][ T8981] create_new_namespaces+0x1f6/0x420 [ 171.674463][ T8981] unshare_nsproxy_namespaces+0x115/0x150 [ 171.674495][ T8981] ksys_unshare+0x3a3/0x690 [ 171.674621][ T8981] __x64_sys_unshare+0x1f/0x30 [ 171.674666][ T8981] x64_sys_call+0x1e33/0x2550 [ 171.674780][ T8981] do_syscall_64+0x112/0x360 [ 171.674823][ T8981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.674857][ T8981] RIP: 0033:0x7f653c24f559 [ 171.674952][ T8981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.675003][ T8981] RSP: 002b:00007f653aca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 171.675060][ T8981] RAX: ffffffffffffffda RBX: 00007f653c4d5fa0 RCX: 00007f653c24f559 [ 171.675077][ T8981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 171.675097][ T8981] RBP: 00007f653c2e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 171.675118][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.675140][ T8981] R13: 00007f653c4d6038 R14: 00007f653c4d5fa0 R15: 00007fffef1dedd8 [ 171.675214][ T8981] [ 171.827449][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2011'. [ 172.088955][ T29] audit: type=1400 audit(1793071919.596:1149): avc: denied { getopt } for pid=8988 comm="syz.7.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.353612][ T29] audit: type=1400 audit(1793071919.856:1150): avc: denied { setopt } for pid=9002 comm="syz.3.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.526353][ T9015] vlan2: entered allmulticast mode [ 172.526380][ T9015] bond0: entered allmulticast mode [ 172.526727][ T9015] bond_slave_0: entered allmulticast mode [ 172.526746][ T9015] bond_slave_1: entered allmulticast mode [ 172.529940][ T9015] bridge0: port 3(vlan2) entered blocking state [ 172.530331][ T9015] bridge0: port 3(vlan2) entered disabled state [ 172.532803][ T9015] vlan2: entered promiscuous mode [ 172.532905][ T9015] bond0: entered promiscuous mode [ 172.532923][ T9015] bond_slave_0: entered promiscuous mode [ 172.533009][ T9015] bond_slave_1: entered promiscuous mode [ 172.533952][ T9015] bridge0: port 3(vlan2) entered blocking state [ 172.534032][ T9015] bridge0: port 3(vlan2) entered forwarding state [ 172.698725][ T9019] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.751072][ T9021] loop8: detected capacity change from 0 to 512 [ 172.784278][ T9021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.797306][ T9021] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.832184][ T29] audit: type=1400 audit(1793071920.336:1151): avc: denied { write } for pid=9020 comm="syz.8.2031" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.978382][ T8773] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.195625][ T9044] vlan2: entered allmulticast mode [ 173.195680][ T9044] bond0: entered allmulticast mode [ 173.195702][ T9044] bond_slave_0: entered allmulticast mode [ 173.195726][ T9044] bond_slave_1: entered allmulticast mode [ 173.206745][ T9044] bridge0: port 3(vlan2) entered blocking state [ 173.206832][ T9044] bridge0: port 3(vlan2) entered disabled state [ 173.215994][ T9044] vlan2: entered promiscuous mode [ 173.216018][ T9044] bond0: entered promiscuous mode [ 173.216039][ T9044] bond_slave_0: entered promiscuous mode [ 173.216148][ T9044] bond_slave_1: entered promiscuous mode [ 173.216821][ T9044] bridge0: port 3(vlan2) entered blocking state [ 173.216878][ T9044] bridge0: port 3(vlan2) entered forwarding state [ 173.472043][ T29] audit: type=1326 audit(1793071920.976:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.7.2043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe298aff559 code=0x7ffc0000 [ 173.473352][ T29] audit: type=1326 audit(1793071920.976:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.7.2043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe298aff559 code=0x7ffc0000 [ 173.474422][ T29] audit: type=1326 audit(1793071920.976:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.7.2043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fe298aff559 code=0x7ffc0000 [ 173.485330][ T29] audit: type=1326 audit(1793071920.986:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.7.2043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe298aff559 code=0x7ffc0000 [ 173.495059][ T29] audit: type=1326 audit(1793071920.986:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.7.2043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe298aff559 code=0x7ffc0000 [ 173.627364][ T9054] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.790813][ T9059] loop7: detected capacity change from 0 to 512 [ 173.885963][ T9059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.886143][ T9059] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.159111][ T8653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.602166][ T9103] FAULT_INJECTION: forcing a failure. [ 174.602166][ T9103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.602209][ T9103] CPU: 1 UID: 0 PID: 9103 Comm: syz.2.2063 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 174.602250][ T9103] Tainted: [Y]=FORCED_BIND [ 174.602264][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 174.602326][ T9103] Call Trace: [ 174.602336][ T9103] [ 174.602429][ T9103] __dump_stack+0x1d/0x30 [ 174.602464][ T9103] dump_stack_lvl+0x95/0xd0 [ 174.602494][ T9103] dump_stack+0x15/0x1b [ 174.602520][ T9103] should_fail_ex+0x262/0x280 [ 174.602647][ T9103] should_fail+0xb/0x20 [ 174.602711][ T9103] should_fail_usercopy+0x1a/0x20 [ 174.602772][ T9103] _copy_to_user+0x20/0xa0 [ 174.602800][ T9103] put_timespec64+0x70/0xc0 [ 174.602912][ T9103] poll_select_finish+0x34f/0x470 [ 174.602953][ T9103] __se_sys_pselect6+0x253/0x2a0 [ 174.603004][ T9103] __x64_sys_pselect6+0x78/0x90 [ 174.603055][ T9103] x64_sys_call+0x1dfc/0x2550 [ 174.603181][ T9103] do_syscall_64+0x112/0x360 [ 174.603253][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.603285][ T9103] RIP: 0033:0x7f5c6dc9f559 [ 174.603310][ T9103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.603397][ T9103] RSP: 002b:00007f5c6c6f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 174.603430][ T9103] RAX: ffffffffffffffda RBX: 00007f5c6df25fa0 RCX: 00007f5c6dc9f559 [ 174.603449][ T9103] RDX: 00002000000003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.603472][ T9103] RBP: 00007f5c6dd36b20 R08: 0000200000000440 R09: 0000200000000480 [ 174.603567][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.603620][ T9103] R13: 00007f5c6df26038 R14: 00007f5c6df25fa0 R15: 00007ffc71b7c178 [ 174.603648][ T9103] [ 174.970153][ T9111] sit0: entered promiscuous mode [ 174.975557][ T9111] netlink: 'syz.8.2067': attribute type 1 has an invalid length. [ 174.975582][ T9111] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2067'. [ 175.040315][ T9115] loop8: detected capacity change from 0 to 512 [ 175.105895][ T9115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.106088][ T9115] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.218738][ T8773] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.244552][ T9124] FAULT_INJECTION: forcing a failure. [ 175.244552][ T9124] name failslab, interval 1, probability 0, space 0, times 0 [ 175.244603][ T9124] CPU: 0 UID: 0 PID: 9124 Comm: syz.2.2073 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 175.244642][ T9124] Tainted: [Y]=FORCED_BIND [ 175.244653][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 175.244672][ T9124] Call Trace: [ 175.244759][ T9124] [ 175.244771][ T9124] __dump_stack+0x1d/0x30 [ 175.244801][ T9124] dump_stack_lvl+0x95/0xd0 [ 175.244828][ T9124] dump_stack+0x15/0x1b [ 175.244862][ T9124] should_fail_ex+0x262/0x280 [ 175.244942][ T9124] ? kstrdup_const+0x3e/0x50 [ 175.244971][ T9124] should_failslab+0x8c/0xb0 [ 175.245007][ T9124] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 175.245071][ T9124] ? kstrdup_const+0x3e/0x50 [ 175.245167][ T9124] kstrdup+0x3e/0xd0 [ 175.245196][ T9124] kstrdup_const+0x3e/0x50 [ 175.245228][ T9124] alloc_vfsmnt+0x132/0x380 [ 175.245267][ T9124] clone_mnt+0x30/0x610 [ 175.245338][ T9124] copy_tree+0x2d5/0x8a0 [ 175.245424][ T9124] copy_mnt_ns+0x1d8/0x720 [ 175.245596][ T9124] create_new_namespaces+0x7f/0x420 [ 175.245626][ T9124] unshare_nsproxy_namespaces+0x115/0x150 [ 175.245736][ T9124] ksys_unshare+0x3a3/0x690 [ 175.245775][ T9124] __x64_sys_unshare+0x1f/0x30 [ 175.245816][ T9124] x64_sys_call+0x1e33/0x2550 [ 175.245870][ T9124] do_syscall_64+0x112/0x360 [ 175.245964][ T9124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.246000][ T9124] RIP: 0033:0x7f5c6dc9f559 [ 175.246025][ T9124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.246055][ T9124] RSP: 002b:00007f5c6c6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 175.246166][ T9124] RAX: ffffffffffffffda RBX: 00007f5c6df25fa0 RCX: 00007f5c6dc9f559 [ 175.246184][ T9124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 175.246200][ T9124] RBP: 00007f5c6dd36b20 R08: 0000000000000000 R09: 0000000000000000 [ 175.246263][ T9124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.246360][ T9124] R13: 00007f5c6df26038 R14: 00007f5c6df25fa0 R15: 00007ffc71b7c178 [ 175.246395][ T9124] [ 175.823334][ T9141] vlan2: entered allmulticast mode [ 175.823358][ T9141] bond0: entered allmulticast mode [ 175.823379][ T9141] bond_slave_0: entered allmulticast mode [ 175.823400][ T9141] bond_slave_1: entered allmulticast mode [ 175.886861][ T9147] FAULT_INJECTION: forcing a failure. [ 175.886861][ T9147] name failslab, interval 1, probability 0, space 0, times 0 [ 175.886907][ T9147] CPU: 0 UID: 0 PID: 9147 Comm: syz.2.2092 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 175.886950][ T9147] Tainted: [Y]=FORCED_BIND [ 175.886964][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 175.886985][ T9147] Call Trace: [ 175.886996][ T9147] [ 175.887009][ T9147] __dump_stack+0x1d/0x30 [ 175.887042][ T9147] dump_stack_lvl+0x95/0xd0 [ 175.887068][ T9147] dump_stack+0x15/0x1b [ 175.887095][ T9147] should_fail_ex+0x262/0x280 [ 175.887125][ T9147] ? vm_area_alloc+0x2c/0xb0 [ 175.887161][ T9147] should_failslab+0x8c/0xb0 [ 175.887201][ T9147] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 175.887242][ T9147] ? vm_area_alloc+0x2c/0xb0 [ 175.887277][ T9147] vm_area_alloc+0x2c/0xb0 [ 175.887320][ T9147] mmap_region+0x1216/0x2320 [ 175.887385][ T9147] do_mmap+0xa20/0xc70 [ 175.887432][ T9147] vm_mmap_pgoff+0x183/0x2d0 [ 175.887470][ T9147] ksys_mmap_pgoff+0xc1/0x310 [ 175.887506][ T9147] ? __x64_sys_mmap+0x49/0x70 [ 175.887546][ T9147] x64_sys_call+0x23b3/0x2550 [ 175.887585][ T9147] do_syscall_64+0x112/0x360 [ 175.887622][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.887655][ T9147] RIP: 0033:0x7f5c6dc9f2c2 [ 175.887681][ T9147] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 175.887709][ T9147] RSP: 002b:00007f5c6c6f6df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 175.887736][ T9147] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c6dc9f2c2 [ 175.887753][ T9147] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 175.887768][ T9147] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 175.887787][ T9147] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 175.887808][ T9147] R13: 00007f5c6c6f6ee0 R14: 00007f5c6c6f6ea0 R15: 00002000000006c0 [ 175.887837][ T9147] [ 176.242428][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 176.242452][ T29] audit: type=1326 audit(1793071923.746:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.3.2083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a192f559 code=0x7ffc0000 [ 176.242543][ T29] audit: type=1326 audit(1793071923.746:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.3.2083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a192f559 code=0x7ffc0000 [ 176.242597][ T29] audit: type=1326 audit(1793071923.746:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.3.2083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a192f559 code=0x7ffc0000 [ 176.243003][ T29] audit: type=1326 audit(1793071923.746:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.3.2083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a192f559 code=0x7ffc0000 [ 176.243096][ T29] audit: type=1326 audit(1793071923.746:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.3.2083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fc0a192f559 code=0x7ffc0000 [ 176.243185][ T29] audit: type=1326 audit(1793071923.746:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.3.2083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a192f559 code=0x7ffc0000 [ 176.243475][ T29] audit: type=1326 audit(1793071923.746:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.3.2083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a192f559 code=0x7ffc0000 [ 176.243643][ T29] audit: type=1326 audit(1793071923.746:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.3.2083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc0a192f559 code=0x7ffc0000 [ 176.341085][ T9151] loop1: detected capacity change from 0 to 512 [ 176.479198][ T9151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.479333][ T9151] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.526620][ T29] audit: type=1400 audit(1793071924.036:1174): avc: denied { write } for pid=9149 comm="syz.1.2081" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.587553][ T29] audit: type=1326 audit(1793071924.096:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.3.2083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc0a192f559 code=0x7ffc0000 [ 176.702825][ T9173] loop2: detected capacity change from 0 to 256 [ 176.767100][ T9172] loop3: detected capacity change from 0 to 512 [ 176.772581][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.805543][ T9172] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.819189][ T9172] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 176.819323][ T9172] System zones: 0-2, 18-18, 34-34 [ 176.819604][ T9172] EXT4-fs (loop3): orphan cleanup on readonly fs [ 176.831465][ T9173] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 176.831511][ T9173] FAT-fs (loop2): Filesystem has been