last executing test programs: 1m55.928577929s ago: executing program 3 (id=161): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x200008, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000940)="$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") io_uring_setup(0x1b7e, 0x0) fspick(r1, &(0x7f0000000d00)='./dev/ttyS0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}}, {{&(0x7f0000000e40)=@file={0x1, './dev/ttyS0\x00'}, 0x6e, 0x0}}], 0x2, 0x604e054) 1m55.834536011s ago: executing program 32 (id=161): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x200008, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000940)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") io_uring_setup(0x1b7e, 0x0) fspick(r1, &(0x7f0000000d00)='./dev/ttyS0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}}, {{&(0x7f0000000e40)=@file={0x1, './dev/ttyS0\x00'}, 0x6e, 0x0}}], 0x2, 0x604e054) 1m48.961075509s ago: executing program 2 (id=277): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000340)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000025c0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)="95", 0x1}, {0x0}], 0x2, &(0x7f0000000640)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0xfffffffe, 0xb, r3}}], 0x20, 0x95}], 0x1, 0x880) 1m48.93735941s ago: executing program 2 (id=279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000008000000e47f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m48.882707881s ago: executing program 1 (id=280): ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) rseq(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x7}, 0xfffffffffffffdd0, 0x2, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) 1m48.594866998s ago: executing program 2 (id=282): openat$zero(0xffffffffffffff9c, 0x0, 0x8602, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4a0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x2, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {r2, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) 1m48.440685992s ago: executing program 2 (id=285): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000340)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@nolazytime}, {@bh}, {@noinit_itable}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000001bc0)='./bus\x00', 0x0) mount(&(0x7f0000001c00)=@loop={'/dev/loop', 0x0}, &(0x7f0000001c40)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000001c80)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0xa, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) rename(&(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001ec0)='./file0\x00') 1m48.187697838s ago: executing program 2 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='27', 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) 1m48.064440871s ago: executing program 1 (id=291): sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000001a880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f000001a8c0)='./proc\x00', &(0x7f000001a900)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000001a940)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) write(r0, &(0x7f000001a980)='27', 0x2) syz_usb_connect(0x0, 0x36, &(0x7f000001a9c0)=ANY=[], 0x0) 1m47.729403589s ago: executing program 2 (id=294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000780)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000007c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000800)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000840)={0xa, 0x4e22, 0x0, @remote}, 0x1c) shutdown(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000880)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0xffd}}}}}}}, 0x0) 1m47.616330662s ago: executing program 33 (id=294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000780)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000007c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000800)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000840)={0xa, 0x4e22, 0x0, @remote}, 0x1c) shutdown(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000880)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0xffd}}}}}}}, 0x0) 1m47.29116886s ago: executing program 1 (id=303): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000640)="c4d250", 0x3}], 0x1) 1m43.889469963s ago: executing program 1 (id=332): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file2\x00', 0x180c8, &(0x7f0000000180)=ANY=[], 0x1, 0x242, &(0x7f00000001c0)="$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") open(&(0x7f00000008c0)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000900)=@loop={'/dev/loop', 0x0}, &(0x7f0000000940)='./bus\x00', 0x0, 0x5000, 0x0) creat(0x0, 0x12) r0 = open(&(0x7f0000000f00)='./bus\x00', 0x8000, 0xe0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f00000010c0)='./file1\x00', 0x14927e, 0x20) 1m43.542726411s ago: executing program 1 (id=336): r0 = io_uring_setup(0x3bc, &(0x7f0000000280)={0x0, 0x8951, 0x2, 0x0, 0x345}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 1m43.313643787s ago: executing program 1 (id=343): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) setpriority(0x2, 0x0, 0x0) 1m43.286253018s ago: executing program 34 (id=343): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) setpriority(0x2, 0x0, 0x0) 1m20.146767893s ago: executing program 4 (id=610): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000900)='7', 0x1) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) 1m19.946778758s ago: executing program 4 (id=612): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000001c0)=0x79, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000280)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m19.764772322s ago: executing program 4 (id=615): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x182, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4008, 0x8bfb, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) r1 = socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x400c890) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r1, 0x0, 0x0}, 0x20) 1m19.687598424s ago: executing program 4 (id=618): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x2804800, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x3, 0x1213, &(0x7f0000000b40)="$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") ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001e80)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001ec0)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000001f00)="c721ebeac581aeff06bcbbe14f7135cdbf10a73fea93a10ad9afe20abedf1b8891d1f7a9a9263a97fd44e9fc526d22c1966b1eeb12335734a5498dff41d7850d50985df8022dbea95befb8cf0d619f00", 0x50) sendfile(r1, r0, 0x0, 0x2fffe) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1m18.590954231s ago: executing program 4 (id=642): socket$netlink(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044010}, 0x20041040) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000000000000000000001000000950000000000000089e77f8ebcaddbfc4a227578d1cb976ecc68c344d8ff40ff622e0468de3e8635b575a60c2f52f68a3d09ae0786d54b8566432a45477d69e5253bd7789fc72a4a0a98dffafe6f807759dad9dd8a388bd108b1a1193dfad8076886fe0696fae3d18be4f67b3c32efec1fa3716b5081948eaa4462801032f5629435a871d5f4ed206bc04fb1cfebcaa01f15abc5266dfe125c3159992515f536b9c9108988abde"], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001280)={0x0, 0x1}, 0x8}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e00), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000e40)='memory.stat\x00', 0x0, 0x0) pread64(r6, &(0x7f00000012c0)=""/4093, 0xffd, 0x202df) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000c40), 0x4) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000cc0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRES32=r8], 0x1c}}, 0x4008054) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000ec0)={'syzkaller0\x00', 0x7101}) getpgrp(0xffffffffffffffff) r9 = socket$inet6(0xa, 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000bc0)={@mcast2, 0x800000, 0x0, 0xff, 0x2, 0x4, 0x6}, 0x20) 1m17.711387622s ago: executing program 4 (id=655): socket$netlink(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x8044010}, 0x20041040) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e00), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000e40)='memory.stat\x00', 0x0, 0x0) pread64(r5, &(0x7f00000012c0)=""/4093, 0xffd, 0x202df) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000c40), 0x4) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000cc0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES32=r7], 0x1c}}, 0x4008054) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000ec0)={'syzkaller0\x00', 0x7101}) getpgrp(0xffffffffffffffff) r8 = socket$inet6(0xa, 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000bc0)={@mcast2, 0x800000, 0x0, 0xff, 0x2, 0x4, 0x6}, 0x20) 1m17.297973592s ago: executing program 35 (id=655): socket$netlink(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x8044010}, 0x20041040) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e00), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000e40)='memory.stat\x00', 0x0, 0x0) pread64(r5, &(0x7f00000012c0)=""/4093, 0xffd, 0x202df) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000c40), 0x4) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000cc0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES32=r7], 0x1c}}, 0x4008054) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000ec0)={'syzkaller0\x00', 0x7101}) getpgrp(0xffffffffffffffff) r8 = socket$inet6(0xa, 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000bc0)={@mcast2, 0x800000, 0x0, 0xff, 0x2, 0x4, 0x6}, 0x20) 18.281245643s ago: executing program 8 (id=1233): syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x44}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0x0, 0x6, 0x5, 0x7}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0xfffc}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000500)) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(r2, &(0x7f0000000540)='./file0\x00', r2, 0x0, 0x4) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) 18.183406906s ago: executing program 8 (id=1234): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r1}, &(0x7f0000000cc0), &(0x7f0000000d00)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000d40)={r1, &(0x7f0000000d80), &(0x7f0000000dc0)=""/10, 0x4}, 0x20) 18.111419927s ago: executing program 8 (id=1235): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) close(0x4) 17.728971897s ago: executing program 8 (id=1238): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x2804800, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x3, 0x1213, &(0x7f0000000b40)="$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") ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001e80)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001ec0)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000001f00)="c721ebeac581aeff06bcbbe14f7135cdbf10a73fea93a10ad9afe20abedf1b8891d1f7a9a9263a97fd44e9fc526d22c1966b1eeb12335734a5498dff41d7850d50985df8022dbea95befb8cf0d619f00", 0x50) sendfile(r1, r0, 0x0, 0x2fffe) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 16.234812823s ago: executing program 8 (id=1245): syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240), 0x4) sendto$inet(r0, &(0x7f0000000280), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000002c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 15.927496361s ago: executing program 6 (id=1249): socket$netlink(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044010}, 0x20041040) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000000000000000000001000000950000000000000089e77f8ebcaddbfc4a227578d1cb976ecc68c344d8ff40ff622e0468de3e8635b575a60c2f52f68a3d09ae0786d54b8566432a45477d69e5253bd7789fc72a4a0a98dffafe6f807759dad9dd8a388bd108b1a1193dfad8076886fe0696fae3d18be4f67b3c32efec1fa3716b5081948eaa4462801032f5629435a871d5f4ed206bc04fb1cfebcaa01f15abc5266dfe125c3159992515f536b9c9108988abdea6df3dbb4d8a8998bdd76dea"], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001280)={0x0, 0x1}, 0x8}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e00), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000e40)='memory.stat\x00', 0x0, 0x0) pread64(r6, &(0x7f00000012c0)=""/4093, 0xffd, 0x202df) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000c40), 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000cc0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x4008054) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000ec0)={'syzkaller0\x00', 0x7101}) getpgrp(0xffffffffffffffff) r7 = socket$inet6(0xa, 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000bc0)={@mcast2, 0x800000, 0x0, 0xff, 0x2, 0x4, 0x6}, 0x20) 14.375610719s ago: executing program 8 (id=1252): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000010280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x100, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 14.372670919s ago: executing program 6 (id=1255): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x8}, 0xecc0, 0x1224, 0x4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = semget(0x2, 0x4, 0x200) semtimedop(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x80000, 0x5) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000b80), 0x1, 0x0) writev(r1, &(0x7f0000000bc0)=[{&(0x7f0000000c00)='4', 0x1}], 0x1) 14.237432672s ago: executing program 36 (id=1252): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000010280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x100, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 14.118461695s ago: executing program 6 (id=1260): r0 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) unshare(0x6a040000) write(r1, &(0x7f0000000000)='9', 0x1) unshare(0x6a060680) 13.041400821s ago: executing program 6 (id=1272): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x2804800, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x3, 0x1213, &(0x7f0000000b40)="$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") ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001e80)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001ec0)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000001f00)="c721ebeac581aeff06bcbbe14f7135cdbf10a73fea93a10ad9afe20abedf1b8891d1f7a9a9263a97fd44e9fc526d22c1966b1eeb12335734a5498dff41d7850d50985df8022dbea95befb8cf0d619f00", 0x50) sendfile(r1, r0, 0x0, 0x2fffe) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11.953946218s ago: executing program 6 (id=1277): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='enable_event:sched:sc', 0x15) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r2, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000001040)="259a53f271a76d2688644c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.718529748s ago: executing program 6 (id=1284): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) 10.669640199s ago: executing program 37 (id=1284): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) 4.90390686s ago: executing program 7 (id=1312): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x2008001, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 4.416484372s ago: executing program 9 (id=1313): bpf$ENABLE_STATS(0x20, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000540)={0x1f}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x4, 0x4}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xd, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x11}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x1, 0x8000399}) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x40, 0x0, 0x163}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 4.412173312s ago: executing program 7 (id=1314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) connect$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1, 0xff, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xe}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20040080}, 0x20000050) 4.030475111s ago: executing program 7 (id=1318): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x2814000, &(0x7f0000000580)={[{@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@noblock_validity}, {@nouid32}, {@dioread_nolock}, {@norecovery}, {@nomblk_io_submit}, {@delalloc}, {@nolazytime}]}, 0x1, 0x5b1, &(0x7f0000000640)="$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") syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file1\x00', 0x400, &(0x7f0000000c80)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@discard}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000d00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./file1\x00', 0x183042, 0x25) r2 = open(&(0x7f0000001200)='./file1\x00', 0x4807e, 0xdc) fallocate(r2, 0x0, 0x0, 0x8800000) fallocate(r1, 0x20, 0x0, 0x8000) 3.27833299s ago: executing program 7 (id=1319): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket(0x9, 0x8080f, 0x5) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 3.061303175s ago: executing program 9 (id=1320): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15917939fc24ceb8}, 0x94) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x1, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0x4) close(0x3) 3.059015345s ago: executing program 5 (id=1321): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x62181) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xfffffffd, 0x2, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = fsopen(&(0x7f0000000140)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000011c0)={0x80001009, 0xffffffff, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r1, &(0x7f0000001280)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 2.902601929s ago: executing program 0 (id=1322): unshare(0x22020600) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ifreq(r0, 0x891d, 0x0) listen(0xffffffffffffffff, 0x40000) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r1 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xe83e, 0xc000, 0x2000008, 