last executing test programs: 30.93672295s ago: executing program 4 (id=93): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) splice(r0, 0x0, r0, 0xfffffffffffffffc, 0x5, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) 30.714926036s ago: executing program 4 (id=97): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000088f50180c2000003bbbbbbbbbbbb88a8000081"], 0x3a) 30.389184343s ago: executing program 4 (id=106): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001180)="5309a1b60473", 0x6}], 0x1}, 0x20048004) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)="aa", 0x1}], 0x1}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 30.353090114s ago: executing program 4 (id=107): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@stripe={'stripe', 0x3d, 0xb74}}, {@resuid}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$eJzs3c9rHNcdAPDv7lqyJKuV7ZbWdqE2uOD+wLv6QbHU9tJT24Oh1NBLC44irRVHK63QrhxL+CAnNx9yCAkJhBxyz1+QS3yKCYSck3vIITgkjgJJILBhZndlWdLKC5G1RvP5wGhn5q3m+94u36eZNzOaADLrXPIjFzEcER9FxEhz8dE3nGu+bDy4NZNMuWg0rnyZS9+XLLff2v69YxGxHhEDEfGff0Q8m9sZt7a6Nj9dqZSXW8ul+sJSqba6dvH6wvRcea68ODZ5aWpqcnRifKr7xgzuXXzn5efvXH73X/3vfPvS/XuvvP9eUq3hVtnWduynZtP74sSWdUci4m9PIlgPFFrtecxHz1Mq+f5+ERHn0/wfiUL6bQJZ0Gg0Gj80jnYqXm8Ah1Y+3QfO5YsR0ZzP54vF5j78L2MoX6nW6n+6Vl1ZnG3uKx+Pvvy165XyaOtY4Xj05ZLlsXT+4fL4tuWJiHQf+NXCYLpcnKlWZg+2qwO2OdbK/8FW/n9TaOY/kBG7H/J3PCgADhFDfpBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF078n+XG3aBQ+ffly8nU6N9//vsjdWV+eqNi7Pl2nxxYWWmOFNdXirOVatzv84XZ6oLj9tepVpdGvtzrNws1cu1eqm2unZ1obqyWL+a3td/tdx3IK0CunHi7N1Pkr/2638ZTKdEf6tMrsLh1mjkotf3IAO9Ueh1BwT0jKF/yC7H+MDjzvgNdCpY2v+6AAcj3+sKAD1z4bTzf5BVxv8hu4z/Q3bZxweM/0P2GP+H7Bru8Pyvn215dtdoRPw8Ij4u9B1tP+sLOAzyn+ci8sn+/4WR3w1vL+3PfZeeIuiPiBfevPL6zel6fXksWf/V5vr6G631472oP9Ctdp628xgAyK6NB7dm2tNBxv3i782LEHbGP9IamxxIz1EObeQeuVYht0/XLqzfjohTu8XPpWMjI60zH0MbhR3xT7Zec81NpPU9kj43ff/iH98j/ukt8X+7Jf6Zn/ypQDbcTfqf0d3yL5/mdGzm36P9z/A+XTvRuf/Lb/Z/hQ7939kuYzz31oufdYx/O+LMrvHb8QbSWNvjJ3W70F343P3///dXnQobbze3s1v8zQ1ERKm+sFSqra5dTP+P3Fx5cWzy0tTU5OjE+FQpHaMutUeqd/rrqQ/v7dX+oYfxByOiq/Yn6/7QXfvj+9988L9ze8T//fndv/+Te8RPKvrHLuN/Pf7pM53KkvizHT7//B7xk3UTXcavvfZPzxIHgKdIbXVtfrpSKS+bMWPGzOZMr3sm4El7mPS9rgkAAAAAAAAAAADQrc6XAY/s2+XEvW4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBh8GMAAAD//0Gh0nQ=") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 30.156421489s ago: executing program 4 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000cc0)=ANY=[], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) 29.304931599s ago: executing program 4 (id=122): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@loopback, 0x80}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 29.26801141s ago: executing program 32 (id=122): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@loopback, 0x80}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 19.080074314s ago: executing program 2 (id=167): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 19.052377664s ago: executing program 2 (id=168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 18.851051219s ago: executing program 2 (id=173): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 18.783675361s ago: executing program 2 (id=175): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone(0x2b02000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ftruncate(r0, 0x4a8e) 18.642780684s ago: executing program 2 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 17.890548472s ago: executing program 2 (id=188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) listen(0xffffffffffffffff, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d232101c0000000000000001"], 0x4a) 17.890448152s ago: executing program 33 (id=188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) listen(0xffffffffffffffff, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d232101c0000000000000001"], 0x4a) 3.319605331s ago: executing program 6 (id=392): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendto$packet(r1, &(0x7f0000000040)="18", 0x48, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r2, 0x1, 0xfd, 0x6, @multicast}, 0x14) 3.196632624s ago: executing program 6 (id=395): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x2000006}]}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 2.409572533s ago: executing program 6 (id=411): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4008011) r0 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x9, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.332493804s ago: executing program 6 (id=423): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) 2.197292528s ago: executing program 0 (id=417): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "b738096300"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f0000000200)=""/223, 0xfffffe56) 2.037904162s ago: executing program 6 (id=421): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ef) mount(0x0, &(0x7f0000000040)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) 1.930014184s ago: executing program 6 (id=426): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x9, @v={0x5, 0x6, 0x6, 0x7, {0x3, 0x68, "54dd8c718fcaf03a"}, 0x2}}, 0x12) write$nci(r0, 0x0, 0x4) 1.727827529s ago: executing program 5 (id=436): syz_emit_ethernet(0x32, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x7, 0x24, 0x68, 0x0, 0xc, 0x21, 0x0, @rand_addr=0x64010100, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.71556716s ago: executing program 3 (id=437): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 1.638466101s ago: executing program 5 (id=438): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xd0}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000180)="dd71", 0x2}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x87, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000440)={0x0, 0x4, 0x7a04}, 0x8) 1.637029212s ago: executing program 3 (id=448): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 1.602083552s ago: executing program 5 (id=439): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 1.585965272s ago: executing program 3 (id=440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x400, 0x3}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 1.534499394s ago: executing program 5 (id=442): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.533590804s ago: executing program 1 (id=452): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0xc}]}, &(0x7f00000002c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4) 1.461906985s ago: executing program 3 (id=443): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x2, 0x6) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r3, 0x0, r0, 0x0, 0xf, 0x1) write(r1, 0x0, 0x0) 1.411192897s ago: executing program 5 (id=444): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.298551509s ago: executing program 0 (id=445): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) 1.298184959s ago: executing program 0 (id=446): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 1.298058269s ago: executing program 0 (id=447): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={r3, @in6={{0xa, 0x4e22, 0x10646fc4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}}}, &(0x7f0000000540)=0x84) 1.29025691s ago: executing program 0 (id=449): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="7150a4"], 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 1.256336401s ago: executing program 0 (id=450): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x40006, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2d8, &(0x7f00000004c0)="$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") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) 677.789884ms ago: executing program 1 (id=451): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$autofs(0xffffffffffffff9c, 0x0, 0x64000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$nl_netfilter(0x10, 0x3, 0xc) 570.546787ms ago: executing program 3 (id=453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x4b, 0x2c, 0x601, 0x0, 0x3, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_FLAGS={0x0, 0xb, 0x5}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_U32_POLICE={0x4}]}}]}, 0x80}}, 0x0) 551.467507ms ago: executing program 5 (id=454): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) vmsplice(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 525.580418ms ago: executing program 3 (id=455): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000400)='GPL\x00', 0x700, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000440)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r0, r1, r1, r0, r0, r1], &(0x7f00000007c0)=[{0x2, 0x1, 0xa, 0x4}, {0x0, 0x5, 0xf}, {0x3, 0x2, 0x11, 0x8}, {0x4, 0x3, 0xe, 0x6}], 0x10, 0x4}, 0x94) 216.840415ms ago: executing program 1 (id=456): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 149.829567ms ago: executing program 1 (id=457): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) syz_io_uring_setup(0xefe, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 50.041559ms ago: executing program 1 (id=458): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x300}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x4004) listen(r0, 0x0) 0s ago: executing program 1 (id=459): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xac1) ioctl$TCSBRKP(r0, 0x5425, 0xb) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): [ 19.869873][ T29] audit: type=1400 audit(1788115913.018:104): avc: denied { write } for pid=3212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.893165][ T29] audit: type=1400 audit(1788115913.028:105): avc: denied { write } for pid=3223 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.046275][ T29] audit: type=1400 audit(1788115913.198:106): avc: denied { write } for pid=3226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.069497][ T29] audit: type=1400 audit(1788115913.208:107): avc: denied { write } for pid=3237 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.666158][ T29] audit: type=1400 audit(1788115913.818:108): avc: denied { write } for pid=3240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.689376][ T29] audit: type=1400 audit(1788115913.828:109): avc: denied { write } for pid=3251 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.560234][ T29] audit: type=1400 audit(1788115914.708:110): avc: denied { write } for pid=3258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.583269][ T29] audit: type=1400 audit(1788115914.718:111): avc: denied { write } for pid=3269 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.635712][ T29] audit: type=1400 audit(1788115914.788:112): avc: denied { transition } for pid=3272 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.126663][ T3279] sshd-session (3279) used greatest stack depth: 11216 bytes left Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. [ 29.023693][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 29.023723][ T29] audit: type=1400 audit(1788115922.168:117): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.036143][ T3289] cgroup: Unknown subsys name 'net' [ 29.036440][ T29] audit: type=1400 audit(1788115922.178:118): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.036464][ T29] audit: type=1400 audit(1788115922.178:119): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.175796][ T3289] cgroup: Unknown subsys name 'cpuset' [ 29.181983][ T3289] cgroup: Unknown subsys name 'rlimit' [ 29.311107][ T29] audit: type=1400 audit(1788115922.458:120): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.332709][ T29] audit: type=1400 audit(1788115922.458:121): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.332745][ T29] audit: type=1400 audit(1788115922.458:122): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.332765][ T29] audit: type=1400 audit(1788115922.458:123): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.332840][ T29] audit: type=1400 audit(1788115922.478:124): avc: denied { read } for pid=3024 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.332860][ T29] audit: type=1400 audit(1788115922.478:125): avc: denied { search } for pid=3024 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.332882][ T29] audit: type=1400 audit(1788115922.478:126): avc: denied { search } for pid=3024 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.371430][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.472487][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.581339][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.581403][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.581459][ T3301] bridge_slave_0: entered allmulticast mode [ 30.581892][ T3301] bridge_slave_0: entered promiscuous mode [ 30.597920][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.597950][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.598071][ T3301] bridge_slave_1: entered allmulticast mode [ 30.598573][ T3301] bridge_slave_1: entered promiscuous mode [ 30.616878][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.617999][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.629811][ T3301] team0: Port device team_slave_0 added [ 30.630901][ T3301] team0: Port device team_slave_1 added [ 30.640944][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.640958][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.640982][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.641460][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.641471][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.641537][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.657938][ T3301] hsr_slave_0: entered promiscuous mode [ 30.658281][ T3301] hsr_slave_1: entered promiscuous mode [ 30.856055][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.856088][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.856140][ T3307] bridge_slave_0: entered allmulticast mode [ 30.856855][ T3307] bridge_slave_0: entered promiscuous mode [ 30.862177][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.872862][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.878737][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.878768][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.878918][ T3307] bridge_slave_1: entered allmulticast mode [ 30.879368][ T3307] bridge_slave_1: entered promiscuous mode [ 30.889053][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.897879][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.909351][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.909489][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.909518][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.909567][ T3299] bridge_slave_0: entered allmulticast mode [ 30.910044][ T3299] bridge_slave_0: entered promiscuous mode [ 30.911367][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.911406][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.911509][ T3299] bridge_slave_1: entered allmulticast mode [ 30.911905][ T3299] bridge_slave_1: entered promiscuous mode [ 30.921440][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.925957][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.930039][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.935904][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.942147][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.946998][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.955832][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.987480][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.987516][ T3301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.987599][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.987627][ T3301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.006740][ T3299] team0: Port device team_slave_0 added [ 31.010197][ T3307] team0: Port device team_slave_0 added [ 31.011221][ T3307] team0: Port device team_slave_1 added [ 31.011348][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.011376][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.011449][ T3309] bridge_slave_0: entered allmulticast mode [ 31.011882][ T3309] bridge_slave_0: entered promiscuous mode [ 31.018360][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.018388][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.018464][ T3309] bridge_slave_1: entered allmulticast mode [ 31.019053][ T3309] bridge_slave_1: entered promiscuous mode [ 31.020619][ T3299] team0: Port device team_slave_1 added [ 31.040594][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.040627][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.040677][ T3306] bridge_slave_0: entered allmulticast mode [ 31.041130][ T3306] bridge_slave_0: entered promiscuous mode [ 31.057828][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.059164][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.059262][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.059290][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.059456][ T3306] bridge_slave_1: entered allmulticast mode [ 31.059864][ T3306] bridge_slave_1: entered promiscuous mode [ 31.065686][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.065699][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.065724][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.066218][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.066228][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.066319][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.076973][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.076987][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.077010][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.077619][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.077630][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.077655][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.100633][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.101952][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.108114][ T3309] team0: Port device team_slave_0 added [ 31.123721][ T3309] team0: Port device team_slave_1 added [ 31.142562][ T3299] hsr_slave_0: entered promiscuous mode [ 31.142911][ T3299] hsr_slave_1: entered promiscuous mode [ 31.143099][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 31.143112][ T3299] Cannot create hsr debugfs directory [ 31.145868][ T3307] hsr_slave_0: entered promiscuous mode [ 31.146353][ T3307] hsr_slave_1: entered promiscuous mode [ 31.146579][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 31.146592][ T3307] Cannot create hsr debugfs directory [ 31.147296][ T3306] team0: Port device team_slave_0 added [ 31.148666][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.154846][ T3306] team0: Port device team_slave_1 added [ 31.173543][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.173557][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.173581][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.174164][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.174175][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.174198][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.192537][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.206708][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.206722][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.206748][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.207222][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.207233][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.207337][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.606818][ T3309] hsr_slave_0: entered promiscuous mode [ 31.607320][ T3309] hsr_slave_1: entered promiscuous mode [ 31.607516][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 31.607527][ T3309] Cannot create hsr debugfs directory [ 31.634143][ T3306] hsr_slave_0: entered promiscuous mode [ 31.634595][ T3306] hsr_slave_1: entered promiscuous mode [ 31.637376][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 31.637392][ T3306] Cannot create hsr debugfs directory [ 31.811239][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.819784][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.835013][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.843558][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.844030][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.853136][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.854635][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.860276][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.863016][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.873420][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.874799][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.883056][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.884634][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.894385][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.909561][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.916983][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.946162][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.954800][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.963152][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.971610][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.973620][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.980565][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.995568][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.004085][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.010418][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.034949][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.043546][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.048158][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.059796][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.071749][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.080577][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.090832][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.099402][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.120872][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.144302][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.157153][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.174835][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.174875][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.179819][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.179851][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.188421][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.197472][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.199031][ T3301] veth0_vlan: entered promiscuous mode [ 32.206325][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.206358][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.213429][ T3301] veth1_vlan: entered promiscuous mode [ 32.234944][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.238625][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.238657][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.253000][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.253037][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.270751][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.270788][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.284515][ T3301] veth0_macvtap: entered promiscuous mode [ 32.291911][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.302006][ T3301] veth1_macvtap: entered promiscuous mode [ 