last executing test programs: 1m6.381741732s ago: executing program 0 (id=1153): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008090}, 0x40000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000880)) 1m6.282731766s ago: executing program 0 (id=1155): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x7}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 1m6.222101259s ago: executing program 0 (id=1158): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf25090000002800028008000200020000800800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000480"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m6.121952304s ago: executing program 0 (id=1161): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) sendto(r1, &(0x7f00000005c0), 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) write(r0, &(0x7f0000000000)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) 1m5.586995739s ago: executing program 0 (id=1165): quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 1m5.169994148s ago: executing program 0 (id=1172): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) close(0x3) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x26) write(r2, &(0x7f0000000000)='7', 0x1) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x0, 0x4, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}, 0xb}}}, 0x32) 1m5.116688671s ago: executing program 32 (id=1172): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) close(0x3) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x26) write(r2, &(0x7f0000000000)='7', 0x1) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x0, 0x4, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}, 0xb}}}, 0x32) 8.270738465s ago: executing program 5 (id=2024): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044000}, 0x0) 8.207712219s ago: executing program 5 (id=2028): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_rdma(0x10, 0x3, 0x14) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40000062) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 7.638705435s ago: executing program 5 (id=2032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.638491655s ago: executing program 5 (id=2033): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 7.563809289s ago: executing program 5 (id=2034): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70302000300000085000000050000001801000020786c25000000000000000007010000f8ffffffb702000008000000b703000000000000850000000600000059360200080000009500"/160], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0xc3200, 0xc, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x8, 0xff, 0x6b, 0x190, 0xffffffffffffffff, 0x1e2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0xa}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f", 0x2b}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x4f, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x29, 0xe, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000009c0)={r5}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0000003a0001000321ab6cb0e10f0000ff070004000000010000000800f000549db109433f341d38092b69313c5031cfcd41bef5977fb73c8a36334f22b53e92065f6352e45b85", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x30044084}, 0x4008094) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r8}, 0x8) close(r9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, 0x8, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x21cc5ffabbdc8308}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0100000003"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003540)={{r11}, &(0x7f00000034c0), &(0x7f0000003500), 0x20}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000040000000c83e700feffffff85000000520000001849000007000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000f8ffffff17221000f0ffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x46, &(0x7f00000003c0)=""/70, 0x41000, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x4, 0x80000001, 0x19eec371}, 0x10, 0xa92a, r0, 0x4, &(0x7f0000000880)=[r0], &(0x7f00000008c0)=[{0x5, 0x2, 0x5, 0x5}, {0x3, 0x5, 0x2}, {0x1, 0x3, 0xf, 0xb}, {0x3, 0x1, 0x0, 0xa}], 0x10, 0x800}, 0x94) 7.336029279s ago: executing program 5 (id=2040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0xfffffff1, 0x1ff, 0x5082, 0x2600, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.335917649s ago: executing program 33 (id=2040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0xfffffff1, 0x1ff, 0x5082, 0x2600, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.626374452s ago: executing program 1 (id=2051): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9b, @b={0x3, 0x3, 0x4, 0x1, 0xe, 0xf0, 0xd, {}, 0x3, 0x1, 0xd, 0x18, 0x7d, "e1f9ec1a2a2bf352234c86a744745ab75e15acc17ec97dcdd3f01cea87d3f97d695e66f64b86303762eb14ce6599be338874339db0b991d0464e9e52c7fe98b8af0c9981a169042c0f83a3da26529e57c4d00b97b6175653e8032966b4b0414ff6de81a2522a6a4487e2e02da3c94b275545b1604f631e7aea6412c11a"}}, 0x8d) 3.514542927s ago: executing program 1 (id=2077): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2509000000280002800800020002000080080001000000000014000380"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000480"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3.514168437s ago: executing program 1 (id=2078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 3.436254391s ago: executing program 3 (id=2082): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044000}, 0x0) 3.352820565s ago: executing program 3 (id=2085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xb}, {0xfff3, 0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.291737007s ago: executing program 1 (id=2087): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9b, @b={0x3, 0x3, 0x4, 0x1, 0xe, 0xf0, 0xd, {}, 0x3, 0x1, 0xd, 0x18, 0x86, "e1f9ec1a2a2bf352234c86a744745ab75e15acc17ec97dcdd3f01cea87d3f97d695e66f64b86303762eb14ce6599be338874339db0b991d0464e9e52c7fe98b8af0c9981a169042c0f83a3da26529e57c4d00b97b6175653e8032966b4b0414ff6de81a2522a6a4487e2e02da3c94b275545b1604f631e7aea6412c11a850bcd23adfee8d706"}}, 0x96) 3.245582859s ago: executing program 3 (id=2089): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2509000000280002800800020002000080080001000000000014000380"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000130001000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000480"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3.177040322s ago: executing program 3 (id=2090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) 3.122461215s ago: executing program 3 (id=2092): io_setup(0x8, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) 1.72856883s ago: executing program 4 (id=2100): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2509000000280002800800020002000080080001000000000014000380"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000130001000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000480"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.72800757s ago: executing program 4 (id=2101): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect(r1, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073113000000000008510000002000000850000007600000095000000000000009500a5050000000048ba034279b92d459280cc10da7ef2aec2030e99fea601ba8a0303580b894b65a8dfacd7e8c9e628ad7833825c0482810a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 1.555948208s ago: executing program 2 (id=2102): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4b7f, 0x8}, 0x8f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x200, 0x70bd27, 0x0, {{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa0100fd}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xae, 0xfff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0xd21}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d3, 0x3c}, 0x0, @in6=@empty, 0x0, 0x4, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xfc00, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) 1.158169116s ago: executing program 2 (id=2103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) 1.143727927s ago: executing program 2 (id=2104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002130000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x1103, r0}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000880), 0x531c, r1}, 0x38) 1.07097746s ago: executing program 6 (id=2105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8ea3a}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x10) 1.07039064s ago: executing program 2 (id=2106): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x554b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x1}, 0x11efa, 0x5, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000001}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0x1800, 0x6, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 987.647914ms ago: executing program 2 (id=2107): socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000040800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000020000000000330000000200000000000000000000000000ffffac1414aa000000000001000000000000000000000000000020010000000000000000000000000000000004d26c00000000000000ac14142400000000000000000000000000000000000000000c0000000000000000000000ac1e0101000000000000000000000000000004d23300"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x40400c4) 987.082534ms ago: executing program 2 (id=2108): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@sb={'sb', 0x3d, 0x7c7f}}, {@dax_always}, {@errors_continue}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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") futex(0x0, 0xd, 0xfffffffe, 0x0, 0x0, 0x6fd) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) syz_ublk_setup_io_uring(0xd7, &(0x7f0000000280)={0x0, 0x4778, 0x4000, 0x1, 0x49}, 0x0, &(0x7f0000000340), &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x200, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) 832.912702ms ago: executing program 4 (id=2109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce3c61821c000b250a005f42000000000000"], 0x1c}}, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 816.058492ms ago: executing program 6 (id=2110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000030000008500000011000000180100002020782500000000002020b77b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 771.210814ms ago: executing program 6 (id=2111): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004040) 771.083734ms ago: executing program 6 (id=2112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x80000601, 0x1}}, 0x20) 770.945345ms ago: executing program 6 (id=2113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016000000000000005e000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) 751.838745ms ago: executing program 4 (id=2114): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4b7f, 0x8}, 0x8f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x200, 0x70bd27, 0x0, {{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa0100fd}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xae, 0xfff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0xd21}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d3, 0x3c}, 0x0, @in6=@empty, 0x0, 0x4, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xfc00, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) 720.716157ms ago: executing program 6 (id=2115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc010) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000600)={0x8, 0x41}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x2400000) mount$9p_tcp(&(0x7f0000000000), 0x0, &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e']) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) 181.934882ms ago: executing program 1 (id=2116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 181.450472ms ago: executing program 1 (id=2117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002130000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x1103, r0}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000880), 0x531c, r1}, 0x38) 84.969536ms ago: executing program 4 (id=2118): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 602.95µs ago: executing program 4 (id=2119): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c00)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 0s ago: executing program 3 (id=2120): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x6, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRESHEX=r0, @ANYBLOB="71403969451dab41607da6831e6b0b8e7a120f2cc1b1fff90fbf9c5f0f72fdb55d492eb3f8953173e3db7dfb727bd92e61cbd57fe5934fc2e6cc7b3f6409cb7711d98826eb8891cd54e6880a5dd1d75344c6537cdff97482e6671bc24565f0f78d7a4d3161a274abfbabbf0d9f58c515625a0f49c23f3440c3bea0ab50031a6db00f3b2cbe0cf58bc195a927f0d83a5257cae5ff7afd8246715ffbc99aee7f575558477913d31649d9812870bc248cbbfbcdebb2169ec4faf62f44", @ANYRESHEX=r1, @ANYRES16=r1], &(0x7f0000000d40)='syzkaller\x00', 0xd04, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff54}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x3}, 0x100288, 0x2, 0xfffffffe, 0x0, 0x0, 0x72b9}, 0x0, 0x3, r0, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x215, 0x3fd, 0xfffffffa, 0x0, 0xfffffffffffffffd, 0x1, 0xffff, 0x0, 0x10}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): T4942] ? ref_tracker_free+0x380/0x3f0 [ 69.714840][ T4942] futex_wait_setup+0x49/0x3e0 [ 69.714860][ T4942] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 69.714893][ T4942] ? hrtimer_active+0xe4/0x110 [ 69.715044][ T4942] __futex_wait+0xa9/0x260 [ 69.715064][ T4942] ? __pfx_futex_wake_mark+0x10/0x10 [ 69.715117][ T4942] futex_wait+0x98/0x1c0 [ 69.715139][ T4942] do_futex+0x391/0x460 [ 69.715207][ T4942] __se_sys_futex+0x2f6/0x370 [ 69.715238][ T4942] __x64_sys_futex+0x78/0x90 [ 69.715267][ T4942] x64_sys_call+0x22e2/0x2550 [ 69.715323][ T4942] do_syscall_64+0x112/0x360 [ 69.715357][ T4942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.715380][ T4942] RIP: 0033:0x7f9e10a8e159 [ 69.715397][ T4942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.715467][ T4942] RSP: 002b:00007f9e0f4e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 69.715489][ T4942] RAX: ffffffffffffffda RBX: 00007f9e10d15fa8 RCX: 00007f9e10a8e159 [ 69.715504][ T4942] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e10d15fa8 [ 69.715526][ T4942] RBP: 00007f9e10d15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 69.715581][ T4942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.715594][ T4942] R13: 00007f9e10d16038 R14: 00007ffe212c5ac0 R15: 00007ffe212c5ba8 [ 69.715612][ T4942] [ 70.346718][ T4955] loop2: detected capacity change from 0 to 512 [ 70.347160][ T4955] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.349049][ T4955] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.559: corrupted in-inode xattr: e_value size too large [ 70.349095][ T4955] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.349289][ T4955] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.559: couldn't read orphan inode 15 (err -117) [ 70.349316][ T4955] loop2: lost filesystem error report for type 5 error -117 [ 70.349750][ T4955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.372830][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.404355][ T4958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.560'. [ 70.404386][ T4958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.560'. [ 70.556981][ T4966] syzkaller0: entered promiscuous mode [ 70.557014][ T4966] syzkaller0: entered allmulticast mode [ 70.573417][ T4966] tipc: Started in network mode [ 70.573445][ T4966] tipc: Node identity 62fdb22316ab, cluster identity 4711 [ 70.573488][ T4966] tipc: Enabled bearer , priority 0 [ 70.573556][ T29] audit: type=1400 audit(1789933398.431:365): avc: denied { create } for pid=4967 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.574063][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.575309][ T29] audit: type=1400 audit(1789933398.431:366): avc: denied { bind } for pid=4967 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.575606][ T29] audit: type=1400 audit(1789933398.431:367): avc: denied { write } for pid=4967 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.575721][ T4966] tipc: Resetting bearer [ 70.575873][ T29] audit: type=1400 audit(1789933398.431:368): avc: denied { read } for pid=4967 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.576626][ T4965] tipc: Resetting bearer [ 70.619308][ T4965] tipc: Disabling bearer [ 70.725331][ T4975] bond0: invalid ARP target specified [ 70.741899][ T4977] netlink: 96 bytes leftover after parsing attributes in process `syz.3.567'. [ 70.766293][ T4981] tmpfs: Unknown parameter 'quota' [ 71.225581][ T5019] loop3: detected capacity change from 0 to 512 [ 71.228017][ T5019] EXT4-fs: dax option not supported [ 72.025704][ T24] lg-g15 0003:046D:0A07.0005: unknown main item tag 0x0 [ 72.025732][ T24] lg-g15 0003:046D:0A07.0005: unknown main item tag 0x0 [ 72.025753][ T24] lg-g15 0003:046D:0A07.0005: unknown main item tag 0x0 [ 72.025786][ T24] lg-g15 0003:046D:0A07.0005: unknown main item tag 0x0 [ 72.025847][ T24] lg-g15 0003:046D:0A07.0005: unknown main item tag 0x0 [ 72.027045][ T24] lg-g15 0003:046D:0A07.0005: unknown main item tag 0x0 [ 72.147496][ T5051] 9pnet_fd: p9_fd_create_tcp (5051): problem connecting socket to 127.0.0.1 [ 72.522010][ T24] lg-g15 0003:046D:0A07.0005: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 72.657194][ T5073] loop4: detected capacity change from 0 to 512 [ 72.668358][ T5073] EXT4-fs: Ignoring removed i_version option [ 72.668402][ T5073] EXT4-fs: Ignoring removed bh option [ 72.694193][ T5073] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.603: inode #13: comm syz.4.603: iget: illegal inode # [ 72.694230][ T5073] loop4: lost filesystem error report for type 5 error -117 [ 72.694417][ T5073] EXT4-fs (loop4): Remounting filesystem read-only [ 72.694816][ T5073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.777125][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.780222][ T5075] fido_id[5075]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 72.843045][ T5085] syzkaller0: entered promiscuous mode [ 72.843123][ T5085] syzkaller0: entered allmulticast mode [ 72.939472][ T5095] FAULT_INJECTION: forcing a failure. [ 72.939472][ T5095] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.939508][ T5095] CPU: 0 UID: 0 PID: 5095 Comm: syz.4.615 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.939537][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.939549][ T5095] Call Trace: [ 72.939557][ T5095] [ 72.939565][ T5095] __dump_stack+0x1d/0x30 [ 72.939590][ T5095] dump_stack_lvl+0x95/0xd0 [ 72.939655][ T5095] dump_stack+0x15/0x1b [ 72.939758][ T5095] should_fail_ex+0x262/0x280 [ 72.939784][ T5095] should_fail+0xb/0x20 [ 72.939808][ T5095] should_fail_usercopy+0x1a/0x20 [ 72.939884][ T5095] _copy_to_user+0x20/0xa0 [ 72.939915][ T5095] __x64_sys_clock_adjtime+0x167/0x1d0 [ 72.939961][ T5095] x64_sys_call+0x1f3b/0x2550 [ 72.940096][ T5095] do_syscall_64+0x112/0x360 [ 72.940129][ T5095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.940153][ T5095] RIP: 0033:0x7fe5763de159 [ 72.940198][ T5095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.940229][ T5095] RSP: 002b:00007fe574e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 72.940256][ T5095] RAX: ffffffffffffffda RBX: 00007fe576665fa0 RCX: 00007fe5763de159 [ 72.940329][ T5095] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 72.940345][ T5095] RBP: 00007fe57647506b R08: 0000000000000000 R09: 0000000000000000 [ 72.940360][ T5095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.940373][ T5095] R13: 00007fe576666038 R14: 00007fe576665fa0 R15: 00007ffe9df550e8 [ 72.940393][ T5095] [ 73.206695][ T5106] loop4: detected capacity change from 0 to 512 [ 73.210079][ T5106] EXT4-fs: Ignoring removed i_version option [ 73.210179][ T5106] EXT4-fs: Ignoring removed bh option [ 73.220354][ T5106] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.621: inode #13: comm syz.4.621: iget: illegal inode # [ 73.220383][ T5106] loop4: lost filesystem error report for type 5 error -117 [ 73.220671][ T5106] EXT4-fs (loop4): Remounting filesystem read-only [ 73.221021][ T5106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.317006][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.380934][ T5118] syzkaller0: entered promiscuous mode [ 73.380953][ T5118] syzkaller0: entered allmulticast mode [ 73.405725][ T5122] FAULT_INJECTION: forcing a failure. [ 73.405725][ T5122] name failslab, interval 1, probability 0, space 0, times 0 [ 73.405769][ T5122] CPU: 1 UID: 0 PID: 5122 Comm: syz.3.627 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.405848][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.405859][ T5122] Call Trace: [ 73.405866][ T5122] [ 73.405949][ T5122] __dump_stack+0x1d/0x30 [ 73.406039][ T5122] dump_stack_lvl+0x95/0xd0 [ 73.406070][ T5122] dump_stack+0x15/0x1b [ 73.406095][ T5122] should_fail_ex+0x262/0x280 [ 73.406169][ T5122] ? offload_action_alloc+0x29/0x190 [ 73.406189][ T5122] should_failslab+0x8c/0xb0 [ 73.406222][ T5122] __kmalloc_noprof+0xd0/0x4d0 [ 73.406257][ T5122] ? offload_action_alloc+0x29/0x190 [ 73.406330][ T5122] offload_action_alloc+0x29/0x190 [ 73.406351][ T5122] tcf_action_offload_add_ex+0x12a/0x3c0 [ 73.406480][ T5122] tcf_action_init+0x369/0x700 [ 73.406534][ T5122] tc_ctl_action+0x29e/0x860 [ 73.406572][ T5122] ? save_fpregs_to_fpstate+0x100/0x150 [ 73.406680][ T5122] ? __mutex_lock_slowpath+0xa/0x10 [ 73.406704][ T5122] ? __pfx_tc_ctl_action+0x10/0x10 [ 73.406742][ T5122] rtnetlink_rcv_msg+0x6a7/0x720 [ 73.406850][ T5122] netlink_rcv_skb+0x11e/0x220 [ 73.406883][ T5122] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.406951][ T5122] rtnetlink_rcv+0x1c/0x30 [ 73.406980][ T5122] netlink_unicast+0x5a9/0x680 [ 73.407014][ T5122] netlink_sendmsg+0x5be/0x6f0 [ 73.407110][ T5122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.407147][ T5122] ____sys_sendmsg+0x532/0x580 [ 73.407172][ T5122] ___sys_sendmsg+0x195/0x1e0 [ 73.407236][ T5122] __x64_sys_sendmsg+0xd4/0x160 [ 73.407335][ T5122] x64_sys_call+0x22ab/0x2550 [ 73.407358][ T5122] do_syscall_64+0x112/0x360 [ 73.407453][ T5122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.407520][ T5122] RIP: 0033:0x7f3d047ce159 [ 73.407537][ T5122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.407554][ T5122] RSP: 002b:00007f3d03227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.407576][ T5122] RAX: ffffffffffffffda RBX: 00007f3d04a55fa0 RCX: 00007f3d047ce159 [ 73.407716][ T5122] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 73.407730][ T5122] RBP: 00007f3d0486506b R08: 0000000000000000 R09: 0000000000000000 [ 73.407742][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.407754][ T5122] R13: 00007f3d04a56038 R14: 00007f3d04a55fa0 R15: 00007ffed2927908 [ 73.407772][ T5122] [ 73.904560][ T5137] loop4: detected capacity change from 0 to 512 [ 73.904919][ T5137] EXT4-fs: Ignoring removed i_version option [ 73.904954][ T5137] EXT4-fs: Ignoring removed bh option [ 73.933068][ T5137] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.634: inode #13: comm syz.4.634: iget: illegal inode # [ 73.933170][ T5137] loop4: lost filesystem error report for type 5 error -117 [ 73.933942][ T5137] EXT4-fs (loop4): Remounting filesystem read-only [ 73.969352][ T5137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.003654][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.305496][ T29] audit: type=1326 audit(1792030554.235:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.3.646" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d047ce159 code=0x7ffc0000 [ 74.307816][ T29] audit: type=1326 audit(1792030554.235:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.3.646" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d047ce159 code=0x7ffc0000 [ 74.308167][ T29] audit: type=1326 audit(1792030554.235:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.3.646" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d047ce159 code=0x7ffc0000 [ 74.592572][ T5177] loop4: detected capacity change from 0 to 512 [ 74.593167][ T5177] EXT4-fs: Ignoring removed i_version option [ 74.593208][ T5177] EXT4-fs: Ignoring removed bh option [ 74.628163][ T5177] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.647: inode #13: comm syz.4.647: iget: illegal inode # [ 74.628196][ T5177] loop4: lost filesystem error report for type 5 error -117 [ 74.628427][ T5177] EXT4-fs (loop4): Remounting filesystem read-only [ 74.628833][ T5177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.671112][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.751821][ T5194] loop3: detected capacity change from 0 to 512 [ 74.757594][ T5194] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.766305][ T5194] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.656: corrupted in-inode xattr: e_value size too large [ 74.766402][ T5194] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.766904][ T5194] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.656: couldn't read orphan inode 15 (err -117) [ 74.766931][ T5194] loop3: lost filesystem error report for type 5 error -117 [ 74.767877][ T5194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.843082][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.049389][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 75.049465][ T29] audit: type=1400 audit(1792030554.997:376): avc: denied { bind } for pid=5219 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.159342][ T3385] kernel write not supported for file /271/attr/keycreate (pid: 3385 comm: kworker/0:5) [ 75.290000][ T5252] syzkaller0: entered promiscuous mode [ 75.290022][ T5252] syzkaller0: entered allmulticast mode [ 75.350339][ T5255] loop5: detected capacity change from 0 to 7 [ 75.382930][ T5257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.682'. [ 75.627320][ T5269] loop3: detected capacity change from 0 to 512 [ 75.627749][ T5269] EXT4-fs: Ignoring removed i_version option [ 75.627904][ T5269] EXT4-fs: Ignoring removed bh option [ 75.631548][ T5269] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.686: inode #13: comm syz.3.686: iget: illegal inode # [ 75.631580][ T5269] loop3: lost filesystem error report for type 5 error -117 [ 75.631742][ T5269] EXT4-fs (loop3): Remounting filesystem read-only [ 75.632513][ T5269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.634081][ T5269] EXT4-fs (loop3): shut down requested (2) [ 75.667513][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.813331][ T5280] syzkaller0: entered promiscuous mode [ 75.813391][ T5280] syzkaller0: entered allmulticast mode [ 75.979125][ T5286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.694'. [ 76.026763][ T5282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.692'. [ 76.067600][ T5293] loop0: detected capacity change from 0 to 512 [ 76.068132][ T5293] EXT4-fs: Ignoring removed i_version option [ 76.068167][ T5293] EXT4-fs: Ignoring removed bh option [ 76.071348][ T5293] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.697: inode #13: comm syz.0.697: iget: illegal inode # [ 76.071377][ T5293] loop0: lost filesystem error report for type 5 error -117 [ 76.071574][ T5293] EXT4-fs (loop0): Remounting filesystem read-only [ 76.072168][ T5293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.077306][ T5293] EXT4-fs (loop0): shut down requested (2) [ 76.113970][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.223064][ T5306] syzkaller0: entered promiscuous mode [ 76.223087][ T5306] syzkaller0: entered allmulticast mode [ 77.055334][ T29] audit: type=1400 audit(1792030557.052:377): avc: denied { connect } for pid=5332 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.056842][ T5333] FAULT_INJECTION: forcing a failure. [ 77.056842][ T5333] name failslab, interval 1, probability 0, space 0, times 0 [ 77.056872][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.2.711 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.056897][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.057021][ T5333] Call Trace: [ 77.057029][ T5333] [ 77.057044][ T5333] __dump_stack+0x1d/0x30 [ 77.057241][ T5333] dump_stack_lvl+0x95/0xd0 [ 77.057301][ T5333] dump_stack+0x15/0x1b [ 77.057323][ T5333] should_fail_ex+0x262/0x280 [ 77.057395][ T5333] ? radix_tree_node_alloc+0xa0/0x200 [ 77.057435][ T5333] should_failslab+0x8c/0xb0 [ 77.057538][ T5333] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 77.057720][ T5333] ? radix_tree_node_alloc+0xa0/0x200 [ 77.058267][ T5333] radix_tree_node_alloc+0xa0/0x200 [ 77.058359][ T5333] idr_get_free+0x1fc/0x560 [ 77.058392][ T5333] idr_alloc_u32+0xe9/0x1a0 [ 77.058420][ T5333] l2tp_session_register+0x1c6/0xa00 [ 77.058456][ T5333] pppol2tp_connect+0x791/0x9f0 [ 77.058513][ T5333] ? selinux_netlbl_socket_connect+0x114/0x130 [ 77.058602][ T5333] __sys_connect+0x1ef/0x2a0 [ 77.058638][ T5333] __x64_sys_connect+0x3f/0x50 [ 77.058683][ T5333] x64_sys_call+0x1c0b/0x2550 [ 77.058709][ T5333] do_syscall_64+0x112/0x360 [ 77.058788][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.058811][ T5333] RIP: 0033:0x7f9e10a8e159 [ 77.058829][ T5333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.058906][ T5333] RSP: 002b:00007f9e0f4e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 77.058985][ T5333] RAX: ffffffffffffffda RBX: 00007f9e10d15fa0 RCX: 00007f9e10a8e159 [ 77.059001][ T5333] RDX: 0000000000000032 RSI: 00002000000002c0 RDI: 0000000000000005 [ 77.059015][ T5333] RBP: 00007f9e10b2506b R08: 0000000000000000 R09: 0000000000000000 [ 77.059029][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.059042][ T5333] R13: 00007f9e10d16038 R14: 00007f9e10d15fa0 R15: 00007ffe212c5ba8 [ 77.059277][ T5333] [ 77.207387][ T5346] syzkaller0: entered promiscuous mode [ 77.207436][ T5346] syzkaller0: entered allmulticast mode [ 77.345669][ T29] audit: type=1400 audit(1792030557.349:378): avc: denied { setopt } for pid=5349 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.396713][ T29] audit: type=1400 audit(1792030557.400:379): avc: denied { create } for pid=5349 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 77.397172][ T29] audit: type=1400 audit(1792030557.400:380): avc: denied { setopt } for pid=5349 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 77.482662][ T5364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.725'. [ 77.523226][ T5370] syzkaller0: entered promiscuous mode [ 77.523264][ T5370] syzkaller0: entered allmulticast mode [ 77.798906][ T29] audit: type=1400 audit(1792030557.820:381): avc: denied { connect } for pid=5388 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.936772][ T5393] loop2: detected capacity change from 0 to 128 [ 77.938575][ T29] audit: type=1400 audit(1792030557.964:382): avc: denied { mount } for pid=5392 comm="syz.2.737" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 77.948554][ T29] audit: type=1400 audit(1792030557.974:383): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 78.130576][ T5406] FAULT_INJECTION: forcing a failure. [ 78.130576][ T5406] name fail_futex, interval 1, probability 0, space 0, times 0 [ 78.130644][ T5406] CPU: 1 UID: 0 PID: 5406 Comm: syz.2.743 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.130671][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.130685][ T5406] Call Trace: [ 78.130694][ T5406] [ 78.130703][ T5406] __dump_stack+0x1d/0x30 [ 78.130731][ T5406] dump_stack_lvl+0x95/0xd0 [ 78.130809][ T5406] dump_stack+0x15/0x1b [ 78.130822][ T5406] should_fail_ex+0x262/0x280 [ 78.130838][ T5406] should_fail+0xb/0x20 [ 78.130929][ T5406] get_futex_key+0x12d/0xb10 [ 78.131008][ T5406] futex_wait_setup+0x49/0x3e0 [ 78.131022][ T5406] ? __rcu_read_unlock+0x4e/0x70 [ 78.131114][ T5406] __futex_wait+0xa9/0x260 [ 78.131189][ T5406] ? __pfx_futex_wake_mark+0x10/0x10 [ 78.131212][ T5406] futex_wait+0x98/0x1c0 [ 78.131226][ T5406] do_futex+0x391/0x460 [ 78.131358][ T5406] __se_sys_futex+0x2f6/0x370 [ 78.131391][ T5406] __x64_sys_futex+0x78/0x90 [ 78.131474][ T5406] x64_sys_call+0x22e2/0x2550 [ 78.131491][ T5406] do_syscall_64+0x112/0x360 [ 78.131578][ T5406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.131634][ T5406] RIP: 0033:0x7f9e10a8e159 [ 78.131646][ T5406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.131659][ T5406] RSP: 002b:00007f9e0f4e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 78.131674][ T5406] RAX: ffffffffffffffda RBX: 00007f9e10d15fa8 RCX: 00007f9e10a8e159 [ 78.131730][ T5406] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e10d15fa8 [ 78.131868][ T5406] RBP: 00007f9e10d15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 78.131877][ T5406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.131885][ T5406] R13: 00007f9e10d16038 R14: 00007ffe212c5ac0 R15: 00007ffe212c5ba8 [ 78.131930][ T5406] [ 78.200898][ T5408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.201078][ T5408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.201271][ T5408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.201617][ T5408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.203037][ T5408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.203231][ T5408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.203583][ T5408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.203875][ T5408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.204067][ T5408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.204315][ T5408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.333178][ T5261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.473232][ T5415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.747'. [ 78.473257][ T5415] netlink: 'syz.0.747': attribute type 1 has an invalid length. [ 78.473290][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 78.501579][ T5420] FAULT_INJECTION: forcing a failure. [ 78.501579][ T5420] name failslab, interval 1, probability 0, space 0, times 0 [ 78.501661][ T5420] CPU: 0 UID: 0 PID: 5420 Comm: syz.1.748 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.501688][ T5420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.501756][ T5420] Call Trace: [ 78.501764][ T5420] [ 78.501772][ T5420] __dump_stack+0x1d/0x30 [ 78.501800][ T5420] dump_stack_lvl+0x95/0xd0 [ 78.501824][ T5420] dump_stack+0x15/0x1b [ 78.501875][ T5420] should_fail_ex+0x262/0x280 [ 78.501900][ T5420] ? sk_prot_alloc+0x3f/0x180 [ 78.501919][ T5420] should_failslab+0x8c/0xb0 [ 78.501949][ T5420] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 78.502087][ T5420] ? sk_prot_alloc+0x3f/0x180 [ 78.502106][ T5420] ? security_inode_alloc+0x37/0x100 [ 78.502213][ T5420] sk_prot_alloc+0x3f/0x180 [ 78.502232][ T5420] sk_alloc+0x34/0x3e0 [ 78.502304][ T5420] smc_create+0xb7/0x480 [ 78.502402][ T5420] __sock_create+0x2e5/0x580 [ 78.502431][ T5420] __sys_socket+0xaf/0x180 [ 78.502461][ T5420] __x64_sys_socket+0x3f/0x50 [ 78.502557][ T5420] x64_sys_call+0x246e/0x2550 [ 78.502582][ T5420] do_syscall_64+0x112/0x360 [ 78.502662][ T5420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.502721][ T5420] RIP: 0033:0x7fac44dce159 [ 78.502740][ T5420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.502759][ T5420] RSP: 002b:00007fac43827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 78.502782][ T5420] RAX: ffffffffffffffda RBX: 00007fac45055fa0 RCX: 00007fac44dce159 [ 78.502854][ T5420] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 78.502868][ T5420] RBP: 00007fac44e6506b R08: 0000000000000000 R09: 0000000000000000 [ 78.502882][ T5420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.502895][ T5420] R13: 00007fac45056038 R14: 00007fac45055fa0 R15: 00007ffdaabcc808 [ 78.503046][ T5420] [ 78.744281][ T29] audit: type=1400 audit(1792030558.772:384): avc: denied { kexec_image_load } for pid=5411 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 78.969925][ T29] audit: type=1400 audit(1792030559.018:385): avc: denied { create } for pid=5443 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 80.272103][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 80.272123][ T29] audit: type=1400 audit(1792030560.162:387): avc: denied { setopt } for pid=5477 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.445247][ T5491] netlink: 96 bytes leftover after parsing attributes in process `syz.4.777'. [ 80.604022][ T5507] loop0: detected capacity change from 0 to 512 [ 80.604605][ T5507] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.630319][ T5507] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.784: corrupted in-inode xattr: e_value size too large [ 80.630366][ T5507] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.631919][ T5507] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.784: couldn't read orphan inode 15 (err -117) [ 80.632001][ T5507] loop0: lost filesystem error report for type 5 error -117 [ 80.633324][ T5507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.750021][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.787681][ T29] audit: type=1400 audit(1792030560.877:388): avc: denied { mount } for pid=5511 comm="syz.2.785" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 80.970527][ T5522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.789'. [ 81.245672][ T5529] netlink: 96 bytes leftover after parsing attributes in process `syz.0.791'. [ 81.616511][ T5551] 9p: Bad value for 'rfdno' [ 81.654126][ T5556] netlink: 96 bytes leftover after parsing attributes in process `syz.0.804'. [ 81.709777][ T5559] loop2: detected capacity change from 0 to 512 [ 81.710312][ T5559] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.735785][ T5559] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.805: corrupted in-inode xattr: e_value size too large [ 81.735823][ T5559] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.737044][ T5559] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.805: couldn't read orphan inode 15 (err -117) [ 81.737075][ T5559] loop2: lost filesystem error report for type 5 error -117 [ 81.738729][ T5559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.753494][ T5564] loop5: detected capacity change from 0 to 7 [ 81.799166][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.975616][ T5580] 9p: Bad value for 'rfdno' [ 81.984646][ T29] audit: type=1400 audit(1792554850.097:389): avc: denied { accept } for pid=5576 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.986383][ T29] audit: type=1400 audit(1792554850.097:390): avc: denied { setopt } for pid=5576 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.986686][ T29] audit: type=1400 audit(1792554850.097:391): avc: denied { connect } for pid=5576 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.050515][ T5499] Set syz1 is full, maxelem 65536 reached [ 82.072012][ T29] audit: type=1400 audit(1792554850.187:392): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 82.100218][ T5593] loop2: detected capacity change from 0 to 512 [ 82.100980][ T5593] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 82.103280][ T5588] syzkaller0: entered promiscuous mode [ 82.103297][ T5588] syzkaller0: entered allmulticast mode [ 82.108780][ T5593] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.818: bg 0: block 4: invalid block bitmap [ 82.108870][ T5593] loop2: lost filesystem error report for type 5 error -117 [ 82.109404][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 82.109436][ C1] EXT4-fs (loop2): initial error at time 1792554850: ext4_validate_block_bitmap:436 [ 82.109481][ C1] EXT4-fs (loop2): last error at time 1792554850: ext4_validate_block_bitmap:436 [ 82.116020][ T5593] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 82.116069][ T5593] loop2: lost filesystem error report for type 5 error -117 [ 82.124708][ T5593] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.818: invalid indirect mapped block 1 (level 1) [ 82.124791][ T5593] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.129748][ T5593] EXT4-fs (loop2): 1 truncate cleaned up [ 82.130097][ T5593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.138597][ T29] audit: type=1400 audit(1792554850.247:393): avc: denied { write } for pid=5591 comm="syz.2.818" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.142903][ T29] audit: type=1400 audit(1792554850.257:394): avc: denied { map } for pid=5591 comm="syz.2.818" path="/221/file0/memory.events" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.142932][ T29] audit: type=1400 audit(1792554850.257:395): avc: denied { execute } for pid=5591 comm="syz.2.818" path="/221/file0/memory.events" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.163977][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.373264][ T5610] 9p: Bad value for 'rfdno' [ 82.497502][ T5621] loop0: detected capacity change from 0 to 512 [ 82.546117][ T5625] loop0: detected capacity change from 0 to 1024 [ 82.547756][ T5625] EXT4-fs: inline encryption not supported [ 82.556926][ T5625] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 82.556979][ T5625] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.833: Failed to acquire dquot type 0 [ 82.557050][ T5625] loop0: lost filesystem error report for type 5 error -117 [ 82.557496][ T5625] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 82.557884][ T5625] EXT4-fs (loop0): 1 truncate cleaned up [ 82.558365][ T5625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.561414][ T5625] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.833: Failed to acquire dquot type 0 [ 82.638727][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.677171][ T5635] 9p: Bad value for 'rfdno' [ 82.730556][ T5645] loop2: detected capacity change from 0 to 512 [ 82.821388][ T5660] FAULT_INJECTION: forcing a failure. [ 82.821388][ T5660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.821479][ T5660] CPU: 0 UID: 0 PID: 5660 Comm: syz.2.848 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.821504][ T5660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.821552][ T5660] Call Trace: [ 82.821560][ T5660] [ 82.821569][ T5660] __dump_stack+0x1d/0x30 [ 82.821598][ T5660] dump_stack_lvl+0x95/0xd0 [ 82.821623][ T5660] dump_stack+0x15/0x1b [ 82.821731][ T5660] should_fail_ex+0x262/0x280 [ 82.821761][ T5660] should_fail+0xb/0x20 [ 82.821785][ T5660] should_fail_usercopy+0x1a/0x20 [ 82.821860][ T5660] strncpy_from_user+0x27/0x250 [ 82.821898][ T5660] do_getname+0x59/0x1c0 [ 82.821917][ T5660] getname_flags+0x1d/0x30 [ 82.821935][ T5660] do_sys_openat2+0x6c/0x130 [ 82.821957][ T5660] __x64_sys_openat+0xf2/0x120 [ 82.822035][ T5660] x64_sys_call+0x1f72/0x2550 [ 82.822091][ T5660] do_syscall_64+0x112/0x360 [ 82.822133][ T5660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.822223][ T5660] RIP: 0033:0x7f9e10a8e159 [ 82.822241][ T5660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.822300][ T5660] RSP: 002b:00007f9e0f4e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.822326][ T5660] RAX: ffffffffffffffda RBX: 00007f9e10d15fa0 RCX: 00007f9e10a8e159 [ 82.822341][ T5660] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 82.822353][ T5660] RBP: 00007f9e10b2506b R08: 0000000000000000 R09: 0000000000000000 [ 82.822368][ T5660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.822381][ T5660] R13: 00007f9e10d16038 R14: 00007f9e10d15fa0 R15: 00007ffe212c5ba8 [ 82.822444][ T5660] [ 82.966269][ T5664] loop3: detected capacity change from 0 to 512 [ 82.976570][ T5664] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.978906][ T5664] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.851: corrupted in-inode xattr: e_value size too large [ 82.978935][ T5664] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.979114][ T5664] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.851: couldn't read orphan inode 15 (err -117) [ 82.979157][ T5664] loop3: lost filesystem error report for type 5 error -117 [ 82.979712][ T5664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.011709][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.169854][ T5681] loop2: detected capacity change from 0 to 256 [ 83.234816][ T5681] FAT-fs (loop2): codepage cp857 not found [ 83.279833][ T5690] loop3: detected capacity change from 0 to 512 [ 83.280219][ T5690] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.281546][ T5690] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.862: corrupted in-inode xattr: e_value size too large [ 83.281574][ T5690] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.281772][ T5690] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.862: couldn't read orphan inode 15 (err -117) [ 83.281837][ T5690] loop3: lost filesystem error report for type 5 error -117 [ 83.283361][ T5690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.311214][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.430650][ T5703] EXT4-fs: Ignoring removed nobh option [ 83.431090][ T5703] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 83.474920][ T5703] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -ENXIO [ 84.510739][ T5797] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 84.510763][ T5797] FAT-fs (loop3): Filesystem has been set read-only [ 84.612629][ T5807] FAULT_INJECTION: forcing a failure. [ 84.612629][ T5807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.612659][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: syz.3.907 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.612689][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.612749][ T5807] Call Trace: [ 84.612759][ T5807] [ 84.612836][ T5807] __dump_stack+0x1d/0x30 [ 84.612867][ T5807] dump_stack_lvl+0x95/0xd0 [ 84.612919][ T5807] dump_stack+0x15/0x1b [ 84.612945][ T5807] should_fail_ex+0x262/0x280 [ 84.612972][ T5807] should_fail+0xb/0x20 [ 84.612996][ T5807] should_fail_usercopy+0x1a/0x20 [ 84.613020][ T5807] _copy_to_user+0x20/0xa0 [ 84.613068][ T5807] __x64_sys_clock_adjtime+0x167/0x1d0 [ 84.613111][ T5807] x64_sys_call+0x1f3b/0x2550 [ 84.613134][ T5807] do_syscall_64+0x112/0x360 [ 84.613205][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.613227][ T5807] RIP: 0033:0x7f3d047ce159 [ 84.613243][ T5807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.613262][ T5807] RSP: 002b:00007f3d03227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 84.613285][ T5807] RAX: ffffffffffffffda RBX: 00007f3d04a55fa0 RCX: 00007f3d047ce159 [ 84.613350][ T5807] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 84.613366][ T5807] RBP: 00007f3d0486506b R08: 0000000000000000 R09: 0000000000000000 [ 84.613380][ T5807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.613394][ T5807] R13: 00007f3d04a56038 R14: 00007f3d04a55fa0 R15: 00007ffed2927908 [ 84.613456][ T5807] [ 84.973591][ T5829] 9p: Bad value for 'rfdno' [ 85.381907][ T5861] 9p: Bad value for 'rfdno' [ 85.401510][ T5859] EXT4-fs: test_dummy_encryption option not supported [ 85.428663][ T5865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.930'. [ 85.441407][ T5867] 9pnet_fd: p9_fd_create_tcp (5867): problem connecting socket to 127.0.0.1 [ 85.551330][ T5882] FAULT_INJECTION: forcing a failure. [ 85.551330][ T5882] name fail_futex, interval 1, probability 0, space 0, times 0 [ 85.551362][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: syz.3.937 Not tainted syzkaller #0 PREEMPT(lazy) [ 85.551390][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.551442][ T5882] Call Trace: [ 85.551448][ T5882] [ 85.551456][ T5882] __dump_stack+0x1d/0x30 [ 85.551482][ T5882] dump_stack_lvl+0x95/0xd0 [ 85.551508][ T5882] dump_stack+0x15/0x1b [ 85.551533][ T5882] should_fail_ex+0x262/0x280 [ 85.551605][ T5882] should_fail+0xb/0x20 [ 85.551626][ T5882] get_futex_key+0x12d/0xb10 [ 85.551702][ T5882] ? unwind_get_return_address+0x16/0x40 [ 85.551735][ T5882] futex_wait_setup+0x49/0x3e0 [ 85.551797][ T5882] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 85.551880][ T5882] ? hrtimer_active+0xe4/0x110 [ 85.551906][ T5882] __futex_wait+0xa9/0x260 [ 85.551934][ T5882] ? __pfx_futex_wake_mark+0x10/0x10 [ 85.551970][ T5882] futex_wait+0x98/0x1c0 [ 85.551992][ T5882] do_futex+0x391/0x460 [ 85.552096][ T5882] ? fput+0x91/0xc0 [ 85.552149][ T5882] __se_sys_futex+0x2f6/0x370 [ 85.552188][ T5882] ? xfd_validate_state+0x45/0xf0 [ 85.552215][ T5882] __x64_sys_futex+0x78/0x90 [ 85.552288][ T5882] x64_sys_call+0x22e2/0x2550 [ 85.552315][ T5882] do_syscall_64+0x112/0x360 [ 85.552423][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.552438][ T5882] RIP: 0033:0x7f3d047ce159 [ 85.552450][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.552463][ T5882] RSP: 002b:00007f3d032270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 85.552479][ T5882] RAX: ffffffffffffffda RBX: 00007f3d04a55fa8 RCX: 00007f3d047ce159 [ 85.552497][ T5882] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3d04a55fa8 [ 85.552512][ T5882] RBP: 00007f3d04a55fa0 R08: 0000000000000000 R09: 0000000000000000 [ 85.552580][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.552588][ T5882] R13: 00007f3d04a56038 R14: 00007ffed2927820 R15: 00007ffed2927908 [ 85.552600][ T5882] [ 85.600783][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 85.600799][ T29] audit: type=1400 audit(1793603429.769:400): avc: denied { create } for pid=5883 comm="syz.3.