0x4c1}) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x400000000001}, &(0x7f0000000000)={0x800002100000001e, 0x0, 0x927b, 0x3, 0x0, 0x2000000000401, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.422190421s ago: executing program 3 (id=1285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.125229588s ago: executing program 3 (id=1324): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='enable_event:sched:sc', 0x15) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r2, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000001040)="259a53f271a76d2688644c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.05455402s ago: executing program 5 (id=1325): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1.970101182s ago: executing program 9 (id=1326): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f00000003c0)='27', 0x2) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 1.834261325s ago: executing program 0 (id=1327): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$tipc(0xffffffffffffffff, &(0x7f0000000d80)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000dc0)={0x1042, 0x0, 0x3}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000ec0)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000f00)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10001, 0x1, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000f80)={&(0x7f0000000fc0)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}}, 0x80, 0x0, 0x0, &(0x7f0000001040)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.833843045s ago: executing program 5 (id=1328): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) listen(0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 1.65641881s ago: executing program 9 (id=1329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a01040000000000d300000a8500040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a6e652754ef9b5d172f7dcc5c9351c6d3c92d12f6194485d30c95f0c75aaddf1a35c204574588cab1e25dc66d27f82e231f5900cccfe58737b398dc554063f6a47445aea6bd13399515b9c0d386242901873d34a8f349a57e4fc0a2a38b1c60c61f5978252080d0115ec253d8079a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x8010743f, 0x17) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.532614162s ago: executing program 3 (id=1330): setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xe761}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0x16}, 0x0, 0x2, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000100)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.402145776s ago: executing program 0 (id=1331): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="230000000800000002000000ffff0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r1}, 0xc) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sndseq(0xffffffffffffff9c, 0x0, 0x183c81) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}}, 0x0) 1.373000256s ago: executing program 5 (id=1332): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x200000000000ffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000015000000850000002300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) 1.22727306s ago: executing program 0 (id=1333): syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000500), &(0x7f0000000540)=@tcp=r2}, 0x20) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 722.553972ms ago: executing program 3 (id=1334): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f15}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 722.120992ms ago: executing program 5 (id=1335): perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000a40)=ANY=[], 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x480000, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40480, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="03038880bb1701a54bfa2e90cd0b"], 0x21}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 720.698412ms ago: executing program 0 (id=1344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000006c0)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x33, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x1f, 0x0, @wg=@data={0x4, 0x9, 0x5, "4fc83610e88385"}}}}, 0x41) 617.518955ms ago: executing program 7 (id=1336): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x8}, 0xecc0, 0x1224, 0x4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = semget(0x2, 0x4, 0x200) semtimedop(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x80000, 0x5) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000b80), 0x1, 0x0) writev(r1, &(0x7f0000000bc0)=[{&(0x7f0000000c00)='4', 0x1}], 0x1) 538.974157ms ago: executing program 9 (id=1337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) connect$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1, 0xff, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xe}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20040080}, 0x20000050) 361.153621ms ago: executing program 0 (id=1338): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x6, 0xa, 0x40, 0x7, 0x0, 0x2, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x4986, 0x17e, 0x4, 0x7, 0x82, 0x7, 0x6, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x2000}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xe, 0x0, 0x0, 0xa, 0x0, 0x7, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000280), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 106.914567ms ago: executing program 3 (id=1339): r0 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) unshare(0x6a040000) write(r1, &(0x7f0000000000)='9', 0x1) unshare(0x6a060680) 102.881608ms ago: executing program 7 (id=1350): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0xc00003a7) utime(&(0x7f0000000180)='./file0\x00', 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000740)={0x201d}) epoll_pwait(r2, &(0x7f0000000840)=[{}], 0x1, 0x1, 0x0, 0x0) 68.976428ms ago: executing program 5 (id=1340): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x0, {0x2, 0xff}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f00000002c0)={0x1d, r1, 0x0, {0x3, 0xff, 0x1}, 0xfe}, 0x18) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000540)="01c17ff12499d5064a6d", 0xa}], 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000003c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000400)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)="f1ddb91262d8893973", 0x9}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000fe) 0s ago: executing program 9 (id=1341): capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x200000, 0x200000, 0x7}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="02", 0x1, 0x14, 0x0, 0x0) shutdown(r0, 0x1) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) kernel console output (not intermixed with test programs): 5): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.866466][ T6053] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 88.876213][ T6053] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.700: inode #15: comm syz.5.700: iget: illegal inode # [ 88.876307][ T6053] loop5: lost filesystem error report for type 5 error -117 [ 88.879291][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 88.879310][ C1] EXT4-fs (loop5): initial error at time 1792156939: ext4_orphan_get:1403 [ 88.879382][ C1] EXT4-fs (loop5): last error at time 1792156939: ext4_orphan_get:1403 [ 88.881519][ T6053] EXT4-fs (loop5): Remounting filesystem read-only [ 88.888202][ T6053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.894012][ T5883] team0: Port device team_slave_0 added [ 88.953328][ T5883] team0: Port device team_slave_1 added [ 88.997671][ T30] audit: type=1400 audit(1792156940.107:645): avc: denied { write } for pid=6029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.053478][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.053499][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.053575][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.055344][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.055359][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.055391][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.092461][ T30] audit: type=1400 audit(1792156940.177:646): avc: denied { write } for pid=6051 comm="syz.5.700" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.122799][ T4517] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.186880][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.214553][ T30] audit: type=1400 audit(1792156940.327:647): avc: denied { write } for pid=6067 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.326764][ T5883] hsr_slave_0: entered promiscuous mode [ 89.340728][ T5883] hsr_slave_1: entered promiscuous mode [ 89.346550][ T3026] 8021q: adding VLAN 0 to HW filter on device eth15 [ 89.390809][ T6075] FAULT_INJECTION: forcing a failure. [ 89.390809][ T6075] name failslab, interval 1, probability 0, space 0, times 0 [ 89.390838][ T6075] CPU: 1 UID: 0 PID: 6075 Comm: syz.5.702 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.390863][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.390878][ T6075] Call Trace: [ 89.390888][ T6075] [ 89.390979][ T6075] __dump_stack+0x1d/0x30 [ 89.391092][ T6075] dump_stack_lvl+0x95/0xd0 [ 89.391125][ T6075] dump_stack+0x15/0x1b [ 89.391151][ T6075] should_fail_ex+0x262/0x280 [ 89.391233][ T6075] should_failslab+0x8c/0xb0 [ 89.391281][ T6075] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 89.391358][ T6075] ? cond_policydb_dup+0x280/0x4d0 [ 89.391403][ T6075] ? cond_policydb_dup+0x280/0x4d0 [ 89.391450][ T6075] kmemdup_noprof+0x2b/0x70 [ 89.391493][ T6075] cond_policydb_dup+0x280/0x4d0 [ 89.391539][ T6075] security_set_bools+0xa1/0x350 [ 89.391580][ T6075] sel_commit_bools_write+0x1e9/0x270 [ 89.391671][ T6075] vfs_writev+0x420/0x8c0 [ 89.391722][ T6075] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 89.391776][ T6075] do_writev+0xe9/0x210 [ 89.391810][ T6075] __x64_sys_writev+0x45/0x50 [ 89.391837][ T6075] x64_sys_call+0x23c9/0x2550 [ 89.391974][ T6075] do_syscall_64+0x112/0x360 [ 89.392016][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.392050][ T6075] RIP: 0033:0x7fc22e30e559 [ 89.392153][ T6075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.392190][ T6075] RSP: 002b:00007fc22cd67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 89.392224][ T6075] RAX: ffffffffffffffda RBX: 00007fc22e595fa0 RCX: 00007fc22e30e559 [ 89.392247][ T6075] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000005 [ 89.392328][ T6075] RBP: 00007fc22e3a58b0 R08: 0000000000000000 R09: 0000000000000000 [ 89.392345][ T6075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.392370][ T6075] R13: 00007fc22e596038 R14: 00007fc22e595fa0 R15: 00007ffdf00433d8 [ 89.392400][ T6075] [ 89.653235][ T30] audit: type=1400 audit(1792156940.767:648): avc: denied { create } for pid=6086 comm="syz.7.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.656700][ T30] audit: type=1400 audit(1792156940.767:649): avc: denied { write } for pid=6086 comm="syz.7.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.715994][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.706'. [ 89.716027][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.706'. [ 89.814677][ T6075] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.114605][ T30] audit: type=1400 audit(1792156941.227:650): avc: denied { read } for pid=6112 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.272606][ T5883] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 90.289416][ T5883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.293572][ T5883] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 90.303899][ T5883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.313813][ T5883] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 90.344035][ T5883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.347773][ T5883] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 90.371998][ T5883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.439534][ T3026] 8021q: adding VLAN 0 to HW filter on device eth16 [ 90.578833][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.614547][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.643112][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.643166][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.686998][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.687053][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.731736][ T6145] FAULT_INJECTION: forcing a failure. [ 90.731736][ T6145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.731778][ T6145] CPU: 0 UID: 0 PID: 6145 Comm: syz.5.715 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.731816][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.731902][ T6145] Call Trace: [ 90.731912][ T6145] [ 90.731922][ T6145] __dump_stack+0x1d/0x30 [ 90.731951][ T6145] dump_stack_lvl+0x95/0xd0 [ 90.731988][ T6145] dump_stack+0x15/0x1b [ 90.732022][ T6145] should_fail_ex+0x262/0x280 [ 90.732171][ T6145] should_fail+0xb/0x20 [ 90.732273][ T6145] should_fail_usercopy+0x1a/0x20 [ 90.732321][ T6145] copy_fpstate_to_sigframe+0x61c/0x7b0 [ 90.732366][ T6145] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 90.732503][ T6145] ? pv_queued_spin_unlock_traced+0x2d/0xb0 [ 90.732564][ T6145] ? x86_task_fpu+0x36/0x60 [ 90.732599][ T6145] get_sigframe+0x34f/0x470 [ 90.732639][ T6145] ? _raw_spin_unlock_irq+0x9/0x30 [ 90.732739][ T6145] x64_setup_rt_frame+0xa7/0x4e0 [ 90.732789][ T6145] arch_do_signal_or_restart+0x27c/0x480 [ 90.732846][ T6145] exit_to_user_mode_loop+0x15d/0x8c0 [ 90.733045][ T6145] ? trace_syscall_exit+0xfe/0x120 [ 90.733082][ T6145] do_syscall_64+0x212/0x360 [ 90.733126][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.733162][ T6145] RIP: 0033:0x7fc22e30e559 [ 90.733202][ T6145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.733230][ T6145] RSP: 002b:00007fc22cd67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 90.733266][ T6145] RAX: fffffffffffffffc RBX: 00007fc22e595fa0 RCX: 00007fc22e30e559 [ 90.733317][ T6145] RDX: 0000200000002180 RSI: 0000000000000000 RDI: 0000000000000002 [ 90.733339][ T6145] RBP: 00007fc22e3a58b0 R08: 0000000000000000 R09: 0000000000000000 [ 90.733355][ T6145] R10: 00002000000021c0 R11: 0000000000000246 R12: 0000000000000000 [ 90.733372][ T6145] R13: 00007fc22e596038 R14: 00007fc22e595fa0 R15: 00007ffdf00433d8 [ 90.733401][ T6145] [ 91.218126][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 91.605012][ T6190] netlink: 'syz.6.723': attribute type 10 has an invalid length. [ 91.605038][ T6190] netlink: 55 bytes leftover after parsing attributes in process `syz.6.723'. [ 91.708339][ T6200] loop5: detected capacity change from 0 to 128 [ 91.839849][ T6206] FAULT_INJECTION: forcing a failure. [ 91.839849][ T6206] name fail_futex, interval 1, probability 0, space 0, times 0 [ 91.839883][ T6206] CPU: 1 UID: 0 PID: 6206 Comm: syz.5.725 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.839947][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.839970][ T6206] Call Trace: [ 91.839979][ T6206] [ 91.839988][ T6206] __dump_stack+0x1d/0x30 [ 91.840099][ T6206] dump_stack_lvl+0x95/0xd0 [ 91.840133][ T6206] dump_stack+0x15/0x1b [ 91.840165][ T6206] should_fail_ex+0x262/0x280 [ 91.840271][ T6206] should_fail+0xb/0x20 [ 91.840315][ T6206] get_futex_key+0x12d/0xb10 [ 91.840350][ T6206] ? rb_commit+0x3ec/0x430 [ 91.840388][ T6206] futex_wait_setup+0x49/0x3e0 [ 91.840457][ T6206] ? trace_buffer_unlock_commit_regs+0x115/0x310 [ 91.840506][ T6206] ? trace_event_buffer_commit+0x174/0x590 [ 91.840540][ T6206] __futex_wait+0xa9/0x260 [ 91.840614][ T6206] ? __pfx_futex_wake_mark+0x10/0x10 [ 91.840731][ T6206] futex_wait+0x98/0x1c0 [ 91.840769][ T6206] do_futex+0x391/0x460 [ 91.840805][ T6206] __se_sys_futex+0x2f6/0x370 [ 91.840887][ T6206] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 91.840925][ T6206] __x64_sys_futex+0x78/0x90 [ 91.841051][ T6206] x64_sys_call+0x22e2/0x2550 [ 91.841145][ T6206] do_syscall_64+0x112/0x360 [ 91.841188][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.841295][ T6206] RIP: 0033:0x7fc22e30e559 [ 91.841392][ T6206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.841484][ T6206] RSP: 002b:00007fc22cd670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.841515][ T6206] RAX: ffffffffffffffda RBX: 00007fc22e595fa8 RCX: 00007fc22e30e559 [ 91.841538][ T6206] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc22e595fa8 [ 91.841561][ T6206] RBP: 00007fc22e595fa0 R08: 0000000000000000 R09: 0000000000000000 [ 91.841583][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.841663][ T6206] R13: 00007fc22e596038 R14: 00007ffdf00432f0 R15: 00007ffdf00433d8 [ 91.841694][ T6206] [ 92.154751][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.324573][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.403236][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.447597][ T6242] erspan0: entered promiscuous mode [ 92.477701][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.732'. [ 93.127603][ T5883] veth0_vlan: entered promiscuous mode [ 93.142099][ T5883] veth1_vlan: entered promiscuous mode [ 93.204515][ T5883] veth0_macvtap: entered promiscuous mode [ 93.220113][ T5883] veth1_macvtap: entered promiscuous mode [ 93.246338][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.274997][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.310242][ T6279] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.929870][ T1641] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.931741][ T70] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.931859][ T70] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.053540][ T6306] loop6: detected capacity change from 0 to 512 [ 94.067955][ T6306] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.743: corrupted in-inode xattr: invalid ea_ino [ 94.067999][ T6306] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.069132][ T6306] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.743: couldn't read orphan inode 15 (err -117) [ 94.069172][ T6306] loop6: lost filesystem error report for type 5 error -117 [ 94.069380][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 94.069408][ C1] EXT4-fs (loop6): initial error at time 1792156945: ext4_iget_extra_inode:5210: inode 15 [ 94.069472][ C1] EXT4-fs (loop6): last error at time 1792156945: ext4_iget_extra_inode:5210: inode 15 [ 94.082606][ T6306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.179276][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 94.179380][ T30] audit: type=1400 audit(1792156945.287:654): avc: denied { write } for pid=6305 comm="syz.6.743" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.179621][ T6306] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.743: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 94.357268][ T4517] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.608641][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.749'. [ 95.003506][ T6348] loop6: detected capacity change from 0 to 512 [ 95.017612][ T6348] EXT4-fs: Ignoring removed nobh option [ 95.033706][ T6348] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 95.062744][ T6348] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #3: comm syz.6.756: corrupted inode contents [ 95.062779][ T6348] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 95.064580][ T6348] EXT4-fs (loop6): Remounting filesystem read-only [ 95.065211][ T6348] Quota error (device loop6): write_blk: dquota write failed [ 95.065291][ T6348] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 95.067935][ T6348] EXT4-fs (loop6): 1 truncate cleaned up [ 95.081329][ T6348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.081623][ T6348] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.504447][ T4517] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.639545][ T6359] netlink: 40 bytes leftover after parsing attributes in process `syz.8.760'. [ 95.993830][ T30] audit: type=1400 audit(1792156947.107:655): avc: denied { setopt } for pid=6380 comm="syz.7.