32.323076][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.324815][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.333047][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.356166][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.356203][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.380021][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.380056][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.444193][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.485766][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.487038][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.487176][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.487294][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.565970][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.594308][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.674710][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.784089][ T3309] veth0_vlan: entered promiscuous mode [ 32.784406][ T3299] veth0_vlan: entered promiscuous mode [ 32.787859][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.794824][ T3309] veth1_vlan: entered promiscuous mode [ 32.800682][ T3299] veth1_vlan: entered promiscuous mode [ 32.843880][ T3309] veth0_macvtap: entered promiscuous mode [ 32.853239][ T3309] veth1_macvtap: entered promiscuous mode [ 32.854023][ T3307] veth0_vlan: entered promiscuous mode [ 32.873785][ T3307] veth1_vlan: entered promiscuous mode [ 32.880479][ T3299] veth0_macvtap: entered promiscuous mode [ 32.884784][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.889917][ T3299] veth1_macvtap: entered promiscuous mode [ 32.901490][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.922887][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.925750][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.943465][ T3307] veth0_macvtap: entered promiscuous mode [ 32.958880][ T3307] veth1_macvtap: entered promiscuous mode [ 32.964151][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.980076][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.992572][ T3306] veth0_vlan: entered promiscuous mode [ 33.005551][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.005619][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.005764][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.005804][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.005837][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.005867][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.017482][ T3306] veth1_vlan: entered promiscuous mode [ 33.025993][ T315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.026201][ T315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.063479][ T3306] veth0_macvtap: entered promiscuous mode [ 33.074412][ T3306] veth1_macvtap: entered promiscuous mode [ 33.075176][ T315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.075292][ T315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.075323][ T315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.075433][ T315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.102980][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.108998][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.185331][ T810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.186074][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.186264][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.186524][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.398766][ T3540] loop2: detected capacity change from 0 to 512 [ 33.424188][ T3540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.424359][ T3540] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.463523][ T3540] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.16: corrupted xattr block 33: invalid ea_ino [ 33.477062][ T3540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 33.477107][ T3540] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.16: corrupted xattr block 33: invalid ea_ino [ 33.501030][ T3540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 33.501234][ T3540] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.16: corrupted xattr block 33: invalid ea_ino [ 33.501450][ T3540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 33.534836][ T3540] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.16: corrupted xattr block 33: invalid ea_ino [ 33.535047][ T3540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 33.535164][ T3540] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.16: corrupted xattr block 33: invalid ea_ino [ 33.540231][ T3540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 33.540709][ T3540] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.16: corrupted xattr block 33: invalid ea_ino [ 33.543979][ T3540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 33.544033][ T3540] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.16: corrupted xattr block 33: invalid ea_ino [ 33.546020][ T3540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 33.546629][ T3540] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.16: corrupted xattr block 33: invalid ea_ino [ 33.546811][ T3540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 33.546836][ T3540] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.16: corrupted xattr block 33: invalid ea_ino [ 33.549212][ T3540] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 33.549311][ T3540] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 33.549334][ T3540] EXT4-fs (loop2): This should not happen!! Data will be lost [ 33.549334][ T3540] [ 33.549346][ T3540] EXT4-fs (loop2): Total free blocks count 0 [ 33.549408][ T3540] EXT4-fs (loop2): Free/Dirty block details [ 33.549420][ T3540] EXT4-fs (loop2): free_blocks=65280 [ 33.549432][ T3540] EXT4-fs (loop2): dirty_blocks=23 [ 33.549505][ T3540] EXT4-fs (loop2): Block reservation details [ 33.549515][ T3540] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 33.551889][ T3540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 33.552010][ T3540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 33.570927][ T3540] syz.2.16 (3540) used greatest stack depth: 10304 bytes left [ 33.580789][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 32 with error 28 [ 33.751690][ T3549] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 33.993580][ T3555] netlink: 'syz.4.21': attribute type 8 has an invalid length. [ 33.993605][ T3555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 33.995909][ T3555] veth1_to_team: entered promiscuous mode [ 34.002362][ T3555] gretap0: entered promiscuous mode [ 34.003206][ T3555] veth1_to_hsr: entered promiscuous mode [ 34.003847][ T3555] hsr1: entered promiscuous mode [ 34.138888][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 34.138922][ T29] audit: type=1400 audit(1788115927.288:182): avc: denied { write } for pid=3559 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.486669][ T3570] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 35.316435][ T3582] loop0: detected capacity change from 0 to 512 [ 35.336701][ T3582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.336850][ T3582] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.343702][ T29] audit: type=1400 audit(1788115928.488:183): avc: denied { write } for pid=3581 comm="syz.0.33" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.343752][ T29] audit: type=1400 audit(1788115928.488:184): avc: denied { read write } for pid=3581 comm="syz.0.33" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.343774][ T29] audit: type=1400 audit(1788115928.488:185): avc: denied { open } for pid=3581 comm="syz.0.33" path="/6/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.348357][ T29] audit: type=1400 audit(1788115928.488:186): avc: denied { map } for pid=3581 comm="syz.0.33" path="/6/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.348388][ T29] audit: type=1400 audit(1788115928.488:187): avc: denied { execute } for pid=3581 comm="syz.0.33" path="/6/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.413949][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.560311][ T29] audit: type=1326 audit(1788115928.708:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.0.36" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dc5fe159 code=0x7ffc0000 [ 35.560345][ T29] audit: type=1326 audit(1788115928.708:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.0.36" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dc5fe159 code=0x7ffc0000 [ 35.561299][ T29] audit: type=1326 audit(1788115928.708:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.0.36" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dc5fe159 code=0x7ffc0000 [ 35.561414][ T29] audit: type=1326 audit(1788115928.708:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.0.36" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dc5fe159 code=0x7ffc0000 [ 35.640855][ T3593] loop0: detected capacity change from 0 to 1024 [ 35.697594][ T3593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.777322][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.977673][ T3615] loop1: detected capacity change from 0 to 128 [ 36.695485][ T3650] loop4: detected capacity change from 0 to 512 [ 36.704886][ T3650] EXT4-fs: Ignoring removed bh option [ 36.723294][ T3650] EXT4-fs (loop4): 1 truncate cleaned up [ 36.731675][ T3650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.825521][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.841212][ T3667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 36.852569][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.859664][ T3667] bridge_slave_0: left allmulticast mode [ 36.859698][ T3667] bridge_slave_0: left promiscuous mode [ 36.859811][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.970238][ T3684] loop3: detected capacity change from 0 to 2048 [ 36.997582][ T3684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.997705][ T3684] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.022248][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.123542][ T3698] netlink: 92 bytes leftover after parsing attributes in process `syz.3.78'. [ 37.131920][ T3698] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 37.131941][ T3698] netlink: 76 bytes leftover after parsing attributes in process `syz.3.78'. [ 37.132078][ T3698] Zero length message leads to an empty skb [ 37.242008][ T3707] loop3: detected capacity change from 0 to 512 [ 37.260366][ T3707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.260505][ T3707] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.375970][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.583680][ T3733] FAULT_INJECTION: forcing a failure. [ 37.583680][ T3733] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 37.583732][ T3733] CPU: 1 UID: 0 PID: 3733 Comm: syz.4.93 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.583783][ T3733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.583800][ T3733] Call Trace: [ 37.583807][ T3733] [ 37.583815][ T3733] __dump_stack+0x1d/0x30 [ 37.583841][ T3733] dump_stack_lvl+0x95/0xd0 [ 37.583875][ T3733] dump_stack+0x15/0x1b [ 37.583893][ T3733] should_fail_ex+0x262/0x280 [ 37.583945][ T3733] should_fail_alloc_page+0xf2/0x100 [ 37.583978][ T3733] __alloc_frozen_pages_noprof+0x157/0x400 [ 37.584011][ T3733] alloc_pages_mpol+0xaf/0x1d0 [ 37.584029][ T3733] vma_alloc_folio_noprof+0x1b3/0x300 [ 37.584113][ T3733] do_wp_page+0x64d/0x1ed0 [ 37.584139][ T3733] ? __rcu_read_lock+0x36/0x50 [ 37.584209][ T3733] handle_mm_fault+0xe29/0x3bb0 [ 37.584239][ T3733] do_user_addr_fault+0x636/0x1060 [ 37.584271][ T3733] ? __x64_sys_sendto+0x76/0x90 [ 37.584350][ T3733] ? trace_page_fault_user+0x1f/0xa0 [ 37.584379][ T3733] exc_page_fault+0x62/0xa0 [ 37.584400][ T3733] asm_exc_page_fault+0x26/0x30 [ 37.584420][ T3733] RIP: 0033:0x7f34402cdf45 [ 