set read-only [ 176.831745][ T9173] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 176.831880][ T9173] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 176.859104][ T9173] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 176.859246][ T9173] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 176.859562][ T9173] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 176.860062][ T9172] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.2088: bg 0: block 248: padding at end of block bitmap is not set [ 176.860196][ T9172] loop3: lost filesystem error report for type 5 error -117 [ 176.863062][ T9172] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.2088: Failed to acquire dquot type 1 [ 176.863178][ T9172] loop3: lost filesystem error report for type 5 error -117 [ 176.870225][ T9173] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 176.870523][ T9173] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 176.870674][ T9173] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 176.870866][ T9173] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 176.874806][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 176.874867][ C0] EXT4-fs (loop3): last error at time 1793071924: ext4_acquire_dquot:7120 [ 176.903535][ T9172] EXT4-fs (loop3): 1 truncate cleaned up [ 176.908236][ T9172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.238907][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.729394][ T9192] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 177.731331][ T3374] team_slave_0: entered promiscuous mode [ 177.731365][ T3374] team_slave_1: entered promiscuous mode [ 177.868873][ T9208] loop2: detected capacity change from 0 to 512 [ 177.931658][ T9208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.931753][ T9208] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.159723][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.255559][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.255723][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.282018][ T9242] loop8: detected capacity change from 0 to 512 [ 178.291235][ T9242] EXT4-fs: Ignoring removed oldalloc option [ 178.291314][ T9242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.294325][ T9242] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 178.294347][ T9242] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 178.316561][ T9242] EXT4-fs (loop8): mount failed [ 178.632089][ T9251] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.875476][ T9267] loop3: detected capacity change from 0 to 512 [ 178.931788][ T9275] netlink: 'syz.8.2130': attribute type 10 has an invalid length. [ 178.932869][ T9275] batman_adv: batadv0: Adding interface: netdevsim2 [ 178.932890][ T9275] batman_adv: batadv0: The MTU of interface netdevsim2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.933025][ T9275] batman_adv: batadv0: Interface activated: netdevsim2 [ 178.968227][ T9267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.968527][ T9267] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.031126][ T9279] netlink: 'syz.7.2129': attribute type 15 has an invalid length. [ 179.049725][ T9279] netlink: 'syz.7.2129': attribute type 15 has an invalid length. [ 179.152637][ T9290] loop1: detected capacity change from 0 to 512 [ 179.204554][ T9290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.205014][ T9290] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.382201][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.407607][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.610762][ T9318] loop1: detected capacity change from 0 to 2048 [ 179.673165][ T9318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.778921][ T9328] loop2: detected capacity change from 0 to 1024 [ 179.802767][ T9328] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.839086][ T9328] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 2: comm syz.2.2145: lblock 2 mapped to illegal pblock 2 (length 1) [ 179.839191][ T9328] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 179.844742][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 179.844774][ C1] EXT4-fs (loop2): initial error at time 1793071927: ext4_map_blocks:867: inode 3: block 2 [ 179.844827][ C1] EXT4-fs (loop2): last error at time 1793071927: ext4_map_blocks:867: inode 3: block 2 [ 179.903997][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.903994][ T9328] EXT4-fs error (device loop2): __ext4_get_inode_loc:5733: comm syz.2.2145: Invalid inode table block 1 in block_group 0 [ 179.904035][ T9328] loop2: lost filesystem error report for type 5 error -117 [ 179.904443][ T9328] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7453: Corrupt filesystem [ 179.904499][ T9328] loop2: lost filesystem error report for type 5 error -117 [ 179.914336][ T9328] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.2145: mark_inode_dirty error [ 179.914579][ T9328] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 179.917719][ T9328] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.2145: Failed to acquire dquot type 0 [ 179.917871][ T9328] loop2: lost filesystem error report for type 5 error -117 [ 179.948018][ T9328] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7453: Corrupt filesystem [ 179.948094][ T9328] loop2: lost filesystem error report for type 5 error -117 [ 179.954555][ T9328] EXT4-fs error (device loop2): ext4_evict_inode:336: inode #11: comm syz.2.2145: mark_inode_dirty error [ 179.954948][ T9328] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.959744][ T9328] EXT4-fs warning (device loop2): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 179.959986][ T9328] EXT4-fs (loop2): 1 orphan inode deleted [ 179.971398][ T53] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 179.971502][ T53] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 179.972596][ T53] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 0 [ 179.972683][ T53] loop2: lost filesystem error report for type 5 error -117 [ 179.981388][ T9328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.231648][ T9350] loop8: detected capacity change from 0 to 512 [ 180.295741][ T9350] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.302835][ T9350] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.208330][ T8773] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.210316][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.228953][ T3292] EXT4-fs error (device loop2): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 183.228994][ T3292] loop2: lost filesystem error report for type 5 error -117 [ 183.239615][ T3292] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7453: Corrupt filesystem [ 183.239695][ T3292] loop2: lost filesystem error report for type 5 error -117 [ 183.241325][ T3292] EXT4-fs error (device loop2): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 183.241415][ T3292] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 183.242282][ T3292] EXT4-fs error (device loop2): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 183.242435][ T3292] loop2: lost filesystem error report for type 5 error -117 [ 183.453720][ T9381] xt_hashlimit: size too large, truncated to 1048576 [ 183.474418][ T9377] sd 0:0:1:0: PR command failed: 1026 [ 183.474462][ T9377] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 183.474553][ T9377] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 183.529087][ T9384] xt_hashlimit: size too large, truncated to 1048576 [ 183.929571][ T9410] loop8: detected capacity change from 0 to 1024 [ 183.931987][ T9410] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.932025][ T9410] EXT4-fs: Ignoring removed oldalloc option [ 183.989005][ T9410] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 183.989194][ T9410] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.023123][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 184.023146][ T29] audit: type=1400 audit(1793071931.536:1201): avc: denied { write } for pid=9376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.070928][ T29] audit: type=1400 audit(1793071931.576:1202): avc: denied { write } for pid=9407 comm="syz.8.2163" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.149296][ T9410] EXT4-fs error (device loop8): ext4_map_blocks:951: inode #15: block 3: comm syz.8.2163: lblock 3 mapped to illegal pblock 3 (length 3) [ 184.150830][ T9421] ip_tables: iptables: counters copy to user failed while replacing table [ 184.156109][ T9410] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 184.156141][ T9410] EXT4-fs (loop8): This should not happen!! Data will be lost [ 184.156141][ T9410] [ 184.212441][ T9422] EXT4-fs error (device loop8): ext4_map_blocks:951: inode #15: block 7: comm syz.8.2163: lblock 7 mapped to illegal pblock 7 (length 9) [ 184.233181][ T9422] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 184.233255][ T9422] EXT4-fs (loop8): This should not happen!! Data will be lost [ 184.233255][ T9422] [ 184.310380][ T29] audit: type=1400 audit(1793071931.816:1203): avc: denied { write } for pid=9426 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.361245][ T8773] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 184.438934][ T9427] loop1: detected capacity change from 0 to 512 [ 184.620340][ T9445] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2174'. [ 184.840093][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2181'. [ 184.913230][ T9468] vcan0: tx address claim with dest, not broadcast [ 185.007057][ T6626] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.027985][ T29] audit: type=1400 audit(1793071932.536:1204): avc: denied { ioctl } for pid=9474 comm="syz.7.2187" path="socket:[24878]" dev="sockfs" ino=24878 ioctlcmd=0x400448dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.179263][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2191'. [ 185.507280][ T9521] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 185.613157][ T9526] ip_tables: iptables: counters copy to user failed while replacing table [ 186.021859][ T29] audit: type=1400 audit(1793071933.526:1205): avc: denied { accept } for pid=9546 comm="syz.3.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.688206][ T9571] tun0: tun_chr_ioctl cmd 1074030121 [ 186.688498][ T9571] tun0: tun_chr_ioctl cmd 1074025680 [ 187.021738][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 187.065786][ T9481] Bluetooth: hci0: command 0x1003 tx timeout [ 187.066041][ T3682] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.067715][ T9476] Bluetooth: hci0: Opcode 0x0c1a failed: -19 [ 187.240786][ T29] audit: type=1400 audit(1793071934.746:1206): avc: denied { setopt } for pid=9590 comm="syz.7.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.469434][ T9601] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 187.469559][ T9601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.469642][ T9601] vhci_hcd vhci_hcd.0: Device attached [ 187.502735][ T9601] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 187.502766][ T9601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.503015][ T9601] vhci_hcd vhci_hcd.0: Device attached [ 187.536859][ T9601] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 187.536895][ T9601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.537018][ T9601] vhci_hcd vhci_hcd.0: Device attached [ 187.573073][ T9601] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 187.573122][ T9601] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 187.573250][ T9601] vhci_hcd vhci_hcd.0: Device attached [ 187.611416][ T9601] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 187.611452][ T9601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.611575][ T9601] vhci_hcd vhci_hcd.0: Device attached [ 187.635582][ T9607] vhci_hcd: connection closed [ 187.636093][ T9604] vhci_hcd: connection closed [ 187.639943][ T9611] vhci_hcd: connection closed [ 187.640305][ T9609] vhci_hcd: connection closed [ 187.643119][ T6647] vhci_hcd vhci_hcd.3: stop threads [ 187.643193][ T6647] vhci_hcd vhci_hcd.3: release socket [ 187.643341][ T6647] vhci_hcd vhci_hcd.3: disconnect device [ 187.650204][ T6647] vhci_hcd vhci_hcd.3: stop threads [ 187.650364][ T6647] vhci_hcd vhci_hcd.3: release socket [ 187.650585][ T6647] vhci_hcd vhci_hcd.3: disconnect device [ 187.651538][ T6647] vhci_hcd vhci_hcd.3: stop threads [ 187.651589][ T6647] vhci_hcd vhci_hcd.3: release socket [ 187.651703][ T6647] vhci_hcd vhci_hcd.3: disconnect device [ 187.666045][ T9602] vhci_hcd: connection closed [ 187.669216][ T6647] vhci_hcd vhci_hcd.3: stop threads [ 187.669294][ T6647] vhci_hcd vhci_hcd.3: release socket [ 187.669409][ T6647] vhci_hcd vhci_hcd.3: disconnect device [ 187.670873][ T6647] vhci_hcd vhci_hcd.3: stop threads [ 187.670925][ T6647] vhci_hcd vhci_hcd.3: release socket [ 187.671421][ T6647] vhci_hcd vhci_hcd.3: disconnect device [ 187.706379][ T3398] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 187.706513][ T3398] usb 7-1: enqueue for inactive port 0 [ 187.706601][ T3398] usb 7-1: enqueue for inactive port 0 [ 187.706782][ T3398] usb 7-1: enqueue for inactive port 0 [ 187.775260][ T3398] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 187.840993][ T9616] loop8: detected capacity change from 0 to 512 [ 187.841704][ T9616] EXT4-fs: Ignoring removed bh option [ 187.863315][ T9616] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 187.876969][ T9616] EXT4-fs (loop8): 1 truncate cleaned up [ 187.877649][ T9616] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.957483][ T8773] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.275651][ T9633] loop3: detected capacity change from 0 to 512 [ 188.278076][ T9633] EXT4-fs: Ignoring removed bh option [ 188.317785][ T9633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.317994][ T9633] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.352705][ T29] audit: type=1400 audit(1793071935.856:1207): avc: denied { write } for pid=9632 comm="syz.3.2247" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.604247][ T29] audit: type=1400 audit(1793071936.106:1208): avc: denied { getopt } for pid=9644 comm="syz.8.