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.996756][ T30] audit: type=1400 audit(1792156947.107:656): avc: denied { bind } for pid=6380 comm="syz.7.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.073978][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.766'. [ 96.516557][ T6395] syzkaller0: entered promiscuous mode [ 96.516588][ T6395] syzkaller0: entered allmulticast mode [ 96.661055][ T6400] FAULT_INJECTION: forcing a failure. [ 96.661055][ T6400] name failslab, interval 1, probability 0, space 0, times 0 [ 96.661096][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.7.773 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.661174][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.661196][ T6400] Call Trace: [ 96.661209][ T6400] [ 96.661223][ T6400] __dump_stack+0x1d/0x30 [ 96.661261][ T6400] dump_stack_lvl+0x95/0xd0 [ 96.661352][ T6400] dump_stack+0x15/0x1b [ 96.661415][ T6400] should_fail_ex+0x262/0x280 [ 96.661482][ T6400] ? alloc_vmap_area+0x1b6/0xe40 [ 96.661532][ T6400] should_failslab+0x8c/0xb0 [ 96.661570][ T6400] kmem_cache_alloc_node_noprof+0x82/0x400 [ 96.661704][ T6400] ? trace_event_buffer_commit+0x174/0x590 [ 96.661798][ T6400] ? alloc_vmap_area+0x1b6/0xe40 [ 96.661848][ T6400] alloc_vmap_area+0x1b6/0xe40 [ 96.661953][ T6400] ? __kmalloc_cache_node_noprof+0x3a2/0x420 [ 96.662008][ T6400] ? futex_unqueue+0xc5/0xf0 [ 96.662119][ T6400] ? __get_vm_area_node+0x125/0x1f0 [ 96.662168][ T6400] __get_vm_area_node+0x199/0x1f0 [ 96.662342][ T6400] __vmalloc_node_range_noprof+0x262/0x1000 [ 96.662410][ T6400] ? write_ldt+0x342/0x470 [ 96.662457][ T6400] ? __trace_event_discard_commit+0x58/0x70 [ 96.662530][ T6400] ? write_ldt+0x30f/0x470 [ 96.662554][ T6400] ? trace_event_raw_event_kmalloc+0xb7/0x110 [ 96.662614][ T6400] ? write_ldt+0x30f/0x470 [ 96.662683][ T6400] ? write_ldt+0x342/0x470 [ 96.662715][ T6400] __vmalloc_noprof+0xa4/0xf0 [ 96.662746][ T6400] ? write_ldt+0x342/0x470 [ 96.662781][ T6400] write_ldt+0x342/0x470 [ 96.662845][ T6400] __se_sys_modify_ldt+0x6c/0x260 [ 96.662874][ T6400] x64_sys_call+0x26b/0x2550 [ 96.662921][ T6400] do_syscall_64+0x112/0x360 [ 96.662956][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.663024][ T6400] RIP: 0033:0x7f7bc5e7e559 [ 96.663051][ T6400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.663081][ T6400] RSP: 002b:00007f7bc48d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 96.663116][ T6400] RAX: ffffffffffffffda RBX: 00007f7bc6105fa0 RCX: 00007f7bc5e7e559 [ 96.663137][ T6400] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000001 [ 96.663295][ T6400] RBP: 00007f7bc5f158b0 R08: 0000000000000000 R09: 0000000000000000 [ 96.663312][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.663377][ T6400] R13: 00007f7bc6106038 R14: 00007f7bc6105fa0 R15: 00007fff2d562db8 [ 96.663405][ T6400] [ 96.690745][ T6400] syz.7.773: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 96.690989][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.7.773 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.691072][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.691127][ T6400] Call Trace: [ 96.691158][ T6400] [ 96.691190][ T6400] __dump_stack+0x1d/0x30 [ 96.691352][ T6400] dump_stack_lvl+0x95/0xd0 [ 96.691426][ T6400] dump_stack+0x15/0x1b [ 96.691564][ T6400] warn_alloc+0x146/0x1c0 [ 96.691599][ T6400] __vmalloc_node_range_noprof+0x28a/0x1000 [ 96.691645][ T6400] ? __trace_event_discard_commit+0x58/0x70 [ 96.691687][ T6400] ? write_ldt+0x30f/0x470 [ 96.691712][ T6400] ? trace_event_raw_event_kmalloc+0xb7/0x110 [ 96.691742][ T6400] ? write_ldt+0x30f/0x470 [ 96.691894][ T6400] ? write_ldt+0x342/0x470 [ 96.692014][ T6400] __vmalloc_noprof+0xa4/0xf0 [ 96.692105][ T6400] ? write_ldt+0x342/0x470 [ 96.692191][ T6400] write_ldt+0x342/0x470 [ 96.692299][ T6400] __se_sys_modify_ldt+0x6c/0x260 [ 96.692423][ T6400] x64_sys_call+0x26b/0x2550 [ 96.692524][ T6400] do_syscall_64+0x112/0x360 [ 96.692678][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.692769][ T6400] RIP: 0033:0x7f7bc5e7e559 [ 96.692833][ T6400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.692915][ T6400] RSP: 002b:00007f7bc48d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 96.692988][ T6400] RAX: ffffffffffffffda RBX: 00007f7bc6105fa0 RCX: 00007f7bc5e7e559 [ 96.693167][ T6400] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000001 [ 96.693221][ T6400] RBP: 00007f7bc5f158b0 R08: 0000000000000000 R09: 0000000000000000 [ 96.693292][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.693353][ T6400] R13: 00007f7bc6106038 R14: 00007f7bc6105fa0 R15: 00007fff2d562db8 [ 96.693447][ T6400] [ 96.704643][ T6400] Mem-Info: [ 96.704653][ T6400] active_anon:25293 inactive_anon:0 isolated_anon:0 [ 96.704653][ T6400] active_file:0 inactive_file:25358 isolated_file:0 [ 96.704653][ T6400] unevictable:0 dirty:280 writeback:0 [ 96.704653][ T6400] slab_reclaimable:3522 slab_unreclaimable:18300 [ 96.704653][ T6400] mapped:29512 shmem:17234 pagetables:3579 [ 96.704653][ T6400] sec_pagetables:0 bounce:0 [ 96.704653][ T6400] kernel_misc_reclaimable:0 [ 96.704653][ T6400] free:1855637 free_pcp:6722 free_cma:0 [ 96.704840][ T6400] Node 0 active_anon:101172kB inactive_anon:0kB active_file:0kB inactive_file:101432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118048kB dirty:1120kB writeback:0kB shmem:68936kB kernel_stack:4128kB pagetables:14316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 96.705023][ T6400] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.705266][ T6400] lowmem_reserve[]: 0 2878 7856 7856 [ 96.705465][ T6400] Node 0 DMA32 free:2943616kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947140kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 96.705844][ T6400] lowmem_reserve[]: 0 0 4978 4978 [ 96.714178][ T6400] Node 0 Normal free:4463572kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:101172kB inactive_anon:0kB active_file:0kB inactive_file:101432kB unevictable:0kB writepending:1120kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:23364kB local_pcp:12644kB free_cma:0kB [ 96.714451][ T6400] lowmem_reserve[]: 0 0 0 0 [ 96.714605][ T6400] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.762266][ T6400] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943616kB [ 96.763156][ T6400] Node 0 Normal: 1*4kB (U) 0*8kB 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (U) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 3*2048kB (ME) 1087*4096kB (UM) = 4463412kB [ 96.790790][ T6400] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.790858][ T6400] 42613 total pagecache pages [ 96.790940][ T6400] 0 pages in swap cache [ 96.790969][ T6400] Free swap = 124996kB [ 96.791008][ T6400] Total swap = 124996kB [ 96.791136][ T6400] 2097051 pages RAM [ 96.791166][ T6400] 0 pages HighMem/MovableOnly [ 96.791198][ T6400] 81869 pages reserved [ 97.494354][ T6406] ucma_write: process 290 (syz.5.775) changed security contexts after opening file descriptor, this is not allowed. [ 97.647226][ T30] audit: type=1400 audit(1792156948.757:657): avc: denied { cpu } for pid=6409 comm="syz.5.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 97.920288][ T6421] netlink: 'syz.5.780': attribute type 6 has an invalid length. [ 97.920322][ T6421] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.780'. [ 98.723124][ T6437] syz_tun: entered allmulticast mode [ 99.122758][ T6465] loop6: detected capacity change from 0 to 1024 [ 99.123666][ T6465] EXT4-fs: Ignoring removed nobh option [ 99.123724][ T6465] EXT4-fs: Ignoring removed nobh option [ 99.123849][ T6465] EXT4-fs: inline encryption not supported [ 99.160104][ T6465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.202153][ T30] audit: type=1400 audit(1792156950.317:658): avc: denied { write } for pid=6464 comm="syz.6.799" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.338783][ T30] audit: type=1400 audit(1792156950.447:659): avc: denied { append } for pid=6464 comm="syz.6.799" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.778583][ T30] audit: type=1400 audit(1792156950.887:660): avc: denied { create } for pid=6489 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.830331][ T30] audit: type=1400 audit(1792156950.947:661): avc: denied { write } for pid=6489 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.906476][ T6490] infiniband syz1: set active [ 99.906522][ T6490] infiniband syz1: added syz_tun [ 99.931666][ T6490] RDS/IB: syz1: added [ 99.931691][ T6490] smc: adding ib device syz1 with port count 1 [ 99.931727][ T6490] smc: ib device syz1 port 1 has no pnetid [ 100.354655][ T4517] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.414846][ T30] audit: type=1400 audit(1792156951.527:662): avc: denied { read append } for pid=6494 comm="syz.6.808" name="usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.414950][ T30] audit: type=1400 audit(1792156951.527:663): avc: denied { open } for pid=6494 comm="syz.6.808" path="/dev/usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.415984][ T30] audit: type=1400 audit(1792156951.527:664): avc: denied { ioctl } for pid=6494 comm="syz.6.808" path="/dev/usbmon4" dev="devtmpfs" ino=154 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.977489][ T6516] loop6: detected capacity change from 0 to 128 [ 101.246176][ T6524] loop6: detected capacity change from 0 to 512 [ 101.285517][ T6524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.285623][ T6524] ext4 filesystem being mounted at /95/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 101.358934][ T30] audit: type=1326 audit(1792156952.467:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.6.818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f043e559 code=0x7ffc0000 [ 101.359583][ T30] audit: type=1326 audit(1792156952.467:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.6.818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f043e559 code=0x7ffc0000 [ 101.359652][ T30] audit: type=1326 audit(1792156952.477:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.6.818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f043e559 code=0x7ffc0000 [ 101.639930][ T4517] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.739033][ T6581] FAULT_INJECTION: forcing a failure. [ 102.739033][ T6581] name failslab, interval 1, probability 0, space 0, times 0 [ 102.739082][ T6581] CPU: 1 UID: 0 PID: 6581 Comm: syz.6.829 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.739130][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.739237][ T6581] Call Trace: [ 102.739247][ T6581] [ 102.739257][ T6581] __dump_stack+0x1d/0x30 [ 102.739337][ T6581] dump_stack_lvl+0x95/0xd0 [ 102.739364][ T6581] dump_stack+0x15/0x1b [ 102.739392][ T6581] should_fail_ex+0x262/0x280 [ 102.739473][ T6581] ? prepare_creds+0x38/0x550 [ 102.739570][ T6581] should_failslab+0x8c/0xb0 [ 102.739610][ T6581] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 102.739701][ T6581] ? prepare_creds+0x38/0x550 [ 102.739769][ T6581] prepare_creds+0x38/0x550 [ 102.739797][ T6581] __sys_setreuid+0xdb/0x530 [ 102.739926][ T6581] __x64_sys_setreuid+0x2d/0x40 [ 102.739963][ T6581] x64_sys_call+0x2161/0x2550 [ 102.740042][ T6581] do_syscall_64+0x112/0x360 [ 102.740074][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.740108][ T6581] RIP: 0033:0x7ff6f043e559 [ 102.740126][ T6581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.740149][ T6581] RSP: 002b:00007ff6eee97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 102.740189][ T6581] RAX: ffffffffffffffda RBX: 00007ff6f06c5fa0 RCX: 00007ff6f043e559 [ 102.740226][ T6581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 102.740294][ T6581] RBP: 00007ff6f04d58b0 R08: 0000000000000000 R09: 0000000000000000 [ 102.740314][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.740329][ T6581] R13: 00007ff6f06c6038 R14: 00007ff6f06c5fa0 R15: 00007fff6f1a24d8 [ 102.740352][ T6581] [ 103.349765][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.734425][ T6613] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.071064][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.181961][ T6619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.727062][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 104.727081][ T30] audit: type=1400 audit(1792156955.837:686): avc: denied { write } for pid=6616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.865945][ T30] audit: type=1400 audit(1792156955.977:687): avc: denied { write } for pid=6638 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.976591][ T6641] netlink: 64 bytes leftover after parsing attributes in process `syz.6.844'. [ 105.060746][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.061161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.119656][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.237657][ T6651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.237873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.238107][ T6651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.268598][ T6651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.472857][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.851'. [ 105.984599][ T6679] FAULT_INJECTION: forcing a failure. [ 105.984599][ T6679] name failslab, interval 1, probability 0, space 0, times 0 [ 105.984690][ T6679] CPU: 1 UID: 0 PID: 6679 Comm: syz.6.867 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.984718][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.984733][ T6679] Call Trace: [ 105.984753][ T6679] [ 105.984765][ T6679] __dump_stack+0x1d/0x30 [ 105.984873][ T6679] dump_stack_lvl+0x95/0xd0 [ 105.984900][ T6679] dump_stack+0x15/0x1b [ 105.984929][ T6679] should_fail_ex+0x262/0x280 [ 105.985060][ T6679] ? reuseport_alloc+0x9c/0x200 [ 105.985099][ T6679] should_failslab+0x8c/0xb0 [ 105.985145][ T6679] __kmalloc_cache_noprof+0x7a/0x400 [ 105.985200][ T6679] ? reuseport_alloc+0x9c/0x200 [ 105.985243][ T6679] reuseport_alloc+0x9c/0x200 [ 105.985287][ T6679] inet_hash+0x4de/0x7b0 [ 105.985398][ T6679] inet_csk_listen_start+0x1ad/0x1f0 [ 105.985427][ T6679] inet_listen+0x1b1/0x200 [ 105.985549][ T6679] __x64_sys_listen+0x110/0x170 [ 105.985574][ T6679] x64_sys_call+0x232f/0x2550 [ 105.985627][ T6679] do_syscall_64+0x112/0x360 [ 105.985669][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.985702][ T6679] RIP: 0033:0x7ff6f043e559 [ 105.985721][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.985752][ T6679] RSP: 002b:00007ff6eee97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 105.985825][ T6679] RAX: ffffffffffffffda RBX: 00007ff6f06c5fa0 RCX: 00007ff6f043e559 [ 105.985843][ T6679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 105.985857][ T6679] RBP: 00007ff6f04d58b0 R08: 0000000000000000 R09: 0000000000000000 [ 105.985871][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.985925][ T6679] R13: 00007ff6f06c6038 R14: 00007ff6f06c5fa0 R15: 00007fff6f1a24d8 [ 105.985951][ T6679] [ 106.491429][ T6700] loop7: detected capacity change from 0 to 2048 [ 106.538228][ T6700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.587430][ T30] audit: type=1400 audit(1792156957.697:688): avc: denied { write } for pid=6699 comm="syz.7.866" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.684947][ T4722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.871318][ T6727] loop8: detected capacity change from 0 to 256 [ 106.897634][ T6726] uprobe: syz.5.872:6726 failed to unregister, leaking uprobe [ 106.949746][ T30] audit: type=1400 audit(1792156958.057:689): avc: denied { connect } for pid=6725 comm="syz.8.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.054493][ T6737] loop5: detected capacity change from 0 to 512 [ 107.091518][ T30] audit: type=1400 audit(1792156958.207:690): avc: denied { create } for pid=6729 comm="syz.6.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.120465][ T30] audit: type=1400 audit(1792156958.237:691): avc: denied { bind } for pid=6729 comm="syz.6.