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 85.921249][ T5898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.941'. [ 85.946420][ T5900] set_capacity_and_notify: 7 callbacks suppressed [ 85.946450][ T5900] loop4: detected capacity change from 0 to 512 [ 85.966661][ T5902] loop2: detected capacity change from 0 to 512 [ 85.982234][ T5902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.982304][ T5902] ext4 filesystem being mounted at /251/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.984907][ T29] audit: type=1400 audit(1793603430.171:401): avc: denied { append } for pid=5901 comm="syz.2.945" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.035002][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.110717][ T5917] netlink: 204 bytes leftover after parsing attributes in process `syz.4.951'. [ 86.138187][ T5921] FAULT_INJECTION: forcing a failure. [ 86.138187][ T5921] name fail_futex, interval 1, probability 0, space 0, times 0 [ 86.138221][ T5921] CPU: 1 UID: 0 PID: 5921 Comm: syz.4.953 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.138285][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.138299][ T5921] Call Trace: [ 86.138306][ T5921] [ 86.138312][ T5921] __dump_stack+0x1d/0x30 [ 86.138340][ T5921] dump_stack_lvl+0x95/0xd0 [ 86.138388][ T5921] dump_stack+0x15/0x1b [ 86.138412][ T5921] should_fail_ex+0x262/0x280 [ 86.138440][ T5921] should_fail+0xb/0x20 [ 86.138497][ T5921] get_futex_key+0x12d/0xb10 [ 86.138535][ T5921] futex_wake+0x89/0x400 [ 86.138554][ T5921] do_futex+0x3f8/0x460 [ 86.138584][ T5921] __se_sys_futex+0x2f6/0x370 [ 86.138696][ T5921] __x64_sys_futex+0x78/0x90 [ 86.138868][ T5921] x64_sys_call+0x22e2/0x2550 [ 86.138993][ T5921] do_syscall_64+0x112/0x360 [ 86.139025][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.139046][ T5921] RIP: 0033:0x7fe5763de159 [ 86.139091][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.139113][ T5921] RSP: 002b:00007fe574e370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 86.139187][ T5921] RAX: ffffffffffffffda RBX: 00007fe576665fa8 RCX: 00007fe5763de159 [ 86.139203][ T5921] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe576665fac [ 86.139218][ T5921] RBP: 00007fe576665fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 86.139234][ T5921] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 86.139249][ T5921] R13: 00007fe576666038 R14: 00007ffe9df55000 R15: 00007ffe9df550e8 [ 86.139291][ T5921] [ 86.143292][ T5919] 9p: Bad value for 'rfdno' [ 86.431469][ T5950] FAULT_INJECTION: forcing a failure. [ 86.431469][ T5950] name fail_futex, interval 1, probability 0, space 0, times 0 [ 86.431621][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: syz.1.966 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.431650][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.431673][ T5950] Call Trace: [ 86.431681][ T5950] [ 86.431689][ T5950] __dump_stack+0x1d/0x30 [ 86.431714][ T5950] dump_stack_lvl+0x95/0xd0 [ 86.431737][ T5950] dump_stack+0x15/0x1b [ 86.431846][ T5950] should_fail_ex+0x262/0x280 [ 86.431876][ T5950] should_fail+0xb/0x20 [ 86.431899][ T5950] get_futex_key+0x12d/0xb10 [ 86.431948][ T5950] futex_wake+0x89/0x400 [ 86.431973][ T5950] do_futex+0x3f8/0x460 [ 86.432023][ T5950] __se_sys_futex+0x2f6/0x370 [ 86.432119][ T5950] __x64_sys_futex+0x78/0x90 [ 86.432161][ T5950] x64_sys_call+0x22e2/0x2550 [ 86.432187][ T5950] do_syscall_64+0x112/0x360 [ 86.432226][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.432280][ T5950] RIP: 0033:0x7fac44dce159 [ 86.432300][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.432321][ T5950] RSP: 002b:00007fac438270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 86.432346][ T5950] RAX: ffffffffffffffda RBX: 00007fac45055fa8 RCX: 00007fac44dce159 [ 86.432363][ T5950] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fac45055fac [ 86.432380][ T5950] RBP: 00007fac45055fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 86.432469][ T5950] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 86.432485][ T5950] R13: 00007fac45056038 R14: 00007ffdaabcc720 R15: 00007ffdaabcc808 [ 86.432504][ T5950] [ 86.521332][ T5956] loop4: detected capacity change from 0 to 512 [ 86.521644][ T5956] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.535106][ T5956] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.969: corrupted in-inode xattr: e_value size too large [ 86.535137][ T5956] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.535298][ T5956] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.969: couldn't read orphan inode 15 (err -117) [ 86.535325][ T5956] loop4: lost filesystem error report for type 5 error -117 [ 86.535832][ T5956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.565205][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.667553][ T5967] loop3: detected capacity change from 0 to 512 [ 86.697841][ T5967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.697904][ T5967] ext4 filesystem being mounted at /168/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.726524][ T5969] loop0: detected capacity change from 0 to 512 [ 86.727013][ T5969] EXT4-fs: dax option not supported [ 86.729385][ T29] audit: type=1400 audit(1793603430.943:402): avc: denied { write } for pid=5966 comm="syz.3.973" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.729490][ T29] audit: type=1400 audit(1793603430.943:403): avc: denied { add_name } for pid=5966 comm="syz.3.973" name="ext4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.784414][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.895865][ T5985] FAULT_INJECTION: forcing a failure. [ 86.895865][ T5985] name failslab, interval 1, probability 0, space 0, times 0 [ 86.895898][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: syz.3.976 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.895940][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.896057][ T5985] Call Trace: [ 86.896121][ T5985] [ 86.896138][ T5985] __dump_stack+0x1d/0x30 [ 86.896174][ T5985] dump_stack_lvl+0x95/0xd0 [ 86.896199][ T5985] dump_stack+0x15/0x1b [ 86.896277][ T5985] should_fail_ex+0x262/0x280 [ 86.896304][ T5985] ? do_getname+0x2e/0x1c0 [ 86.896326][ T5985] should_failslab+0x8c/0xb0 [ 86.896380][ T5985] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 86.896413][ T5985] ? do_getname+0x2e/0x1c0 [ 86.896436][ T5985] do_getname+0x2e/0x1c0 [ 86.896458][ T5985] getname_flags+0x1d/0x30 [ 86.896481][ T5985] do_sys_openat2+0x6c/0x130 [ 86.896573][ T5985] __x64_sys_openat+0xf2/0x120 [ 86.896600][ T5985] x64_sys_call+0x1f72/0x2550 [ 86.896629][ T5985] do_syscall_64+0x112/0x360 [ 86.896747][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.896772][ T5985] RIP: 0033:0x7f3d047ce159 [ 86.896790][ T5985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.896871][ T5985] RSP: 002b:00007f3d03227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.896895][ T5985] RAX: ffffffffffffffda RBX: 00007f3d04a55fa0 RCX: 00007f3d047ce159 [ 86.896985][ T5985] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 86.897072][ T5985] RBP: 00007f3d0486506b R08: 0000000000000000 R09: 0000000000000000 [ 86.897087][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.897102][ T5985] R13: 00007f3d04a56038 R14: 00007f3d04a55fa0 R15: 00007ffed2927908 [ 86.897122][ T5985] [ 86.967278][ T5988] loop1: detected capacity change from 0 to 512 [ 86.979165][ T5988] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.003086][ T5988] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.980: corrupted in-inode xattr: e_value size too large [ 87.003541][ T5988] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.004497][ T5988] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.980: couldn't read orphan inode 15 (err -117) [ 87.004798][ T5988] loop1: lost filesystem error report for type 5 error -117 [ 87.006646][ T5988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.294021][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.358468][ T5995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.982'. [ 87.447939][ T6005] loop5: detected capacity change from 0 to 7 [ 87.460755][ T29] audit: type=1400 audit(1793603431.694:404): avc: denied { block_suspend } for pid=6009 comm="syz.4.988" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.464272][ T6008] syzkaller0: entered promiscuous mode [ 87.464351][ T6008] syzkaller0: entered allmulticast mode [ 87.471480][ T6008] tipc: Started in network mode [ 87.471513][ T6008] tipc: Node identity ce075e52cf2d, cluster identity 4711 [ 87.471576][ T6008] tipc: Enabled bearer , priority 0 [ 87.491681][ T6007] tipc: Resetting bearer [ 87.548700][ T6007] tipc: Disabling bearer [ 87.691905][ T6029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.994'. [ 87.746192][ T6037] loop5: detected capacity change from 0 to 7 [ 87.765045][ T6039] loop3: detected capacity change from 0 to 512 [ 87.765493][ T6039] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.769104][ T6039] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1000: corrupted in-inode xattr: e_value size too large [ 87.769153][ T6039] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.769508][ T6039] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1000: couldn't read orphan inode 15 (err -117) [ 87.769536][ T6039] loop3: lost filesystem error report for type 5 error -117 [ 87.769989][ T6039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.774667][ T6039] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1000'. [ 87.798593][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.875436][ T6046] syzkaller0: entered promiscuous mode [ 87.875496][ T6046] syzkaller0: entered allmulticast mode [ 87.888766][ T6046] tipc: Enabled bearer , priority 0 [ 87.892929][ T6045] tipc: Resetting bearer [ 87.912935][ T6045] tipc: Disabling bearer [ 88.183825][ T6063] ieee802154 phy0 wpan0: encryption failed: -90 [ 88.206190][ T6065] loop5: detected capacity change from 0 to 7 [ 88.251966][ T6067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.252083][ T6067] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.255548][ T29] audit: type=1400 audit(1793603432.505:405): avc: denied { write } for pid=6066 comm="syz.3.1012" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.303780][ T29] audit: type=1400 audit(1794127720.564:406): avc: denied { create } for pid=6066 comm="syz.3.1012" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 88.350269][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.975032][ T6094] 9pnet_fd: p9_fd_create_tcp (6094): problem connecting socket to 127.0.0.1 [ 88.988194][ T29] audit: type=1400 audit(1794127721.252:407): avc: denied { ioctl } for pid=6074 comm="syz.2.1015" path="socket:[12999]" dev="sockfs" ino=12999 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.026504][ T6098] FAULT_INJECTION: forcing a failure. [ 89.026504][ T6098] name failslab, interval 1, probability 0, space 0, times 0 [ 89.026533][ T6098] CPU: 1 UID: 0 PID: 6098 Comm: syz.0.1022 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.026634][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.026649][ T6098] Call Trace: [ 89.026664][ T6098] [ 89.026671][ T6098] __dump_stack+0x1d/0x30 [ 89.026746][ T6098] dump_stack_lvl+0x95/0xd0 [ 89.026769][ T6098] dump_stack+0x15/0x1b [ 89.026789][ T6098] should_fail_ex+0x262/0x280 [ 89.026813][ T6098] should_failslab+0x8c/0xb0 [ 89.026910][ T6098] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 89.026955][ T6098] ? sock_alloc_inode+0x36/0xf0 [ 89.026984][ T6098] ? sock_alloc_inode+0x36/0xf0 [ 89.027015][ T6098] ? selinux_socket_create+0x86/0x180 [ 89.027045][ T6098] ? __pfx_sock_alloc_inode+0x10/0x10 [ 89.027136][ T6098] sock_alloc_inode+0x36/0xf0 [ 89.027166][ T6098] alloc_inode+0x40/0x170 [ 89.027215][ T6098] __sock_create+0x121/0x580 [ 89.027243][ T6098] ? __rcu_read_unlock+0x4e/0x70 [ 89.027276][ T6098] ? _raw_write_lock_bh+0x57/0xb0 [ 89.027306][ T6098] sock_create_kern+0x38/0x50 [ 89.027415][ T6098] smc_create+0x3ea/0x480 [ 89.027436][ T6098] __sock_create+0x2e5/0x580 [ 89.027467][ T6098] __sys_socket+0xaf/0x180 [ 89.027509][ T6098] __x64_sys_socket+0x3f/0x50 [ 89.027536][ T6098] x64_sys_call+0x246e/0x2550 [ 89.027594][ T6098] do_syscall_64+0x112/0x360 [ 89.027635][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.027669][ T6098] RIP: 0033:0x7ff027dae159 [ 89.027689][ T6098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.027710][ T6098] RSP: 002b:00007ff026807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 89.027792][ T6098] RAX: ffffffffffffffda RBX: 00007ff028035fa0 RCX: 00007ff027dae159 [ 89.027806][ T6098] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 89.027821][ T6098] RBP: 00007ff027e4506b R08: 0000000000000000 R09: 0000000000000000 [ 89.027837][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.027851][ T6098] R13: 00007ff028036038 R14: 00007ff028035fa0 R15: 00007ffcf3c04668 [ 89.027874][ T6098] [ 89.027986][ T6098] socket: no more sockets [ 89.371532][ T6109] IPVS: fo: FWM 3 0x00000003 - no destination available [ 89.371598][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 89.373644][ T71] IPVS: starting estimator thread 0... [ 89.462933][ T6110] IPVS: using max 2208 ests per chain, 110400 per kthread [ 89.608730][ T6135] 9pnet_fd: p9_fd_create_tcp (6135): problem connecting socket to 127.0.0.1 [ 90.463678][ T6170] EXT4-fs: dax option not supported [ 90.913814][ T6191] set_capacity_and_notify: 2 callbacks suppressed [ 90.913845][ T6191] loop2: detected capacity change from 0 to 512 [ 90.938260][ T6191] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 91.054621][ T6191] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -ENXIO [ 91.201019][ T6201] loop2: detected capacity change from 0 to 512 [ 91.202310][ T6201] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.225715][ T6201] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.1060: corrupted in-inode xattr: e_value size too large [ 91.225748][ T6201] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.225995][ T6201] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1060: couldn't read orphan inode 15 (err -117) [ 91.226097][ T6201] loop2: lost filesystem error report for type 5 error -117 [ 91.226863][ T6201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.343874][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.514224][ T6227] loop3: detected capacity change from 0 to 512 [ 91.514666][ T6227] EXT4-fs: dax option not supported [ 91.572550][ T6231] loop2: detected capacity change from 0 to 512 [ 91.573112][ T6231] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.626741][ T6231] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.1072: corrupted in-inode xattr: e_value size too large [ 91.626779][ T6231] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.626906][ T6231] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1072: couldn't read orphan inode 15 (err -117) [ 91.626933][ T6231] loop2: lost filesystem error report for type 5 error -117 [ 91.627567][ T6231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.659857][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.279423][ T29] audit: type=1400 audit(1794127724.638:408): avc: denied { create } for pid=6261 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 92.324564][ T6267] loop1: detected capacity change from 0 to 512 [ 92.324981][ T6267] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.356554][ T6269] loop0: detected capacity change from 0 to 512 [ 92.380569][ T6267] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.1085: corrupted in-inode xattr: e_value size too large [ 92.380606][ T6267] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.381683][ T6267] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1085: couldn't read orphan inode 15 (err -117) [ 92.382053][ T6267] loop1: lost filesystem error report for type 5 error -117 [ 92.383071][ T6269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.383133][ T6269] ext4 filesystem being mounted at /228/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.395594][ T6267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.429857][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.483427][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.494348][ T29] audit: type=1400 audit(1794127724.853:409): avc: denied { write } for pid=6277 comm="syz.4.1090" lport=50313 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 92.498884][ T29] audit: type=1400 audit(1794127724.864:410): avc: denied { getopt } for pid=6277 comm="syz.4.1090" lport=50313 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 92.668686][ T6294] FAULT_INJECTION: forcing a failure. [ 92.668686][ T6294] name failslab, interval 1, probability 0, space 0, times 0 [ 92.668721][ T6294] CPU: 0 UID: 0 PID: 6294 Comm: syz.0.1097 Not tainted syzkaller #0 PREEMPT(lazy) [ 92.668796][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.668808][ T6294] Call Trace: [ 92.668814][ T6294] [ 92.668821][ T6294] __dump_stack+0x1d/0x30 [ 92.668851][ T6294] dump_stack_lvl+0x95/0xd0 [ 92.668879][ T6294] dump_stack+0x15/0x1b [ 92.668959][ T6294] should_fail_ex+0x262/0x280 [ 92.668985][ T6294] ? security_file_alloc+0x32/0xf0 [ 92.669127][ T6294] should_failslab+0x8c/0xb0 [ 92.669158][ T6294] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 92.669212][ T6294] ? security_file_alloc+0x32/0xf0 [ 92.669242][ T6294] security_file_alloc+0x32/0xf0 [ 92.669383][ T6294] init_file+0x5b/0x1b0 [ 92.669438][ T6294] alloc_empty_file+0x85/0x1e0 [ 92.669459][ T6294] alloc_file_pseudo+0x92/0x120 [ 92.669481][ T6294] sock_alloc_file+0x9c/0x1e0 [ 92.669590][ T6294] __sys_socket+0x118/0x180 [ 92.669619][ T6294] __x64_sys_socket+0x3f/0x50 [ 92.669644][ T6294] x64_sys_call+0x246e/0x2550 [ 92.669711][ T6294] do_syscall_64+0x112/0x360 [ 92.669742][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.669763][ T6294] RIP: 0033:0x7ff027dae159 [ 92.669779][ T6294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.669824][ T6294] RSP: 002b:00007ff026806fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 92.669849][ T6294] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ff027dae159 [ 92.669863][ T6294] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000024 [ 92.669875][ T6294] RBP: 00007ff027e4506b R08: 0000000000000000 R09: 0000000000000000 [ 92.669915][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.669931][ T6294] R13: 00007ff028036038 R14: 00007ff028035fa0 R15: 00007ffcf3c04668 [ 92.669954][ T6294] [ 92.696500][ T6298] loop3: detected capacity change from 0 to 512 [ 92.698345][ T6298] EXT4-fs: dax option not supported [ 93.409751][ T6306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1100'. [ 93.493629][ T6308] loop5: detected capacity change from 0 to 7 [ 93.528446][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 93.779725][ T6340] loop2: detected capacity change from 0 to 512 [ 93.792518][ T6340] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.805215][ T6340] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.1116: corrupted in-inode xattr: e_value size too large [ 93.805250][ T6340] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.805517][ T6340] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1116: couldn't read orphan inode 15 (err -117) [ 93.805617][ T6340] loop2: lost filesystem error report for type 5 error -117 [ 93.806260][ T6340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.870645][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.913452][ T6345] loop5: detected capacity change from 0 to 7 [ 94.532350][ T6359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.532413][ T6359] ext4 filesystem being mounted at /237/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.548914][ T29] audit: type=1400 audit(1794652014.940:411): avc: denied { write } for pid=6358 comm="syz.0.1123" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.584078][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.614906][ T6366] syzkaller0: entered promiscuous mode [ 94.614928][ T6366] syzkaller0: entered allmulticast mode [ 94.647222][ T6370] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.660599][ T6370] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.1127: corrupted in-inode xattr: e_value size too large [ 94.660632][ T6370] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.661922][ T6370] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1127: couldn't read orphan inode 15 (err -117) [ 94.661954][ T6370] loop1: lost filesystem error report for type 5 error -117 [ 94.662487][ T6370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.707713][ T6374] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.710281][ T6374] EXT4-fs error (device loop3): ext4_init_orphan_info:619: comm syz.3.1128: orphan file block 0: bad magic [ 94.710309][ T6374] loop3: lost filesystem error report for type 5 error -117 [ 94.711066][ T6374] EXT4-fs (loop3): mount failed [ 94.757483][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.942860][ T29] audit: type=1400 audit(1795176303.368:412): avc: denied { setattr } for pid=6376 comm="syz.3.1130" name="PACKET" dev="sockfs" ino=14517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.077269][ T6392] ext4 filesystem being mounted at /293/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.106532][ T29] audit: type=1400 audit(1795176303.528:413): avc: denied { write } for pid=6391 comm="syz.2.1135" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.488838][ T29] audit: type=1400 audit(1795176303.908:414): avc: denied { ioctl } for pid=6390 comm="syz.4.1136" path="socket:[14565]" dev="sockfs" ino=14565 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.488897][ T29] audit: type=1400 audit(1795176303.908:415): avc: denied { bind } for pid=6390 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.953791][ T6413] set_capacity_and_notify: 6 callbacks suppressed [ 95.953813][ T6413] loop5: detected capacity change from 0 to 7 [ 95.992074][ T6416] syzkaller0: entered promiscuous mode [ 95.992098][ T6416] syzkaller0: entered allmulticast mode [ 96.026715][ T6421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1147'. [ 96.148856][ T6429] FAULT_INJECTION: forcing a failure. [ 96.148856][ T6429] name failslab, interval 1, probability 0, space 0, times 0 [ 96.148886][ T6429] CPU: 0 UID: 0 PID: 6429 Comm: syz.4.1151 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.148992][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.149008][ T6429] Call Trace: [ 96.149067][ T6429] [ 96.149077][ T6429] __dump_stack+0x1d/0x30 [ 96.149150][ T6429] dump_stack_lvl+0x95/0xd0 [ 96.149229][ T6429] dump_stack+0x15/0x1b [ 96.149252][ T6429] should_fail_ex+0x262/0x280 [ 96.149275][ T6429] ? sk_prot_alloc+0x3f/0x180 [ 96.149294][ T6429] should_failslab+0x8c/0xb0 [ 96.149380][ T6429] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 96.149407][ T6429] ? sk_prot_alloc+0x3f/0x180 [ 96.149484][ T6429] ? security_inode_alloc+0x37/0x100 [ 96.149515][ T6429] sk_prot_alloc+0x3f/0x180 [ 96.149533][ T6429] sk_alloc+0x34/0x3e0 [ 96.149551][ T6429] smc_create+0xb7/0x480 [ 96.149658][ T6429] __sock_create+0x2e5/0x580 [ 96.149690][ T6429] __sys_socket+0xaf/0x180 [ 96.149735][ T6429] __x64_sys_socket+0x3f/0x50 [ 96.149764][ T6429] x64_sys_call+0x246e/0x2550 [ 96.149793][ T6429] do_syscall_64+0x112/0x360 [ 96.149856][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.149883][ T6429] RIP: 0033:0x7fe5763de159 [ 96.149903][ T6429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.149949][ T6429] RSP: 002b:00007fe574e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 96.149974][ T6429] RAX: ffffffffffffffda RBX: 00007fe576665fa0 RCX: 00007fe5763de159 [ 96.149989][ T6429] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 96.150062][ T6429] RBP: 00007fe57647506b R08: 0000000000000000 R09: 0000000000000000 [ 96.150078][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.150096][ T6429] R13: 00007fe576666038 R14: 00007fe576665fa0 R15: 00007ffe9df550e8 [ 96.150125][ T6429] [ 96.272076][ T6434] FAULT_INJECTION: forcing a failure. [ 96.272076][ T6434] name failslab, interval 1, probability 0, space 0, times 0 [ 96.272106][ T6434] CPU: 1 UID: 0 PID: 6434 Comm: syz.0.1153 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.272132][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.272153][ T6434] Call Trace: [ 96.272159][ T6434] [ 96.272167][ T6434] __dump_stack+0x1d/0x30 [ 96.272193][ T6434] dump_stack_lvl+0x95/0xd0 [ 96.272246][ T6434] dump_stack+0x15/0x1b [ 96.272267][ T6434] should_fail_ex+0x262/0x280 [ 96.272292][ T6434] ? security_inode_alloc+0x37/0x100 [ 96.272318][ T6434] should_failslab+0x8c/0xb0 [ 96.272415][ T6434] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 96.272443][ T6434] ? security_inode_alloc+0x37/0x100 [ 96.272471][ T6434] security_inode_alloc+0x37/0x100 [ 96.272497][ T6434] inode_init_always_gfp+0x495/0x4e0 [ 96.272546][ T6434] alloc_inode+0x58/0x170 [ 96.272566][ T6434] path_from_stashed+0xec/0x330 [ 96.272590][ T6434] ? __pfx_proc_ns_get_link+0x10/0x10 [ 96.272661][ T6434] ns_get_path+0x62/0x80 [ 96.272692][ T6434] proc_ns_get_link+0xdd/0x1c0 [ 96.272712][ T6434] pick_link+0x4b1/0x8e0 [ 96.272738][ T6434] step_into_slowpath+0x36a/0x4c0 [ 96.272815][ T6434] path_openat+0x665/0x10d0 [ 96.272851][ T6434] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 96.272885][ T6434] do_file_open+0x16c/0x290 [ 96.272998][ T6434] do_sys_openat2+0xa0/0x130 [ 96.273022][ T6434] __x64_sys_openat+0xf2/0x120 [ 96.273155][ T6434] x64_sys_call+0x1f72/0x2550 [ 96.273181][ T6434] do_syscall_64+0x112/0x360 [ 96.273281][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.273304][ T6434] RIP: 0033:0x7ff027d6e98e [ 96.273322][ T6434] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.273340][ T6434] RSP: 002b:00007ff026806ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.273384][ T6434] RAX: ffffffffffffffda RBX: 00007ff0268076c0 RCX: 00007ff027d6e98e [ 96.273400][ T6434] RDX: 0000000000000002 RSI: 00007ff026806f90 RDI: ffffffffffffff9c [ 96.273426][ T6434] RBP: 00007ff027e4506b R08: 0000000000000000 R09: 0000000000000000 [ 96.273439][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.273453][ T6434] R13: 00007ff028036038 R14: 00007ff028035fa0 R15: 00007ffcf3c04668 [ 96.273472][ T6434] [ 96.352977][ T6438] loop5: detected capacity change from 0 to 7 [ 96.447044][ T6445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1158'. [ 96.536882][ T6451] syzkaller0: entered promiscuous mode [ 96.536925][ T6451] syzkaller0: entered allmulticast mode [ 96.590647][ T6459] loop4: detected capacity change from 0 to 512 [ 96.591036][ T6459] EXT4-fs: dax option not supported [ 96.604635][ T6454] loop0: detected capacity change from 0 to 2048 [ 96.723000][ T6454] EXT4-fs mount: 2 callbacks suppressed [ 96.723027][ T6454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.723083][ T6454] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.740955][ T29] audit: type=1400 audit(1795176305.194:416): avc: denied { write } for pid=6452 comm="syz.0.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.741109][ T6454] FAULT_INJECTION: forcing a failure. [ 96.741109][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 96.741192][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.0.1161 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.741218][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.741231][ T6454] Call Trace: [ 96.741239][ T6454] [ 96.741248][ T6454] __dump_stack+0x1d/0x30 [ 96.741275][ T6454] dump_stack_lvl+0x95/0xd0 [ 96.741345][ T6454] dump_stack+0x15/0x1b [ 96.741368][ T6454] should_fail_ex+0x262/0x280 [ 96.741445][ T6454] ? __es_insert_extent+0x50e/0xee0 [ 96.741495][ T6454] should_failslab+0x8c/0xb0 [ 96.741604][ T6454] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 96.741633][ T6454] ? __es_insert_extent+0x50e/0xee0 [ 96.741696][ T6454] __es_insert_extent+0x50e/0xee0 [ 96.741784][ T6454] ext4_es_cache_extent+0x386/0x5b0 [ 96.741874][ T6454] ? ext4_find_extent+0x17f/0x7a0 [ 96.741909][ T6454] ext4_find_extent+0x33f/0x7a0 [ 96.741943][ T6454] ext4_ext_map_blocks+0x10b/0x2f40 [ 96.742018][ T6454] ? __css_rstat_updated+0xbb/0x280 [ 96.742042][ T6454] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 96.742108][ T6454] ? wakeup_preempt_fair+0x1e1/0x2f0 [ 96.742205][ T6454] ext4_map_query_blocks+0xa1/0x500 [ 96.742229][ T6454] ? ext4_es_lookup_extent+0x390/0x4f0 [ 96.742255][ T6454] ext4_map_blocks+0x300/0x9a0 [ 96.742355][ T6454] ext4_getblk+0x135/0x540 [ 96.742379][ T6454] ext4_bread_batch+0x5c/0x320 [ 96.742419][ T6454] __ext4_find_entry+0x86e/0xe00 [ 96.742494][ T6454] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 96.742524][ T6454] ? kmem_cache_alloc_lru_noprof+0x1f4/0x3f0 [ 96.742553][ T6454] ? __d_alloc+0x34/0x320 [ 96.742604][ T6454] ? __d_alloc+0x34/0x320 [ 96.742680][ T6454] ext4_lookup+0xcd/0x3a0 [ 96.742770][ T6454] lookup_one_qstr_excl+0xc7/0x240 [ 96.742798][ T6454] filename_create+0x155/0x220 [ 96.742828][ T6454] filename_mkdirat+0x81/0x300 [ 96.742874][ T6454] __se_sys_mkdirat+0x32/0xf0 [ 96.742905][ T6454] __x64_sys_mkdirat+0x43/0x50 [ 96.742935][ T6454] x64_sys_call+0x368/0x2550 [ 96.743032][ T6454] do_syscall_64+0x112/0x360 [ 96.743075][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.743099][ T6454] RIP: 0033:0x7ff027dae159 [ 96.743176][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.743194][ T6454] RSP: 002b:00007ff026807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 96.743265][ T6454] RAX: ffffffffffffffda RBX: 00007ff028035fa0 RCX: 00007ff027dae159 [ 96.743281][ T6454] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 96.743295][ T6454] RBP: 00007ff027e4506b R08: 0000000000000000 R09: 0000000000000000 [ 96.743347][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.743360][ T6454] R13: 00007ff028036038 R14: 00007ff028035fa0 R15: 00007ffcf3c04668 [ 96.743380][ T6454] [ 96.769082][ T29] audit: type=1400 audit(1795176305.225:417): avc: denied { write } for pid=6452 comm="syz.0.1161" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.031166][ T3303] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /247/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 97.098653][ T3303] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 97.108845][ T3303] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 97.431161][ T3579] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.468087][ T6476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1171'. [ 97.675644][ T6508] 9p: Bad value for 'wfdno' [ 97.792875][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.792912][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.793022][ T6486] bridge_slave_0: entered allmulticast mode [ 97.793620][ T6486] bridge_slave_0: entered promiscuous mode [ 97.822954][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.822991][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.823121][ T6486] bridge_slave_1: entered allmulticast mode [ 97.823970][ T6486] bridge_slave_1: entered promiscuous mode [ 97.836844][ T6486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.838189][ T6486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.848910][ T6486] team0: Port device team_slave_0 added [ 97.849976][ T6486] team0: Port device team_slave_1 added [ 97.860857][ T6486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.860871][ T6486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.860896][ T6486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.861544][ T6486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.861557][ T6486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.861584][ T6486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.879591][ T6486] hsr_slave_0: entered promiscuous mode [ 97.880197][ T6486] hsr_slave_1: entered promiscuous mode [ 97.880509][ T6486] debugfs: 'hsr0' already exists in 'hsr' [ 97.880523][ T6486] Cannot create hsr debugfs directory [ 97.954463][ T6486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.970192][ T6486] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.970890][ T6486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.981093][ T6486] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.981706][ T6486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.986622][ T6486] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.987444][ T6486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.991737][ T6486] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.006505][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.006541][ T6486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.006623][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.006653][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.042954][ T6486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.058845][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.066143][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.109572][ T6486] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.120331][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.120365][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.139452][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.139560][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.379256][ T6486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.494848][ T6557] loop5: detected capacity change from 0 to 7 [ 98.578653][ T6565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1195'. [ 98.711469][ T6578] syzkaller0: entered promiscuous mode [ 98.711560][ T6578] syzkaller0: entered allmulticast mode [ 98.757231][ T6486] veth0_vlan: entered promiscuous mode [ 98.760550][ T6486] veth1_vlan: entered promiscuous mode [ 98.773963][ T6486] veth0_macvtap: entered promiscuous mode [ 98.783707][ T6486] veth1_macvtap: entered promiscuous mode [ 98.802679][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.808946][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.843119][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.845537][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.845796][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.845831][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.878571][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 98.878589][ T29] audit: type=1400 audit(1795176307.395:424): avc: denied { mounton } for pid=6486 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 98.921702][ T6594] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1205'. [ 99.258158][ T6621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1215'. [ 99.370841][ T6633] syz_tun: entered allmulticast mode [ 99.414894][ T6637] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.415304][ T6637] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.534740][ T29] audit: type=1400 audit(1795176308.072:425): avc: denied { read } for pid=6644 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.683895][ T6658] 9pnet_fd: p9_fd_create_tcp (6658): problem connecting socket to 127.0.0.1 [ 99.834136][ T6671] vhci_hcd vhci_hcd.3: invalid port number 254 [ 99.834163][ T6671] vhci_hcd vhci_hcd.3: GetPortErrorCount req not supported for USB 2.0 roothub [ 100.226790][ T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 100.227214][ T24] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.455240][ T6702] loop2: detected capacity change from 0 to 512 [ 100.456021][ T6702] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.477106][ T6702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.477224][ T6702] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.493822][ T29] audit: type=1400 audit(1795176309.046:426): avc: denied { setattr } for pid=6701 comm="syz.2.1241" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.507246][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.745880][ T29] audit: type=1400 audit(1795176309.312:427): avc: denied { create } for pid=6716 comm="syz.5.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.749102][ T29] audit: type=1400 audit(1795176309.312:428): avc: denied { bind } for pid=6716 comm="syz.5.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.749133][ T29] audit: type=1400 audit(1795176309.312:429): avc: denied { name_bind } for pid=6716 comm="syz.5.1246" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 100.749159][ T29] audit: type=1400 audit(1795176309.312:430): avc: denied { node_bind } for pid=6716 comm="syz.5.1246" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 100.890925][ T6721] loop5: detected capacity change from 0 to 7 [ 101.238850][ T6759] loop5: detected capacity change from 0 to 7 [ 101.548379][ T6766] loop2: detected capacity change from 0 to 1024 [ 101.566383][ T6766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.568410][ T29] audit: type=1400 audit(1795176310.151:431): avc: denied { write } for pid=6765 comm="syz.2.1263" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.569233][ T6766] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 101.569607][ T6766] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 101.569624][ T6766] EXT4-fs (loop2): This should not happen!! Data will be lost [ 101.569624][ T6766] [ 101.569632][ T6766] EXT4-fs (loop2): Total free blocks count 0 [ 101.569640][ T6766] EXT4-fs (loop2): Free/Dirty block details [ 101.569647][ T6766] EXT4-fs (loop2): free_blocks=20480 [ 101.569670][ T6766] EXT4-fs (loop2): dirty_blocks=32 [ 101.569678][ T6766] EXT4-fs (loop2): Block reservation details [ 101.569685][ T6766] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 101.571015][ T29] audit: type=1400 audit(1795176310.151:432): avc: denied { map } for pid=6765 comm="syz.2.1263" path="/318/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.571050][ T29] audit: type=1400 audit(1795176310.151:433): avc: denied { execute } for pid=6765 comm="syz.2.1263" path="/318/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.609504][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 101.662290][ T3513] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 101.662757][ T3513] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.023878][ T6789] loop5: detected capacity change from 0 to 7 [ 102.050810][ T6792] loop1: detected capacity change from 0 to 512 [ 102.059645][ T6792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.059739][ T6792] ext4 filesystem being mounted at /217/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.092594][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.575264][ T6803] loop1: detected capacity change from 0 to 128 [ 102.892788][ T6836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1292'. [ 102.984061][ T6846] syzkaller0: entered promiscuous mode [ 102.984083][ T6846] syzkaller0: entered allmulticast mode [ 102.988471][ T6846] tipc: Started in network mode [ 102.988499][ T6846] tipc: Node identity 72e255e9e023, cluster identity 4711 [ 102.988612][ T6846] tipc: Enabled bearer , priority 0 [ 102.991768][ T6846] tipc: Resetting bearer [ 102.997468][ T6845] tipc: Resetting bearer [ 103.009047][ T6845] tipc: Disabling bearer [ 103.111019][ T6858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1303'. [ 103.137850][ T6860] loop2: detected capacity change from 0 to 512 [ 103.138235][ T6860] EXT4-fs: Ignoring removed i_version option [ 103.138385][ T6860] EXT4-fs: Ignoring removed oldalloc option [ 103.161135][ T6860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.281447][ T6875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1310'. [ 103.313550][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.341688][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 103.378892][ T6885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1315'. [ 103.420078][ T6892] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 103.504847][ T6901] loop4: detected capacity change from 0 to 512 [ 103.505536][ T6901] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 103.549380][ T6901] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -ENXIO [ 103.703817][ T6913] loop4: detected capacity change from 0 to 4096 [ 103.707489][ T6913] EXT4-fs: inline encryption not supported [ 103.724332][ T6913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.727250][ T6913] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 103.728096][ T6913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.760681][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 103.760700][ T29] audit: type=1400 audit(1795176312.367:437): avc: denied { write } for pid=6912 comm="syz.4.1329" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.768353][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.975435][ T6957] loop5: detected capacity change from 0 to 512 [ 104.975883][ T6957] EXT4-fs: dax option not supported [ 106.262208][ T6990] loop2: detected capacity change from 0 to 512 [ 106.287045][ T6990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.287145][ T6990] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.288078][ T6990] EXT4-fs (loop2): shut down requested (1) [ 106.435116][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.664531][ T7020] loop2: detected capacity change from 0 to 512 [ 107.664962][ T7020] EXT4-fs: dax option not supported [ 108.343815][ T7023] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.848825][ T7040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1373'. [ 109.595011][ T7060] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.767369][ T29] audit: type=1400 audit(1795176318.495:438): avc: denied { name_bind } for pid=7070 comm="syz.2.1382" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 109.962438][ T7083] loop5: detected capacity change from 0 to 7 [ 110.051304][ T29] audit: type=1400 audit(1795176318.779:439): avc: denied { open } for pid=7086 comm="syz.1.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.051333][ T29] audit: type=1400 audit(1795176318.779:440): avc: denied { kernel } for pid=7086 comm="syz.1.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.103341][ T29] audit: type=1400 audit(1795176318.829:441): avc: denied { write } for pid=7086 comm="syz.1.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.304229][ T7101] netlink: 'syz.5.1393': attribute type 10 has an invalid length. [ 110.473996][ T7115] loop3: detected capacity change from 0 to 1024 [ 110.493389][ T7115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.561029][ T6996] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 111.410416][ T7101] bond0: (slave bond_slave_0): Releasing backup interface [ 111.412586][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.413513][ T7101] team0: Port device bond_slave_0 added [ 111.580327][ T7138] netlink: 'syz.3.1409': attribute type 4 has an invalid length. [ 111.659706][ T7147] loop2: detected capacity change from 0 to 1024 [ 111.674042][ T7147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.698093][ T29] audit: type=1400 audit(1795176320.449:442): avc: denied { write } for pid=7146 comm="syz.2.1413" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.830283][ T29] audit: type=1400 audit(1795176320.561:443): avc: denied { create } for pid=7153 comm="syz.5.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.830398][ T29] audit: type=1400 audit(1795176320.561:444): avc: denied { read write } for pid=7153 comm="syz.5.1415" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.830442][ T29] audit: type=1400 audit(1795176320.561:445): avc: denied { open } for pid=7153 comm="syz.5.1415" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 112.074687][ T29] audit: type=1400 audit(1795176320.834:446): avc: denied { connect } for pid=7148 comm="syz.3.1414" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.076001][ T29] audit: type=1400 audit(1795176320.834:447): avc: denied { write } for pid=7148 comm="syz.3.1414" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.280125][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.520880][ T7170] FAULT_INJECTION: forcing a failure. [ 112.520880][ T7170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.520915][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: syz.2.1420 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.520958][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.520972][ T7170] Call Trace: [ 112.520981][ T7170] [ 112.520990][ T7170] __dump_stack+0x1d/0x30 [ 112.521019][ T7170] dump_stack_lvl+0x95/0xd0 [ 112.521088][ T7170] dump_stack+0x15/0x1b [ 112.521112][ T7170] should_fail_ex+0x262/0x280 [ 112.521140][ T7170] should_fail+0xb/0x20 [ 112.521222][ T7170] should_fail_usercopy+0x1a/0x20 [ 112.521251][ T7170] _copy_from_user+0x1c/0xb0 [ 112.521282][ T7170] __sys_bpf+0x1e2/0xc30 [ 112.521319][ T7170] ? do_futex+0x380/0x460 [ 112.521357][ T7170] __x64_sys_bpf+0x69/0x80 [ 112.521381][ T7170] x64_sys_call+0xf26/0x2550 [ 112.521410][ T7170] do_syscall_64+0x112/0x360 [ 112.521476][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.521502][ T7170] RIP: 0033:0x7f9e10a8e159 [ 112.521520][ T7170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.521541][ T7170] RSP: 002b:00007f9e0f4e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.521631][ T7170] RAX: ffffffffffffffda RBX: 00007f9e10d15fa0 RCX: 00007f9e10a8e159 [ 112.521664][ T7170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 112.521678][ T7170] RBP: 00007f9e10b2506b R08: 0000000000000000 R09: 0000000000000000 [ 112.521693][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.521707][ T7170] R13: 00007f9e10d16038 R14: 00007f9e10d15fa0 R15: 00007ffe212c5ba8 [ 112.521729][ T7170] [ 113.063754][ T7191] loop5: detected capacity change from 0 to 7 [ 113.462461][ T7207] FAULT_INJECTION: forcing a failure. [ 113.462461][ T7207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.462517][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: syz.3.1433 Not tainted syzkaller #0 PREEMPT(lazy) [ 113.462544][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.462556][ T7207] Call Trace: [ 113.462564][ T7207] [ 113.462572][ T7207] __dump_stack+0x1d/0x30 [ 113.462607][ T7207] dump_stack_lvl+0x95/0xd0 [ 113.462635][ T7207] dump_stack+0x15/0x1b [ 113.462661][ T7207] should_fail_ex+0x262/0x280 [ 113.462791][ T7207] should_fail+0xb/0x20 [ 113.462812][ T7207] should_fail_usercopy+0x1a/0x20 [ 113.462838][ T7207] _copy_from_user+0x1c/0xb0 [ 113.462911][ T7207] __sys_bpf+0x1e2/0xc30 [ 113.462936][ T7207] ? do_futex+0x380/0x460 [ 113.462983][ T7207] __x64_sys_bpf+0x69/0x80 [ 113.463009][ T7207] x64_sys_call+0xf26/0x2550 [ 113.463079][ T7207] do_syscall_64+0x112/0x360 [ 113.463111][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.463138][ T7207] RIP: 0033:0x7f3d047ce159 [ 113.463163][ T7207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.463211][ T7207] RSP: 002b:00007f3d03227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.463233][ T7207] RAX: ffffffffffffffda RBX: 00007f3d04a55fa0 RCX: 00007f3d047ce159 [ 113.463273][ T7207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 113.463289][ T7207] RBP: 00007f3d0486506b R08: 0000000000000000 R09: 0000000000000000 [ 113.463301][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.463315][ T7207] R13: 00007f3d04a56038 R14: 00007f3d04a55fa0 R15: 00007ffed2927908 [ 113.463409][ T7207] [ 113.799865][ T7220] netlink: 'syz.1.1439': attribute type 2 has an invalid length. [ 113.799884][ T7220] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1439'. [ 113.816346][ T7223] loop5: detected capacity change from 0 to 7 [ 114.285359][ T7244] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1281 sclass=netlink_xfrm_socket pid=7244 comm=syz.5.1449 [ 115.128283][ T7271] loop1: detected capacity change from 0 to 512 [ 115.176685][ T7271] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 115.364376][ T7271] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -ENXIO [ 115.488812][ T7281] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.803584][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 115.803643][ T29] audit: type=1400 audit(1795176324.542:450): avc: denied { setopt } for pid=7286 comm="syz.2.