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.202132][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.309695][ T9663] FAULT_INJECTION: forcing a failure. [ 189.309695][ T9663] name failslab, interval 1, probability 0, space 0, times 0 [ 189.309761][ T9663] CPU: 0 UID: 0 PID: 9663 Comm: syz.3.2260 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 189.309796][ T9663] Tainted: [Y]=FORCED_BIND [ 189.309806][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 189.309833][ T9663] Call Trace: [ 189.309843][ T9663] [ 189.309853][ T9663] __dump_stack+0x1d/0x30 [ 189.309887][ T9663] dump_stack_lvl+0x95/0xd0 [ 189.309918][ T9663] dump_stack+0x15/0x1b [ 189.309944][ T9663] should_fail_ex+0x262/0x280 [ 189.309970][ T9663] ? anon_vma_clone+0xc2/0x450 [ 189.310008][ T9663] should_failslab+0x8c/0xb0 [ 189.310068][ T9663] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 189.310109][ T9663] ? anon_vma_clone+0xc2/0x450 [ 189.310149][ T9663] anon_vma_clone+0xc2/0x450 [ 189.310206][ T9663] __split_vma+0x319/0x720 [ 189.310236][ T9663] ? ring_buffer_lock_reserve+0x71e/0x860 [ 189.310268][ T9663] ? rb_commit+0x3ec/0x430 [ 189.310301][ T9663] vms_gather_munmap_vmas+0x176/0x7f0 [ 189.310332][ T9663] do_vmi_align_munmap+0x1e1/0x400 [ 189.310379][ T9663] do_vmi_munmap+0x1da/0x220 [ 189.310407][ T9663] mremap_to+0x12d/0x450 [ 189.310439][ T9663] __se_sys_mremap+0x727/0xc50 [ 189.310477][ T9663] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 189.310526][ T9663] __x64_sys_mremap+0x67/0x80 [ 189.310563][ T9663] x64_sys_call+0x1072/0x2550 [ 189.310596][ T9663] do_syscall_64+0x112/0x360 [ 189.310627][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.310652][ T9663] RIP: 0033:0x7fc0a192f559 [ 189.310675][ T9663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.310703][ T9663] RSP: 002b:00007fc0a037f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 189.310737][ T9663] RAX: ffffffffffffffda RBX: 00007fc0a1bb5fa0 RCX: 00007fc0a192f559 [ 189.310756][ T9663] RDX: 0000000000002000 RSI: 0000000000003000 RDI: 0000200000001000 [ 189.310793][ T9663] RBP: 00007fc0a19c6b20 R08: 0000200000006000 R09: 0000000000000000 [ 189.310814][ T9663] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 189.310830][ T9663] R13: 00007fc0a1bb6038 R14: 00007fc0a1bb5fa0 R15: 00007ffce1889868 [ 189.310856][ T9663] [ 189.900820][ T29] audit: type=1400 audit(1793071937.406:1209): avc: denied { connect } for pid=9689 comm="syz.8.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.001654][ T9695] ip_tables: iptables: counters copy to user failed while replacing table [ 190.010031][ T9696] FAULT_INJECTION: forcing a failure. [ 190.010031][ T9696] name failslab, interval 1, probability 0, space 0, times 0 [ 190.010122][ T9696] CPU: 0 UID: 0 PID: 9696 Comm: syz.8.2276 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 190.010243][ T9696] Tainted: [Y]=FORCED_BIND [ 190.010282][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 190.010345][ T9696] Call Trace: [ 190.010392][ T9696] [ 190.010433][ T9696] __dump_stack+0x1d/0x30 [ 190.010527][ T9696] dump_stack_lvl+0x95/0xd0 [ 190.010613][ T9696] dump_stack+0x15/0x1b [ 190.010708][ T9696] should_fail_ex+0x262/0x280 [ 190.010796][ T9696] ? proc_self_get_link+0x96/0x110 [ 190.010878][ T9696] should_failslab+0x8c/0xb0 [ 190.010983][ T9696] __kmalloc_cache_noprof+0x5d/0x3e0 [ 190.011121][ T9696] ? selinux_inode_follow_link+0x1a7/0x1f0 [ 190.011241][ T9696] ? proc_self_get_link+0x96/0x110 [ 190.011327][ T9696] ? __pfx_proc_self_get_link+0x10/0x10 [ 190.011439][ T9696] proc_self_get_link+0x96/0x110 [ 190.011513][ T9696] pick_link+0x4b1/0x8e0 [ 190.011639][ T9696] step_into_slowpath+0x36a/0x4c0 [ 190.011781][ T9696] ? inode_permission+0x1e3/0x3c0 [ 190.011874][ T9696] link_path_walk+0x953/0xde0 [ 190.011996][ T9696] path_openat+0x142/0x11c0 [ 190.012166][ T9696] do_file_open+0x16c/0x290 [ 190.012335][ T9696] ? __pfx_proc_put_link+0x10/0x10 [ 190.012419][ T9696] do_sys_openat2+0xa1/0x140 [ 190.012614][ T9696] __x64_sys_openat+0xf2/0x120 [ 190.012706][ T9696] x64_sys_call+0x1f72/0x2550 [ 190.012815][ T9696] do_syscall_64+0x112/0x360 [ 190.012952][ T9696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.013080][ T9696] RIP: 0033:0x7fed0e26f559 [ 190.013152][ T9696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.013270][ T9696] RSP: 002b:00007fed0ccc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.013365][ T9696] RAX: ffffffffffffffda RBX: 00007fed0e4f5fa0 RCX: 00007fed0e26f559 [ 190.013421][ T9696] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 190.013478][ T9696] RBP: 00007fed0e306b20 R08: 0000000000000000 R09: 0000000000000000 [ 190.013530][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.013583][ T9696] R13: 00007fed0e4f6038 R14: 00007fed0e4f5fa0 R15: 00007ffebbde9688 [ 190.013716][ T9696] [ 190.191759][ T9695] ip_tables: iptables: counters copy to user failed while replacing table [ 190.278349][ T9700] loop8: detected capacity change from 0 to 512 [ 190.282904][ T9700] msdos: Unknown parameter 'ÿÿÿÿ' [ 190.298723][ T29] audit: type=1400 audit(1793071937.806:1210): avc: denied { read append } for pid=9699 comm="syz.8.2278" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 190.298838][ T29] audit: type=1400 audit(1793071937.806:1211): avc: denied { open } for pid=9699 comm="syz.8.2278" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 190.301281][ T29] audit: type=1400 audit(1793071937.806:1212): avc: denied { ioctl } for pid=9699 comm="syz.8.2278" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0xc0205838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 190.448590][ T9708] IPVS: Unknown mcast interface: macsec0 [ 190.558077][ T9716] loop7: detected capacity change from 0 to 512 [ 190.571875][ T9716] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 190.571896][ T9716] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c800e018, mo2=0003] [ 190.572222][ T9716] EXT4-fs (loop7): orphan cleanup on readonly fs [ 190.577033][ T9716] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.2286: bg 0: block 15: invalid block bitmap [ 190.577130][ T9716] loop7: lost filesystem error report for type 5 error -117 [ 190.594817][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 190.594886][ C0] EXT4-fs (loop7): initial error at time 1793071938: ext4_validate_block_bitmap:436 [ 190.594975][ C0] EXT4-fs (loop7): last error at time 1793071938: ext4_validate_block_bitmap:436 [ 190.613305][ T9716] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 190.613377][ T9716] loop7: lost filesystem error report for type 5 error -117 [ 190.637002][ T9716] EXT4-fs (loop7): 1 truncate cleaned up [ 190.651349][ T9716] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.785942][ T8653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.086264][ T9751] FAULT_INJECTION: forcing a failure. [ 191.086264][ T9751] name failslab, interval 1, probability 0, space 0, times 0 [ 191.086314][ T9751] CPU: 1 UID: 0 PID: 9751 Comm: syz.2.2302 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 191.086372][ T9751] Tainted: [Y]=FORCED_BIND [ 191.086385][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.086455][ T9751] Call Trace: [ 191.086466][ T9751] [ 191.086479][ T9751] __dump_stack+0x1d/0x30 [ 191.086517][ T9751] dump_stack_lvl+0x95/0xd0 [ 191.086552][ T9751] dump_stack+0x15/0x1b [ 191.086584][ T9751] should_fail_ex+0x262/0x280 [ 191.086650][ T9751] ? posix_clock_open+0x7f/0x150 [ 191.086719][ T9751] should_failslab+0x8c/0xb0 [ 191.086754][ T9751] __kmalloc_cache_noprof+0x5d/0x3e0 [ 191.086863][ T9751] ? avc_has_perm+0x101/0x190 [ 191.086888][ T9751] ? posix_clock_open+0x7f/0x150 [ 191.086914][ T9751] ? pv_queued_spin_unlock_traced+0x2d/0xb0 [ 191.087041][ T9751] posix_clock_open+0x7f/0x150 [ 191.087133][ T9751] chrdev_open+0x2eb/0x3a0 [ 191.087171][ T9751] do_dentry_open+0x496/0xa40 [ 191.087199][ T9751] ? __pfx_chrdev_open+0x10/0x10 [ 191.087286][ T9751] vfs_open_consume+0x46/0x1f0 [ 191.087312][ T9751] path_openat+0xc16/0x11c0 [ 191.087348][ T9751] do_file_open+0x16c/0x290 [ 191.087406][ T9751] do_sys_openat2+0xa1/0x140 [ 191.087507][ T9751] __x64_sys_openat+0xf2/0x120 [ 191.087607][ T9751] x64_sys_call+0x1f72/0x2550 [ 191.087647][ T9751] do_syscall_64+0x112/0x360 [ 191.087687][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.087752][ T9751] RIP: 0033:0x7f5c6dc9f559 [ 191.087778][ T9751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.087823][ T9751] RSP: 002b:00007f5c6c6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.087856][ T9751] RAX: ffffffffffffffda RBX: 00007f5c6df25fa0 RCX: 00007f5c6dc9f559 [ 191.087880][ T9751] RDX: 0000000000109001 RSI: 0000200000001780 RDI: ffffffffffffff9c [ 191.087902][ T9751] RBP: 00007f5c6dd36b20 R08: 0000000000000000 R09: 0000000000000000 [ 191.087924][ T9751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.088020][ T9751] R13: 00007f5c6df26038 R14: 00007f5c6df25fa0 R15: 00007ffc71b7c178 [ 191.088122][ T9751] [ 191.389814][ T9758] FAULT_INJECTION: forcing a failure. [ 191.389814][ T9758] name failslab, interval 1, probability 0, space 0, times 0 [ 191.389863][ T9758] CPU: 1 UID: 0 PID: 9758 Comm: syz.8.2305 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 191.389907][ T9758] Tainted: [Y]=FORCED_BIND [ 191.389921][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.389941][ T9758] Call Trace: [ 191.389952][ T9758] [ 191.390012][ T9758] __dump_stack+0x1d/0x30 [ 191.390043][ T9758] dump_stack_lvl+0x95/0xd0 [ 191.390116][ T9758] dump_stack+0x15/0x1b [ 191.390145][ T9758] should_fail_ex+0x262/0x280 [ 191.390175][ T9758] ? shrinker_alloc+0x3b/0x6e0 [ 191.390259][ T9758] should_failslab+0x8c/0xb0 [ 191.390301][ T9758] __kmalloc_cache_noprof+0x5d/0x3e0 [ 191.390341][ T9758] ? shrinker_alloc+0x3b/0x6e0 [ 191.390424][ T9758] shrinker_alloc+0x3b/0x6e0 [ 191.390450][ T9758] ? __percpu_init_rwsem+0x24/0x90 [ 191.390523][ T9758] ? rcu_sync_init+0x32/0x40 [ 191.390638][ T9758] sget_fc+0x870/0xfa0 [ 191.390678][ T9758] ? __pfx_set_anon_super_fc+0x10/0x10 [ 191.390712][ T9758] ? mqueue_init_fs_context+0x38/0x2c0 [ 191.390821][ T9758] ? __kmalloc_cache_noprof+0x314/0x3e0 [ 191.390864][ T9758] ? mqueue_init_fs_context+0x38/0x2c0 [ 191.390931][ T9758] ? __pfx_mqueue_fill_super+0x10/0x10 [ 191.390957][ T9758] get_tree_nodev+0x2a/0x100 [ 191.391069][ T9758] mqueue_get_tree+0x5d/0x80 [ 191.391096][ T9758] vfs_get_tree+0x57/0x1d0 [ 191.391136][ T9758] fc_mount_longterm+0x18/0xb0 [ 191.391210][ T9758] mq_init_ns+0x2db/0x370 [ 191.391248][ T9758] copy_ipcs+0x26d/0x460 [ 191.391292][ T9758] create_new_namespaces+0x121/0x420 [ 191.391327][ T9758] unshare_nsproxy_namespaces+0x115/0x150 [ 191.391386][ T9758] ksys_unshare+0x3a3/0x690 [ 191.391432][ T9758] __x64_sys_unshare+0x1f/0x30 [ 191.391505][ T9758] x64_sys_call+0x1e33/0x2550 [ 191.391554][ T9758] do_syscall_64+0x112/0x360 [ 191.391585][ T9758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.391610][ T9758] RIP: 0033:0x7fed0e26f559 [ 191.391644][ T9758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.391678][ T9758] RSP: 002b:00007fed0ccc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 191.391713][ T9758] RAX: ffffffffffffffda RBX: 00007fed0e4f5fa0 RCX: 00007fed0e26f559 [ 191.391736][ T9758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 191.391755][ T9758] RBP: 00007fed0e306b20 R08: 0000000000000000 R09: 0000000000000000 [ 191.391812][ T9758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.391894][ T9758] R13: 00007fed0e4f6038 R14: 00007fed0e4f5fa0 R15: 00007ffebbde9688 [ 191.391999][ T9758] [ 191.691810][ T9762] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2307'. [ 191.700776][ T9760] loop2: detected capacity change from 0 to 512 [ 191.801019][ T9766] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2309'. [ 191.851472][ T9774] loop3: detected capacity change from 0 to 512 [ 191.875528][ T9774] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 191.875549][ T9774] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c800e018, mo2=0003] [ 191.875729][ T9774] EXT4-fs (loop3): orphan cleanup on readonly fs [ 191.876165][ T9776] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 191.882805][ T9774] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.2311: bg 0: block 15: invalid block bitmap [ 191.886007][ T9774] loop3: lost filesystem error report for type 5 error -117 [ 191.893668][ T9774] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 191.893754][ T9774] loop3: lost filesystem error report for type 5 error -117 [ 191.904866][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 191.904941][ C0] EXT4-fs (loop3): initial error at time 1793071939: ext4_validate_block_bitmap:436 [ 191.905030][ C0] EXT4-fs (loop3): last error at time 1793071939: ext4_mb_clear_bb:6678 [ 191.910657][ T9774] EXT4-fs (loop3): 1 truncate cleaned up [ 191.911320][ T9774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.089895][ T9782] loop7: detected capacity change from 0 to 1024 [ 192.093655][ T9782] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.093704][ T9782] EXT4-fs: Ignoring removed oldalloc option [ 192.132408][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.157904][ T9782] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 192.158093][ T9782] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.212450][ T29] audit: type=1400 audit(1793071939.716:1213): avc: denied { write } for pid=9778 comm="syz.7.2312" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.279357][ T9782] EXT4-fs error (device loop7): ext4_map_blocks:951: inode #15: block 3: comm syz.7.2312: lblock 3 mapped to illegal pblock 3 (length 3) [ 192.282010][ T9782] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 192.282127][ T9782] EXT4-fs (loop7): This should not happen!! Data will be lost [ 192.282127][ T9782] [ 192.349043][ T9792] tun1: tun_chr_ioctl cmd 1074030121 [ 192.349540][ T9792] tun1: tun_chr_ioctl