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.163083][ T6737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.163251][ T6737] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.203156][ T30] audit: type=1400 audit(1792156958.317:692): avc: denied { write } for pid=6736 comm="syz.5.879" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.376138][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.496946][ T6757] loop8: detected capacity change from 0 to 8192 [ 107.562255][ T30] audit: type=1400 audit(1792156958.677:693): avc: denied { write } for pid=6747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.630918][ T30] audit: type=1400 audit(1792156958.747:694): avc: denied { write } for pid=6768 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.858361][ T30] audit: type=1400 audit(1792156958.967:695): avc: denied { write } for pid=6771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.108870][ T6794] sctp: [Deprecated]: syz.5.890 (pid 6794) Use of int in max_burst socket option deprecated. [ 108.108870][ T6794] Use struct sctp_assoc_value instead [ 108.244384][ T6802] loop5: detected capacity change from 0 to 128 [ 108.278818][ T6802] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.301577][ T6802] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.378661][ T3919] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.508580][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.786116][ T6824] net_ratelimit: 20 callbacks suppressed [ 108.786137][ T6824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.786376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.786581][ T6824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.789130][ T6824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.790291][ T6824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.970236][ T6828] loop7: detected capacity change from 0 to 1024 [ 108.996052][ T6825] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.017198][ T6828] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.017366][ T6828] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.125871][ T6833] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.145540][ T4722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.302369][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.380606][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.380797][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.434728][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.098527][ T6859] netlink: 'syz.6.914': attribute type 1 has an invalid length. [ 110.098550][ T6859] netlink: 48 bytes leftover after parsing attributes in process `syz.6.914'. [ 110.231552][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 110.231571][ T30] audit: type=1400 audit(1792156961.347:699): avc: denied { create } for pid=6866 comm="syz.5.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.309905][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.475897][ T6883] loop5: detected capacity change from 0 to 512 [ 110.479135][ T6883] EXT4-fs: Ignoring removed bh option [ 110.494140][ T6883] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.510147][ T6883] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 110.513901][ T6883] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 110.514162][ T6883] EXT4-fs (loop5): orphan cleanup on readonly fs [ 110.516047][ T6883] Quota error (device loop5): v2_read_file_info: Free block number 117440512 out of range (1, 6). [ 110.516171][ T6883] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.518224][ T6883] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 110.519572][ T6883] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.925: Invalid block bitmap block 0 in block_group 0 [ 110.521939][ T6883] loop5: lost filesystem error report for type 5 error -117 [ 110.529448][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 110.529512][ C0] EXT4-fs (loop5): last error at time 1792156961: ext4_read_block_bitmap_nowait:487 [ 110.545178][ T6883] EXT4-fs (loop5): Remounting filesystem read-only [ 110.545398][ T6883] EXT4-fs (loop5): 1 orphan inode deleted [ 110.553267][ T3609] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.573785][ T6883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.818479][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.191073][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.214624][ T6913] loop8: detected capacity change from 0 to 512 [ 111.244666][ T6912] loop7: detected capacity change from 0 to 512 [ 111.261314][ T6913] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.261440][ T6913] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.307815][ T6912] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 111.307930][ T6912] EXT4-fs (loop7): mount failed [ 111.437874][ T5883] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.896983][ T30] audit: type=1400 audit(1792156963.007:700): avc: denied { audit_write } for pid=6933 comm="syz.8.944" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.897088][ T30] audit: type=1107 audit(1792156963.007:701): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='1' [ 112.084831][ T6938] loop8: detected capacity change from 0 to 1024 [ 112.089419][ T6938] EXT4-fs: Ignoring removed oldalloc option [ 112.089504][ T6938] EXT4-fs: Ignoring removed orlov option [ 112.136733][ T6938] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.176182][ T30] audit: type=1400 audit(1792156963.287:702): avc: denied { write } for pid=6937 comm="syz.8.946" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.231979][ T30] audit: type=1400 audit(1792156963.347:703): avc: denied { write } for pid=6937 comm="syz.8.946" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.465259][ T5883] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.558507][ T6949] FAULT_INJECTION: forcing a failure. [ 112.558507][ T6949] name failslab, interval 1, probability 0, space 0, times 0 [ 112.558598][ T6949] CPU: 1 UID: 0 PID: 6949 Comm: syz.7.951 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.558668][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.558690][ T6949] Call Trace: [ 112.558716][ T6949] [ 112.558731][ T6949] __dump_stack+0x1d/0x30 [ 112.558770][ T6949] dump_stack_lvl+0x95/0xd0 [ 112.558807][ T6949] dump_stack+0x15/0x1b [ 112.558839][ T6949] should_fail_ex+0x262/0x280 [ 112.558900][ T6949] ? __kernfs_new_node+0x70/0x440 [ 112.558933][ T6949] should_failslab+0x8c/0xb0 [ 112.558984][ T6949] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 112.559057][ T6949] ? __kernfs_new_node+0x70/0x440 [ 112.559107][ T6949] __kernfs_new_node+0x70/0x440 [ 112.559143][ T6949] ? rb_insert_color+0x26f/0x2a0 [ 112.559245][ T6949] ? __rcu_read_unlock+0x4e/0x70 [ 112.559287][ T6949] ? __rcu_read_unlock+0x4e/0x70 [ 112.559384][ T6949] ? kernfs_activate_one+0x10c/0x140 [ 112.559420][ T6949] ? __rcu_read_unlock+0x4e/0x70 [ 112.559463][ T6949] ? up_write+0x19/0x60 [ 112.559509][ T6949] kernfs_new_node+0xcf/0xf0 [ 112.559541][ T6949] __kernfs_create_file+0x4b/0x180 [ 112.559582][ T6949] ? __pfx_drv_attr_show+0x10/0x10 [ 112.559617][ T6949] ? __pfx_drv_attr_store+0x10/0x10 [ 112.559689][ T6949] sysfs_add_file_mode_ns+0x132/0x1b0 [ 112.559738][ T6949] sysfs_create_file_ns+0xd9/0x120 [ 112.559786][ T6949] driver_create_file+0x39/0x50 [ 112.559838][ T6949] bus_add_driver+0x369/0x450 [ 112.559951][ T6949] driver_register+0x162/0x220 [ 112.559981][ T6949] usb_gadget_register_driver_owner+0x92/0x1a0 [ 112.560013][ T6949] raw_ioctl+0xc5b/0x1df0 [ 112.560143][ T6949] ? ioctl_has_perm+0x273/0x2c0 [ 112.560187][ T6949] ? do_vfs_ioctl+0x848/0xe50 [ 112.560296][ T6949] ? selinux_file_ioctl+0x33c/0x3c0 [ 112.560334][ T6949] ? __fget_files+0x184/0x1c0 [ 112.560391][ T6949] ? __pfx_raw_ioctl+0x10/0x10 [ 112.560432][ T6949] __se_sys_ioctl+0xce/0x140 [ 112.560533][ T6949] __x64_sys_ioctl+0x43/0x50 [ 112.560586][ T6949] x64_sys_call+0x239d/0x2550 [ 112.560626][ T6949] do_syscall_64+0x112/0x360 [ 112.560672][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.560705][ T6949] RIP: 0033:0x7f7bc5e7e1eb [ 112.560729][ T6949] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 112.560759][ T6949] RSP: 002b:00007f7bc48d4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.560836][ T6949] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f7bc5e7e1eb [ 112.560860][ T6949] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 112.560882][ T6949] RBP: 00007f7bc48d5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 112.560905][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.560926][ T6949] R13: 000020000001a9c0 R14: 0000000000000000 R15: 0000000000000000 [ 112.561018][ T6949] [ 112.715681][ T6949] bus_add_driver: add_bind_files(raw-gadget.0) failed [ 112.716031][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.716372][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.236227][ T6974] loop5: detected capacity change from 0 to 512 [ 113.332717][ T30] audit: type=1400 audit(1792156964.447:704): avc: denied { bind } for pid=6973 comm="syz.5.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.332769][ T30] audit: type=1400 audit(1792156964.447:705): avc: denied { name_bind } for pid=6973 comm="syz.5.959" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 113.332815][ T30] audit: type=1400 audit(1792156964.447:706): avc: denied { node_bind } for pid=6973 comm="syz.5.959" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 114.195983][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.196283][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.359291][ T6970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.381875][ T6970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.570141][ T12] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.570258][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.570325][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.570457][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.640989][ T29] net_ratelimit: 1030 callbacks suppressed [ 114.641011][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.123266][ T30] audit: type=1400 audit(1792156966.237:707): avc: denied { read write } for pid=7006 comm="syz.5.968" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 115.509688][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.670581][ T6241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.760162][ T7022] FAULT_INJECTION: forcing a failure. [ 115.760162][ T7022] name failslab, interval 1, probability 0, space 0, times 0 [ 115.760289][ T7022] CPU: 0 UID: 0 PID: 7022 Comm: syz.5.984 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.760326][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.760379][ T7022] Call Trace: [ 115.760390][ T7022] [ 115.760401][ T7022] __dump_stack+0x1d/0x30 [ 115.760427][ T7022] dump_stack_lvl+0x95/0xd0 [ 115.760473][ T7022] dump_stack+0x15/0x1b [ 115.760501][ T7022] should_fail_ex+0x262/0x280 [ 115.760539][ T7022] ? ucma_alloc_ctx+0x30/0x1d0 [ 115.760577][ T7022] should_failslab+0x8c/0xb0 [ 115.760662][ T7022] __kmalloc_cache_noprof+0x7a/0x400 [ 115.760733][ T7022] ? ucma_alloc_ctx+0x30/0x1d0 [ 115.760771][ T7022] ? should_fail_ex+0xdb/0x280 [ 115.760873][ T7022] ? __pfx_ucma_create_id+0x10/0x10 [ 115.760919][ T7022] ucma_alloc_ctx+0x30/0x1d0 [ 115.760946][ T7022] ucma_create_id+0x15a/0x280 [ 115.760976][ T7022] ? __pfx_ucma_create_id+0x10/0x10 [ 115.761014][ T7022] ucma_write+0x1c9/0x260 [ 115.761046][ T7022] ? __pfx_ucma_write+0x10/0x10 [ 115.761073][ T7022] vfs_write+0x254/0x9a0 [ 115.761169][ T7022] ? __fget_files+0x184/0x1c0 [ 115.761277][ T7022] ksys_write+0xdc/0x1a0 [ 115.761318][ T7022] __x64_sys_write+0x40/0x50 [ 115.761408][ T7022] x64_sys_call+0x154e/0x2550 [ 115.761441][ T7022] do_syscall_64+0x112/0x360 [ 115.761480][ T7022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.761593][ T7022] RIP: 0033:0x7fc22e30e559 [ 115.761617][ T7022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.761639][ T7022] RSP: 002b:00007fc22cd67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.761668][ T7022] RAX: ffffffffffffffda RBX: 00007fc22e595fa0 RCX: 00007fc22e30e559 [ 115.761725][ T7022] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000003 [ 115.761745][ T7022] RBP: 00007fc22e3a58b0 R08: 0000000000000000 R09: 0000000000000000 [ 115.761820][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.761884][ T7022] R13: 00007fc22e596038 R14: 00007fc22e595fa0 R15: 00007ffdf00433d8 [ 115.761910][ T7022] [ 116.218998][ T7032] loop5: detected capacity change from 0 to 512 [ 116.274908][ T7032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.275004][ T7032] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.304526][ T7034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.399616][ T7034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.468723][ T7032] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 116.469361][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 116.469433][ T30] audit: type=1400 audit(1792156967.567:709): avc: denied { mac_admin } for pid=7030 comm="syz.5.978" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.469601][ T30] audit: type=1400 audit(1792156967.577:710): avc: denied { relabelto } for pid=7030 comm="syz.5.978" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 116.548091][ T30] audit: type=1400 audit(1792156967.657:711): avc: denied { write } for pid=7030 comm="syz.5.978" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 116.548150][ T30] audit: type=1400 audit(1792156967.657:712): avc: denied { add_name } for pid=7030 comm="syz.5.978" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 116.602916][ T7034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.621592][ T7034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.622979][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.623205][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.623422][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.796906][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.853947][ T7049] netlink: 'syz.0.992': attribute type 10 has an invalid length. [ 116.853966][ T7049] netlink: 55 bytes leftover after parsing attributes in process `syz.0.992'. [ 116.893611][ T7050] sctp: [Deprecated]: syz.6.980 (pid 7050) Use of int in max_burst socket option deprecated. [ 116.893611][ T7050] Use struct sctp_assoc_value instead [ 116.972600][ T7053] loop5: detected capacity change from 0 to 512 [ 117.001329][ T7053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.001416][ T7053] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.201903][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.506134][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.990'. [ 118.223597][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.534955][ T7101] sctp: [Deprecated]: syz.7.1000 (pid 7101) Use of int in max_burst socket option deprecated. [ 118.534955][ T7101] Use struct sctp_assoc_value instead [ 118.795164][ T7105] loop7: detected capacity change from 0 to 512 [ 118.847846][ T7105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.848256][ T7105] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.892823][ T30] audit: type=1400 audit(1792156970.007:713): avc: denied { write } for pid=7104 comm="syz.7.1016" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.052062][ T4722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.201557][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1007'. [ 119.398604][ T7126] FAULT_INJECTION: forcing a failure. [ 119.398604][ T7126] name fail_futex, interval 1, probability 0, space 0, times 0 [ 119.398669][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz.8.1010 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.398783][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.398804][ T7126] Call Trace: [ 119.398817][ T7126] [ 119.398835][ T7126] __dump_stack+0x1d/0x30 [ 119.398873][ T7126] dump_stack_lvl+0x95/0xd0 [ 119.398958][ T7126] dump_stack+0x15/0x1b [ 119.398990][ T7126] should_fail_ex+0x262/0x280 [ 119.399028][ T7126] should_fail+0xb/0x20 [ 119.399056][ T7126] get_futex_key+0x12d/0xb10 [ 119.399183][ T7126] futex_wake+0x89/0x400 [ 119.399215][ T7126] do_futex+0x3f8/0x460 [ 119.399317][ T7126] __se_sys_futex+0x2f6/0x370 [ 119.399412][ T7126] __x64_sys_futex+0x78/0x90 [ 119.399461][ T7126] x64_sys_call+0x22e2/0x2550 [ 119.399519][ T7126] do_syscall_64+0x112/0x360 [ 119.399563][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.399598][ T7126] RIP: 0033:0x7f4d1440e559 [ 119.399662][ T7126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.399731][ T7126] RSP: 002b:00007f4d12e670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.399771][ T7126] RAX: ffffffffffffffda RBX: 00007f4d14695fa8 RCX: 00007f4d1440e559 [ 119.399787][ T7126] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4d14695fac [ 119.399804][ T7126] RBP: 00007f4d14695fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 119.399825][ T7126] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 119.399846][ T7126] R13: 00007f4d14696038 R14: 00007ffd1dcd9080 R15: 00007ffd1dcd9168 [ 119.400018][ T7126] [ 119.667966][ T7129] net_ratelimit: 463 callbacks suppressed [ 119.667994][ T7129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.833190][ T6993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.864071][ T7129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.933649][ T7129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.950026][ T7129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.950424][ T7129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.058521][ T7128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.229640][ T6818] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.686170][ T7149] sctp: [Deprecated]: syz.8.1017 (pid 7149) Use of int in max_burst socket option deprecated. [ 120.686170][ T7149] Use struct sctp_assoc_value instead [ 120.789743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.790967][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.791159][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.545537][ T7160] loop8: detected capacity change from 0 to 512 [ 121.615350][ T7160] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.615472][ T7160] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.665886][ T30] audit: type=1400 audit(1792156972.777:714): avc: denied { write } for pid=7158 comm="syz.8.1021" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.767799][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1025'. [ 121.788425][ T5883] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.863630][ T7187] loop7: detected capacity change from 0 to 512 [ 121.898428][ T7187] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.919862][ T7187] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.943765][ T30] audit: type=1400 audit(1792156973.057:715): avc: denied { write } for pid=7185 comm="syz.7.1043" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.011264][ T4722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.054455][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1030'. [ 122.054488][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1030'. [ 122.574879][ T7215] capability: warning: `syz.8.1044' uses 32-bit capabilities (legacy support in use) [ 122.599003][ T7214] FAULT_INJECTION: forcing a failure. [ 122.599003][ T7214] name failslab, interval 1, probability 0, space 0, times 0 [ 122.599040][ T7214] CPU: 0 UID: 0 PID: 7214 Comm: syz.7.1042 Not tainted syzkaller #0 PREEMPT(lazy) [ 122.599075][ T7214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.599095][ T7214] Call Trace: [ 122.599106][ T7214] [ 122.599118][ T7214] __dump_stack+0x1d/0x30 [ 122.599171][ T7214] dump_stack_lvl+0x95/0xd0 [ 122.599207][ T7214] dump_stack+0x15/0x1b [ 122.599238][ T7214] should_fail_ex+0x262/0x280 [ 122.599281][ T7214] should_failslab+0x8c/0xb0 [ 122.599328][ T7214] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 122.599376][ T7214] ? shmem_alloc_inode+0x34/0x50 [ 122.599407][ T7214] ? shmem_alloc_inode+0x34/0x50 [ 122.599440][ T7214] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 122.599468][ T7214] shmem_alloc_inode+0x34/0x50 [ 122.599497][ T7214] alloc_inode+0x40/0x170 [ 122.599527][ T7214] new_inode+0x1d/0xe0 [ 122.599567][ T7214] shmem_get_inode+0x250/0x7b0 [ 122.599609][ T7214] __shmem_file_setup+0x14f/0x260 [ 122.599670][ T7214] shmem_zero_setup+0x66/0xe0 [ 122.599720][ T7214] mmap_region+0x1ad6/0x2310 [ 122.599792][ T7214] do_mmap+0xa20/0xc70 [ 122.599817][ T7214] vm_mmap_pgoff+0x183/0x2d0 [ 122.599861][ T7214] ksys_mmap_pgoff+0xc1/0x310 [ 122.599892][ T7214] ? __x64_sys_mmap+0x49/0x70 [ 122.599942][ T7214] x64_sys_call+0x23b3/0x2550 [ 122.599983][ T7214] do_syscall_64+0x112/0x360 [ 122.600022][ T7214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.600051][ T7214] RIP: 0033:0x7f7bc5e7e559 [ 122.600072][ T7214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.600102][ T7214] RSP: 002b:00007f7bc48d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 122.600135][ T7214] RAX: ffffffffffffffda RBX: 00007f7bc6105fa0 RCX: 00007f7bc5e7e559 [ 122.600159][ T7214] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000 [ 122.600182][ T7214] RBP: 00007f7bc5f158b0 R08: ffffffffffffffff R09: 0000000000000000 [ 122.600208][ T7214] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 122.600226][ T7214] R13: 00007f7bc6106038 R14: 00007f7bc6105fa0 R15: 00007fff2d562db8 [ 122.600256][ T7214] [ 122.672005][ T30] audit: type=1400 audit(1792156973.787:716): avc: denied { sqpoll } for pid=7213 comm="syz.8.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.089090][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1046'. [ 123.222421][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1048'. [ 123.273588][ T7226] macvlan2: entered promiscuous mode [ 123.273609][ T7226] macvlan2: entered allmulticast mode [ 123.276673][ T7226] bond1: entered promiscuous mode [ 123.277446][ T7226] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.301679][ T7226] bond1: left promiscuous mode [ 123.521899][ T7239] netlink: 'syz.5.1051': attribute type 10 has an invalid length. [ 123.521924][ T7239] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1051'. [ 124.257537][ T7255] loop6: detected capacity change from 0 to 512 [ 124.378358][ T7257] loop7: detected capacity change from 0 to 512 [ 124.448154][ T7257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.448311][ T7257] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.496176][ T30] audit: type=1400 audit(1792156975.607:717): avc: denied { write } for pid=7256 comm="syz.7.1060" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.676440][ T4722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.752355][ T30] audit: type=1400 audit(1792156975.867:718): avc: denied { connect } for pid=7261 comm="syz.6.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.759343][ T30] audit: type=1400 audit(1792156975.867:719): avc: denied { getopt } for pid=7261 comm="syz.6.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.779069][ T30] audit: type=1400 audit(1792156975.877:720): avc: denied { setattr } for pid=7261 comm="syz.6.1061" name="TIPC" dev="sockfs" ino=18200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.779112][ T30] audit: type=1400 audit(1792156975.877:721): avc: denied { mount } for pid=7262 comm="syz.5.1063" name="/" dev="autofs" ino=18206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 124.855873][ T7270] lo: entered allmulticast mode [ 124.873260][ T7268] lo: left allmulticast mode [ 124.889940][ T7272] net_ratelimit: 6 callbacks suppressed [ 124.889965][ T7272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.890186][ T7272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.890395][ T7272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.898730][ T7272] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 124.942518][ T30] audit: type=1326 audit(1792156976.057:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.0.1068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cc03e559 code=0x7ffc0000 [ 124.944280][ T30] audit: type=1326 audit(1792156976.057:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.0.1068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cc03e559 code=0x7ffc0000 [ 125.385117][ T7289] serio: Serial port ptm0 [ 125.405837][ T7290] loop8: detected capacity change from 0 to 512 [ 125.668257][ T7296] netlink: 'syz.8.1073': attribute type 10 has an invalid length. [ 125.668356][ T7296] netlink: 55 bytes leftover after parsing attributes in process `syz.8.1073'. [ 125.841955][ T7299] netlink: 'syz.5.1074': attribute type 1 has an invalid length. [ 125.868815][ T7302] loop6: detected capacity change from 0 to 512 [ 125.937340][ T7302] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.937434][ T7302] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.187754][ T4517] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.238069][ T7319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.281295][ T7319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.312570][ T7324] erspan0: entered promiscuous mode [ 126.316223][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1081'. [ 126.616173][ T7335] loop6: detected capacity change from 0 to 512 [ 126.618695][ T7335] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.644575][ T7335] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1087: bad orphan inode 13 [ 126.644614][ T7335] loop6: lost filesystem error report for type 5 error -117 [ 126.648009][ T7335] ext4_test_bit(bit=12, block=18) = 1 [ 126.648032][ T7335] is_bad_inode(inode)=0 [ 126.648041][ T7335] NEXT_ORPHAN(inode)=0 [ 126.648133][ T7335] max_ino=32 [ 126.648147][ T7335] i_nlink=1 [ 126.648969][ T7335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 126.951467][ T30] kauditd_printk_skb: 332 callbacks suppressed [ 126.951552][ T30] audit: type=1400 audit(1792156978.067:1056): avc: denied { mounton } for pid=7338 comm="syz.0.1088" path="/file0" dev="ramfs" ino=18328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 127.071401][ T4517] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 127.531029][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.594227][ T7359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.689396][ T7364] erspan0: entered promiscuous mode [ 127.690403][ T7367] netlink: 'syz.7.1097': attribute type 10 has an invalid length. [ 127.690425][ T7367] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1097'. [ 127.728497][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1096'. [ 128.060634][ T7376] loop5: detected capacity change from 0 to 512 [ 128.141282][ T7376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.141514][ T7376] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.184083][ T30] audit: type=1400 audit(1792156979.297:1057): avc: denied { write } for pid=7375 comm="syz.5.1101" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.515845][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.592816][ T30] audit: type=1400 audit(1792156979.707:1058): avc: denied { setopt } for pid=7379 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.730968][ T7382] loop5: detected capacity change from 0 to 1024 [ 128.751548][ T7382] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 128.751584][ T7382] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 128.751877][ T7382] EXT4-fs error (device loop5): ext4_get_journal_inode:5928: comm syz.5.1102: inode #1: comm syz.5.1102: iget: illegal inode # [ 128.751906][ T7382] loop5: lost filesystem error report for type 5 error -117 [ 128.752611][ T7382] EXT4-fs (loop5): no journal found [ 128.752633][ T7382] EXT4-fs (loop5): can't get journal size [ 128.759039][ T7382] EXT4-fs (loop5): failed to initialize system zone (-22) [ 128.759088][ T7382] EXT4-fs (loop5): mount failed [ 128.759313][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 128.759330][ C1] EXT4-fs (loop5): initial error at time 1792156979: ext4_get_journal_inode:5928 [ 128.759358][ C1] EXT4-fs (loop5): last error at time 1792156979: ext4_get_journal_inode:5928 [ 129.102982][ T7387] FAULT_INJECTION: forcing a failure. [ 129.102982][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 129.103025][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: syz.7.1105 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.103103][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.103221][ T7387] Call Trace: [ 129.103234][ T7387] [ 129.103248][ T7387] __dump_stack+0x1d/0x30 [ 129.103300][ T7387] dump_stack_lvl+0x95/0xd0 [ 129.103325][ T7387] dump_stack+0x15/0x1b [ 129.103354][ T7387] should_fail_ex+0x262/0x280 [ 129.103422][ T7387] ? mpls_dev_notify+0x84/0x810 [ 129.103548][ T7387] should_failslab+0x8c/0xb0 [ 129.103630][ T7387] __kmalloc_cache_noprof+0x7a/0x400 [ 129.103740][ T7387] ? mpls_dev_notify+0x84/0x810 [ 129.103791][ T7387] mpls_dev_notify+0x84/0x810 [ 129.103935][ T7387] ? trace_event_raw_event_notifier_info+0xd1/0x150 [ 129.103967][ T7387] ? __pfx_mpls_dev_notify+0x10/0x10 [ 129.104065][ T7387] raw_notifier_call_chain+0x72/0x1a0 [ 129.104175][ T7387] call_netdevice_notifiers+0xb5/0x110 [ 129.104222][ T7387] register_netdevice+0xfbf/0x11a0 [ 129.104258][ T7387] register_netdev+0x3b/0x50 [ 129.104338][ T7387] loopback_net_init+0x59/0x100 [ 129.104369][ T7387] ops_init+0x22a/0x2e0 [ 129.104400][ T7387] setup_net+0x9f/0x230 [ 129.104445][ T7387] copy_net_ns+0x333/0x490 [ 129.104515][ T7387] create_new_namespaces+0x1f6/0x420 [ 129.104565][ T7387] unshare_nsproxy_namespaces+0x115/0x150 [ 129.104648][ T7387] ksys_unshare+0x3fd/0x6f0 [ 129.104690][ T7387] __x64_sys_unshare+0x1f/0x30 [ 129.104733][ T7387] x64_sys_call+0x1e33/0x2550 [ 129.104837][ T7387] do_syscall_64+0x112/0x360 [ 129.104879][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.104914][ T7387] RIP: 0033:0x7f7bc5e7e559 [ 129.104940][ T7387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.105043][ T7387] RSP: 002b:00007f7bc48d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 129.105079][ T7387] RAX: ffffffffffffffda RBX: 00007f7bc6105fa0 RCX: 00007f7bc5e7e559 [ 129.105103][ T7387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 129.105186][ T7387] RBP: 00007f7bc5f158b0 R08: 0000000000000000 R09: 0000000000000000 [ 129.105208][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.105250][ T7387] R13: 00007f7bc6106038 R14: 00007f7bc6105fa0 R15: 00007fff2d562db8 [ 129.105339][ T7387] [ 129.134632][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1116'. [ 129.557809][ T7392] rxe_eth0 speed is unknown, defaulting to 1000 [ 129.972308][ T30] audit: type=1400 audit(1792156981.087:1059): avc: denied { bind } for pid=7402 comm="syz.5.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.034561][ T7405] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1110'. [ 131.878853][ T7485] netlink: 'syz.7.1120': attribute type 1 has an invalid length. [ 132.508130][ T7495] loop7: detected capacity change from 0 to 512 [ 132.522572][ T7495] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 132.522590][ T7495] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 132.567562][ T7495] EXT4-fs (loop7): 1 truncate cleaned up [ 132.568735][ T7495] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.712580][ T7499] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1126'. [ 132.776075][ T4722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.926498][ T7501] ip_tables: iptables: counters copy to user failed while replacing table [ 133.200170][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.200451][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.575223][ T7501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.752408][ T7451] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.752515][ T7451] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.752563][ T7451] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.752730][ T7451] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.796844][ T30] audit: type=1400 audit(1792156984.907:1060): avc: denied { write } for pid=7515 comm="syz.6.1132" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.957913][ T7516] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 134.003049][ T7516] team0: Device ipvlan0 is already an upper device of the team interface [ 134.416614][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1135'. [ 134.591435][ T7535] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 134.676700][ T30] audit: type=1400 audit(1792156985.787:1061): avc: denied { read } for pid=7538 comm="syz.8.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 134.743370][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'. [ 134.897054][ T7545] macvlan0: entered promiscuous mode [ 134.897080][ T7545] macvlan0: entered allmulticast mode [ 134.928298][ T7545] bond1: entered promiscuous mode [ 134.941296][ T7545] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 134.961758][ T7558] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 134.961796][ T7558] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.961867][ T7558] vhci_hcd vhci_hcd.0: Device attached [ 135.007915][ T7545] bond1: left promiscuous mode [ 135.015621][ T7557] loop8: detected capacity change from 0 to 2048 [ 135.055070][ T7557] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.113344][ T7558] loop6: detected capacity change from 0 to 1024 [ 135.130687][ T30] audit: type=1400 audit(1792156986.247:1062): avc: denied { write } for pid=7555 comm="syz.8.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.181078][ T7558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.224679][ T5883] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.241800][ T6993] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 135.325003][ T7560] vhci_hcd: connection reset by peer [ 135.325309][ T7449] vhci_hcd vhci_hcd.6: stop threads [ 135.325334][ T7449] vhci_hcd vhci_hcd.6: release socket [ 135.325375][ T7449] vhci_hcd vhci_hcd.6: disconnect device [ 135.350805][ T7573] syz_tun: entered allmulticast mode [ 135.377251][ T30] audit: type=1400 audit(1792156986.487:1063): avc: denied { create } for pid=7574 comm="syz.5.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.399320][ T30] audit: type=1400 audit(1792156986.497:1064): avc: denied { setopt } for pid=7574 comm="syz.5.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.399358][ T30] audit: type=1400 audit(1792156986.497:1065): avc: denied { ioctl } for pid=7574 comm="syz.5.1152" path="socket:[20129]" dev="sockfs" ino=20129 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.399486][ T30] audit: type=1400 audit(1792156986.497:1066): avc: denied { bind } for pid=7574 comm="syz.5.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.420230][ T30] audit: type=1400 audit(1792156986.517:1067): avc: denied { write } for pid=7574 comm="syz.5.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.469652][ T30] audit: type=1400 audit(1792156986.587:1068): avc: denied { connect } for pid=7574 comm="syz.5.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.506897][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1152'. [ 135.915528][ T30] audit: type=1400 audit(1792156987.027:1069): avc: denied { setopt } for pid=7594 comm="syz.5.