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.019361][ T7293] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1468'. [ 116.047150][ T29] audit: type=1400 audit(1795176324.845:451): avc: denied { nlmsg_tty_audit } for pid=7290 comm="syz.5.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 116.047227][ T29] audit: type=1400 audit(1795176324.845:452): avc: denied { audit_write } for pid=7290 comm="syz.5.1469" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.047252][ T29] audit: type=1107 audit(1795176324.845:453): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 116.997856][ T7317] loop1: detected capacity change from 0 to 2048 [ 117.042090][ T7317] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 117.042105][ T7317] loop1: partition table partially beyond EOD, truncated [ 117.042248][ T7317] loop1: p1 start 3405774849 is beyond EOD, truncated [ 117.042335][ T7317] loop1: p2 start 53543428 is beyond EOD, truncated [ 117.042354][ T7317] loop1: p3 start 4284289 is beyond EOD, truncated [ 117.076681][ T7317] loop1: p5 start 3405774849 is beyond EOD, truncated [ 117.076704][ T7317] loop1: p6 start 53543428 is beyond EOD, truncated [ 117.161697][ T7323] netlink: 'syz.2.1480': attribute type 29 has an invalid length. [ 117.162645][ T7323] netlink: 'syz.2.1480': attribute type 29 has an invalid length. [ 117.299104][ T7325] syzkaller0: entered promiscuous mode [ 117.299193][ T7325] syzkaller0: entered allmulticast mode [ 117.311933][ T7329] loop5: detected capacity change from 0 to 7 [ 117.471441][ T7335] loop2: detected capacity change from 0 to 512 [ 117.471830][ T7335] EXT4-fs: dax option not supported [ 117.608377][ T7342] FAULT_INJECTION: forcing a failure. [ 117.608377][ T7342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.608459][ T7342] CPU: 0 UID: 0 PID: 7342 Comm: syz.5.1489 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.608488][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.608503][ T7342] Call Trace: [ 117.608512][ T7342] [ 117.608521][ T7342] __dump_stack+0x1d/0x30 [ 117.608548][ T7342] dump_stack_lvl+0x95/0xd0 [ 117.608595][ T7342] dump_stack+0x15/0x1b [ 117.608649][ T7342] should_fail_ex+0x262/0x280 [ 117.608675][ T7342] should_fail+0xb/0x20 [ 117.608750][ T7342] should_fail_usercopy+0x1a/0x20 [ 117.608850][ T7342] _copy_from_user+0x1c/0xb0 [ 117.608958][ T7342] __sys_bpf+0x1e2/0xc30 [ 117.609024][ T7342] ? do_futex+0x380/0x460 [ 117.609056][ T7342] __x64_sys_bpf+0x69/0x80 [ 117.609095][ T7342] x64_sys_call+0xf26/0x2550 [ 117.609267][ T7342] do_syscall_64+0x112/0x360 [ 117.609304][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.609326][ T7342] RIP: 0033:0x7f812482e159 [ 117.609346][ T7342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.609368][ T7342] RSP: 002b:00007f8123287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.609462][ T7342] RAX: ffffffffffffffda RBX: 00007f8124ab5fa0 RCX: 00007f812482e159 [ 117.609539][ T7342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 117.609552][ T7342] RBP: 00007f81248c506b R08: 0000000000000000 R09: 0000000000000000 [ 117.609567][ T7342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.609582][ T7342] R13: 00007f8124ab6038 R14: 00007f8124ab5fa0 R15: 00007ffe3e908808 [ 117.609605][ T7342] [ 117.817864][ T7352] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.850435][ T7356] syzkaller0: entered promiscuous mode [ 117.850456][ T7356] syzkaller0: entered allmulticast mode [ 117.964387][ T7368] loop4: detected capacity change from 0 to 512 [ 117.976487][ T7368] EXT4-fs: Ignoring removed i_version option [ 117.976521][ T7368] EXT4-fs: Ignoring removed oldalloc option [ 118.000455][ T7368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.004872][ T29] audit: type=1400 audit(1795176326.822:454): avc: denied { write } for pid=7367 comm="syz.4.1501" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.056778][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.238575][ T29] audit: type=1400 audit(1795176328.061:455): avc: denied { tracepoint } for pid=7410 comm="syz.3.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 119.801335][ T7474] loop2: detected capacity change from 0 to 512 [ 119.801710][ T7474] EXT4-fs: dax option not supported [ 120.504566][ T7487] loop4: detected capacity change from 0 to 2048 [ 120.547535][ T7487] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 120.547551][ T7487] loop4: partition table partially beyond EOD, truncated [ 120.547663][ T7487] loop4: p1 start 3405774849 is beyond EOD, truncated [ 120.547685][ T7487] loop4: p2 start 53543428 is beyond EOD, truncated [ 120.547704][ T7487] loop4: p3 start 4284289 is beyond EOD, truncated [ 120.549328][ T7487] loop4: p5 start 3405774849 is beyond EOD, truncated [ 120.549417][ T7487] loop4: p6 start 53543428 is beyond EOD, truncated [ 120.880463][ T7506] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.118881][ T7531] tipc: Enabling of bearer rejected, failed to enable media [ 121.458512][ T7562] tipc: Enabling of bearer rejected, failed to enable media [ 122.466578][ T7602] loop5: detected capacity change from 0 to 2048 [ 124.479209][ T29] audit: type=1400 audit(1795176333.335:456): avc: denied { relabelfrom } for pid=7596 comm="syz.1.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 124.479316][ T29] audit: type=1400 audit(1795176333.335:457): avc: denied { relabelto } for pid=7596 comm="syz.1.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 124.527707][ T7602] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 124.527754][ T7602] loop5: partition table partially beyond EOD, truncated [ 124.527813][ T7602] loop5: p1 start 3405774849 is beyond EOD, truncated [ 124.527834][ T7602] loop5: p2 start 53543428 is beyond EOD, truncated [ 124.527850][ T7602] loop5: p3 start 4284289 is beyond EOD, truncated [ 124.528459][ T7602] loop5: p5 start 3405774849 is beyond EOD, truncated [ 124.528482][ T7602] loop5: p6 start 53543428 is beyond EOD, truncated [ 124.589856][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 124.724554][ T7626] tipc: Enabling of bearer rejected, failed to enable media [ 124.872026][ T7640] loop2: detected capacity change from 0 to 2048 [ 124.920960][ T7640] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 124.920973][ T7640] loop2: partition table partially beyond EOD, truncated [ 124.921088][ T7640] loop2: p1 start 3405774849 is beyond EOD, truncated [ 124.921109][ T7640] loop2: p2 start 53543428 is beyond EOD, truncated [ 124.921128][ T7640] loop2: p3 start 4284289 is beyond EOD, truncated [ 124.923347][ T7640] loop2: p5 start 3405774849 is beyond EOD, truncated [ 124.923370][ T7640] loop2: p6 start 53543428 is beyond EOD, truncated [ 125.030936][ T7663] TCP: TCP_TX_DELAY enabled [ 125.047567][ T7653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1585'. [ 125.047638][ T7653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1585'. [ 125.161477][ T7674] loop3: detected capacity change from 0 to 512 [ 125.164793][ T7674] EXT4-fs: Ignoring removed i_version option [ 125.164854][ T7674] EXT4-fs: Ignoring removed oldalloc option [ 125.197707][ T7674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.254484][ T7671] tipc: Enabling of bearer rejected, failed to enable media [ 125.407622][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.096578][ T29] audit: type=1400 audit(1795176335.969:458): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.261770][ T29] audit: type=1400 audit(1795176336.129:459): avc: denied { ioctl } for pid=7699 comm="syz.4.1602" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 127.295263][ T7713] tipc: Enabling of bearer rejected, failed to enable media [ 128.119699][ T7745] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 128.119876][ T7745] syzkaller0: entered promiscuous mode [ 128.119963][ T7745] syzkaller0: entered allmulticast mode [ 128.254877][ T7752] loop1: detected capacity change from 0 to 512 [ 128.255252][ T7752] EXT4-fs: dax option not supported [ 128.380523][ T7754] gretap0 speed is unknown, defaulting to 1000 [ 128.380585][ T7754] gretap0 speed is unknown, defaulting to 1000 [ 128.381111][ T7754] gretap0 speed is unknown, defaulting to 1000 [ 128.401687][ T7754] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 128.628287][ T7754] gretap0 speed is unknown, defaulting to 1000 [ 128.629190][ T7754] gretap0 speed is unknown, defaulting to 1000 [ 128.648733][ T7754] gretap0 speed is unknown, defaulting to 1000 [ 128.660276][ T7754] gretap0 speed is unknown, defaulting to 1000 [ 128.667770][ T7754] gretap0 speed is unknown, defaulting to 1000 [ 128.668874][ T7754] gretap0 speed is unknown, defaulting to 1000 [ 128.715245][ T29] audit: type=1400 audit(1795176337.596:460): avc: denied { write } for pid=7757 comm="syz.1.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.942273][ T7779] tipc: Enabling of bearer rejected, failed to enable media [ 128.978185][ T7794] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 128.978440][ T7794] syzkaller0: entered promiscuous mode [ 128.978456][ T7794] syzkaller0: entered allmulticast mode [ 129.072646][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1631'. [ 129.147042][ T7824] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1635'. [ 129.632016][ T7884] tipc: Enabling of bearer rejected, failed to enable media [ 130.294332][ T7900] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 130.309207][ T7900] syzkaller0: entered promiscuous mode [ 130.309227][ T7900] syzkaller0: entered allmulticast mode [ 130.380496][ T29] audit: type=1400 audit(1795176339.263:461): avc: denied { create } for pid=7918 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 130.434161][ T29] audit: type=1400 audit(1795176339.323:462): avc: denied { write } for pid=7918 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 130.472313][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 131.259627][ T7956] tipc: Enabling of bearer rejected, failed to enable media [ 131.493027][ T29] audit: type=1400 audit(1795176340.387:463): avc: denied { read } for pid=7971 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.593468][ T7980] netlink: 'syz.2.1663': attribute type 29 has an invalid length. [ 131.739768][ T7992] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1668'. [ 132.642565][ T8002] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1671'. [ 132.659097][ T8002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.664801][ T8002] netlink: 'syz.5.1671': attribute type 21 has an invalid length. [ 132.665061][ T8002] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1671'. [ 134.182659][ T8031] loop1: detected capacity change from 0 to 512 [ 134.183225][ T8031] EXT4-fs: dax option not supported [ 136.141871][ T8085] 9pnet_fd: p9_fd_create_tcp (8085): problem connecting socket to 127.0.0.1 [ 136.361172][ T29] audit: type=1400 audit(1795176345.253:464): avc: denied { ioctl } for pid=8090 comm="syz.5.1704" path="socket:[18943]" dev="sockfs" ino=18943 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.589406][ T8099] syzkaller0: entered promiscuous mode [ 136.589429][ T8099] syzkaller0: entered allmulticast mode [ 137.254082][ T8121] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 137.254082][ T8121] Please contact the netfilter-devel mailing list or update your nftables rules. [ 138.034390][ T8141] syzkaller0: entered promiscuous mode [ 138.034414][ T8141] syzkaller0: entered allmulticast mode [ 138.897179][ T8170] syzkaller0: entered promiscuous mode [ 138.897245][ T8170] syzkaller0: entered allmulticast mode [ 138.941242][ T29] audit: type=1400 audit(1795176347.849:465): avc: denied { setopt } for pid=8172 comm="syz.1.1738" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.941277][ T29] audit: type=1400 audit(1795176347.849:466): avc: denied { read } for pid=8172 comm="syz.1.1738" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.574285][ T8201] syzkaller0: entered promiscuous mode [ 139.574308][ T8201] syzkaller0: entered allmulticast mode [ 140.721556][ T8238] syzkaller0: entered promiscuous mode [ 140.721600][ T8238] syzkaller0: entered allmulticast mode [ 140.768165][ T29] audit: type=1400 audit(1795176349.684:467): avc: denied { read } for pid=8239 comm="syz.2.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.853661][ T29] audit: type=1400 audit(1795176349.774:468): avc: denied { ioctl } for pid=8239 comm="syz.2.1767" path="socket:[19301]" dev="sockfs" ino=19301 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 140.858949][ T8240] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1767'. [ 140.910722][ T29] audit: type=1400 audit(1795176349.824:469): avc: denied { cpu } for pid=8245 comm="syz.4.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 140.959846][ T8240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.986574][ T8240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.016114][ T8240] bond0 (unregistering): Released all slaves [ 141.050378][ T8256] syzkaller0: entered promiscuous mode [ 141.050398][ T8256] syzkaller0: entered allmulticast mode [ 141.053663][ T8252] tipc: Enabled bearer , priority 0 [ 141.056896][ T8252] tipc: Resetting bearer [ 141.062070][ T8251] tipc: Resetting bearer [ 141.067742][ T8251] tipc: Disabling bearer [ 141.121287][ T8272] syzkaller0: entered promiscuous mode [ 141.121307][ T8272] syzkaller0: entered allmulticast mode [ 141.548337][ T8309] siw: device registration error -23 [ 141.576599][ T8310] syzkaller0: entered promiscuous mode [ 141.576623][ T8310] syzkaller0: entered allmulticast mode [ 141.848055][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1809'. [ 141.851076][ T8330] netlink: 2631 bytes leftover after parsing attributes in process `syz.5.1809'. [ 142.798576][ T8367] siw: device registration error -23 [ 143.365911][ T29] audit: type=1400 audit(1795176352.279:470): avc: denied { nlmsg_write } for pid=8414 comm="syz.2.