cmd 1074025680 [ 192.354366][ T9782] EXT4-fs error (device loop7): ext4_map_blocks:951: inode #15: block 7: comm syz.7.2312: lblock 7 mapped to illegal pblock 7 (length 9) [ 192.360046][ T9782] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 192.360167][ T9782] EXT4-fs (loop7): This should not happen!! Data will be lost [ 192.360167][ T9782] [ 192.408454][ T9796] FAULT_INJECTION: forcing a failure. [ 192.408454][ T9796] name failslab, interval 1, probability 0, space 0, times 0 [ 192.408516][ T9796] CPU: 1 UID: 0 PID: 9796 Comm: syz.1.2318 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 192.408561][ T9796] Tainted: [Y]=FORCED_BIND [ 192.408575][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.408596][ T9796] Call Trace: [ 192.408608][ T9796] [ 192.408621][ T9796] __dump_stack+0x1d/0x30 [ 192.408717][ T9796] dump_stack_lvl+0x95/0xd0 [ 192.408759][ T9796] dump_stack+0x15/0x1b [ 192.408784][ T9796] should_fail_ex+0x262/0x280 [ 192.408884][ T9796] ? shrinker_alloc+0x3b/0x6e0 [ 192.408910][ T9796] should_failslab+0x8c/0xb0 [ 192.408950][ T9796] __kmalloc_cache_noprof+0x5d/0x3e0 [ 192.409041][ T9796] ? shrinker_alloc+0x3b/0x6e0 [ 192.409077][ T9796] shrinker_alloc+0x3b/0x6e0 [ 192.409176][ T9796] ? __percpu_init_rwsem+0x24/0x90 [ 192.409246][ T9796] ? rcu_sync_init+0x32/0x40 [ 192.409285][ T9796] sget_fc+0x870/0xfa0 [ 192.409319][ T9796] ? __pfx_set_anon_super_fc+0x10/0x10 [ 192.409375][ T9796] ? mqueue_init_fs_context+0x38/0x2c0 [ 192.409481][ T9796] ? __kmalloc_cache_noprof+0x314/0x3e0 [ 192.409517][ T9796] ? mqueue_init_fs_context+0x38/0x2c0 [ 192.409597][ T9796] ? __pfx_mqueue_fill_super+0x10/0x10 [ 192.409676][ T9796] get_tree_nodev+0x2a/0x100 [ 192.409716][ T9796] mqueue_get_tree+0x5d/0x80 [ 192.409824][ T9796] vfs_get_tree+0x57/0x1d0 [ 192.409856][ T9796] fc_mount_longterm+0x18/0xb0 [ 192.410081][ T9796] mq_init_ns+0x2db/0x370 [ 192.410130][ T9796] copy_ipcs+0x26d/0x460 [ 192.410221][ T9796] create_new_namespaces+0x121/0x420 [ 192.410257][ T9796] unshare_nsproxy_namespaces+0x115/0x150 [ 192.410291][ T9796] ksys_unshare+0x3a3/0x690 [ 192.410401][ T9796] __x64_sys_unshare+0x1f/0x30 [ 192.410528][ T9796] x64_sys_call+0x1e33/0x2550 [ 192.410559][ T9796] do_syscall_64+0x112/0x360 [ 192.410604][ T9796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.410637][ T9796] RIP: 0033:0x7f653c24f559 [ 192.410664][ T9796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.410690][ T9796] RSP: 002b:00007f653aca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 192.410719][ T9796] RAX: ffffffffffffffda RBX: 00007f653c4d5fa0 RCX: 00007f653c24f559 [ 192.410723][ T9795] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 192.410742][ T9796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 192.410763][ T9796] RBP: 00007f653c2e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 192.410783][ T9796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.410803][ T9796] R13: 00007f653c4d6038 R14: 00007f653c4d5fa0 R15: 00007fffef1dedd8 [ 192.410881][ T9796] [ 192.679637][ T8653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.811351][ T9811] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 192.850209][ T9813] loop1: detected capacity change from 0 to 512 [ 192.974434][ T9821] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 192.974508][ T9821] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 192.974580][ T9821] vhci_hcd vhci_hcd.0: Device attached [ 193.007580][ T9821] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 193.007617][ T9821] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.007761][ T9821] vhci_hcd vhci_hcd.0: Device attached [ 193.018416][ T9821] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 193.018501][ T9821] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.018755][ T9821] vhci_hcd vhci_hcd.0: Device attached [ 193.051775][ T9821] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(9) [ 193.051869][ T9821] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.052064][ T9821] vhci_hcd vhci_hcd.0: Device attached [ 193.081071][ T9821] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(11) [ 193.081160][ T9821] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.081242][ T9821] vhci_hcd vhci_hcd.0: Device attached [ 193.083165][ T9822] vhci_hcd: connection closed [ 193.084163][ T6647] vhci_hcd vhci_hcd.7: stop threads [ 193.084276][ T6647] vhci_hcd vhci_hcd.7: release socket [ 193.084327][ T6647] vhci_hcd vhci_hcd.7: disconnect device [ 193.084958][ T9825] vhci_hcd: connection closed [ 193.087031][ T9833] vhci_hcd: connection closed [ 193.087312][ T9828] vhci_hcd: connection closed [ 193.087673][ T9830] vhci_hcd: connection closed [ 193.095947][ T6626] vhci_hcd vhci_hcd.7: stop threads [ 193.096097][ T6626] vhci_hcd vhci_hcd.7: release socket [ 193.096151][ T6626] vhci_hcd vhci_hcd.7: disconnect device [ 193.100523][ T6626] vhci_hcd vhci_hcd.7: stop threads [ 193.100577][ T6626] vhci_hcd vhci_hcd.7: release socket [ 193.100919][ T6626] vhci_hcd vhci_hcd.7: disconnect device [ 193.106582][ T6626] vhci_hcd vhci_hcd.7: stop threads [ 193.106727][ T6626] vhci_hcd vhci_hcd.7: release socket [ 193.106815][ T6626] vhci_hcd vhci_hcd.7: disconnect device [ 193.113233][ T6626] vhci_hcd vhci_hcd.7: stop threads [ 193.113291][ T6626] vhci_hcd vhci_hcd.7: release socket [ 193.113491][ T6626] vhci_hcd vhci_hcd.7: disconnect device [ 193.268725][ T29] audit: type=1326 audit(1793071940.776:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9836 comm="syz.8.2332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0e26f559 code=0x7ffc0000 [ 193.275008][ T29] audit: type=1326 audit(1793071940.776:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9836 comm="syz.8.2332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0e26f559 code=0x7ffc0000 [ 193.329228][ T29] audit: type=1326 audit(1793071940.836:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9836 comm="syz.8.2332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fed0e26f559 code=0x7ffc0000 [ 193.329355][ T29] audit: type=1326 audit(1793071940.836:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9836 comm="syz.8.2332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0e26f559 code=0x7ffc0000 [ 193.329408][ T29] audit: type=1326 audit(1793071940.836:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9836 comm="syz.8.2332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0e26f559 code=0x7ffc0000 [ 193.501695][ T9844] loop2: detected capacity change from 0 to 1024 [ 193.511649][ T9844] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.511712][ T9844] EXT4-fs: Ignoring removed oldalloc option [ 193.551118][ T9844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 193.551282][ T9844] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.607060][ T9844] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: block 3: comm syz.2.2335: lblock 3 mapped to illegal pblock 3 (length 3) [ 193.607796][ T9844] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 193.607971][ T9844] EXT4-fs (loop2): This should not happen!! Data will be lost [ 193.607971][ T9844] [ 193.659427][ T9844] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: block 7: comm syz.2.2335: lblock 7 mapped to illegal pblock 7 (length 9) [ 193.661235][ T9844] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 193.661269][ T9844] EXT4-fs (loop2): This should not happen!! Data will be lost [ 193.661269][ T9844] [ 193.739905][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 193.868087][ T9862] loop7: detected capacity change from 0 to 512 [ 193.874564][ T9862] EXT4-fs: Ignoring removed bh option [ 193.893681][ T9862] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 193.906815][ T9862] EXT4-fs (loop7): 1 truncate cleaned up [ 193.909890][ T9862] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.999603][ T8653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.225017][ T9883] FAULT_INJECTION: forcing a failure. [ 194.225017][ T9883] name failslab, interval 1, probability 0, space 0, times 0 [ 194.225128][ T9883] CPU: 0 UID: 0 PID: 9883 Comm: syz.7.2352 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 194.225196][ T9883] Tainted: [Y]=FORCED_BIND [ 194.225207][ T9883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 194.225253][ T9883] Call Trace: [ 194.225263][ T9883] [ 194.225274][ T9883] __dump_stack+0x1d/0x30 [ 194.225319][ T9883] dump_stack_lvl+0x95/0xd0 [ 194.225464][ T9883] dump_stack+0x15/0x1b [ 194.225557][ T9883] should_fail_ex+0x262/0x280 [ 194.225592][ T9883] ? shrinker_alloc+0x3b/0x6e0 [ 194.225624][ T9883] should_failslab+0x8c/0xb0 [ 194.225721][ T9883] __kmalloc_cache_noprof+0x5d/0x3e0 [ 194.225821][ T9883] ? shrinker_alloc+0x3b/0x6e0 [ 194.225855][ T9883] shrinker_alloc+0x3b/0x6e0 [ 194.225888][ T9883] ? __percpu_init_rwsem+0x24/0x90 [ 194.225969][ T9883] ? rcu_sync_init+0x32/0x40 [ 194.226000][ T9883] sget_fc+0x870/0xfa0 [ 194.226076][ T9883] ? __pfx_set_anon_super_fc+0x10/0x10 [ 194.226170][ T9883] ? mqueue_init_fs_context+0x38/0x2c0 [ 194.226200][ T9883] ? __kmalloc_cache_noprof+0x314/0x3e0 [ 194.226296][ T9883] ? mqueue_init_fs_context+0x38/0x2c0 [ 194.226329][ T9883] ? __pfx_mqueue_fill_super+0x10/0x10 [ 194.226406][ T9883] get_tree_nodev+0x2a/0x100 [ 194.226442][ T9883] mqueue_get_tree+0x5d/0x80 [ 194.226583][ T9883] vfs_get_tree+0x57/0x1d0 [ 194.226705][ T9883] fc_mount_longterm+0x18/0xb0 [ 194.226774][ T9883] mq_init_ns+0x2db/0x370 [ 194.226824][ T9883] copy_ipcs+0x26d/0x460 [ 194.226899][ T9883] create_new_namespaces+0x121/0x420 [ 194.226930][ T9883] unshare_nsproxy_namespaces+0x115/0x150 [ 194.226961][ T9883] ksys_unshare+0x3a3/0x690 [ 194.227000][ T9883] __x64_sys_unshare+0x1f/0x30 [ 194.227116][ T9883] x64_sys_call+0x1e33/0x2550 [ 194.227149][ T9883] do_syscall_64+0x112/0x360 [ 194.227259][ T9883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.227302][ T9883] RIP: 0033:0x7fe298aff559 [ 194.227324][ T9883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.227349][ T9883] RSP: 002b:00007fe29754f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 194.227378][ T9883] RAX: ffffffffffffffda RBX: 00007fe298d85fa0 RCX: 00007fe298aff559 [ 194.227398][ T9883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 194.227487][ T9883] RBP: 00007fe298b96b20 R08: 0000000000000000 R09: 0000000000000000 [ 194.227506][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.227523][ T9883] R13: 00007fe298d86038 R14: 00007fe298d85fa0 R15: 00007ffef028df48 [ 194.227549][ T9883] [ 194.467316][ T9885] FAULT_INJECTION: forcing a failure. [ 194.467316][ T9885] name failslab, interval 1, probability 0, space 0, times 0 [ 194.467422][ T9885] CPU: 0 UID: 0 PID: 9885 Comm: syz.8.2355 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 194.467531][ T9885] Tainted: [Y]=FORCED_BIND [ 194.467564][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 194.467633][ T9885] Call Trace: [ 194.467663][ T9885] [ 194.467695][ T9885] __dump_stack+0x1d/0x30 [ 194.467802][ T9885] dump_stack_lvl+0x95/0xd0 [ 194.467907][ T9885] dump_stack+0x15/0x1b [ 194.467995][ T9885] should_fail_ex+0x262/0x280 [ 194.468085][ T9885] ? copy_net_ns+0xd6/0x490 [ 194.468232][ T9885] should_failslab+0x8c/0xb0 [ 194.468342][ T9885] __kmalloc_noprof+0xb6/0x4b0 [ 194.468476][ T9885] ? copy_net_ns+0xd6/0x490 [ 194.468598][ T9885] copy_net_ns+0xd6/0x490 [ 194.468679][ T9885] create_new_namespaces+0x1f6/0x420 [ 194.468780][ T9885] unshare_nsproxy_namespaces+0x115/0x150 [ 194.468871][ T9885] ksys_unshare+0x3a3/0x690 [ 194.468989][ T9885] __x64_sys_unshare+0x1f/0x30 [ 194.469110][ T9885] x64_sys_call+0x1e33/0x2550 [ 194.469222][ T9885] do_syscall_64+0x112/0x360 [ 194.469345][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.469560][ T9885] RIP: 0033:0x7fed0e26f559 [ 194.469679][ T9885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.469750][ T9885] RSP: 002b:00007fed0ccc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 194.469825][ T9885] RAX: ffffffffffffffda RBX: 00007fed0e4f5fa0 RCX: 00007fed0e26f559 [ 194.469960][ T9885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 194.470011][ T9885] RBP: 00007fed0e306b20 R08: 0000000000000000 R09: 0000000000000000 [ 194.470159][ T9885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.470210][ T9885] R13: 00007fed0e4f6038 R14: 00007fed0e4f5fa0 R15: 00007ffebbde9688 [ 194.470318][ T9885] [ 194.934011][ T9902] loop2: detected capacity change from 0 to 512 [ 194.942544][ T9902] EXT4-fs: Ignoring removed bh option [ 194.961344][ T9902] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 194.963104][ T9902] EXT4-fs (loop2): 1 truncate cleaned up [ 194.964205][ T9902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.011758][ T9904] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 195.011785][ T9904] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 195.011895][ T9904] vhci_hcd vhci_hcd.4: default hub control req: 0017 v0014 i0003 l0 [ 195.151358][ T9909] ip6erspan0: entered allmulticast mode [ 195.304416][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.443991][ T9922] tap0: tun_chr_ioctl cmd 1074025676 [ 195.444089][ T9922] tap0: owner set to 0 [ 195.515475][ T9929] FAULT_INJECTION: forcing a failure. [ 195.515475][ T9929] name failslab, interval 1, probability 0, space 0, times 0 [ 195.515617][ T9929] CPU: 1 UID: 0 PID: 9929 Comm: syz.7.2374 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 195.515710][ T9929] Tainted: [Y]=FORCED_BIND [ 195.515724][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 195.515753][ T9929] Call Trace: [ 195.515765][ T9929] [ 195.515779][ T9929] __dump_stack+0x1d/0x30 [ 195.515813][ T9929] dump_stack_lvl+0x95/0xd0 [ 195.515842][ T9929] dump_stack+0x15/0x1b [ 195.515885][ T9929] should_fail_ex+0x262/0x280 [ 195.515917][ T9929] ? do_getname+0x2e/0x1c0 [ 195.515939][ T9929] should_failslab+0x8c/0xb0 [ 195.516072][ T9929] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 195.516179][ T9929] ? do_getname+0x2e/0x1c0 [ 195.516203][ T9929] do_getname+0x2e/0x1c0 [ 195.516232][ T9929] __se_sys_unlinkat+0x4c/0x140 [ 195.516329][ T9929] __x64_sys_unlinkat+0x43/0x50 [ 195.516376][ T9929] x64_sys_call+0x21a3/0x2550 [ 195.516416][ T9929] do_syscall_64+0x112/0x360 [ 195.516488][ T9929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.516519][ T9929] RIP: 0033:0x7fe298aff559 [ 195.516542][ T9929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.516564][ T9929] RSP: 002b:00007fe29754f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 195.516626][ T9929] RAX: ffffffffffffffda RBX: 00007fe298d85fa0 RCX: 00007fe298aff559 [ 195.516649][ T9929] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000003 [ 195.516667][ T9929] RBP: 00007fe298b96b20 R08: 0000000000000000 R09: 0000000000000000 [ 195.516740][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.516762][ T9929] R13: 00007fe298d86038 R14: 00007fe298d85fa0 R15: 00007ffef028df48 [ 195.516793][ T9929] [ 195.739556][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 195.741232][ T3398] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.901207][ T9946] ip6erspan0: entered allmulticast mode [ 195.981625][ T9950] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.981648][ T9950] block device autoloading is deprecated and will be removed. [ 196.014975][ T9950] md: md7 stopped. [ 196.083102][ T9954] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 196.083131][ T9954] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 196.083162][ T9954] vhci_hcd vhci_hcd.4: default hub control req: 0017 v0014 i0003 l0 [ 196.140031][ T424] IPVS: starting estimator thread 0... [ 196.219736][ T9963] bond0: unable to remove nonexistent ARP target 192.0.2.1 [ 196.219908][ T9963] bond0: option arp_ip_target: invalid value (-192.0.2.1) [ 196.220294][ T9961] ip_tables: iptables: counters copy to user failed while replacing table [ 196.226548][ T9959] IPVS: using max 2064 ests per chain, 103200 per kthread [ 196.377193][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2389'. [ 196.434982][ T9971] loop3: detected capacity change from 0 to 1024 [ 196.435897][ T9971] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.435936][ T9971] EXT4-fs: Ignoring removed oldalloc option [ 196.471641][ T9965] loop7: detected capacity change from 0 to 512 [ 196.472006][ T9970] FAULT_INJECTION: forcing a failure. [ 196.472006][ T9970] name failslab, interval 1, probability 0, space 0, times 0 [ 196.472040][ T9970] CPU: 0 UID: 0 PID: 9970 Comm: syz.8.2392 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 196.472187][ T9970] Tainted: [Y]=FORCED_BIND [ 196.472201][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 196.472222][ T9970] Call Trace: [ 196.472235][ T9970] [ 196.472255][ T9970] __dump_stack+0x1d/0x30 [ 196.472357][ T9970] dump_stack_lvl+0x95/0xd0 [ 196.472391][ T9970] dump_stack+0x15/0x1b [ 196.472423][ T9970] should_fail_ex+0x262/0x280 [ 196.472459][ T9970] ? posix_clock_open+0x7f/0x150 [ 196.472569][ T9970] should_failslab+0x8c/0xb0 [ 196.472744][ T9970] __kmalloc_cache_noprof+0x5d/0x3e0 [ 196.472783][ T9970] ? avc_has_perm+0x101/0x190 [ 196.472856][ T9970] ? posix_clock_open+0x7f/0x150 [ 196.472917][ T9970] ? pv_queued_spin_unlock_traced+0x2d/0xb0 [ 196.473047][ T9970] posix_clock_open+0x7f/0x150 [ 196.473086][ T9970] chrdev_open+0x2eb/0x3a0 [ 196.473137][ T9970] do_dentry_open+0x496/0xa40 [ 196.473168][ T9970] ? __pfx_chrdev_open+0x10/0x10 [ 196.473291][ T9970] vfs_open_consume+0x46/0x1f0 [ 196.473316][ T9970] path_openat+0xc16/0x11c0 [ 196.473361][ T9970] do_file_open+0x16c/0x290 [ 196.473415][ T9970] do_sys_openat2+0xa1/0x140 [ 196.473494][ T9970] __x64_sys_openat+0xf2/0x120 [ 196.473531][ T9970] x64_sys_call+0x1f72/0x2550 [ 196.473562][ T9970] do_syscall_64+0x112/0x360 [ 196.473603][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.473703][ T9970] RIP: 0033:0x7fed0e26f559 [ 196.473723][ T9970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.473749][ T9970] RSP: 002b:00007fed0ccc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.473785][ T9970] RAX: ffffffffffffffda RBX: 00007fed0e4f5fa0 RCX: 00007fed0e26f559 [ 196.473872][ T9970] RDX: 0000000000109001 RSI: 0000200000001780 RDI: ffffffffffffff9c [ 196.473894][ T9970] RBP: 00007fed0e306b20 R08: 0000000000000000 R09: 0000000000000000 [ 196.473916][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.473937][ T9970] R13: 00007fed0e4f6038 R14: 00007fed0e4f5fa0 R15: 00007ffebbde9688 [ 196.473983][ T9970] [ 196.500226][ T9965] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 196.523764][ T9971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.524049][ T9971] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.689900][ T9965] EXT4-fs (loop7): 1 orphan inode deleted [ 196.702418][ T9965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.712198][ T9965] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.719668][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 196.719683][ T29] audit: type=1400 audit(1793071944.226:1226): avc: denied { write } for pid=9969 comm="syz.3.2391" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.720265][ T53] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 196.720392][ T53] EXT4-fs error (device loop7): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 1 [ 196.721611][ T9973] FAULT_INJECTION: forcing a failure. [ 196.721611][ T9973] name failslab, interval 1, probability 0, space 0, times 0 [ 196.721717][ T9973] CPU: 0 UID: 0 PID: 9973 Comm: syz.2.2393 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 196.721822][ T9973] Tainted: [Y]=FORCED_BIND [ 196.721874][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 196.721926][ T9973] Call Trace: [ 196.721958][ T9973] [ 196.722009][ T9973] __dump_stack+0x1d/0x30 [ 196.722095][ T9973] dump_stack_lvl+0x95/0xd0 [ 196.722210][ T9973] dump_stack+0x15/0x1b [ 196.722293][ T9973] should_fail_ex+0x262/0x280 [ 196.722403][ T9973] ? do_getname+0x2e/0x1c0 [ 196.722492][ T9973] should_failslab+0x8c/0xb0 [ 196.722600][ T9973] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 196.722705][ T9973] ? do_getname+0x2e/0x1c0 [ 196.722788][ T9973] do_getname+0x2e/0x1c0 [ 196.722873][ T9973] __se_sys_unlinkat+0x4c/0x140 [ 196.722992][ T9973] __x64_sys_unlinkat+0x43/0x50 [ 196.723196][ T9973] x64_sys_call+0x21a3/0x2550 [ 196.723292][ T9973] do_syscall_64+0x112/0x360 [ 196.723408][ T9973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.723494][ T9973] RIP: 0033:0x7f5c6dc9f559 [ 196.723641][ T9973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.723715][ T9973] RSP: 002b:00007f5c6c6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 196.723816][ T9973] RAX: ffffffffffffffda RBX: 00007f5c6df25fa0 RCX: 00007f5c6dc9f559 [ 196.723878][ T9973] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000003 [ 196.723941][ T9973] RBP: 00007f5c6dd36b20 R08: 0000000000000000 R09: 0000000000000000 [ 196.723994][ T9973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.724047][ T9973] R13: 00007f5c6df26038 R14: 00007f5c6df25fa0 R15: 00007ffc71b7c178 [ 196.724128][ T9973] [ 197.025248][ T9971] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #15: block 3: comm syz.3.2391: lblock 3 mapped to illegal pblock 3 (length 3) [ 197.042464][ T9971] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 197.042611][ T9971] EXT4-fs (loop3): This should not happen!! Data will be lost [ 197.042611][ T9971] [ 197.077044][ T9979] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #15: block 7: comm syz.3.2391: lblock 7 mapped to illegal pblock 7 (length 9) [ 197.081291][ T9979] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 197.081331][ T9979] EXT4-fs (loop3): This should not happen!! Data will be lost [ 197.081331][ T9979] [ 197.170596][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 197.190498][ T8653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.330816][ T9995] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.330839][ T9995] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 197.330866][ T9995] vhci_hcd vhci_hcd.4: default hub control req: 0017 v0014 i0003 l0 [ 197.440281][T10001] ip_tables: iptables: counters copy to user failed while replacing table [ 197.472023][T10007] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.591158][ T29] audit: type=1400 audit(1793071945.096:1227): avc: denied { create } for pid=10015 comm="syz.3.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 197.593590][ T29] audit: type=1400 audit(1793071945.096:1228): avc: denied { ioctl } for pid=10015 comm="syz.3.2406" path="socket:[25803]" dev="sockfs" ino=25803 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 197.593735][ T29] audit: type=1400 audit(1793071945.096:1229): avc: denied { setopt } for pid=10015 comm="syz.3.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 197.594294][ T29] audit: type=1400 audit(1793071945.096:1230): avc: denied { write } for pid=10015 comm="syz.3.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 197.751437][T10026] sit0: entered promiscuous mode [ 197.751534][T10026] netlink: 'syz.3.2422': attribute type 1 has an invalid length. [ 197.751662][T10026] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2422'. [ 197.813842][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2410'. [ 198.094924][T10048] loop1: detected capacity change from 0 to 1024 [ 198.095603][T10048] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.095638][T10048] EXT4-fs: Ignoring removed oldalloc option [ 198.133402][T10048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.133544][T10048] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.159979][T10040] loop2: detected capacity change from 0 to 8192 [ 198.190729][T10040] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.226925][ T29] audit: type=1400 audit(1793071945.736:1231): avc: denied { write } for pid=10047 comm="syz.1.2423" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.262559][T10048] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 3: comm syz.1.2423: lblock 3 mapped to illegal pblock 3 (length 3) [ 198.281869][T10048] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 198.281954][T10048] EXT4-fs (loop1): This should not happen!! Data will be lost [ 198.281954][T10048] [ 198.313410][T10054] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 7: comm syz.1.2423: lblock 7 mapped to illegal pblock 7 (length 9) [ 198.315830][T10054] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 198.315995][T10054] EXT4-fs (loop1): This should not happen!! Data will be lost [ 198.315995][T10054] [ 198.506236][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.566213][T10063] tap0: tun_chr_ioctl cmd 1074025676 [ 198.566236][T10063] tap0: owner set to 0 [ 198.685432][T10066] loop7: detected capacity change from 0 to 512 [ 198.685976][T10066] msdos: Unknown parameter 'ÿÿÿÿ' [ 198.686936][T10064] loop1: detected capacity change from 0 to 1024 [ 198.687589][T10064] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.693358][T10064] EXT4-fs: Ignoring removed oldalloc option [ 198.745930][T10064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.749765][T10064] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.814328][ T29] audit: type=1400 audit(1793071946.316:1232): avc: denied { write } for pid=10062 comm="syz.1.2438" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.884494][T10064] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 3: comm syz.1.2438: lblock 3 mapped to illegal pblock 3 (length 3) [ 198.889349][T10064] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 198.889458][T10064] EXT4-fs (loop1): This should not happen!! Data will be lost [ 198.889458][T10064] [ 198.896716][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'. [ 198.964093][T10064] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 7: comm syz.1.2438: lblock 7 mapped to illegal pblock 7 (length 9) [ 198.968284][T10064] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 198.968377][T10064] EXT4-fs (loop1): This should not happen!! Data will be lost [ 198.968377][T10064] [ 199.052902][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.178082][T10081] FAULT_INJECTION: forcing a failure. [ 199.178082][T10081] name failslab, interval 1, probability 0, space 0, times 0 [ 199.178120][T10081] CPU: 0 UID: 0 PID: 10081 Comm: syz.1.2433 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 199.178240][T10081] Tainted: [Y]=FORCED_BIND [ 199.178251][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 199.178268][T10081] Call Trace: [ 199.178278][T10081] [ 199.178289][T10081] __dump_stack+0x1d/0x30 [ 199.178326][T10081] dump_stack_lvl+0x95/0xd0 [ 199.178417][T10081] dump_stack+0x15/0x1b [ 199.178446][T10081] should_fail_ex+0x262/0x280 [ 199.178522][T10081] ? do_getname+0x2e/0x1c0 [ 199.178544][T10081] should_failslab+0x8c/0xb0 [ 199.178649][T10081] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 199.178710][T10081] ? do_getname+0x2e/0x1c0 [ 199.178740][T10081] do_getname+0x2e/0x1c0 [ 199.178763][T10081] __se_sys_unlinkat+0x4c/0x140 [ 199.178819][T10081] __x64_sys_unlinkat+0x43/0x50 [ 199.178866][T10081] x64_sys_call+0x21a3/0x2550 [ 199.178929][T10081] do_syscall_64+0x112/0x360 [ 199.179023][T10081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.179090][T10081] RIP: 0033:0x7f653c24f559 [ 199.179115][T10081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.179145][T10081] RSP: 002b:00007f653aca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 199.179180][T10081] RAX: ffffffffffffffda RBX: 00007f653c4d5fa0 RCX: 00007f653c24f559 [ 199.179244][T10081] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000003 [ 199.179260][T10081] RBP: 00007f653c2e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 199.179282][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.179303][T10081] R13: 00007f653c4d6038 R14: 00007f653c4d5fa0 R15: 00007fffef1dedd8 [ 199.179331][T10081] [ 199.606849][ T4169] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 199.616630][ T4169] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.665858][T10096] loop8: detected capacity