37.584518][ T3733] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 37.584535][ T3733] RSP: 002b:00007f343ed65de0 EFLAGS: 00010293 [ 37.584601][ T3733] RAX: 0000000000000008 RBX: 00007f34410c7e20 RCX: 0000000000000000 [ 37.584615][ T3733] RDX: 0000000000000000 RSI: 00007f34403a2748 RDI: 00007f34410c7e20 [ 37.584629][ T3733] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 37.584643][ T3733] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34403c244f [ 37.584654][ T3733] R13: ffffffffffffffe8 R14: 0000000000000058 R15: 00007f34403a2748 [ 37.584678][ T3733] [ 37.584765][ T3733] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 37.774728][ T3735] syz.0.94 (3735) used greatest stack depth: 10240 bytes left [ 38.008743][ T3752] netlink: 'syz.3.102': attribute type 1 has an invalid length. [ 38.183042][ T3743] loop0: detected capacity change from 0 to 512 [ 38.205216][ T3764] loop4: detected capacity change from 0 to 512 [ 38.205724][ T3764] EXT4-fs: Ignoring removed i_version option [ 38.206101][ T3764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.221812][ T3764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.221874][ T3764] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.284780][ T3764] FAULT_INJECTION: forcing a failure. [ 38.284780][ T3764] name failslab, interval 1, probability 0, space 0, times 1 [ 38.284890][ T3764] CPU: 0 UID: 0 PID: 3764 Comm: syz.4.107 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.284912][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.284923][ T3764] Call Trace: [ 38.284930][ T3764] [ 38.284938][ T3764] __dump_stack+0x1d/0x30 [ 38.284964][ T3764] dump_stack_lvl+0x95/0xd0 [ 38.285041][ T3764] dump_stack+0x15/0x1b [ 38.285063][ T3764] should_fail_ex+0x262/0x280 [ 38.285086][ T3764] ? dup_task_struct+0x5a/0x750 [ 38.285110][ T3764] should_failslab+0x8c/0xb0 [ 38.285148][ T3764] kmem_cache_alloc_node_noprof+0x82/0x400 [ 38.285199][ T3764] ? __rcu_read_unlock+0x4e/0x70 [ 38.285226][ T3764] ? dup_task_struct+0x5a/0x750 [ 38.285257][ T3764] dup_task_struct+0x5a/0x750 [ 38.285308][ T3764] copy_process+0x5a0/0x2340 [ 38.285442][ T3764] ? futex_wait+0x18f/0x1c0 [ 38.285462][ T3764] kernel_clone+0x1c0/0x5f0 [ 38.285486][ T3764] ? do_futex+0x391/0x460 [ 38.285514][ T3764] __x64_sys_clone+0x143/0x180 [ 38.285607][ T3764] x64_sys_call+0x2479/0x2550 [ 38.285653][ T3764] do_syscall_64+0x112/0x360 [ 38.285733][ T3764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.285757][ T3764] RIP: 0033:0x7f344030e159 [ 38.285774][ T3764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.285815][ T3764] RSP: 002b:00007f343ed66fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 38.285837][ T3764] RAX: ffffffffffffffda RBX: 00007f3440595fa0 RCX: 00007f344030e159 [ 38.285891][ T3764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.285904][ T3764] RBP: 00007f34403a5024 R08: 0000000000000000 R09: 0000000000000000 [ 38.285946][ T3764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.285959][ T3764] R13: 00007f3440596038 R14: 00007f3440595fa0 R15: 00007fffd614e568 [ 38.285979][ T3764] [ 38.301335][ T3771] team0 (unregistering): Port device team_slave_0 removed [ 38.305796][ T3743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 38.306175][ T3743] System zones: 1-12 [ 38.310513][ T3771] team0 (unregistering): Port device team_slave_1 removed [ 38.314930][ T3743] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.98: error while reading EA inode 32 err=-116 [ 38.315059][ T3743] loop0: lost filesystem error report for type 5 error -117 [ 38.325186][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 38.325205][ C0] EXT4-fs (loop0): initial error at time 1788115931: ext4_xattr_inode_iget:442 [ 38.325228][ C0] EXT4-fs (loop0): last error at time 1788115931: ext4_xattr_inode_iget:442 [ 38.330676][ T3743] EXT4-fs (loop0): 1 orphan inode deleted [ 38.346935][ T3301] EXT4-fs error (device loop4): ext4_lookup:1784: inode #11: comm syz-executor: ' ' linked to parent dir [ 38.347211][ T3301] EXT4-fs error (device loop4): ext4_lookup:1784: inode #11: comm syz-executor: ' ' linked to parent dir [ 38.381775][ T3743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.416760][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.654945][ T3785] loop3: detected capacity change from 0 to 512 [ 38.658046][ T3785] EXT4-fs: Ignoring removed oldalloc option [ 38.668575][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.700813][ T3785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.700980][ T3785] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.726375][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.736554][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.751520][ T3785] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.116: corrupted xattr block 32: invalid ea_ino [ 38.751720][ T3785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.751754][ T3785] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.116: corrupted xattr block 32: invalid ea_ino [ 38.751912][ T3785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.751938][ T3785] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.116: corrupted xattr block 32: invalid ea_ino [ 38.755289][ T3785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.759894][ T3785] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.116: corrupted xattr block 32: invalid ea_ino [ 38.760100][ T3785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.760148][ T3785] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.116: corrupted xattr block 32: invalid ea_ino [ 38.760287][ T3785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.760659][ T3785] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.116: corrupted xattr block 32: invalid ea_ino [ 38.760876][ T3785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.760905][ T3785] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.116: corrupted xattr block 32: invalid ea_ino [ 38.765866][ T3785] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.116: corrupted xattr block 32: invalid ea_ino [ 38.766077][ T3785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.766100][ T3785] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.116: corrupted xattr block 32: invalid ea_ino [ 38.766254][ T3785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.818168][ T3794] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.116: corrupted xattr block 32: invalid ea_ino [ 38.819088][ T3794] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.825619][ T3794] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.860857][ T3794] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.861084][ T3794] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.901075][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.978967][ T3801] loop1: detected capacity change from 0 to 2048 [ 39.014151][ T3801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.036645][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.076168][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.203840][ T31] bridge_slave_1: left allmulticast mode [ 39.203893][ T31] bridge_slave_1: left promiscuous mode [ 39.203992][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.210693][ T31] bridge_slave_0: left allmulticast mode [ 39.210713][ T31] bridge_slave_0: left promiscuous mode [ 39.210820][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.264354][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 39.264380][ T29] audit: type=1400 audit(1788115932.408:315): avc: denied { read } for pid=3812 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.264405][ T29] audit: type=1400 audit(1788115932.408:316): avc: denied { read open } for pid=3812 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.264435][ T29] audit: type=1400 audit(1788115932.408:317): avc: denied { getattr } for pid=3812 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.286679][ T3809] loop0: detected capacity change from 0 to 2048 [ 39.319552][ T3809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.435712][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.460126][ T31] gretap0 (unregistering): left promiscuous mode [ 39.470756][ T29] audit: type=1400 audit(1788115932.618:318): avc: denied { write } for pid=3807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.470797][ T29] audit: type=1400 audit(1788115932.618:319): avc: denied { add_name } for pid=3807 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.522525][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.524648][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.532783][ T3830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=3830 comm=syz.0.126 [ 39.532816][ T3830] netlink: 1135 bytes leftover after parsing attributes in process `syz.0.126'. [ 39.543570][ T31] bond0 (unregistering): Released all slaves [ 39.564703][ T29] audit: type=1400 audit(1788115932.708:320): avc: denied { write } for pid=3831 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.564775][ T29] audit: type=1400 audit(1788115932.708:321): avc: denied { remove_name } for pid=3831 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1185 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.624265][ T3835] FAULT_INJECTION: forcing a failure. [ 39.624265][ T3835] name failslab, interval 1, probability 0, space 0, times 0 [ 39.624299][ T3835] CPU: 1 UID: 0 PID: 3835 Comm: syz.0.127 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.624340][ T3835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.624351][ T3835] Call Trace: [ 39.624358][ T3835] [ 39.624364][ T3835] __dump_stack+0x1d/0x30 [ 39.624389][ T3835] dump_stack_lvl+0x95/0xd0 [ 39.624411][ T3835] dump_stack+0x15/0x1b [ 39.624433][ T3835] should_fail_ex+0x262/0x280 [ 39.624545][ T3835] ? get_callchain_buffers+0xbe/0x2f0 [ 39.624571][ T3835] should_failslab+0x8c/0xb0 [ 39.624597][ T3835] __kmalloc_noprof+0xd0/0x4d0 [ 39.624622][ T3835] ? get_callchain_buffers+0xbe/0x2f0 [ 39.624669][ T3835] get_callchain_buffers+0xbe/0x2f0 [ 39.624696][ T3835] perf_event_alloc+0x180a/0x19e0 [ 39.624730][ T3835] __se_sys_perf_event_open+0x674/0x1280 [ 39.624774][ T3835] ? do_futex+0x391/0x460 [ 39.624808][ T3835] __x64_sys_perf_event_open+0x67/0x80 [ 39.624838][ T3835] x64_sys_call+0x1f25/0x2550 [ 39.624871][ T3835] do_syscall_64+0x112/0x360 [ 39.624902][ T3835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.624926][ T3835] RIP: 0033:0x7fc9dc5fe159 [ 39.624940][ T3835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.625064][ T3835] RSP: 002b:00007fc9db057028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 39.625084][ T3835] RAX: ffffffffffffffda RBX: 00007fc9dc885fa0 RCX: 00007fc9dc5fe159 [ 39.625098][ T3835] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000001c0 [ 39.625160][ T3835] RBP: 00007fc9dc695024 R08: 0000000000000002 R09: 0000000000000000 [ 39.625172][ T3835] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 39.625186][ T3835] R13: 00007fc9dc886038 R14: 00007fc9dc885fa0 R15: 00007fff18960c28 [ 39.625206][ T3835] [ 39.647250][ T31] veth1_to_team: left promiscuous mode [ 39.658748][ T31] veth1_to_hsr: left promiscuous mode [ 39.681700][ T31] hsr_slave_0: left promiscuous mode [ 39.696085][ T31] hsr_slave_1: left promiscuous mode [ 39.696711][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.696725][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.702602][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.702738][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.721226][ T31] veth1_macvtap: left promiscuous mode [ 39.721331][ T31] veth0_macvtap: left promiscuous mode [ 39.723403][ T31] veth1_vlan: left promiscuous mode [ 39.723455][ T31] veth0_vlan: left promiscuous mode [ 39.740001][ T3839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.128'. [ 39.857158][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.929872][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 39.951736][ T31] team0 (unregistering): Port device team_slave_1 removed [ 39.962855][ T31] team0 (unregistering): Port device team_slave_0 removed [ 40.006127][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 40.070309][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 40.088450][ T51] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.089200][ T51] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.089236][ T51] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.089319][ T51] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.285867][ T29] audit: type=1400 audit(1788115933.428:322): avc: denied { write } for pid=3858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.357393][ T3880] loop1: detected capacity change from 0 to 512 [ 40.357685][ T3880] ======================================================= [ 40.357685][ T3880] WARNING: The mand mount option has been deprecated and [ 40.357685][ T3880] and is ignored by this kernel. Remove the mand [ 40.357685][ T3880] option from the mount to silence this warning. [ 40.357685][ T3880] ======================================================= [ 40.360310][ T3880] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 40.360440][ T3880] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.360456][ T3880] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.136: bad orphan inode 15 [ 40.360517][ T3880] loop1: lost filesystem error report for type 5 error -117 [ 40.365092][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 40.365110][ C0] EXT4-fs (loop1): initial error at time 1788115933: ext4_orphan_get:1429 [ 40.365132][ C0] EXT4-fs (loop1): last error at time 1788115933: ext4_orphan_get:1429 [ 40.365240][ T3880] ext4_test_bit(bit=14, block=5) = 0 [ 40.365680][ T3880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.380185][ T3880] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 40.479164][ T29] audit: type=1400 audit(1788115933.628:323): avc: denied { write } for pid=3881 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.547285][ T3885] loop3: detected capacity change from 0 to 1024 [ 40.558495][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.579334][ T3885] EXT4-fs: Ignoring removed bh option [ 40.588231][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 40.602668][ T3885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.617294][ T29] audit: type=1400 audit(1788115933.768:324): avc: denied { write } for pid=3883 comm="syz.3.137" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.667502][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.667543][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.667624][ T3821] bridge_slave_0: entered allmulticast mode [ 40.668187][ T3821] bridge_slave_0: entered promiscuous mode [ 40.698454][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.713071][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.713131][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.713232][ T3821] bridge_slave_1: entered allmulticast mode [ 40.713763][ T3821] bridge_slave_1: entered promiscuous mode [ 40.751524][ T3821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.763027][ T3821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.785001][ T3821] team0: Port device team_slave_0 added [ 40.786582][ T3897] loop3: detected capacity change from 0 to 512 [ 40.812113][ T3897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.812251][ T3897] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.843612][ T3821] team0: Port device team_slave_1 added [ 40.871579][ T3821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.871600][ T3821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.871630][ T3821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.916175][ T3821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.916192][ T3821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.916222][ T3821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.956487][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.008641][ T3821] hsr_slave_0: entered promiscuous mode [ 41.009176][ T3821] hsr_slave_1: entered promiscuous mode [ 41.121786][ T3024] 8021q: adding VLAN 0 to HW filter on device eth3 [ 41.132941][ T3821] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.134791][ T3821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.135953][ T3821] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.142053][ T3821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.143601][ T3821] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.150141][ T3821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.151456][ T3821] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.156491][ T3821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.210665][ T3821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.216073][ T3821] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.218412][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.218447][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.222365][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.222405][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.323765][ T3024] 8021q: adding VLAN 0 to HW filter on device eth4 [ 41.344877][ T3821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.463717][ T3821] veth0_vlan: entered promiscuous mode [ 41.467018][ T3821] veth1_vlan: entered promiscuous mode [ 41.478208][ T3821] veth0_macvtap: entered promiscuous mode [ 41.479777][ T3821] veth1_macvtap: entered promiscuous mode [ 41.485601][ T3821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.489776][ T3821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.535519][ T364] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.536100][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.536191][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.562881][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.589942][ T3971] loop5: detected capacity change from 0 to 512 [ 41.590769][ T3971] EXT4-fs: Ignoring removed nobh option [ 41.592031][ T3971] EXT4-fs (loop5): orphan cleanup on readonly fs [ 41.592170][ T3971] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #11: comm syz.5.124: unexpected EA_INODE flag [ 41.592207][ T3971] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 41.592409][ T3971] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.124: couldn't read orphan inode 11 (err -117) [ 41.592433][ T3971] loop5: lost filesystem error report for type 5 error -117 [ 41.592951][ T3971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.669866][ T3821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.195783][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 46.195822][ T29] audit: type=1400 audit(1788115939.348:375): avc: denied { write } for pid=3977 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.239621][ T29] audit: type=1400 audit(1788115939.388:376): avc: denied { write } for pid=3977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.267509][ T29] audit: type=1400 audit(1788115939.418:377): avc: denied { write } for pid=3991 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.678546][ T4006] ip_tables: iptables: counters copy to user failed while replacing table [ 47.691880][ T29] audit: type=1400 audit(1788115940.828:378): avc: denied { read } for pid=4002 comm="syz.3.144" name="event3" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.691936][ T29] audit: type=1400 audit(1788115940.828:379): avc: denied { open } for pid=4002 comm="syz.3.144" path="/dev/input/event3" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.691957][ T29] audit: type=1400 audit(1788115940.828:380): avc: denied { ioctl } for pid=4002 comm="syz.3.144" path="/dev/input/event3" dev="devtmpfs" ino=257 ioctlcmd=0x4520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.691983][ T29] audit: type=1400 audit(1788115940.828:381): avc: denied { ioctl } for pid=4003 comm="syz.5.145" path="socket:[6004]" dev="sockfs" ino=6004 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.828523][ T4014] loop2: detected capacity change from 0 to 512 [ 47.847714][ T4019] loop3: detected capacity change from 0 to 128 [ 47.860870][ T4019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 47.860915][ T4019] System zones: 1-3, 19-19, 35-36 [ 47.861475][ T4019] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 47.864192][ T4014] EXT4-fs (loop2): 1 truncate cleaned up [ 47.864596][ T4014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.884780][ T29] audit: type=1400 audit(1788115941.028:382): avc: denied { write } for pid=4012 comm="syz.2.146" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.890585][ T4014] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.146: bg 0: block 465: padding at end of block bitmap is not set [ 47.890818][ T4014] EXT4-fs (loop2): Remounting filesystem read-only [ 47.928312][ T4019] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.977443][ T4029] loop5: detected capacity change from 0 to 164 [ 47.995524][ T29] audit: type=1400 audit(1788115941.138:383): avc: denied { mount } for pid=4024 comm="syz.5.149" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 48.002773][ T29] audit: type=1400 audit(1788115941.148:384): avc: denied { write } for pid=4016 comm="syz.3.147" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.082926][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.215969][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.278532][ T4050] loop5: detected capacity change from 0 to 8192 [ 48.282028][ T4050] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.298750][ T4050] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.298781][ T4050] FAT-fs (loop5): Filesystem has been set read-only [ 48.298854][ T4050] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.298879][ T4050] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.298899][ T4050] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.298916][ T4050] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.298935][ T4050] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.298963][ T4050] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.298984][ T4050] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.299005][ T4050] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.306347][ T4050] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.645705][ T4083] loop0: detected capacity change from 0 to 4096 [ 48.656284][ T4083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.682595][ T4082] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.156: corrupted inode contents [ 48.682630][ T4082] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.695376][ T4082] EXT4-fs error (device loop0): ext4_dirty_inode:6731: inode #15: comm syz.0.156: mark_inode_dirty error [ 48.695441][ T4082] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.723482][ T4082] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.156: corrupted inode contents [ 48.723523][ T4082] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.724033][ T4082] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.156: mark_inode_dirty error [ 48.724058][ T4082] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.724469][ T4082] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.156: corrupted inode contents [ 48.724492][ T4082] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.724626][ T4082] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.156: mark_inode_dirty error [ 48.724647][ T4082] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.724806][ T4082] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.156: corrupted inode contents [ 48.724902][ T4082] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.725028][ T4082] EXT4-fs error (device loop0): ext4_truncate:4721: inode #15: comm syz.0.156: mark_inode_dirty error [ 48.725050][ T4082] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.725708][ T4082] EXT4-fs error (device loop0): ext4_evict_inode:280: comm syz.0.156: couldn't truncate inode 15 (err -117) [ 48.776285][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.910952][ T4092] loop0: detected capacity change from 0 to 256 [ 48.952712][ T4092] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.952769][ T4092] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.952801][ T4092] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.952891][ T4092] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.952925][ T4092] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.952994][ T4092] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.953030][ T4092] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.953060][ T4092] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.953145][ T4092] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.953252][ T4092] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 49.158571][ T4095] capability: warning: `syz.3.159' uses deprecated v2 capabilities in a way that may be insecure [ 49.293133][ T4104] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 49.293168][ T4104] SELinux: failed to load policy [ 49.316245][ T4110] loop5: detected capacity change from 0 to 128 [ 49.318242][ T4110] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 49.318509][ T4110] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.498770][ T3821] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.533378][ T4122] netlink: 24 bytes leftover after parsing attributes in process `syz.5.170'. [ 49.696706][ T4132] netdevsim netdevsim5: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component [ 49.760069][ T4134] loop2: detected capacity change from 0 to 512 [ 49.932188][ T4144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.180'. [ 49.944782][ T4142] loop0: detected capacity change from 0 to 128 [ 49.955663][ T4142] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.962253][ T4142] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.098499][ T364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.149918][ T364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.204738][ T364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.249321][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.274854][ T364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.394145][ T364] bridge_slave_1: left allmulticast mode [ 50.394174][ T364] bridge_slave_1: left promiscuous mode [ 50.394312][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.613472][ T364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.629389][ T364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.640533][ T364] bond0 (unregistering): Released all slaves [ 50.680824][ T364] hsr_slave_0: left promiscuous mode [ 50.688312][ T364] hsr_slave_1: left promiscuous mode [ 50.688966][ T364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.688988][ T364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.709356][ T364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.709375][ T364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.733877][ T364] veth1_macvtap: left promiscuous mode [ 50.733911][ T364] veth0_macvtap: left promiscuous mode [ 50.733949][ T364] veth1_vlan: left promiscuous mode [ 50.734076][ T364] veth0_vlan: left promiscuous mode [ 50.863858][ T364] team0 (unregistering): Port device team_slave_1 removed [ 50.874185][ T364] team0 (unregistering): Port device team_slave_0 removed [ 50.906786][ T3024] 8021q: adding VLAN 0 to HW filter on device eth5 [ 51.165573][ T4219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.192'. [ 51.201489][ T3024] 8021q: adding VLAN 0 to HW filter on device eth6 [ 51.283732][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.283766][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.283887][ T4183] bridge_slave_0: entered allmulticast mode [ 51.287656][ T4183] bridge_slave_0: entered promiscuous mode [ 51.290150][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.290181][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.290304][ T4183] bridge_slave_1: entered allmulticast mode [ 51.292255][ T4183] bridge_slave_1: entered promiscuous mode [ 51.333532][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.338677][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.371106][ T4183] team0: Port device team_slave_0 added [ 51.376979][ T4183] team0: Port device team_slave_1 added [ 51.440692][ T4225] syzkaller0: entered promiscuous mode [ 51.440720][ T4225] syzkaller0: entered allmulticast mode [ 51.472310][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.472338][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.472363][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.472958][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.473054][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.473078][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.529721][ T4183] hsr_slave_0: entered promiscuous mode [ 51.530149][ T4183] hsr_slave_1: entered promiscuous mode [ 51.530355][ T4183] debugfs: 'hsr0' already exists in 'hsr' [ 51.530368][ T4183] Cannot create hsr debugfs directory [ 51.616331][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 51.616352][ T29] audit: type=1400 audit(1788115944.768:419): avc: denied { write } for pid=4229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.663034][ T29] audit: type=1400 audit(1788115944.808:420): avc: denied { write } for pid=4244 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.703901][ T3024] 8021q: adding VLAN 0 to HW filter on device eth7 [ 51.779037][ T4250] loop3: detected capacity change from 0 to 512 [ 51.804068][ T4250] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.196: Directory hole found for htree index block 0 [ 51.804176][ T4250] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 51.805126][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 51.805141][ C0] EXT4-fs (loop3): initial error at time 1788115944: dx_probe:791: inode 2 [ 51.805167][ C0] EXT4-fs (loop3): last error at time 1788115944: dx_probe:791: inode 2 [ 51.807473][ T4250] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 51.807934][ T4250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.930028][ T29] audit: type=1400 audit(1788115945.078:421): avc: denied { write } for pid=4247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.965793][ T4183] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.972323][ T4183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.982067][ T4183] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 51.991158][ T4183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.993298][ T4183] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.001243][ T4183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.003427][ T4183] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.026938][ T4183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.034707][ T29] audit: type=1400 audit(1788115945.178:422): avc: denied { write } for pid=4264 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.061476][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.098687][ T4263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.120643][ T29] audit: type=1400 audit(1788115945.268:423): avc: denied { write } for pid=4262 comm="syz.1.197" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.157754][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.175780][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.193548][ T4227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.194639][ T810] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.194673][ T810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.231816][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.231852][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.232073][ T29] audit: type=1400 audit(1788115945.338:424): avc: denied { ioctl } for pid=4262 comm="syz.1.197" path="/37/file0/file1" dev="loop1" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.289986][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.340622][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.448660][ T4291] netlink: 'syz.0.201': attribute type 4 has an invalid length. [ 52.478631][ T29] audit: type=1400 audit(1788115945.628:425): avc: denied { write } for pid=4279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.509202][ T4291] netlink: 'syz.0.201': attribute type 4 has an invalid length. [ 52.535255][ T29] audit: type=1400 audit(1788115945.678:426): avc: denied { write } for pid=4302 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.586167][ T29] audit: type=1400 audit(1788115945.728:427): avc: denied { bind } for pid=4298 comm="syz.5.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.606539][ T29] audit: type=1400 audit(1788115945.738:428): avc: denied { write } for pid=4298 comm="syz.5.202" path="socket:[8341]" dev="sockfs" ino=8341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.738389][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.867414][ T3024] 8021q: adding VLAN 0 to HW filter on device eth8 [ 53.049193][ T4183] veth0_vlan: entered promiscuous mode [ 53.051440][ T4183] veth1_vlan: entered promiscuous mode [ 53.063361][ T4183] veth0_macvtap: entered promiscuous mode [ 53.065766][ T4183] veth1_macvtap: entered promiscuous mode [ 53.071877][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.076875][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.115405][ T315] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.115448][ T315] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.115546][ T315] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.115579][ T315] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.158983][ T315] nci: nci_ntf_packet: unknown ntf opcode 0x12c [ 53.817628][ T4398] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.881278][ T4408] set_capacity_and_notify: 3 callbacks suppressed [ 53.881306][ T4408] loop5: detected capacity change from 0 to 1024 [ 53.896514][ T4408] EXT4-fs: inline encryption not supported [ 53.896548][ T4408] EXT4-fs: Ignoring removed bh option [ 53.913204][ T4408] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 53.932212][ T4408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.984326][ T3821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.027229][ T4420] syzkaller0: entered promiscuous mode [ 54.027259][ T4420] syzkaller0: entered allmulticast mode [ 54.114191][ T4425] loop6: detected capacity change from 0 to 1024 [ 54.140758][ T4425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.269075][ T4183] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.589725][ T4460] loop1: detected capacity change from 0 to 256 [ 55.249751][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.228'. [ 55.271305][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.228'. [ 55.327124][ T4566] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 55.390902][ T4569] netlink: 'syz.5.231': attribute type 39 has an invalid length. [ 55.684644][ T4577] netlink: 'syz.1.234': attribute type 12 has an invalid length. [ 55.878604][ T4587] netlink: 276 bytes leftover after parsing attributes in process `syz.5.240'. [ 56.038738][ T4597] loop1: detected capacity change from 0 to 2048 [ 56.047324][ T4359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.056870][ T4597] loop1: p1 < > p3 p4 [ 56.057936][ T4597] loop1: p3 start 16777225 is beyond EOD, truncated [ 56.057955][ T4597] loop1: p4 size 8388608 extends beyond EOD, truncated [ 56.154542][ T4605] netlink: 20 bytes leftover after parsing attributes in process `syz.5.249'. [ 56.446006][ T4618] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 56.854521][ T4640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.263'. [ 56.910525][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 56.910552][ T29] audit: type=1400 audit(1788115950.058:460): avc: denied { mount } for pid=4635 comm="syz.0.262" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 56.998159][ T4643] loop1: detected capacity change from 0 to 8192 [ 57.008964][ T29] audit: type=1400 audit(1788115950.158:461): avc: denied { mount } for pid=4646 comm="syz.3.267" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 57.015147][ T29] audit: type=1400 audit(1788115950.158:462): avc: denied { search } for pid=4646 comm="syz.3.267" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.015178][ T29] audit: type=1400 audit(1788115950.158:463): avc: denied { search } for pid=4646 comm="syz.3.267" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.015252][ T29] audit: type=1400 audit(1788115950.158:464): avc: denied { read } for pid=4646 comm="syz.3.267" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.015273][ T29] audit: type=1400 audit(1788115950.158:465): avc: denied { read open } for pid=4646 comm="syz.3.267" path="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.064925][ T29] audit: type=1400 audit(1788115950.208:466): avc: denied { create } for pid=4648 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 57.076863][ T4649] loop3: detected capacity change from 0 to 1024 [ 57.098616][ T29] audit: type=1400 audit(1788115950.248:467): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 57.102866][ T4649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.102934][ T4649] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.110230][ T29] audit: type=1400 audit(1788115950.258:468): avc: denied { write } for pid=4648 comm="syz.3.268" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.110268][ T29] audit: type=1400 audit(1788115950.258:469): avc: denied { add_name } for pid=4648 comm="syz.3.268" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.114941][ T4649] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 8: comm syz.3.268: lblock 8 mapped to illegal pblock 8 (length 8) [ 57.116415][ T4649] EXT4-fs (loop3): Remounting filesystem read-only [ 57.168993][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.366508][ T4662] netlink: 'syz.6.272': attribute type 1 has an invalid length. [ 57.383008][ T4662] erspan1: entered allmulticast mode [ 57.402368][ T4668] ip_tables: iptables: counters copy to user failed while replacing table [ 57.430369][ T4671] loop0: detected capacity change from 0 to 128 [ 57.441538][ T4671] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 57.451413][ T4671] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.739898][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.783220][ T4692] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 57.824198][ T4688] loop3: detected capacity change from 0 to 1024 [ 57.833280][ T4688] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 57.834033][ T4688] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.834192][ T4688] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 57.962957][ T4699] loop6: detected capacity change from 0 to 1024 [ 57.970081][ T4699] EXT4-fs: inline encryption not supported [ 57.970169][ T4699] EXT4-fs: Ignoring removed bh option [ 57.973657][ T4699] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 57.986690][ T4699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.143797][ T4183] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.161981][ T4712] ip_tables: iptables: counters copy to user failed while replacing table [ 58.356940][ T4722] FAULT_INJECTION: forcing a failure. [ 58.356940][ T4722] name failslab, interval 1, probability 0, space 0, times 0 [ 58.356990][ T4722] CPU: 0 UID: 0 PID: 4722 Comm: syz.0.292 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.357013][ T4722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.357059][ T4722] Call Trace: [ 58.357066][ T4722] [ 58.357075][ T4722] __dump_stack+0x1d/0x30 [ 58.357101][ T4722] dump_stack_lvl+0x95/0xd0 [ 58.357205][ T4722] dump_stack+0x15/0x1b [ 58.357223][ T4722] should_fail_ex+0x262/0x280 [ 58.357245][ T4722] ? dst_alloc+0xbd/0x100 [ 58.357319][ T4722] should_failslab+0x8c/0xb0 [ 58.357344][ T4722] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 58.357372][ T4722] ? dst_alloc+0xbd/0x100 [ 58.357398][ T4722] dst_alloc+0xbd/0x100 [ 58.357492][ T4722] ip_route_input_rcu+0x1463/0x1b80 [ 58.357524][ T4722] ip_route_input_noref+0x5f/0x90 [ 58.357549][ T4722] ip_rcv_finish_core+0x308/0xb50 [ 58.357569][ T4722] ? nf_nat_ipv4_pre_routing+0xb1/0x210 [ 58.357628][ T4722] ? __pfx_nf_nat_ipv4_pre_routing+0x10/0x10 [ 58.357649][ T4722] ip_rcv_finish+0x100/0x1a0 [ 58.357670][ T4722] ip_rcv+0x62/0x160 [ 58.357697][ T4722] ? __pfx_ip_rcv_finish+0x10/0x10 [ 58.357717][ T4722] ? __pfx_ip_rcv+0x10/0x10 [ 58.357753][ T4722] netif_receive_skb+0x137/0x4c0 [ 58.357800][ T4722] ? tun_rx_batched+0xca/0x430 [ 58.357916][ T4722] tun_rx_batched+0x101/0x430 [ 58.357936][ T4722] ? tun_get_user+0x1a65/0x2870 [ 58.357957][ T4722] tun_get_user+0x1fd6/0x2870 [ 58.358070][ T4722] ? ref_tracker_alloc+0x1eb/0x2f0 [ 58.358234][ T4722] tun_chr_write_iter+0x15a/0x210 [ 58.358254][ T4722] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 58.358273][ T4722] vfs_write+0x57f/0x9a0 [ 58.358297][ T4722] ksys_write+0xdc/0x1a0 [ 58.358373][ T4722] __x64_sys_write+0x40/0x50 [ 58.358410][ T4722] x64_sys_call+0x154e/0x2550 [ 58.358431][ T4722] do_syscall_64+0x112/0x360 [ 58.358454][ T4722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.358473][ T4722] RIP: 0033:0x7fc9dc5be98e [ 58.358500][ T4722] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.358515][ T4722] RSP: 002b:00007fc9db056fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.358532][ T4722] RAX: ffffffffffffffda RBX: 00007fc9db0576c0 RCX: 00007fc9dc5be98e [ 58.358544][ T4722] RDX: 0000000000000036 RSI: 0000200000000200 RDI: 00000000000000c8 [ 58.358555][ T4722] RBP: 00007fc9dc695024 R08: 0000000000000000 R09: 0000000000000000 [ 58.358565][ T4722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.358604][ T4722] R13: 00007fc9dc886038 R14: 00007fc9dc885fa0 R15: 00007fff18960c28 [ 58.358619][ T4722] [ 59.270079][ T4793] loop6: detected capacity change from 0 to 512 [ 59.276137][ T4793] EXT4-fs (loop6): 1 truncate cleaned up [ 59.276492][ T4793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.510639][ T4816] mmap: syz.5.302 (4816) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.627129][ T4830] loop1: detected capacity change from 0 to 512 [ 59.629180][ T4830] EXT4-fs: Ignoring removed nobh option [ 59.650394][ T4830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.650456][ T4830] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.778970][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.154541][ T51] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm kworker/u8:3: bg 0: block 465: padding at end of block bitmap is not set [ 60.154775][ T51] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 60.154811][ T51] EXT4-fs (loop6): This should not happen!! Data will be lost [ 60.154811][ T51] [ 60.154825][ T51] EXT4-fs (loop6): Total free blocks count 0 [ 60.154860][ T51] EXT4-fs (loop6): Free/Dirty block details [ 60.154870][ T51] EXT4-fs (loop6): free_blocks=0 [ 60.154882][ T51] EXT4-fs (loop6): dirty_blocks=2 [ 60.154892][ T51] EXT4-fs (loop6): Block reservation details [ 60.154950][ T51] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 60.156785][ T4183] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.186610][ T4874] loop6: detected capacity change from 0 to 128 [ 60.188414][ T4874] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 60.188633][ T4874] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.338819][ T4183] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.572360][ T4912] loop3: detected capacity change from 0 to 1024 [ 60.572772][ T4912] EXT4-fs: Ignoring removed bh option [ 60.592058][ T4912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.596911][ T4912] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.750838][ T4931] loop6: detected capacity change from 0 to 8192 [ 60.769187][ T4931] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.777602][ T4931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.777627][ T4931] FAT-fs (loop6): Filesystem has been set read-only [ 60.777648][ T4931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.777667][ T4931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.777697][ T4931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.777716][ T4931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.777735][ T4931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.777754][ T4931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.777824][ T4931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.777843][ T4931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.778155][ T4931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.950273][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.070532][ T4951] loop3: detected capacity change from 0 to 164 [ 61.327670][ T4998] loop5: detected capacity change from 0 to 512 [ 61.330136][ T4998] EXT4-fs: Ignoring removed oldalloc option [ 61.348020][ T4998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.348112][ T4998] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.351319][ T4998] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.327: corrupted xattr block 32: invalid ea_ino [ 61.351587][ T4998] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.351673][ T4998] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.327: corrupted xattr block 32: invalid ea_ino [ 61.351767][ T4998] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.351790][ T4998] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.327: corrupted xattr block 32: invalid ea_ino [ 61.352097][ T4998] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.353936][ T4998] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.327: corrupted xattr block 32: invalid ea_ino [ 61.354173][ T4998] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.354197][ T4998] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.327: corrupted xattr block 32: invalid ea_ino [ 61.354372][ T4998] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.354697][ T4998] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.327: corrupted xattr block 32: invalid ea_ino [ 61.354895][ T4998] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.354931][ T4998] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.327: corrupted xattr block 32: invalid ea_ino [ 61.356751][ T4998] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.327: corrupted xattr block 32: invalid ea_ino [ 61.356910][ T4998] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.356934][ T4998] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.327: corrupted xattr block 32: invalid ea_ino [ 61.357094][ T4998] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.411371][ T5002] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.327: corrupted xattr block 32: invalid ea_ino [ 61.413010][ T5002] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.413205][ T5002] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.423408][ T5002] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.423673][ T5002] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.603034][ T5007] loop3: detected capacity change from 0 to 2048 [ 61.614456][ T5007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.656448][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.743127][ T4734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.764450][ T5011] loop3: detected capacity change from 0 to 8192 [ 61.787539][ T5011] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.806646][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 61.806682][ T5011] FAT-fs (loop3): Filesystem has been set read-only [ 61.806747][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 61.806772][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 61.806793][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 61.806812][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 61.806849][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 61.806870][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 61.806891][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 61.807006][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 61.808642][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 61.941038][ T3821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.012569][ T5020] syzkaller0: entered promiscuous mode [ 62.012603][ T5020] syzkaller0: entered allmulticast mode [ 62.145600][ T5030] loop6: detected capacity change from 0 to 512 [ 62.153721][ T5030] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.163338][ T5030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.163428][ T5030] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.192840][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 62.192866][ T29] audit: type=1400 audit(1788115955.338:535): avc: denied { write } for pid=5027 comm="syz.6.347" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.224401][ T29] audit: type=1400 audit(1788115955.368:536): avc: denied { append } for pid=5027 comm="syz.6.347" path="/31/bus/cpuset.effective_mems" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.360180][ T29] audit: type=1400 audit(1788115955.508:537): avc: denied { shutdown } for pid=5056 comm="syz.6.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.387821][ T29] audit: type=1400 audit(1788115955.528:538): avc: denied { read } for pid=5056 comm="syz.6.341" path="socket:[9342]" dev="sockfs" ino=9342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.630291][ T5080] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.633365][ T29] audit: type=1400 audit(1788115955.778:539): avc: denied { write } for pid=5077 comm="syz.1.346" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.414040][ T29] audit: type=1400 audit(1788115956.558:540): avc: denied { getattr } for pid=5173 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1361 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.420922][ T29] audit: type=1400 audit(1788115956.568:541): avc: denied { watch watch_reads } for pid=5166 comm="syz.6.363" path="/39/file1/file1" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.421725][ T29] audit: type=1400 audit(1788115956.568:542): avc: denied { write } for pid=5166 comm="syz.6.363" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.426996][ T29] audit: type=1400 audit(1788115956.578:543): avc: denied { write } for pid=5166 comm="syz.6.363" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.427022][ T29] audit: type=1400 audit(1788115956.578:544): avc: denied { write } for pid=5166 comm="syz.6.363" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.552366][ T5180] can0: slcan on ttyS3. [ 63.689952][ T5188] Set syz1 is full, maxelem 4 reached [ 63.725224][ T5163] can0 (unregistered): slcan off ttyS3. [ 63.874297][ T5206] sctp: [Deprecated]: syz.6.367 (pid 5206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 63.874297][ T5206] Use struct sctp_sack_info instead [ 63.954637][ T5215] FAULT_INJECTION: forcing a failure. [ 63.954637][ T5215] name failslab, interval 1, probability 0, space 0, times 0 [ 63.954681][ T5215] CPU: 1 UID: 0 PID: 5215 Comm: syz.1.370 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.954714][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.954725][ T5215] Call Trace: [ 63.954733][ T5215] [ 63.954740][ T5215] __dump_stack+0x1d/0x30 [ 63.954794][ T5215] dump_stack_lvl+0x95/0xd0 [ 63.954818][ T5215] dump_stack+0x15/0x1b [ 63.954840][ T5215] should_fail_ex+0x262/0x280 [ 63.954900][ T5215] ? do_getname+0x2e/0x1c0 [ 63.954991][ T5215] should_failslab+0x8c/0xb0 [ 63.955015][ T5215] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 63.955041][ T5215] ? do_getname+0x2e/0x1c0 [ 63.955151][ T5215] do_getname+0x2e/0x1c0 [ 63.955256][ T5215] getname_flags+0x1d/0x30 [ 63.955291][ T5215] do_sys_openat2+0x6c/0x130 [ 63.955312][ T5215] __x64_sys_openat+0xf2/0x120 [ 63.955407][ T5215] x64_sys_call+0x1f72/0x2550 [ 63.955434][ T5215] do_syscall_64+0x112/0x360 [ 63.955463][ T5215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.955531][ T5215] RIP: 0033:0x7f37c727e98e [ 63.955548][ T5215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.955566][ T5215] RSP: 002b:00007f37c5d16f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 63.955595][ T5215] RAX: ffffffffffffffda RBX: 00007f37c5d176c0 RCX: 00007f37c727e98e [ 63.955610][ T5215] RDX: 0000000000000000 RSI: 00007f37c735475f RDI: ffffffffffffff9c [ 63.955660][ T5215] RBP: 00007f37c7355024 R08: 0000000000000000 R09: 0000000000000000 [ 63.955673][ T5215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.955727][ T5215] R13: 00007f37c7546038 R14: 00007f37c7545fa0 R15: 00007ffc2f7afa88 [ 63.955747][ T5215] [ 64.570934][ T5254] set_capacity_and_notify: 2 callbacks suppressed [ 64.570969][ T5254] loop0: detected capacity change from 0 to 256 [ 64.662785][ T5271] syz_tun: entered allmulticast mode [ 64.664902][ T5271] syz_tun: left allmulticast mode [ 64.929620][ T5304] loop3: detected capacity change from 0 to 128 [ 64.940995][ T5304] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.953783][ T5300] loop1: detected capacity change from 0 to 512 [ 64.995983][ T5300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.020241][ T5300] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.105417][ T5319] capability: warning: `syz.0.386' uses 32-bit capabilities (legacy support in use) [ 65.339537][ T5339] netlink: 52 bytes leftover after parsing attributes in process `syz.3.397'. [ 65.339930][ T5339] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.340084][ T5339] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.388818][ T5339] netlink: 52 bytes leftover after parsing attributes in process `syz.3.397'. [ 65.495426][ T5349] xt_hashlimit: size too large, truncated to 1048576 [ 65.535639][ T5354] loop5: detected capacity change from 0 to 128 [ 65.557271][ T5354] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.684206][ T5358] sctp: [Deprecated]: syz.3.404 (pid 5358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.684206][ T5358] Use struct sctp_sack_info instead [ 66.104911][ T5375] netlink: 7 bytes leftover after parsing attributes in process `syz.5.412'. [ 66.354780][ T5396] loop5: detected capacity change from 0 to 128 [ 66.361937][ T5396] EXT4-fs: Ignoring removed i_version option [ 66.361972][ T5396] EXT4-fs: Ignoring removed oldalloc option [ 66.380999][ T5396] EXT4-fs mount: 11 callbacks suppressed [ 66.381026][ T5396] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.388136][ T5396] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.407932][ T5396] EXT4-fs error (device loop5): dx_make_map:1296: inode #2: block 34: comm syz.5.418: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 66.408213][ T5396] EXT4-fs error (device loop5) in do_split:2029: Corrupt filesystem [ 66.463279][ T3821] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.510914][ T5405] bond0: option arp_interval: invalid value (!sel) [ 66.510940][ T5405] bond0: option arp_interval: allowed values 0 - 2147483647 [ 66.519198][ T5402] Set syz1 is full, maxelem 4 reached [ 66.629081][ T5423] netlink: 'syz.5.429': attribute type 1 has an invalid length. [ 66.629104][ T5423] netlink: 'syz.5.429': attribute type 4 has an invalid length. [ 66.629126][ T5423] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.429'. [ 66.630185][ T5423] netlink: 'syz.5.429': attribute type 1 has an invalid length. [ 66.630199][ T5423] netlink: 'syz.5.429': attribute type 4 has an invalid length. [ 66.630209][ T5423] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.429'. [ 66.671598][ T5427] device-mapper: ioctl: Unable to rename non-existent device, to uuid j [ 66.944554][ T5449] Set syz1 is full, maxelem 4 reached [ 66.974968][ T5454] loop5: detected capacity change from 0 to 512 [ 66.984988][ T5454] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.006549][ T5454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.006649][ T5454] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.089550][ T3821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.251978][ T5476] loop0: detected capacity change from 0 to 256 [ 67.910149][ T5481] netlink: 31 bytes leftover after parsing attributes in process `syz.3.453'. [ 67.980333][ T5486] loop3: detected capacity change from 0 to 256 [ 68.376531][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 68.376564][ T29] audit: type=1400 audit(1788115961.528:600): avc: denied { allowed } for pid=5492 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.408572][ T29] audit: type=1400 audit(1788115961.558:601): avc: denied { create } for pid=5494 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.430734][ T29] audit: type=1400 audit(1788115961.578:602): avc: denied { bind } for pid=5494 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.453050][ T29] audit: type=1400 audit(1788115961.598:603): avc: denied { listen } for pid=5494 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.453074][ T29] audit: type=1400 audit(1788115961.598:604): avc: denied { write } for pid=5494 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.611651][ T5488] ================================================================== [ 68.611679][ T5488] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 68.611707][ T5488] [ 68.611713][ T5488] write to 0xffff88810e17dca0 of 8 bytes by task 5486 on cpu 1: [ 68.611727][ T5488] filemap_splice_read+0x52a/0x790 [ 68.611746][ T5488] splice_direct_to_actor+0x261/0x680 [ 68.611781][ T5488] do_splice_direct+0x119/0x1a0 [ 68.611812][ T5488] do_sendfile+0x37d/0x640 [ 68.611843][ T5488] __x64_sys_sendfile64+0x105/0x150 [ 68.611874][ T5488] x64_sys_call+0x1015/0x2550 [ 68.611899][ T5488] do_syscall_64+0x112/0x360 [ 68.611924][ T5488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.611942][ T5488] [ 68.611947][ T5488] write to 0xffff88810e17dca0 of 8 bytes by task 5488 on cpu 0: [ 68.611960][ T5488] filemap_splice_read+0x52a/0x790 [ 68.611978][ T5488] splice_direct_to_actor+0x261/0x680 [ 68.612008][ T5488] do_splice_direct+0x119/0x1a0 [ 68.612038][ T5488] do_sendfile+0x37d/0x640 [ 68.612069][ T5488] __x64_sys_sendfile64+0x105/0x150 [ 68.612100][ T5488] x64_sys_call+0x1015/0x2550 [ 68.612125][ T5488] do_syscall_64+0x112/0x360 [ 68.612150][ T5488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.612170][ T5488] [ 68.612174][ T5488] value changed: 0x0000000000000923 -> 0x0000000000000924 [ 68.612186][ T5488] [ 68.612190][ T5488] Reported by Kernel Concurrency Sanitizer on: [ 68.612201][ T5488] CPU: 0 UID: 0 PID: 5488 Comm: syz.3.455 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.612235][ T5488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.612248][ T5488] ================================================================== [ 69.578584][ T5413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512