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 135.993793][ T4517] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.197929][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1165'. [ 136.197959][ T7607] FAULT_INJECTION: forcing a failure. [ 136.197959][ T7607] name failslab, interval 1, probability 0, space 0, times 0 [ 136.198129][ T7607] CPU: 0 UID: 0 PID: 7607 Comm: syz.5.1165 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.198247][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.198270][ T7607] Call Trace: [ 136.198281][ T7607] [ 136.198291][ T7607] __dump_stack+0x1d/0x30 [ 136.198319][ T7607] dump_stack_lvl+0x95/0xd0 [ 136.198346][ T7607] dump_stack+0x15/0x1b [ 136.198437][ T7607] should_fail_ex+0x262/0x280 [ 136.198478][ T7607] ? nfnetlink_rcv+0xa41/0x1740 [ 136.198552][ T7607] should_failslab+0x8c/0xb0 [ 136.198648][ T7607] __kmalloc_cache_noprof+0x7a/0x400 [ 136.198725][ T7607] ? nfnetlink_rcv+0xa41/0x1740 [ 136.198793][ T7607] nfnetlink_rcv+0xa41/0x1740 [ 136.198960][ T7607] netlink_unicast+0x665/0x740 [ 136.199004][ T7607] netlink_sendmsg+0x5be/0x6f0 [ 136.199060][ T7607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.199156][ T7607] ____sys_sendmsg+0x532/0x580 [ 136.199193][ T7607] ___sys_sendmsg+0x195/0x1e0 [ 136.199248][ T7607] __x64_sys_sendmsg+0xd4/0x160 [ 136.199309][ T7607] x64_sys_call+0x22ab/0x2550 [ 136.199339][ T7607] do_syscall_64+0x112/0x360 [ 136.199402][ T7607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.199433][ T7607] RIP: 0033:0x7fc22e30e559 [ 136.199455][ T7607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.199481][ T7607] RSP: 002b:00007fc22cd67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.199592][ T7607] RAX: ffffffffffffffda RBX: 00007fc22e595fa0 RCX: 00007fc22e30e559 [ 136.199615][ T7607] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000005 [ 136.199745][ T7607] RBP: 00007fc22e3a58b0 R08: 0000000000000000 R09: 0000000000000000 [ 136.199764][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.199783][ T7607] R13: 00007fc22e596038 R14: 00007fc22e595fa0 R15: 00007ffdf00433d8 [ 136.199813][ T7607] [ 136.514120][ T7617] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.590777][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1169'. [ 136.685472][ T7625] serio: Serial port ptm0 [ 136.704984][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1170'. [ 136.807780][ T7629] macvlan0: entered promiscuous mode [ 136.807805][ T7629] macvlan0: entered allmulticast mode [ 136.830551][ T7629] bond1: entered promiscuous mode [ 136.837070][ T7629] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 136.870268][ T7629] bond1: left promiscuous mode [ 136.997668][ T7636] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.068003][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1184'. [ 138.086220][ T7670] loop6: detected capacity change from 0 to 512 [ 138.136773][ T7670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.136861][ T7670] ext4 filesystem being mounted at /166/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.438111][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c78d200: rx timeout, send abort [ 138.438280][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811c78d200: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 138.720740][ T7669] FAULT_INJECTION: forcing a failure. [ 138.720740][ T7669] name fail_futex, interval 1, probability 0, space 0, times 0 [ 138.720781][ T7669] CPU: 1 UID: 0 PID: 7669 Comm: syz.7.1184 Not tainted syzkaller #0 PREEMPT(lazy) [ 138.720890][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.720911][ T7669] Call Trace: [ 138.720923][ T7669] [ 138.720936][ T7669] __dump_stack+0x1d/0x30 [ 138.720971][ T7669] dump_stack_lvl+0x95/0xd0 [ 138.721023][ T7669] dump_stack+0x15/0x1b [ 138.721097][ T7669] should_fail_ex+0x262/0x280 [ 138.721267][ T7669] should_fail+0xb/0x20 [ 138.721304][ T7669] get_futex_key+0x12d/0xb10 [ 138.721347][ T7669] futex_wake+0x89/0x400 [ 138.721448][ T7669] do_futex+0x3f8/0x460 [ 138.721493][ T7669] __se_sys_futex+0x2f6/0x370 [ 138.721553][ T7669] __x64_sys_futex+0x78/0x90 [ 138.721598][ T7669] x64_sys_call+0x22e2/0x2550 [ 138.721642][ T7669] do_syscall_64+0x112/0x360 [ 138.721733][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.721766][ T7669] RIP: 0033:0x7f7bc5e7e559 [ 138.721862][ T7669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.721882][ T7669] RSP: 002b:00007f7bc48d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.721908][ T7669] RAX: ffffffffffffffda RBX: 00007f7bc6105fa8 RCX: 00007f7bc5e7e559 [ 138.721947][ T7669] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7bc6105fac [ 138.721967][ T7669] RBP: 00007f7bc6105fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 138.721987][ T7669] R10: 000000000000007c R11: 0000000000000246 R12: 0000000000000000 [ 138.722005][ T7669] R13: 00007f7bc6106038 R14: 00007fff2d562cd0 R15: 00007fff2d562db8 [ 138.722085][ T7669] [ 138.728204][ T4517] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.055581][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 139.956212][ T7722] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1205'. [ 139.992816][ T7722] hsr_slave_1 (unregistering): left promiscuous mode [ 140.031601][ T7726] loop5: detected capacity change from 0 to 512 [ 140.226795][ T7732] syzkaller0: entered promiscuous mode [ 140.226874][ T7732] syzkaller0: entered allmulticast mode [ 140.250809][ T7732] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 140.369797][ T7736] FAULT_INJECTION: forcing a failure. [ 140.369797][ T7736] name failslab, interval 1, probability 0, space 0, times 0 [ 140.369831][ T7736] CPU: 0 UID: 0 PID: 7736 Comm: syz.6.1211 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.369929][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.369953][ T7736] Call Trace: [ 140.369966][ T7736] [ 140.369977][ T7736] __dump_stack+0x1d/0x30 [ 140.370060][ T7736] dump_stack_lvl+0x95/0xd0 [ 140.370112][ T7736] dump_stack+0x15/0x1b [ 140.370138][ T7736] should_fail_ex+0x262/0x280 [ 140.370187][ T7736] ? __memcg_list_lru_alloc+0x288/0x470 [ 140.370213][ T7736] should_failslab+0x8c/0xb0 [ 140.370272][ T7736] __kmalloc_noprof+0xd0/0x4d0 [ 140.370375][ T7736] ? __memcg_list_lru_alloc+0x288/0x470 [ 140.370414][ T7736] __memcg_list_lru_alloc+0x288/0x470 [ 140.370444][ T7736] memcg_list_lru_alloc+0x88/0xa0 [ 140.370475][ T7736] __memcg_slab_post_alloc_hook+0x23f/0x8d0 [ 140.370539][ T7736] ? should_fail_ex+0xdb/0x280 [ 140.370581][ T7736] kmem_cache_alloc_lru_noprof+0x1f4/0x3f0 [ 140.370620][ T7736] ? __d_alloc+0x34/0x320 [ 140.370698][ T7736] ? __d_alloc+0x34/0x320 [ 140.370803][ T7736] __d_alloc+0x34/0x320 [ 140.370840][ T7736] d_make_root+0x28/0x70 [ 140.370925][ T7736] hugetlbfs_fill_super+0x395/0x400 [ 140.371007][ T7736] ? __pfx_hugetlbfs_fill_super+0x10/0x10 [ 140.371179][ T7736] get_tree_nodev+0x83/0x100 [ 140.371221][ T7736] hugetlbfs_get_tree+0x1c3/0x1f0 [ 140.371413][ T7736] vfs_get_tree+0x57/0x1d0 [ 140.371452][ T7736] vfs_cmd_create+0x8a/0x140 [ 140.371554][ T7736] vfs_fsconfig_locked+0x6f/0x210 [ 140.371625][ T7736] __se_sys_fsconfig+0x671/0x7e0 [ 140.371658][ T7736] __x64_sys_fsconfig+0x67/0x80 [ 140.371694][ T7736] x64_sys_call+0xaa0/0x2550 [ 140.371781][ T7736] do_syscall_64+0x112/0x360 [ 140.371847][ T7736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.371951][ T7736] RIP: 0033:0x7ff6f043e559 [ 140.371975][ T7736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.372000][ T7736] RSP: 002b:00007ff6eee97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 140.372030][ T7736] RAX: ffffffffffffffda RBX: 00007ff6f06c5fa0 RCX: 00007ff6f043e559 [ 140.372045][ T7736] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 140.372059][ T7736] RBP: 00007ff6f04d58b0 R08: 0000000000000000 R09: 0000000000000000 [ 140.372078][ T7736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.372098][ T7736] R13: 00007ff6f06c6038 R14: 00007ff6f06c5fa0 R15: 00007fff6f1a24d8 [ 140.372144][ T7736] [ 140.394364][ T6993] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 140.885474][ T7749] loop5: detected capacity change from 0 to 512 [ 140.906156][ T7749] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 140.906179][ T7749] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.933775][ T7749] EXT4-fs (loop5): 1 truncate cleaned up [ 140.934664][ T7749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.192816][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.268760][ T7757] loop5: detected capacity change from 0 to 256 [ 141.864545][ T7769] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1220'. [ 141.889085][ T7770] loop8: detected capacity change from 0 to 512 [ 141.901692][ T7770] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.926110][ T7770] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.1222: corrupted in-inode xattr: e_value size too large [ 141.926141][ T7770] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.927034][ T7770] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.1222: couldn't read orphan inode 15 (err -117) [ 141.927061][ T7770] loop8: lost filesystem error report for type 5 error -117 [ 141.968509][ T7770] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.008129][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 142.008147][ T30] audit: type=1400 audit(1792156993.117:1074): avc: denied { write } for pid=7768 comm="syz.8.1222" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.046173][ T30] audit: type=1400 audit(1792156993.157:1075): avc: denied { write } for pid=7768 comm="syz.8.1222" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.047428][ T30] audit: type=1400 audit(1792156993.157:1076): avc: denied { write } for pid=7768 comm="syz.8.1222" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.105289][ T30] audit: type=1400 audit(1792156993.217:1077): avc: denied { write } for pid=7768 comm="syz.8.1222" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.170732][ T30] audit: type=1400 audit(1792156993.287:1078): avc: denied { write } for pid=7768 comm="syz.8.1222" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.318498][ T5883] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.632184][ T7778] FAULT_INJECTION: forcing a failure. [ 142.632184][ T7778] name failslab, interval 1, probability 0, space 0, times 0 [ 142.632294][ T7778] CPU: 1 UID: 0 PID: 7778 Comm: syz.8.1224 Not tainted syzkaller #0 PREEMPT(lazy) [ 142.632331][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.632389][ T7778] Call Trace: [ 142.632398][ T7778] [ 142.632408][ T7778] __dump_stack+0x1d/0x30 [ 142.632445][ T7778] dump_stack_lvl+0x95/0xd0 [ 142.632480][ T7778] dump_stack+0x15/0x1b [ 142.632509][ T7778] should_fail_ex+0x262/0x280 [ 142.632598][ T7778] ? reuseport_alloc+0x9c/0x200 [ 142.632632][ T7778] should_failslab+0x8c/0xb0 [ 142.632675][ T7778] __kmalloc_cache_noprof+0x7a/0x400 [ 142.632792][ T7778] ? reuseport_alloc+0x9c/0x200 [ 142.632837][ T7778] reuseport_alloc+0x9c/0x200 [ 142.632884][ T7778] inet_hash+0x4de/0x7b0 [ 142.632994][ T7778] inet_csk_listen_start+0x1ad/0x1f0 [ 142.633029][ T7778] inet_listen+0x1b1/0x200 [ 142.633062][ T7778] __x64_sys_listen+0x110/0x170 [ 142.633086][ T7778] x64_sys_call+0x232f/0x2550 [ 142.633115][ T7778] do_syscall_64+0x112/0x360 [ 142.633213][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.633242][ T7778] RIP: 0033:0x7f4d1440e559 [ 142.633337][ T7778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.633357][ T7778] RSP: 002b:00007f4d12e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 142.633426][ T7778] RAX: ffffffffffffffda RBX: 00007f4d14695fa0 RCX: 00007f4d1440e559 [ 142.633448][ T7778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 142.633467][ T7778] RBP: 00007f4d144a58b0 R08: 0000000000000000 R09: 0000000000000000 [ 142.633487][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.633542][ T7778] R13: 00007f4d14696038 R14: 00007f4d14695fa0 R15: 00007ffd1dcd9168 [ 142.633571][ T7778] [ 143.127250][ T30] audit: type=1326 audit(1792156994.237:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.6.1228" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f043e559 code=0x7fc00000 [ 143.162449][ T30] audit: type=1326 audit(1792156994.277:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.6.1228" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ff6f043e559 code=0x7fc00000 [ 143.163300][ T30] audit: type=1326 audit(1792156994.277:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.6.1228" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f043e559 code=0x7fc00000 [ 143.163457][ T30] audit: type=1326 audit(1792156994.277:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.6.1228" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f043e559 code=0x7fc00000 [ 143.163594][ T30] audit: type=1326 audit(1792156994.277:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.6.1228" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f043e559 code=0x7fc00000 [ 143.406221][ T7802] syzkaller0: entered promiscuous mode [ 143.406316][ T7802] syzkaller0: entered allmulticast mode [ 144.446903][ T7827] loop8: detected capacity change from 0 to 8192 [ 144.463096][ T7827] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.745964][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1241'. [ 144.801293][ T7844] macvlan0: entered promiscuous mode [ 144.801940][ T7844] macvlan0: entered allmulticast mode [ 144.809015][ T7844] bond1: entered promiscuous mode [ 144.827406][ T7844] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 145.323369][ T7844] bond1: left promiscuous mode [ 145.943969][ T7893] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 145.944003][ T7893] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 145.944077][ T7893] vhci_hcd vhci_hcd.0: Device attached [ 146.007076][ T7893] loop7: detected capacity change from 0 to 1024 [ 146.039875][ T7893] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.175760][ T7896] vhci_hcd: connection closed [ 146.176595][ T7438] vhci_hcd vhci_hcd.7: stop threads [ 146.176648][ T7438] vhci_hcd vhci_hcd.7: release socket [ 146.176759][ T7438] vhci_hcd vhci_hcd.7: disconnect device [ 146.190172][ T6986] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 146.190216][ T6986] usb 15-1: enqueue for inactive port 0 [ 146.190304][ T6986] usb 15-1: enqueue for inactive port 0 [ 146.190331][ T6986] usb 15-1: enqueue for inactive port 0 [ 146.261121][ T6986] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 146.795710][ T4722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.534425][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.534627][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.632056][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 147.632075][ T30] audit: type=1400 audit(1792156998.747:1093): avc: denied { bpf } for pid=7910 comm="syz.0.1264" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.632118][ T30] audit: type=1400 audit(1792156998.747:1094): avc: denied { perfmon } for pid=7910 comm="syz.0.1264" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.687402][ T30] audit: type=1400 audit(1792156998.797:1095): avc: denied { prog_run } for pid=7910 comm="syz.0.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 147.737329][ T30] audit: type=1400 audit(1792156998.847:1096): avc: denied { execmem } for pid=7920 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 147.737918][ T30] audit: type=1400 audit(1792156998.847:1097): avc: denied { read } for pid=4517 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.737960][ T30] audit: type=1400 audit(1792156998.847:1098): avc: denied { open } for pid=4517 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.738426][ T30] audit: type=1400 audit(1792156998.847:1099): avc: denied { ioctl } for pid=4517 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.861802][ T30] audit: type=1400 audit(1792156998.977:1100): avc: denied { mounton } for pid=7923 comm="syz.6.1260" path="/179/proc" dev="tmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 147.861903][ T30] audit: type=1400 audit(1792156998.977:1101): avc: denied { mount } for pid=7923 comm="syz.6.1260" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 147.925325][ T30] audit: type=1400 audit(1792156999.037:1102): avc: denied { read } for pid=7928 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.953749][ T7924] FAULT_INJECTION: forcing a failure. [ 147.953749][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 147.953788][ T7924] CPU: 1 UID: 0 PID: 7924 Comm: syz.6.1260 Not tainted syzkaller #0 PREEMPT(lazy) [ 147.953820][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.953868][ T7924] Call Trace: [ 147.953952][ T7924] [ 147.953964][ T7924] __dump_stack+0x1d/0x30 [ 147.953998][ T7924] dump_stack_lvl+0x95/0xd0 [ 147.954051][ T7924] dump_stack+0x15/0x1b [ 147.954081][ T7924] should_fail_ex+0x262/0x280 [ 147.954119][ T7924] ? ipv6_add_dev+0x45b/0xab0 [ 147.954209][ T7924] should_failslab+0x8c/0xb0 [ 147.954268][ T7924] __kmalloc_cache_noprof+0x7a/0x400 [ 147.954315][ T7924] ? ipv6_add_dev+0x351/0xab0 [ 147.954358][ T7924] ? ipv6_add_dev+0x45b/0xab0 [ 147.954431][ T7924] ipv6_add_dev+0x45b/0xab0 [ 147.954489][ T7924] addrconf_notify+0x3ad/0x8e0 [ 147.954515][ T7924] ? __pfx_addrconf_notify+0x10/0x10 [ 147.954544][ T7924] raw_notifier_call_chain+0x72/0x1a0 [ 147.954619][ T7924] call_netdevice_notifiers+0xb5/0x110 [ 147.954691][ T7924] register_netdevice+0xfbf/0x11a0 [ 147.954726][ T7924] register_netdev+0x3b/0x50 [ 147.954784][ T7924] loopback_net_init+0x59/0x100 [ 147.954817][ T7924] ops_init+0x22a/0x2e0 [ 147.954838][ T7924] setup_net+0x9f/0x230 [ 147.954944][ T7924] copy_net_ns+0x333/0x490 [ 147.955004][ T7924] create_new_namespaces+0x1f6/0x420 [ 147.955045][ T7924] unshare_nsproxy_namespaces+0x115/0x150 [ 147.955081][ T7924] ksys_unshare+0x3fd/0x6f0 [ 147.955199][ T7924] __x64_sys_unshare+0x1f/0x30 [ 147.955238][ T7924] x64_sys_call+0x1e33/0x2550 [ 147.955357][ T7924] do_syscall_64+0x112/0x360 [ 147.955395][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.955419][ T7924] RIP: 0033:0x7ff6f043e559 [ 147.955448][ T7924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.955548][ T7924] RSP: 002b:00007ff6eee97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 147.955582][ T7924] RAX: ffffffffffffffda RBX: 00007ff6f06c5fa0 RCX: 00007ff6f043e559 [ 147.955610][ T7924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 147.955629][ T7924] RBP: 00007ff6f04d58b0 R08: 0000000000000000 R09: 0000000000000000 [ 147.955649][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.955669][ T7924] R13: 00007ff6f06c6038 R14: 00007ff6f06c5fa0 R15: 00007fff6f1a24d8 [ 147.955694][ T7924] [ 148.223500][ T7931] loop5: detected capacity change from 0 to 512 [ 148.224246][ T7931] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.247983][ T7931] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1263: corrupted in-inode xattr: e_value size too large [ 148.248032][ T7931] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.248801][ T7931] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1263: couldn't read orphan inode 15 (err -117) [ 148.248841][ T7931] loop5: lost filesystem error report for type 5 error -117 [ 148.249271][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 148.249297][ C1] EXT4-fs (loop5): initial error at time 1792156999: ext4_iget_extra_inode:5210: inode 15 [ 148.249372][ C1] EXT4-fs (loop5): last error at time 1792156999: ext4_orphan_get:1408 [ 148.274719][ T7931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.339330][ T7927] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.411597][ T7937] loop7: detected capacity change from 0 to 1024 [ 148.416131][ T7937] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 148.558397][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.960716][ T7928] rxe_eth0 speed is unknown, defaulting to 1000 [ 149.062748][ T7964] loop6: detected capacity change from 0 to 8192 [ 149.076865][ T7972] loop5: detected capacity change from 0 to 512 [ 149.088333][ T7964] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.171260][ T7972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.171478][ T7972] ext4 filesystem being mounted at /236/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.735952][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.053141][ T7928] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.053195][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.053762][ T7928] bridge_slave_0: entered allmulticast mode [ 150.055221][ T7928] bridge_slave_0: entered promiscuous mode [ 150.085614][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.085662][ T7928] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.086100][ T7928] bridge_slave_1: entered allmulticast mode [ 150.088117][ T7928] bridge_slave_1: entered promiscuous mode [ 150.142624][ T7928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.147733][ T7928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.189887][ T7928] team0: Port device team_slave_0 added [ 150.194317][ T7928] team0: Port device team_slave_1 added [ 150.225787][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.225807][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.225843][ T7928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.227690][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.227709][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.227749][ T7928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.380222][ T7928] hsr_slave_0: entered promiscuous mode [ 150.382448][ T7928] hsr_slave_1: entered promiscuous mode [ 150.383897][ T7928] debugfs: 'hsr0' already exists in 'hsr' [ 150.383917][ T7928] Cannot create hsr debugfs directory [ 150.617039][ T7928] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 150.708188][ T7928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.754137][ T7928] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 150.767212][ T7928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.768496][ T7928] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 150.788447][ T7928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.804514][ T7928] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 150.817010][ T7928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.846697][ T8000] syzkaller1: entered promiscuous mode [ 150.846722][ T8000] syzkaller1: entered allmulticast mode [ 150.867192][ T8004] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1281'. [ 150.889007][ T7424] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.906361][ T8000] 0: reclassify loop, rule prio 0, protocol 03 [ 151.016315][ T7424] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.112811][ T7424] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.183593][ T7424] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.352005][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1287'. [ 151.396189][ T7928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.454115][ T7424] bridge_slave_1: left allmulticast mode [ 151.454146][ T7424] bridge_slave_1: left promiscuous mode [ 151.454396][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.471174][ T7424] bridge_slave_0: left allmulticast mode [ 151.471312][ T7424] bridge_slave_0: left promiscuous mode [ 151.471685][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.575194][ T8032] loop5: detected capacity change from 0 to 512 [ 151.587702][ T8032] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.610832][ T8032] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1290: bad orphan inode 13 [ 151.610864][ T8032] loop5: lost filesystem error report for type 5 error -117 [ 151.612524][ T8032] ext4_test_bit(bit=12, block=18) = 1 [ 151.612579][ T8032] is_bad_inode(inode)=0 [ 151.612592][ T8032] NEXT_ORPHAN(inode)=0 [ 151.612679][ T8032] max_ino=32 [ 151.612691][ T8032] i_nlink=1 [ 151.613474][ T8032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 151.705574][ T7424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.724010][ T7424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.732363][ T7424] bond0 (unregistering): Released all slaves [ 151.792546][ T7928] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.841046][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.841087][ T7434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.905605][ T7438] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.905696][ T7438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.145011][ T7424] hsr_slave_0: left promiscuous mode [ 152.156530][ T7424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.156556][ T7424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.196076][ T7424] veth1_macvtap: left promiscuous mode [ 152.196109][ T7424] veth0_macvtap: left promiscuous mode [ 152.494059][ T7424] team0 (unregistering): Port device team_slave_1 removed [ 152.514990][ T7424] team0 (unregistering): Port device team_slave_0 removed [ 152.662937][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 152.714386][ T8020] rxe_eth0 speed is unknown, defaulting to 1000 [ 152.718882][ T3026] 8021q: adding VLAN 0 to HW filter on device eth17 [ 152.825145][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 152.825216][ T30] audit: type=1400 audit(1792157003.937:1192): avc: denied { mount } for pid=8073 comm="syz.5.1293" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 152.862475][ T30] audit: type=1400 audit(1792157003.977:1193): avc: denied { search } for pid=8073 comm="syz.5.1293" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.862606][ T30] audit: type=1400 audit(1792157003.977:1194): avc: denied { search } for pid=8073 comm="syz.5.1293" name="events" dev="tracefs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.867237][ T30] audit: type=1400 audit(1792157003.977:1195): avc: denied { search } for pid=8073 comm="syz.5.1293" name="sched" dev="tracefs" ino=18725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.880950][ T30] audit: type=1400 audit(1792157003.997:1196): avc: denied { search } for pid=8073 comm="syz.5.1293" name="sched_switch" dev="tracefs" ino=18727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.893062][ T30] audit: type=1400 audit(1792157003.997:1197): avc: denied { search } for pid=8073 comm="syz.5.1293" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.893161][ T30] audit: type=1400 audit(1792157004.007:1198): avc: denied { search } for pid=8073 comm="syz.5.1293" name="events" dev="tracefs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.893337][ T30] audit: type=1400 audit(1792157004.007:1199): avc: denied { search } for pid=8073 comm="syz.5.1293" name="sched" dev="tracefs" ino=18725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.893435][ T30] audit: type=1400 audit(1792157004.007:1200): avc: denied { search } for pid=8073 comm="syz.5.1293" name="sched_switch" dev="tracefs" ino=18727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.928783][ T30] audit: type=1400 audit(1792157004.037:1201): avc: denied { read write } for pid=8073 comm="syz.5.1293" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 153.645423][ T8083] loop7: detected capacity change from 0 to 512 [ 153.666044][ T8083] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.1295: corrupted in-inode xattr: invalid ea_ino [ 153.666765][ T8083] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.687522][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 153.688736][ C0] EXT4-fs (loop7): initial error at time 1792157004: ext4_iget_extra_inode:5210: inode 15 [ 153.690721][ C0] EXT4-fs (loop7): last error at time 1792157004: ext4_iget_extra_inode:5210: inode 15 [ 153.719164][ T8083] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1295: couldn't read orphan inode 15 (err -117) [ 153.735186][ T8083] loop7: lost filesystem error report for type 5 error -117 [ 153.750913][ T8083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.811221][ T8083] mmap: syz.7.1295 (8083) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.823389][ T7928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.847940][ T3026] 8021q: adding VLAN 0 to HW filter on device eth18 [ 153.948623][ T8020] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.948674][ T8020] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.971393][ T8020] bridge_slave_0: entered allmulticast mode [ 153.974424][ T8020] bridge_slave_0: entered promiscuous mode [ 153.996570][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.996609][ T8020] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.997073][ T8020] bridge_slave_1: entered allmulticast mode [ 154.021037][ T8020] bridge_slave_1: entered promiscuous mode [ 154.074272][ T8020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.101136][ T8020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.154514][ T4722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.156497][ T8020] team0: Port device team_slave_0 added [ 154.184860][ T8020] team0: Port device team_slave_1 added [ 154.263180][ T8124] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.1297'. [ 154.266965][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.266985][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.267020][ T8020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.327818][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.327856][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.327892][ T8020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.475451][ T8020] hsr_slave_0: entered promiscuous mode [ 154.486708][ T8020] hsr_slave_1: entered promiscuous mode [ 154.496602][ T8020] debugfs: 'hsr0' already exists in 'hsr' [ 154.496623][ T8020] Cannot create hsr debugfs directory [ 154.868350][ T3026] 8021q: adding VLAN 0 to HW filter on device eth19 [ 155.014753][ T7928] veth0_vlan: entered promiscuous mode [ 155.071259][ T7928] veth1_vlan: entered promiscuous mode [ 155.258923][ T8163] syzkaller0: entered promiscuous mode [ 155.258944][ T8163] syzkaller0: entered allmulticast mode [ 155.283832][ T32] syzkaller0: tun_net_xmit 48 [ 155.374153][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1305'. [ 155.445949][ T8172] syz_tun (unregistering): left allmulticast mode [ 155.471966][ T7928] veth0_macvtap: entered promiscuous mode [ 155.487074][ T7928] veth1_macvtap: entered promiscuous mode [ 155.550840][ T8020] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.557318][ T8020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.558383][ T8020] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.594033][ T8020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.610170][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.613538][ T8020] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.617639][ T8020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.618513][ T8020] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.630279][ T8020] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.694002][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.919714][ T7424] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.919770][ T7424] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.919903][ T7424] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.919947][ T7424] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.972518][ T3026] 8021q: adding VLAN 0 to HW filter on device eth20 [ 156.072127][ T8020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.118406][ T8020] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.171632][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.171685][ T7424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.277029][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.277072][ T7424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.683121][ T8219] loop7: detected capacity change from 0 to 512 [ 156.779758][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1310'. [ 156.994614][ T8232] tipc: Failed to remove unknown binding: 66,0,0/0:239085897/239085898 [ 156.995288][ T8232] tipc: Failed to remove unknown binding: 66,0,0/0:239085897/239085898 [ 157.541427][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1314'. [ 157.609007][ T8260] loop5: detected capacity change from 0 to 128 [ 157.617641][ T8260] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.634680][ T8260] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.916799][ T8274] FAULT_INJECTION: forcing a failure. [ 157.916799][ T8274] name failslab, interval 1, probability 0, space 0, times 0 [ 157.916889][ T8274] CPU: 1 UID: 0 PID: 8274 Comm: syz.7.1318 Not tainted syzkaller #0 PREEMPT(lazy) [ 157.916919][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.916936][ T8274] Call Trace: [ 157.916946][ T8274] [ 157.916956][ T8274] __dump_stack+0x1d/0x30 [ 157.916985][ T8274] dump_stack_lvl+0x95/0xd0 [ 157.917062][ T8274] dump_stack+0x15/0x1b [ 157.917087][ T8274] should_fail_ex+0x262/0x280 [ 157.917124][ T8274] should_failslab+0x8c/0xb0 [ 157.917219][ T8274] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 157.917254][ T8274] ? __d_alloc+0x34/0x320 [ 157.917286][ T8274] ? __d_alloc+0x34/0x320 [ 157.917317][ T8274] __d_alloc+0x34/0x320 [ 157.917407][ T8274] ? d_alloc_pseudo+0x13/0x80 [ 157.917562][ T8274] d_alloc_pseudo+0x1e/0x80 [ 157.917597][ T8274] alloc_path_pseudo+0xa4/0x140 [ 157.917664][ T8274] alloc_file_pseudo+0x55/0x120 [ 157.917702][ T8274] __shmem_file_setup+0x226/0x260 [ 157.917759][ T8274] shmem_file_setup+0x3b/0x50 [ 157.917803][ T8274] memfd_alloc_file+0x4e/0x300 [ 157.917894][ T8274] __se_sys_memfd_create+0x2e1/0x3b0 [ 157.917982][ T8274] __x64_sys_memfd_create+0x31/0x40 [ 157.918097][ T8274] x64_sys_call+0x1955/0x2550 [ 157.918132][ T8274] do_syscall_64+0x112/0x360 [ 157.918166][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.918242][ T8274] RIP: 0033:0x7f7bc5e7e559 [ 157.918270][ T8274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.918301][ T8274] RSP: 002b:00007f7bc48d6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 157.918335][ T8274] RAX: ffffffffffffffda RBX: 00000000000005b1 RCX: 00007f7bc5e7e559 [ 157.918352][ T8274] RDX: 00007f7bc48d6ee0 RSI: 0000000000000000 RDI: 00007f7bc5f15a90 [ 157.918448][ T8274] RBP: 0000200000000640 R08: 00000000ffffffff R09: 0000000000000000 [ 157.918467][ T8274] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000540 [ 157.918526][ T8274] R13: 00007f7bc48d6ee0 R14: 00007f7bc48d6ea0 R15: 0000200000000580 [ 157.918552][ T8274] [ 157.936949][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 157.937125][ T30] audit: type=1400 audit(1792157009.047:1231): avc: denied { create } for pid=8273 comm="syz.5.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.962828][ T30] audit: type=1400 audit(1792157009.077:1232): avc: denied { setopt } for pid=8273 comm="syz.5.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.198759][ T30] audit: type=1400 audit(1792157009.307:1233): avc: denied { write } for pid=8261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.224821][ T8020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.239732][ T8274] loop7: detected capacity change from 0 to 512 [ 158.283716][ T8274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.283927][ T8274] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.342424][ T30] audit: type=1400 audit(1792157009.457:1234): avc: denied { write } for pid=8272 comm="syz.7.1318" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.517734][ T30] audit: type=1400 audit(1792157009.627:1235): avc: denied { ioctl } for pid=8273 comm="syz.5.1317" path="socket:[21423]" dev="sockfs" ino=21423 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.519473][ T30] audit: type=1400 audit(1792157009.627:1236): avc: denied { bind } for pid=8273 comm="syz.5.