change from 0 to 512 [ 199.672171][T10096] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 199.707227][T10096] EXT4-fs (loop8): 1 orphan inode deleted [ 199.709718][T10096] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.710158][T10096] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.740247][ T424] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 199.740330][ T424] EXT4-fs error (device loop8): ext4_release_dquot:7156: comm kworker/u8:6: Failed to release dquot type 1 [ 199.803070][T10101] fido_id[10101]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 199.837113][T10106] FAULT_INJECTION: forcing a failure. [ 199.837113][T10106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.837208][T10106] CPU: 1 UID: 0 PID: 10106 Comm: syz.3.2445 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 199.837327][T10106] Tainted: [Y]=FORCED_BIND [ 199.837340][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 199.837359][T10106] Call Trace: [ 199.837367][T10106] [ 199.837378][T10106] __dump_stack+0x1d/0x30 [ 199.837511][T10106] dump_stack_lvl+0x95/0xd0 [ 199.837600][T10106] dump_stack+0x15/0x1b [ 199.837705][T10106] should_fail_ex+0x262/0x280 [ 199.837739][T10106] should_fail+0xb/0x20 [ 199.837845][T10106] should_fail_usercopy+0x1a/0x20 [ 199.837927][T10106] _copy_to_user+0x20/0xa0 [ 199.837962][T10106] put_timespec64+0x70/0xc0 [ 199.837995][T10106] poll_select_finish+0x34f/0x470 [ 199.838093][T10106] __se_sys_pselect6+0x253/0x2a0 [ 199.838136][T10106] __x64_sys_pselect6+0x78/0x90 [ 199.838230][T10106] x64_sys_call+0x1dfc/0x2550 [ 199.838263][T10106] do_syscall_64+0x112/0x360 [ 199.838345][T10106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.838393][T10106] RIP: 0033:0x7fc0a192f559 [ 199.838414][T10106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.838440][T10106] RSP: 002b:00007fc0a037f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 199.838474][T10106] RAX: ffffffffffffffda RBX: 00007fc0a1bb5fa0 RCX: 00007fc0a192f559 [ 199.838500][T10106] RDX: 00002000000003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.838543][T10106] RBP: 00007fc0a19c6b20 R08: 0000200000000440 R09: 0000200000000480 [ 199.838566][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.838587][T10106] R13: 00007fc0a1bb6038 R14: 00007fc0a1bb5fa0 R15: 00007ffce1889868 [ 199.838619][T10106] [ 200.070727][ T8773] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.140560][T10116] loop3: detected capacity change from 0 to 512 [ 200.141318][T10116] EXT4-fs: Ignoring removed bh option [ 200.172471][T10116] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 200.196135][T10116] EXT4-fs (loop3): 1 truncate cleaned up [ 200.196972][T10116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.310682][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.414544][ T29] audit: type=1326 audit(1793071947.916:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10134 comm="syz.2.2456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c6dc9f559 code=0x0 [ 200.543513][T10147] loop3: detected capacity change from 0 to 512 [ 200.560485][T10147] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 200.604207][T10147] EXT4-fs (loop3): 1 orphan inode deleted [ 200.609550][T10147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.612492][T10147] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.631619][ T53] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 1 [ 200.711402][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.362677][T10176] loop8: detected capacity change from 0 to 256 [ 201.427264][T10176] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 201.427301][T10176] FAT-fs (loop8): Filesystem has been set read-only [ 201.427373][T10176] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 201.427409][T10176] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 201.448301][T10176] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 201.456116][T10177] EXT4-fs: Ignoring removed bh option [ 201.457685][T10176] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 201.457888][T10176] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 201.457952][T10176] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 201.458158][T10176] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 201.458407][T10176] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 201.458718][T10176] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 201.503864][T10177] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 201.517509][T10177] EXT4-fs (loop1): 1 truncate cleaned up [ 201.524527][T10177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.730095][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.101283][T10202] xt_hashlimit: size too large, truncated to 1048576 [ 202.139087][T10204] FAULT_INJECTION: forcing a failure. [ 202.139087][T10204] name failslab, interval 1, probability 0, space 0, times 0 [ 202.139186][T10204] CPU: 0 UID: 0 PID: 10204 Comm: syz.1.2481 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 202.139228][T10204] Tainted: [Y]=FORCED_BIND [ 202.139254][T10204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 202.139276][T10204] Call Trace: [ 202.139288][T10204] [ 202.139301][T10204] __dump_stack+0x1d/0x30 [ 202.139393][T10204] dump_stack_lvl+0x95/0xd0 [ 202.139422][T10204] dump_stack+0x15/0x1b [ 202.139447][T10204] should_fail_ex+0x262/0x280 [ 202.139482][T10204] ? alloc_vfsmnt+0x2f/0x380 [ 202.139588][T10204] should_failslab+0x8c/0xb0 [ 202.139637][T10204] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 202.139669][T10204] ? alloc_vfsmnt+0x190/0x380 [ 202.139772][T10204] ? alloc_vfsmnt+0x2f/0x380 [ 202.139804][T10204] ? pv_queued_spin_unlock_traced+0x2d/0xb0 [ 202.139907][T10204] alloc_vfsmnt+0x2f/0x380 [ 202.139939][T10204] clone_mnt+0x30/0x610 [ 202.139980][T10204] copy_tree+0x2d5/0x8a0 [ 202.140116][T10204] copy_mnt_ns+0x1d8/0x720 [ 202.140215][T10204] create_new_namespaces+0x7f/0x420 [ 202.140249][T10204] unshare_nsproxy_namespaces+0x115/0x150 [ 202.140313][T10204] ksys_unshare+0x3a3/0x690 [ 202.140360][T10204] __x64_sys_unshare+0x1f/0x30 [ 202.140446][T10204] x64_sys_call+0x1e33/0x2550 [ 202.140525][T10204] do_syscall_64+0x112/0x360 [ 202.140567][T10204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.140593][T10204] RIP: 0033:0x7f653c24f559 [ 202.140616][T10204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.140710][T10204] RSP: 002b:00007f653aca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 202.140742][T10204] RAX: ffffffffffffffda RBX: 00007f653c4d5fa0 RCX: 00007f653c24f559 [ 202.140761][T10204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 202.140782][T10204] RBP: 00007f653c2e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 202.140853][T10204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.140869][T10204] R13: 00007f653c4d6038 R14: 00007f653c4d5fa0 R15: 00007fffef1dedd8 [ 202.140896][T10204] [ 202.499234][T10207] set_capacity_and_notify: 1 callbacks suppressed [ 202.499367][T10207] loop2: detected capacity change from 0 to 512 [ 202.587380][T10207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.587568][T10207] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.641970][T10210] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 202.680284][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 202.680308][ T29] audit: type=1400 audit(1793071950.186:1235): avc: denied { write } for pid=10206 comm="syz.2.2482" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.791015][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.839657][T10221] loop7: detected capacity change from 0 to 512 [ 202.840218][T10221] EXT4-fs: Ignoring removed bh option [ 202.865461][T10221] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 202.871306][T10221] EXT4-fs (loop7): 1 truncate cleaned up [ 202.892065][T10221] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.079057][ T8653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.417479][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.417746][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.478967][T10255] loop1: detected capacity change from 0 to 512 [ 203.482982][T10255] EXT4-fs: Ignoring removed oldalloc option [ 203.483052][T10255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.486484][T10255] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 203.486505][T10255] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 203.564577][T10255] EXT4-fs (loop1): mount failed [ 203.575964][T10257] loop8: detected capacity change from 0 to 2048 [ 203.615028][T10257] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.718040][ T29] audit: type=1400 audit(1793071951.186:1236): avc: denied { write } for pid=10256 comm="syz.8.2501" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.233550][ T8773] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.301878][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 204.415194][T10270] loop1: detected capacity change from 0 to 256 [ 204.462010][T10270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.462061][T10270] FAT-fs (loop1): Filesystem has been set read-only [ 204.462126][T10270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.462236][T10270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.463771][T10270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.463810][T10270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.463905][T10270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.463941][T10270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.464050][T10270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.464130][T10270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.464230][T10270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.706156][ T29] audit: type=1326 audit(1793071958.224:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.8.2507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed0e26f559 code=0x0 [ 204.916221][T10278] netlink: 'syz.7.2509': attribute type 10 has an invalid length. [ 204.920171][T10278] batman_adv: batadv0: Adding interface: netdevsim2 [ 204.920193][T10278] batman_adv: batadv0: The MTU of interface netdevsim2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.920238][T10278] batman_adv: batadv0: Interface activated: netdevsim2 [ 205.272404][T10289] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 205.283250][ T3398] team_slave_0: entered promiscuous mode [ 205.283283][ T3398] team_slave_1: entered promiscuous mode [ 205.283424][ T3398] dummy0: entered promiscuous mode [ 205.425999][T10294] batman_adv: batadv0: Adding interface: syz_tun [ 205.426019][T10294] batman_adv: batadv0: The MTU of interface syz_tun is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.426051][T10294] batman_adv: batadv0: Interface activated: syz_tun [ 205.523663][T10264] kexec: Could not allocate control_code_buffer [ 205.550600][T10297] loop7: detected capacity change from 0 to 256 [ 205.727301][T10297] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 205.727337][T10297] FAT-fs (loop7): Filesystem has been set read-only [ 205.727517][T10297] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 205.727545][T10297] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 205.730590][T10297] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 205.730635][T10297] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 205.730746][T10297] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 205.730822][T10297] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 205.730890][T10297] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 205.730941][T10297] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 205.731099][T10297] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 205.930174][T10316] loop3: detected capacity change from 0 to 256 [ 205.955442][T10317] loop8: detected capacity change from 0 to 512 [ 205.966408][T10317] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.989358][T10317] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 205.989457][T10317] System zones: 0-2, 18-18, 34-34 [ 205.989810][T10317] EXT4-fs (loop8): orphan cleanup on readonly fs [ 206.021351][T10317] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.2524: bg 0: block 248: padding at end of block bitmap is not set [ 206.021397][T10317] loop8: lost filesystem error report for type 5 error -117 [ 206.022852][T10316] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 206.022877][T10316] FAT-fs (loop3): Filesystem has been set read-only [ 206.023078][T10316] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 206.023106][T10316] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 206.023950][T10317] Quota error (device loop8): write_blk: dquota write failed [ 206.023986][T10317] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 206.024030][T10317] EXT4-fs error (device loop8): ext4_acquire_dquot:7120: comm syz.8.2524: Failed to acquire dquot type 1 [ 206.024054][T10317] loop8: lost filesystem error report for type 5 error -117 [ 206.045498][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 206.045561][ C0] EXT4-fs (loop8): last error at time 1793071959: ext4_acquire_dquot:7120 [ 206.127599][T10317] EXT4-fs (loop8): 1 truncate cleaned up [ 206.145628][T10317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.201867][ T8773] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.202238][T10318] loop1: detected capacity change from 0 to 1024 [ 206.225409][T10318] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 206.273865][T10318] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 2: comm syz.1.2525: lblock 2 mapped to illegal pblock 2 (length 1) [ 206.273938][T10318] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 206.274756][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 206.274785][ C1] EXT4-fs (loop1): initial error at time 1793071959: ext4_map_blocks:867: inode 3: block 2 [ 206.274840][ C1] EXT4-fs (loop1): last error at time 1793071959: ext4_map_blocks:867: inode 3: block 2 [ 206.328999][T10318] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 206.329246][T10318] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz.1.2525: Invalid inode table block 1 in block_group 0 [ 206.329315][T10318] loop1: lost filesystem error report for type 5 error -117 [ 206.357062][T10318] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7453: Corrupt filesystem [ 206.357089][T10318] loop1: lost filesystem error report for type 5 error -117 [ 206.359486][T10318] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.2525: mark_inode_dirty error [ 206.359525][T10318] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 206.361560][T10328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 206.363675][T10318] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 206.363698][T10318] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.2525: Failed to acquire dquot type 0 [ 206.363783][T10318] loop1: lost filesystem error report for type 5 error -117 [ 206.381098][T10318] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7453: Corrupt filesystem [ 206.381176][T10318] loop1: lost filesystem error report for type 5 error -117 [ 206.383709][T10318] EXT4-fs error (device loop1): ext4_evict_inode:336: inode #11: comm syz.1.2525: mark_inode_dirty error [ 206.383809][T10318] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.392603][T10318] EXT4-fs warning (device loop1): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 206.392770][T10318] EXT4-fs (loop1): 1 orphan inode deleted [ 206.397760][ T6626] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 206.397941][ T6626] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 206.401165][T10318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.403044][ T6626] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 206.403132][ T6626] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:12: Failed to release dquot type 0 [ 206.403157][ T6626] loop1: lost filesystem error report for type 5 error -117 [ 206.430634][ T4169] team_slave_0: entered promiscuous mode [ 206.430742][ T4169] team_slave_1: entered promiscuous mode [ 206.690588][T10334] vlan1: Caught tx_queue_len zero misconfig [ 206.692557][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2531'. [ 206.737709][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.738878][ T3293] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 206.738946][ T3293] loop1: lost filesystem error report for type 5 error -117 [ 206.739141][ T3293] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7453: Corrupt filesystem [ 206.739167][ T3293] loop1: lost filesystem error report for type 5 error -117 [ 206.739391][ T3293] EXT4-fs error (device loop1): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 206.739440][ T3293] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 206.739678][ T3293] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 206.739780][ T3293] loop1: lost filesystem error report for type 5 error -117 [ 206.956199][ T29] audit: type=1326 audit(1793071966.471:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.7.2537" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe298aff559 code=0x0 [ 207.223079][T10362] loop2: detected capacity change from 0 to 512 [ 207.239671][T10362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.248943][T10362] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 207.249086][T10362] System zones: 0-2, 18-18, 34-34 [ 207.257902][T10362] EXT4-fs (loop2): orphan cleanup on readonly fs [ 207.278303][T10362] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.2543: bg 0: block 248: padding at end of block bitmap is not set [ 207.279884][T10362] Quota error (device loop2): write_blk: dquota write failed [ 207.279925][T10362] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.2543: Failed to acquire dquot type 1 [ 207.284110][T10362] EXT4-fs (loop2): 1 truncate cleaned up [ 207.298805][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 207.298834][ C1] EXT4-fs (loop2): last error at time 1793071966: ext4_acquire_dquot:7120 [ 207.342706][T10362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.407406][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.447582][T10369] raw_sendmsg: syz.8.2557 forgot to set AF_INET. Fix it! [ 207.447917][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.448123][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.489043][T10370] EXT4-fs: Ignoring removed oldalloc option [ 207.489161][T10370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.489712][T10370] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 207.489727][T10370] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 207.496519][T10370] EXT4-fs (loop2): mount failed [ 208.129048][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 208.129069][ T29] audit: type=1400 audit(1793071967.641:1239): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 208.209752][T10376] ip_tables: iptables: counters copy to user failed while replacing table [ 208.259450][T10386] xt_hashlimit: size too large, truncated to 1048576 [ 208.552257][ T6628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.633995][ T6628] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.709094][T10397] set_capacity_and_notify: 1 callbacks suppressed [ 208.709163][T10397] loop7: detected capacity change from 0 to 2048 [ 208.733659][ T6628] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.773577][T10397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.792596][ T29] audit: type=1400 audit(1793071968.301:1240): avc: denied { write } for pid=10396 comm="syz.7.2562" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.861730][ T6628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.871324][ T8653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.888310][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'. [ 208.892860][T10408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.893140][T10408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.029294][T10408] loop3: detected capacity change from 0 to 512 [ 209.030124][T10408] EXT4-fs: Ignoring removed oldalloc option [ 209.040163][T10408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.044298][T10408] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 209.044339][T10408] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 209.087964][T10408] EXT4-fs (loop3): mount failed [ 209.212705][ T6628] vlan2: left promiscuous mode [ 209.212731][ T6628] bond0: left promiscuous mode [ 209.212751][ T6628] bond_slave_0: left promiscuous mode [ 209.212905][ T6628] bond_slave_1: left promiscuous mode [ 209.213574][ T6628] bridge0: port 3(vlan2) entered disabled state [ 209.266429][ T6628] bridge_slave_1: left allmulticast mode [ 209.266460][ T6628] bridge_slave_1: left promiscuous mode [ 209.266746][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.316236][ T6628] bridge_slave_0: left allmulticast mode [ 209.316266][ T6628] bridge_slave_0: left promiscuous mode [ 209.316461][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.360036][ T6628] veth0: left allmulticast mode [ 209.658230][ T6628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.661203][ T6628] bond_slave_0: left allmulticast mode [ 209.681278][ T6628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.684332][ T6628] bond_slave_1: left allmulticast mode [ 209.698192][ T6628] bond0 (unregistering): Released all slaves [ 209.707110][ T6628] bond1 (unregistering): Released all slaves [ 209.721537][ T6628] bond2 (unregistering): Released all slaves [ 209.754805][T10422] batman_adv: batadv0: Adding interface: syz_tun [ 209.754872][T10422] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.754978][T10422] batman_adv: batadv0: Interface activated: syz_tun [ 209.815900][ T29] audit: type=1400 audit(1793071969.331:1241): avc: denied { write } for pid=10419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.842325][ T6628] tipc: Disabling bearer [ 209.842470][ T6628] tipc: Left network mode [ 209.904293][ T6628] IPVS: stopping backup sync thread 9811 ... [ 210.060943][ T29] audit: type=1400 audit(1793071969.571:1242): avc: denied { write } for pid=10439 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.173823][ T6628] hsr_slave_0: left promiscuous mode [ 210.182065][ T6628] hsr_slave_1: left promiscuous mode [ 210.189475][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.189536][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.198265][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.198385][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.279539][ T6628] veth1_macvtap: left promiscuous mode [ 210.279584][ T6628] veth0_macvtap: left promiscuous mode [ 210.279720][ T6628] veth1_vlan: left promiscuous mode [ 210.279765][ T6628] veth0_vlan: left promiscuous mode [ 210.409013][T10407] kexec: Could not allocate control_code_buffer [ 210.512922][ T6628] team0 (unregistering): Port device team_slave_1 removed [ 210.527824][ T6628] team0 (unregistering): Port device team_slave_0 removed [ 210.588039][ T3017] 8021q: adding VLAN 0 to HW filter on device eth13 [ 210.588372][T10398] rxe_eth0 speed is unknown, defaulting to 1000 [ 210.762846][ T6628] IPVS: stop unused estimator thread 0... [ 210.852760][ T29] audit: type=1400 audit(1793071970.361:1243): avc: denied { write } for pid=10443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.929991][ T29] audit: type=1400 audit(1793071970.441:1244): avc: denied { write } for pid=10457 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.968118][T10398] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.968172][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.968746][T10398] bridge_slave_0: entered allmulticast mode [ 210.970642][T10398] bridge_slave_0: entered promiscuous mode [ 210.976957][T10398] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.977086][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.978118][T10398] bridge_slave_1: entered allmulticast mode [ 210.981238][T10398] bridge_slave_1: entered promiscuous mode [ 211.031776][T10398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.048457][T10398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.074874][ T3017] 8021q: adding VLAN 0 to HW filter on device eth14 [ 211.079411][T10398] team0: Port device team_slave_0 added [ 211.083583][T10398] team0: Port device team_slave_1 added [ 211.116003][T10398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.116098][T10398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.116196][T10398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.118088][T10398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.118102][T10398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.118216][T10398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.195290][T10398] hsr_slave_0: entered promiscuous mode [ 211.199753][T10398] hsr_slave_1: entered promiscuous mode [ 211.377520][T10398] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 211.381905][T10398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.382918][T10398] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 211.408773][T10398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.409827][T10398] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 211.414573][T10398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.437510][T10398] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 211.442088][T10398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.479299][ T29] audit: type=1400 audit(1793071970.991:1245): avc: denied { write } for pid=10464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.481694][T10398] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.481825][T10398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.482075][T10398] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.482183][T10398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.560562][ T29] audit: type=1400 audit(1793071971.071:1246): avc: denied { write } for pid=10481 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.616248][ T3017] 8021q: adding VLAN 0 to HW filter on device eth15 [ 211.642680][T10398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.667969][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.669104][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.691061][T10398] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.707900][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.707952][ T6626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.737189][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.737246][ T6626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.927081][ T29] audit: type=1400 audit(1793071971.441:1247): avc: denied { write } for pid=10484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.999238][ T29] audit: type=1400 audit(1793071971.511:1248): avc: denied { write } for pid=10501 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.058029][ T3017] 8021q: adding VLAN 0 to HW filter on device eth16 [ 212.114538][T10398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.385128][T10398] veth0_vlan: entered promiscuous mode [ 212.392879][T10398] veth1_vlan: entered promiscuous mode [ 212.432828][T10398] veth0_macvtap: entered promiscuous mode [ 212.441241][T10398] veth1_macvtap: entered promiscuous mode [ 212.463235][T10398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.479627][T10398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.525438][ T6628] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.525572][ T6628] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.525629][ T6628] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.525700][ T6628] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.519476][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2585'. [ 213.744113][ T5164] ================================================================== [ 213.744153][ T5164] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 213.744205][ T5164] [ 213.744214][ T5164] read to 0xffff88810351c688 of 2 