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.594778][ T4722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.622491][ T30] audit: type=1400 audit(1792157009.737:1237): avc: denied { write } for pid=8286 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.721313][ T8020] veth0_vlan: entered promiscuous mode [ 158.742734][ T8020] veth1_vlan: entered promiscuous mode [ 158.825283][ T8020] veth0_macvtap: entered promiscuous mode [ 158.842071][ T8020] veth1_macvtap: entered promiscuous mode [ 158.876075][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.944392][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.019885][ T7434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.020708][ T7434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.020755][ T7434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.020854][ T7434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.353323][ T30] audit: type=1400 audit(1792157010.467:1238): avc: denied { write } for pid=8302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.484379][ T30] audit: type=1400 audit(1792157010.597:1239): avc: denied { write } for pid=8321 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.966112][ T8336] FAULT_INJECTION: forcing a failure. [ 159.966112][ T8336] name failslab, interval 1, probability 0, space 0, times 0 [ 159.966129][ T30] audit: type=1400 audit(1792157011.077:1240): avc: denied { name_connect } for pid=8335 comm="syz.9.1326" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 159.966216][ T8336] CPU: 1 UID: 0 PID: 8336 Comm: syz.9.1326 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.966331][ T8336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.966347][ T8336] Call Trace: [ 159.966356][ T8336] [ 159.966366][ T8336] __dump_stack+0x1d/0x30 [ 159.966395][ T8336] dump_stack_lvl+0x95/0xd0 [ 159.966444][ T8336] dump_stack+0x15/0x1b [ 159.966480][ T8336] should_fail_ex+0x262/0x280 [ 159.966524][ T8336] ? sctp_association_new+0x6d/0x1160 [ 159.966563][ T8336] should_failslab+0x8c/0xb0 [ 159.966645][ T8336] __kmalloc_cache_noprof+0x7a/0x400 [ 159.966702][ T8336] ? sctp_association_new+0x6d/0x1160 [ 159.966743][ T8336] sctp_association_new+0x6d/0x1160 [ 159.966781][ T8336] ? sctp_v4_scope+0x140/0x150 [ 159.966814][ T8336] sctp_connect_new_asoc+0x1a8/0x3a0 [ 159.966896][ T8336] __sctp_connect+0x428/0x7a0 [ 159.966921][ T8336] ? release_sock+0x10c/0x180 [ 159.966960][ T8336] ? lock_sock_nested+0x84/0x110 [ 159.967012][ T8336] sctp_inet_connect+0xe7/0x110 [ 159.967208][ T8336] __sys_connect+0x1ef/0x2a0 [ 159.967248][ T8336] __x64_sys_connect+0x3f/0x50 [ 159.967273][ T8336] x64_sys_call+0x1c0b/0x2550 [ 159.967310][ T8336] do_syscall_64+0x112/0x360 [ 159.967400][ T8336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.967442][ T8336] RIP: 0033:0x7f00c020e559 [ 159.967470][ T8336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.967536][ T8336] RSP: 002b:00007f00bec67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 159.967573][ T8336] RAX: ffffffffffffffda RBX: 00007f00c0495fa0 RCX: 00007f00c020e559 [ 159.967598][ T8336] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000006 [ 159.967677][ T8336] RBP: 00007f00c02a58b0 R08: 0000000000000000 R09: 0000000000000000 [ 159.967705][ T8336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.967728][ T8336] R13: 00007f00c0496038 R14: 00007f00c0495fa0 R15: 00007ffffd4d2e08 [ 159.967761][ T8336] [ 160.283730][ T7440] IPVS: starting estimator thread 0... [ 160.370079][ T8345] IPVS: using max 2544 ests per chain, 127200 per kthread [ 161.167169][ T8378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.167465][ T8378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.206905][ T8380] ip_tables: iptables: counters copy to user failed while replacing table [ 161.533805][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1337'. [ 161.818377][ T8411] rxe_eth0 speed is unknown, defaulting to 1000 [ 161.828371][ T8412] ================================================================== [ 161.828414][ T8412] BUG: KCSAN: data-race in __set_task_comm / strlen [ 161.828465][ T8412] [ 161.828473][ T8412] write to 0xffff88810490de18 of 10 bytes by task 8413 on cpu 0: [ 161.828493][ T8412] __set_task_comm+0x78/0x180 [ 161.828535][ T8412] __se_sys_prctl+0xcb3/0x13b0 SYZFAIL: failed to recv rpc [ 161.828567][ T8412] __x64_sys_prctl+0x67/0x80 [ 161.828595][ T8412] x64_sys_call+0x2421/0x2550 [ 161.828643][ T8412] do_syscall_64+0x112/0x360 [ 161.828674][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.828704][ T8412] [ 161.828714][ T8412] read to 0xffff88810490de1d of 1 bytes by task 8412 on cpu 1: [ 161.828740][ T8412] strlen+0x19/0x40 [ 161.828785][ T8412] trace_event_raw_event_sched_stat_runtime+0x5a/0x150 [ 161.828813][ T8412] update_se+0x14f/0x3b0 [ 161.828836][ T8412] update_curr+0x1e/0x210 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 161.828876][ T8412] enqueue_task_fair+0x77/0x850 [ 161.828915][ T8412] ttwu_do_activate+0xa7/0x230 [ 161.828941][ T8412] try_to_wake_up+0x44f/0x6d0 [ 161.828965][ T8412] autoremove_wake_function+0x10/0x50 [ 161.829000][ T8412] __wake_up+0x66/0xb0 [ 161.829033][ T8412] audit_log_end+0x1e0/0x250 [ 161.829067][ T8412] common_lsm_audit+0x1c9/0x230 [ 161.829098][ T8412] slow_avc_audit+0x14c/0x190 [ 161.829132][ T8412] avc_has_perm+0x144/0x190 [ 161.829160][ T8412] selinux_path_notify+0x3a9/0x400 [ 161.829195][ T8412] security_path_notify+0x44/0x80 [ 161.829229][ T8412] __se_sys_inotify_add_watch+0x1a5/0x720 [ 161.829265][ T8412] __x64_sys_inotify_add_watch+0x43/0x50 [ 161.829319][ T8412] x64_sys_call+0xa19/0x2550 [ 161.829348][ T8412] do_syscall_64+0x112/0x360 [ 161.829376][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.829401][ T8412] [ 161.829408][ T8412] value changed: 0x78 -> 0x2e [ 161.829422][ T8412] [ 161.829428][ T8412] Reported by Kernel Concurrency Sanitizer on: [ 161.829442][ T8412] CPU: 1 UID: 0 PID: 8412 Comm: syz.7.1350 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.829472][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.829489][ T8412] ================================================================== [ 162.038838][ T8411] FAULT_INJECTION: forcing a failure. [ 162.038838][ T8411] name failslab, interval 1, probability 0, space 0, times 0 [ 162.038934][ T8411] CPU: 1 UID: 0 PID: 8411 Comm: syz.3.1339 Not tainted syzkaller #0 PREEMPT(lazy) [ 162.039017][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.039063][ T8411] Call Trace: [ 162.039091][ T8411] [ 162.039120][ T8411] __dump_stack+0x1d/0x30 [ 162.039237][ T8411] dump_stack_lvl+0x95/0xd0 [ 162.039312][ T8411] dump_stack+0x15/0x1b [ 162.039379][ T8411] should_fail_ex+0x262/0x280 [ 162.039472][ T8411] ? __kernfs_new_node+0x70/0x440 [ 162.039550][ T8411] should_failslab+0x8c/0xb0 [ 162.039649][ T8411] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 162.039819][ T8411] ? __kernfs_new_node+0x70/0x440 [ 162.039905][ T8411] __kernfs_new_node+0x70/0x440 [ 162.039984][ T8411] ? rb_insert_color+0x291/0x2a0 [ 162.040067][ T8411] ? __rcu_read_unlock+0x4e/0x70 [ 162.040169][ T8411] ? __rcu_read_unlock+0x4e/0x70 [ 162.040279][ T8411] ? kernfs_activate_one+0x10c/0x140 [ 162.040419][ T8411] ? __rcu_read_unlock+0x4e/0x70 [ 162.040540][ T8411] ? up_write+0x19/0x60 [ 162.040639][ T8411] kernfs_new_node+0xcf/0xf0 [ 162.040772][ T8411] __kernfs_create_file+0x4b/0x180 [ 162.040915][ T8411] ? __pfx_port_attr_show+0x10/0x10 [ 162.041037][ T8411] ? __pfx_port_attr_store+0x10/0x10 [ 162.041209][ T8411] sysfs_add_file_mode_ns+0x132/0x1b0 [ 162.041374][ T8411] internal_create_group+0x43e/0x9e0 [ 162.041508][ T8411] ? kernfs_create_dir_ns+0x158/0x170 [ 162.041606][ T8411] sysfs_create_groups+0x3f/0xf0 [ 162.041759][ T8411] kobject_add_internal+0x49d/0x770 [ 162.041888][ T8411] kobject_add+0xdb/0x150 [ 162.041983][ T8411] ? __kmalloc_noprof+0x403/0x4d0 [ 162.042161][ T8411] ib_setup_port_attrs+0xa04/0x1480 [ 162.042287][ T8411] ? klist_add_tail+0xf2/0x130 [ 162.042402][ T8411] ? kobject_put+0x108/0x180 [ 162.042621][ T8411] add_one_compat_dev+0x297/0x390 [ 162.042787][ T8411] rdma_dev_init_net+0x1b9/0x240 [ 162.042870][ T8411] ops_init+0x22a/0x2e0 [ 162.042938][ T8411] setup_net+0x9f/0x230 [ 162.043083][ T8411] copy_net_ns+0x333/0x490 [ 162.043204][ T8411] create_new_namespaces+0x1f6/0x420 [ 162.043314][ T8411] unshare_nsproxy_namespaces+0x115/0x150 [ 162.043415][ T8411] ksys_unshare+0x3fd/0x6f0 [ 162.043587][ T8411] __x64_sys_unshare+0x1f/0x30 [ 162.043672][ T8411] x64_sys_call+0x1e33/0x2550 [ 162.043794][ T8411] do_syscall_64+0x112/0x360 [ 162.043963][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.044031][ T8411] RIP: 0033:0x7fc29d24e559 [ 162.044091][ T8411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.044204][ T8411] RSP: 002b:00007fc29bca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 162.044285][ T8411] RAX: ffffffffffffffda RBX: 00007fc29d4d5fa0 RCX: 00007fc29d24e559 [ 162.044342][ T8411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 162.044401][ T8411] RBP: 00007fc29d2e58b0 R08: 0000000000000000 R09: 0000000000000000 [ 162.044491][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.044541][ T8411] R13: 00007fc29d4d6038 R14: 00007fc29d4d5fa0 R15: 00007ffe66aa4288 [ 162.044619][ T8411] [ 162.152410][ T8411] kobject: kobject_add_internal failed for 1 (error: -12 parent: ports) [ 162.406950][ T8414] rxe_eth0 speed is unknown, defaulting to 1000 [ 162.903571][ T8415] syz_tun (unregistering): left allmulticast mode [ 163.048070][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 163.048093][ T30] audit: type=1400 audit(1792157014.157:1293): avc: denied { write } for pid=8429 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.282410][ T7424] smc: removing ib device syz1 [ 163.298032][ T6977] infiniband syz1: ib_query_port failed (-19) [ 163.416387][ T7440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.576497][ T7440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.677398][ T7440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.692944][ T30] audit: type=1400 audit(1792157014.807:1294): avc: denied { write } for pid=8431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.774211][ T7440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.836310][ T30] audit: type=1400 audit(1792157014.947:1295): avc: denied { write } for pid=8442 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.953288][ T30] audit: type=1400 audit(1792157015.067:1296): avc: denied { read } for pid=3026 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 164.042825][ T7440] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.091744][ T7440] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.155039][ T7440] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.203024][ T7440] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.398000][ T7440] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.444935][ T30] audit: type=1400 audit(1792157015.557:1297): avc: denied { write } for pid=8445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.487837][ T7440] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.523951][ T30] audit: type=1400 audit(1792157015.637:1298): avc: denied { write } for pid=8456 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.570153][ T7440] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.621875][ T7440] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.788720][ T7440] bridge_slave_1: left allmulticast mode [ 164.788757][ T7440] bridge_slave_1: left promiscuous mode [ 164.789001][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.811100][ T7440] bridge_slave_0: left allmulticast mode [ 164.811127][ T7440] bridge_slave_0: left promiscuous mode [ 164.811380][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.844476][ T7440] bridge_slave_1: left allmulticast mode [ 164.844503][ T7440] bridge_slave_1: left promiscuous mode [ 164.844789][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.847193][ T7440] bridge_slave_0: left allmulticast mode [ 164.847217][ T7440] bridge_slave_0: left promiscuous mode [ 164.847428][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.848107][ T30] audit: type=1400 audit(1792157015.957:1299): avc: denied { write } for pid=8458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.875618][ T7440] pimreg: left allmulticast mode [ 164.912625][ T7440] bridge_slave_1: left allmulticast mode [ 164.912709][ T7440] bridge_slave_1: left promiscuous mode [ 164.912936][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.938038][ T7440] bridge_slave_0: left allmulticast mode [ 164.940253][ T7440] bridge_slave_0: left promiscuous mode [ 164.940584][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.046224][ T30] audit: type=1400 audit(1792157016.157:1300): avc: denied { write } for pid=8469 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.293584][ T7440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.315474][ T7440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.323682][ T7440] bond0 (unregistering): Released all slaves [ 165.364086][ T30] audit: type=1400 audit(1792157016.477:1301): avc: denied { write } for pid=8471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.398315][ T7440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.417997][ T7440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.430985][ T7440] bond0 (unregistering): Released all slaves [ 165.434003][ T7440] bond1 (unregistering): Released all slaves [ 165.445433][ T30] audit: type=1400 audit(1792157016.557:1302): avc: denied { write } for pid=8482 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.510901][ T7440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.515387][ T7440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.529104][ T7440] bond0 (unregistering): Released all slaves [ 165.727901][ T7440] hsr_slave_0: left promiscuous mode [ 165.736441][ T7440] hsr_slave_1: left promiscuous mode [ 165.737788][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.737808][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.741326][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.741378][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.762316][ T7440] hsr_slave_0: left promiscuous mode [ 165.764447][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.764505][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.806870][ T7440] hsr_slave_0: left promiscuous mode [ 165.808552][ T7440] hsr_slave_1: left promiscuous mode [ 165.820873][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.820940][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.822472][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.822495][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.915017][ T7440] veth1_macvtap: left promiscuous mode [ 165.915053][ T7440] veth0_macvtap: left promiscuous mode [ 165.915102][ T7440] veth1_vlan: left promiscuous mode [ 165.915155][ T7440] veth0_vlan: left promiscuous mode [ 165.916869][ T7440] veth1_macvtap: left promiscuous mode [ 165.916961][ T7440] veth0_macvtap: left promiscuous mode [ 165.918406][ T7440] veth1_macvtap: left promiscuous mode [ 165.918438][ T7440] veth0_macvtap: left promiscuous mode [ 165.918567][ T7440] veth1_vlan: left promiscuous mode [ 165.918611][ T7440] veth0_vlan: left promiscuous mode [ 166.197167][ T7440] team0 (unregistering): Port device team_slave_1 removed [ 166.211331][ T7440] team0 (unregistering): Port device team_slave_0 removed [ 166.295166][ T7440] team0 (unregistering): Port device team_slave_1 removed [ 166.307808][ T7440] team0 (unregistering): Port device team_slave_0 removed [ 166.416366][ T7440] team0 (unregistering): Port device team_slave_1 removed [ 166.431296][ T7440] team0 (unregistering): Port device team_slave_0 removed [ 166.482584][ T3026] 8021q: adding VLAN 0 to HW filter on device eth1 [ 166.726598][ T3026] 8021q: adding VLAN 0 to HW filter on device eth2 [ 166.965328][ T3026] 8021q: adding VLAN 0 to HW filter on device eth3 [ 167.203266][ T3026] 8021q: adding VLAN 0 to HW filter on device eth4 [ 167.363407][ T7440] bridge_slave_1: left allmulticast mode [ 167.363437][ T7440] bridge_slave_1: left promiscuous mode [ 167.363689][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.365942][ T7440] bridge_slave_0: left allmulticast mode [ 167.365963][ T7440] bridge_slave_0: left promiscuous mode [ 167.366113][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.463446][ T7440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.467577][ T7440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.492079][ T7440] bond0 (unregistering): Released all slaves [ 167.495168][ T7440] bond1 (unregistering): Released all slaves [ 167.516336][ T3026] 8021q: adding VLAN 0 to HW filter on device eth21 [ 167.568178][ T7440] hsr_slave_0: left promiscuous mode [ 167.590708][ T7440] hsr_slave_1: left promiscuous mode [ 167.592860][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.666239][ T7440] team0 (unregistering): Port device team_slave_1 removed [ 167.691005][ T7440] team0 (unregistering): Port device team_slave_0 removed [ 167.816350][ T3026] 8021q: adding VLAN 0 to HW filter on device eth22 [ 168.052663][ T3026] 8021q: adding VLAN 0 to HW filter on device eth23 [ 168.216227][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 168.216250][ T30] audit: type=1400 audit(1792157019.327:1317): avc: denied { write } for pid=8583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.273439][ T30] audit: type=1400 audit(1792157019.387:1318): avc: denied { write } for pid=8594 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.324176][ T3026] 8021q: adding VLAN 0 to HW filter on device eth24 [ 168.485319][ T30] audit: type=1400 audit(1792157019.597:1319): avc: denied { write } for pid=8597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.538635][ T30] audit: type=1400 audit(1792157019.647:1320): avc: denied { write } for pid=8608 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.585682][ T3026] 8021q: adding VLAN 0 to HW filter on device eth25 [ 168.771920][ T30] audit: type=1400 audit(1792157019.887:1321): avc: denied { write } for pid=8612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.823098][ T30] audit: type=1400 audit(1792157019.937:1322): avc: denied { write } for pid=8623 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.866348][ T3026] 8021q: adding VLAN 0 to HW filter on device eth26 [ 169.025662][ T30] audit: type=1400 audit(1792157020.137:1323): avc: denied { write } for pid=8626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.080515][ T30] audit: type=1400 audit(1792157020.197:1324): avc: denied { write } for pid=8637 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.124417][ T3026] 8021q: adding VLAN 0 to HW filter on device eth27 [ 169.311633][ T30] audit: type=1400 audit(1792157020.427:1325): avc: denied { write } for pid=8641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.363528][ T30] audit: type=1400 audit(1792157020.477:1326): avc: denied { write } for pid=8652 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.407441][ T3026] 8021q: adding VLAN 0 to HW filter on device eth28 [ 169.644862][ T3026] 8021q: adding VLAN 0 to HW filter on device eth29 [ 169.868504][ T3026] 8021q: adding VLAN 0 to HW filter on device eth30 [ 170.093495][ T3026] 8021q: adding VLAN 0 to HW filter on device eth31 [ 170.317202][ T3026] 8021q: adding VLAN 0 to HW filter on device eth32