bytes by interrupt on cpu 0: [ 213.744235][ T5164] virtqueue_disable_cb+0x4c/0x2c0 [ 213.744270][ T5164] skb_xmit_done+0x67/0x1a0 [ 213.744298][ T5164] vring_interrupt+0x2d7/0x310 [ 213.744336][ T5164] __handle_irq_event_percpu+0x8b/0x480 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 213.744372][ T5164] handle_irq_event+0x64/0xf0 [ 213.744406][ T5164] handle_edge_irq+0x155/0x440 [ 213.744434][ T5164] __common_interrupt+0x60/0xb0 [ 213.744466][ T5164] common_interrupt+0x3e/0x90 [ 213.744506][ T5164] asm_common_interrupt+0x26/0x40 [ 213.744536][ T5164] __sanitizer_cov_trace_pc+0x40/0x80 [ 213.744559][ T5164] ring_buffer_event_data+0x12/0xa0 [ 213.744584][ T5164] trace_event_buffer_reserve+0x153/0x180 [ 213.744613][ T5164] trace_event_raw_event_softirq+0x75/0xd0 [ 213.744647][ T5164] handle_softirqs+0x1cc/0x310 [ 213.744682][ T5164] do_softirq+0x46/0x60 [ 213.744713][ T5164] __local_bh_enable_ip+0x79/0x80 [ 213.744747][ T5164] napi_threaded_poll_loop+0x58a/0x6c0 [ 213.744775][ T5164] napi_threaded_poll+0x193/0x240 [ 213.744796][ T5164] kthread+0x223/0x270 [ 213.744829][ T5164] ret_from_fork+0x146/0x330 [ 213.744863][ T5164] ret_from_fork_asm+0x1a/0x30 [ 213.744892][ T5164] [ 213.744900][ T5164] write to 0xffff88810351c688 of 2 bytes by task 5164 on cpu 1: [ 213.744921][ T5164] virtqueue_disable_cb+0x75/0x2c0 [ 213.744952][ T5164] virtnet_poll_tx+0x164/0xcc0 [ 213.744990][ T5164] __napi_poll+0x61/0x300 [ 213.745009][ T5164] napi_threaded_poll_loop+0x1e9/0x6c0 [ 213.745031][ T5164] napi_threaded_poll+0x193/0x240 [ 213.745053][ T5164] kthread+0x223/0x270 [ 213.745082][ T5164] ret_from_fork+0x146/0x330 [ 213.745117][ T5164] ret_from_fork_asm+0x1a/0x30 [ 213.745147][ T5164] [ 213.745154][ T5164] value changed: 0x0000 -> 0x0001 [ 213.745167][ T5164] [ 213.745174][ T5164] Reported by Kernel Concurrency Sanitizer on: [ 213.745192][ T5164] CPU: 1 UID: 0 PID: 5164 Comm: napi/eth0-0 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 213.745229][ T5164] Tainted: [Y]=FORCED_BIND [ 213.745239][ T5164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 213.745266][ T5164] ================================================================== [ 213.934077][T10551] ip_tables: iptables: counters copy to user failed while replacing table [ 213.975727][T10551] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.113193][ T3298] batman_adv: batadv0: Interface deactivated: syz_tun [ 214.185417][ T3298] batman_adv: batadv0: Removing interface: syz_tun [ 214.462694][T10555] batman_adv: batadv0: Interface deactivated: syz_tun [ 214.538175][T10555] batman_adv: batadv0: Removing interface: syz_tun [ 214.568791][T10560] batman_adv: batadv0: Interface deactivated: syz_tun [ 214.582614][T10545] kexec: Could not allocate control_code_buffer [ 214.600787][T10560] batman_adv: batadv0: Removing interface: syz_tun [ 214.645303][ T6626] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.711584][ T6626] batman_adv: batadv0: Interface deactivated: netdevsim2 [ 214.723845][ T6626] batman_adv: batadv0: Removing interface: netdevsim2 [ 214.729361][ T6626] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.820931][ T6626] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.881244][ T6626] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.977358][ T6626] vlan2: left promiscuous mode [ 214.977381][ T6626] bond0: left promiscuous mode [ 214.977460][ T6626] bond_slave_0: left promiscuous mode [ 214.977571][ T6626] bond_slave_1: left promiscuous mode [ 214.978071][ T6626] bridge0: port 3(vlan2) entered disabled state [ 215.007224][ T6626] bridge_slave_1: left allmulticast mode [ 215.007334][ T6626] bridge_slave_1: left promiscuous mode [ 215.007658][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.043595][ T6626] bridge_slave_0: left allmulticast mode [ 215.043675][ T6626] bridge_slave_0: left promiscuous mode [ 215.043813][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.191164][ T6626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.192676][ T6626] bond_slave_0: left allmulticast mode [ 215.213223][ T6626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.226825][ T6626] bond_slave_1: left allmulticast mode [ 215.229277][ T6626] bond0 (unregistering): Released all slaves [ 215.326327][ T6626] IPVS: stopping backup sync thread 9776 ... [ 215.456002][ T29] audit: type=1400 audit(1793071974.971:1249): avc: denied { write } for pid=10566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.459354][ T6626] hsr_slave_0: left promiscuous mode [ 215.489301][ T6626] hsr_slave_1: left promiscuous mode [ 215.496153][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.496178][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.502824][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.502882][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.564902][ T29] audit: type=1400 audit(1793071975.071:1250): avc: denied { write } for pid=10577 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.567293][ T6626] veth1_macvtap: left promiscuous mode [ 215.567326][ T6626] veth0_macvtap: left promiscuous mode [ 215.567372][ T6626] veth1_vlan: left promiscuous mode [ 215.567565][ T6626] veth0_vlan: left promiscuous mode [ 215.761229][ T6626] team0 (unregistering): Port device team_slave_1 removed [ 215.780069][ T6626] team0 (unregistering): Port device team_slave_0 removed [ 215.851149][ T3017] 8021q: adding VLAN 0 to HW filter on device eth17 [ 216.058178][ T29] audit: type=1400 audit(1793071975.571:1251): avc: denied { write } for pid=10581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.085869][ T6626] IPVS: stop unused estimator thread 0... [ 216.130054][ T29] audit: type=1400 audit(1793071975.641:1252): avc: denied { write } for pid=10592 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.167792][ T6626] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.184261][ T3017] 8021q: adding VLAN 0 to HW filter on device eth18 [ 216.212010][ T6626] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.253322][ T6626] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.301874][ T6626] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.412178][ T6626] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.413055][ T29] audit: type=1400 audit(1793071975.921:1253): avc: denied { write } for pid=10595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.458107][ T6626] batman_adv: batadv0: Interface deactivated: netdevsim2 [ 216.462691][ T6626] batman_adv: batadv0: Removing interface: netdevsim2 [ 216.464519][ T6626] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.507416][ T29] audit: type=1400 audit(1793071976.021:1254): avc: denied { write } for pid=10606 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.512238][ T6626] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.564242][ T6626] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.581650][ T3017] 8021q: adding VLAN 0 to HW filter on device eth19 [ 216.656974][ T6626] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.691732][ T6626] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.743062][ T6626] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.793041][ T6626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.820150][ T29] audit: type=1400 audit(1793071976.331:1255): avc: denied { write } for pid=10609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.876475][ T29] audit: type=1400 audit(1793071976.391:1256): avc: denied { write } for pid=10620 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.938165][ T3017] 8021q: adding VLAN 0 to HW filter on device eth20 [ 216.977371][ T6626] bridge_slave_1: left allmulticast mode [ 216.977401][ T6626] bridge_slave_1: left promiscuous mode [ 216.977592][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.979986][ T6626] bridge_slave_0: left allmulticast mode [ 216.980006][ T6626] bridge_slave_0: left promiscuous mode [ 216.980166][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.013991][ T6626] vlan2: left promiscuous mode [ 217.014054][ T6626] bond0: left promiscuous mode [ 217.014182][ T6626] bond_slave_0: left promiscuous mode [ 217.014481][ T6626] bond_slave_1: left promiscuous mode [ 217.031102][ T6626] bridge0: port 3(vlan2) entered disabled state [ 217.048244][ T6626] bridge_slave_1: left allmulticast mode [ 217.048273][ T6626] bridge_slave_1: left promiscuous mode [ 217.048458][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.060388][ T6626] bridge_slave_0: left allmulticast mode [ 217.060527][ T6626] bridge_slave_0: left promiscuous mode [ 217.060881][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.087300][ T6626] veth0: left allmulticast mode [ 217.087325][ T6626] veth0: left promiscuous mode [ 217.087476][ T6626] bridge0: port 1(veth0) entered disabled state [ 217.089717][ T6626] pimreg: left allmulticast mode [ 217.233530][ T6626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.248795][ T6626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.253445][ T6626] bond0 (unregistering): Released all slaves [ 217.308038][ T6626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.308765][ T6626] bond_slave_0: left allmulticast mode [ 217.313880][ T6626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.318636][ T6626] bond_slave_1: left allmulticast mode [ 217.323442][ T6626] bond0 (unregistering): Released all slaves [ 217.376944][ T6626] bond0 (unregistering): Released all slaves [ 217.380563][ T6626] bond1 (unregistering): Released all slaves [ 217.385352][ T6626] bond2 (unregistering): Released all slaves [ 217.463771][ T6626] tipc: Disabling bearer [ 217.464410][ T6626] tipc: Disabling bearer [ 217.476798][ T6626] tipc: Left network mode [ 217.631830][ T6626] hsr_slave_0: left promiscuous mode [ 217.649891][ T6626] hsr_slave_1: left promiscuous mode [ 217.651649][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.651673][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.653029][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.653046][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.692016][ T29] audit: type=1400 audit(1793071977.201:1257): avc: denied { write } for pid=10624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.718616][ T6626] hsr_slave_0: left promiscuous mode [ 217.724565][ T6626] hsr_slave_1: left promiscuous mode [ 217.728810][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.728851][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.730601][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.730621][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.757034][ T6626] hsr_slave_0: left promiscuous mode [ 217.764353][ T6626] hsr_slave_1: left promiscuous mode [ 217.803477][ T29] audit: type=1400 audit(1793071977.311:1258): avc: denied { write } for pid=10635 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.851859][ T6626] veth1_macvtap: left promiscuous mode [ 217.851960][ T6626] veth0_macvtap: left promiscuous mode [ 217.852079][ T6626] veth1_vlan: left promiscuous mode [ 217.852157][ T6626] veth0_vlan: left promiscuous mode [ 217.854309][ T6626] veth1_macvtap: left promiscuous mode [ 217.854342][ T6626] veth0_macvtap: left promiscuous mode [ 217.854452][ T6626] veth1_vlan: left promiscuous mode [ 217.854556][ T6626] veth0_vlan: left promiscuous mode [ 217.883446][ T6626] veth0_macvtap: left promiscuous mode [ 217.883658][ T6626] veth1_vlan: left promiscuous mode [ 217.883765][ T6626] veth0_vlan: left promiscuous mode [ 218.125785][ T6626] team0 (unregistering): Port device team_slave_1 removed [ 218.133441][ T6626] team0 (unregistering): Port device team_slave_0 removed [ 218.258363][ T6626] team0 (unregistering): Port device team_slave_1 removed [ 218.266248][ T6626] team0 (unregistering): Port device team_slave_0 removed [ 218.438835][ T6626] team0 (unregistering): Port device dummy0 removed [ 218.457975][ T3017] 8021q: adding VLAN 0 to HW filter on device eth21 [ 218.730008][ T3017] 8021q: adding VLAN 0 to HW filter on device eth22 [ 218.998963][ T3017] 8021q: adding VLAN 0 to HW filter on device eth23 [ 219.027979][ T6626] IPVS: stop unused estimator thread 0... [ 219.258021][ T3017] 8021q: adding VLAN 0 to HW filter on device eth24 [ 219.486750][ T3017] 8021q: adding VLAN 0 to HW filter on device eth25 [ 219.715300][ T3017] 8021q: adding VLAN 0 to HW filter on device eth26 [ 219.953526][ T3017] 8021q: adding VLAN 0 to HW filter on device eth27 [ 220.181218][ T3017] 8021q: adding VLAN 0 to HW filter on device eth28 [ 220.436158][ T3017] 8021q: adding VLAN 0 to HW filter on device eth29 [ 220.598610][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 220.598631][ T29] audit: type=1400 audit(1793071980.111:1275): avc: denied { write } for pid=10757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.656407][ T29] audit: type=1400 audit(1793071980.171:1276): avc: denied { write } for pid=10768 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.701068][ T3017] 8021q: adding VLAN 0 to HW filter on device eth30 [ 220.877279][ T29] audit: type=1400 audit(1793071980.391:1277): avc: denied { write } for pid=10772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.932063][ T29] audit: type=1400 audit(1793071980.441:1278): avc: denied { write } for pid=10783 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.977202][ T3017] 8021q: adding VLAN 0 to HW filter on device eth31 [ 221.142667][ T29] audit: type=1400 audit(1793071980.651:1279): avc: denied { write } for pid=10786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.197140][ T29] audit: type=1400 audit(1793071980.711:1280): avc: denied { write } for pid=10797 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.243000][ T3017] 8021q: adding VLAN 0 to HW filter on device eth32 [ 223.596024][ T29] audit: type=1400 audit(1793071983.111:1281): avc: denied { write } for pid=10828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.651936][ T29] audit: type=1400 audit(1793071983.161:1282): avc: denied { write } for pid=10839 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1