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 143.463731][ T29] audit: type=1400 audit(1795176352.379:471): avc: denied { ioctl } for pid=8414 comm="syz.2.1844" path="socket:[20672]" dev="sockfs" ino=20672 ioctlcmd=0x8b0b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 143.683603][ T29] audit: type=1400 audit(1795176352.600:472): avc: denied { create } for pid=8426 comm="syz.2.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 143.685326][ T29] audit: type=1400 audit(1795176352.600:473): avc: denied { setopt } for pid=8426 comm="syz.2.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 143.732836][ T8433] Illegal XDP return value 2849202194 on prog (id 122) dev N/A, expect packet loss! [ 143.860660][ T8441] netlink: 'syz.2.1856': attribute type 6 has an invalid length. [ 144.348244][ T29] audit: type=1400 audit(1795176353.241:474): avc: denied { create } for pid=8466 comm="syz.3.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 144.348279][ T29] audit: type=1400 audit(1795176353.241:475): avc: denied { write } for pid=8466 comm="syz.3.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 144.498531][ T8474] 9pnet_fd: p9_fd_create_tcp (8474): problem connecting socket to 127.0.0.1 [ 145.141497][ T8501] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 145.141519][ T8501] netlink: 'syz.1.1880': attribute type 2 has an invalid length. [ 145.164627][ T8503] loop4: detected capacity change from 0 to 512 [ 145.174634][ T8503] EXT4-fs: dax option not supported [ 146.072606][ T8523] 9pnet_fd: p9_fd_create_tcp (8523): problem connecting socket to 127.0.0.1 [ 147.515501][ T8557] loop2: detected capacity change from 0 to 512 [ 147.517489][ T8557] EXT4-fs: dax option not supported [ 148.777954][ T8594] siw: device registration error -23 [ 148.902217][ T8606] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 150.395746][ T8658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1941'. [ 150.797080][ T8673] syzkaller0: entered promiscuous mode [ 150.797103][ T8673] syzkaller0: entered allmulticast mode [ 150.802090][ T8673] tipc: Started in network mode [ 150.802123][ T8673] tipc: Node identity a6b82f9cdacf, cluster identity 4711 [ 150.802186][ T8673] tipc: Enabled bearer , priority 0 [ 150.804237][ T8673] tipc: Resetting bearer [ 150.823250][ T8672] tipc: Resetting bearer [ 150.843160][ T8672] tipc: Disabling bearer [ 151.913710][ T8721] syzkaller0: entered promiscuous mode [ 151.913789][ T8721] syzkaller0: entered allmulticast mode [ 151.918665][ T8721] tipc: Enabled bearer , priority 0 [ 151.921802][ T8721] tipc: Resetting bearer [ 151.964477][ T8720] tipc: Resetting bearer [ 152.134177][ T8720] tipc: Disabling bearer [ 152.886492][ T8781] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1993'. [ 152.985688][ T8790] syzkaller0: entered promiscuous mode [ 152.985713][ T8790] syzkaller0: entered allmulticast mode [ 153.255961][ T8810] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2006'. [ 153.303378][ T8815] syzkaller0: entered promiscuous mode [ 153.303394][ T8815] syzkaller0: entered allmulticast mode [ 154.247774][ T8847] syzkaller0: entered promiscuous mode [ 154.247795][ T8847] syzkaller0: entered allmulticast mode [ 154.301692][ T8849] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2022'. [ 155.342493][ T8891] gretap0 speed is unknown, defaulting to 1000 [ 155.418572][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.418675][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.418791][ T8891] bridge_slave_0: entered allmulticast mode [ 155.419146][ T8891] bridge_slave_0: entered promiscuous mode [ 155.420168][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.420200][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.420403][ T8891] bridge_slave_1: entered allmulticast mode [ 155.420972][ T8891] bridge_slave_1: entered promiscuous mode [ 155.432505][ T8891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.433853][ T8891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.444520][ T8891] team0: Port device team_slave_0 added [ 155.445389][ T8891] team0: Port device team_slave_1 added [ 155.456480][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.456494][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.456521][ T8891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.457243][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.457256][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.457305][ T8891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.475572][ T8891] hsr_slave_0: entered promiscuous mode [ 155.475972][ T8891] hsr_slave_1: entered promiscuous mode [ 155.476196][ T8891] debugfs: 'hsr0' already exists in 'hsr' [ 155.476211][ T8891] Cannot create hsr debugfs directory [ 155.707797][ T8759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.709689][ T8891] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.720260][ T8891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.721675][ T8891] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.726376][ T8891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.726880][ T8891] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.733610][ T8891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.738515][ T8891] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 155.748116][ T8891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.933314][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.933351][ T8891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.933499][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.933587][ T8891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.044657][ T8891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.061701][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.062594][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.085949][ T8891] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.100961][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.101003][ T7460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.147209][ T8891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.147256][ T8891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.227024][ T8948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8948 comm=syz.4.2056 [ 156.242266][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.242307][ T7460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.700531][ T8891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.124701][ T8891] veth0_vlan: entered promiscuous mode [ 157.133196][ T8891] veth1_vlan: entered promiscuous mode [ 157.151147][ T8891] veth0_macvtap: entered promiscuous mode [ 157.164102][ T8891] veth1_macvtap: entered promiscuous mode [ 157.178282][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.182715][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.337577][ T7446] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.337622][ T7446] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.337664][ T7446] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.337754][ T7446] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.446182][ T8991] netlink: 656 bytes leftover after parsing attributes in process `syz.6.2062'. [ 157.570664][ T9000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9000 comm=syz.4.2066 [ 157.772311][ T29] audit: type=1400 audit(1795176366.710:476): avc: denied { ioctl } for pid=9014 comm="syz.4.2073" path="socket:[22968]" dev="sockfs" ino=22968 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.006497][ T8934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.078326][ T9022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9022 comm=syz.1.2077 [ 159.292143][ T9040] tipc: Enabled bearer , priority 0 [ 159.293385][ T9040] tipc: Resetting bearer [ 159.294934][ T9039] tipc: Disabling bearer [ 161.314252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.649637][ T9100] loop2: detected capacity change from 0 to 512 [ 161.658137][ T9100] EXT4-fs: dax option not supported [ 162.351766][ T9045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.648141][ T9130] ================================================================== [ 162.648175][ T9130] BUG: KCSAN: data-race in bpf_obj_memcpy / bpf_obj_memcpy [ 162.648207][ T9130] [ 162.648215][ T9130] write to 0xffff888135ea2018 of 4866 bytes by task 9125 on cpu 0: [ 162.648235][ T9130] bpf_obj_memcpy+0x16a/0x190 [ 162.648260][ T9130] rhtab_map_update_elem+0xec/0xf40 [ 162.648303][ T9130] bpf_map_update_value+0x4ee/0x570 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 162.648333][ T9130] generic_map_update_batch+0x4eb/0x710 [ 162.648368][ T9130] bpf_map_do_batch+0x25b/0x380 [ 162.648391][ T9130] __sys_bpf+0xa8e/0xc30 [ 162.648411][ T9130] __x64_sys_bpf+0x69/0x80 [ 162.648433][ T9130] x64_sys_call+0xf26/0x2550 [ 162.648463][ T9130] do_syscall_64+0x112/0x360 [ 162.648500][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.648523][ T9130] [ 162.648529][ T9130] write to 0xffff888135ea2018 of 4866 bytes by task 9130 on cpu 1: [ 162.648545][ T9130] bpf_obj_memcpy+0x16a/0x190 [ 162.648563][ T9130] rhtab_map_update_elem+0xec/0xf40 [ 162.648596][ T9130] bpf_map_update_value+0x4ee/0x570 [ 162.648629][ T9130] generic_map_update_batch+0x4eb/0x710 [ 162.648666][ T9130] bpf_map_do_batch+0x25b/0x380 [ 162.648693][ T9130] __sys_bpf+0xa8e/0xc30 [ 162.648716][ T9130] __x64_sys_bpf+0x69/0x80 [ 162.648739][ T9130] x64_sys_call+0xf26/0x2550 [ 162.648767][ T9130] do_syscall_64+0x112/0x360 [ 162.648800][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.648822][ T9130] [ 162.648826][ T9130] Reported by Kernel Concurrency Sanitizer on: [ 162.648838][ T9130] CPU: 1 UID: 0 PID: 9130 Comm: syz.1.2117 Not tainted syzkaller #0 PREEMPT(lazy) [ 162.648862][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.648873][ T9130] ================================================================== [ 162.927943][ T9125] syz_tun (unregistering): left allmulticast mode [ 163.054470][ T7460] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.171881][ T7460] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.214203][ T7460] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.244391][ T7460] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.330805][ T7460] bridge_slave_1: left allmulticast mode [ 163.330831][ T7460] bridge_slave_1: left promiscuous mode [ 163.330973][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.331609][ T7460] bridge_slave_0: left allmulticast mode [ 163.331669][ T7460] bridge_slave_0: left promiscuous mode [ 163.331810][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.381488][ T7460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.382958][ T7460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.383676][ T7460] bond0 (unregistering): Released all slaves [ 163.387396][ T29] audit: type=1400 audit(1795176372.336:477): avc: denied { read } for pid=3021 comm="dhcpcd" name="n25" dev="tmpfs" ino=10103 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.387415][ T29] audit: type=1400 audit(1795176372.336:478): avc: denied { open } for pid=3021 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=10103 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.387691][ T29] audit: type=1400 audit(1795176372.336:479): avc: denied { getattr } for pid=3021 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=10103 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.483956][ T29] audit: type=1400 audit(1795176372.416:480): avc: denied { write } for pid=9136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.483994][ T29] audit: type=1400 audit(1795176372.416:481): avc: denied { create } for pid=9136 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.484022][ T29] audit: type=1400 audit(1795176372.416:482): avc: denied { write } for pid=9136 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=10108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.484050][ T29] audit: type=1400 audit(1795176372.416:483): avc: denied { append } for pid=9136 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=10108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.500138][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 163.507200][ T29] audit: type=1400 audit(1795176372.436:484): avc: denied { write } for pid=9147 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.507246][ T29] audit: type=1400 audit(1795176372.436:485): avc: denied { unlink } for pid=9147 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=10108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.529882][ T7460] tipc: Left network mode [ 163.600274][ T29] audit: type=1400 audit(1795176372.546:486): avc: denied { write } for pid=9150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.632199][ T7460] hsr_slave_0: left promiscuous mode [ 163.636599][ T7460] hsr_slave_1: left promiscuous mode [ 163.637015][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.637031][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.660041][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.660060][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.671663][ T7460] veth1_macvtap: left promiscuous mode [ 163.671690][ T7460] veth0_macvtap: left promiscuous mode [ 163.671730][ T7460] veth1_vlan: left promiscuous mode [ 163.671774][ T7460] veth0_vlan: left promiscuous mode [ 163.749920][ T7460] team0 (unregistering): Port device team_slave_1 removed [ 163.757517][ T7460] team0 (unregistering): Port device team_slave_0 removed [ 163.779917][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 163.875139][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 163.967357][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 164.023940][ T7460] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.052740][ T7460] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.102634][ T7460] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.142414][ T7460] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.200238][ T7460] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.253112][ T7460] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.292735][ T7460] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.302440][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 164.343061][ T7460] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.409307][ T7460] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.420248][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 164.462740][ T7460] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.513865][ T7460] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.533918][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 164.552884][ T7460] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.634315][ T7460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.644673][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 164.682783][ T7460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.733067][ T7460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.761731][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 164.777944][ T7460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.841681][ T7460] bridge_slave_1: left allmulticast mode [ 164.841705][ T7460] bridge_slave_1: left promiscuous mode [ 164.841897][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.842841][ T7460] bridge_slave_0: left allmulticast mode [ 164.842902][ T7460] bridge_slave_0: left promiscuous mode [ 164.843016][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.849910][ T7460] bridge_slave_1: left allmulticast mode [ 164.849931][ T7460] bridge_slave_1: left promiscuous mode [ 164.850115][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.857868][ T7460] bridge_slave_0: left allmulticast mode [ 164.857886][ T7460] bridge_slave_0: left promiscuous mode [ 164.858037][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.887912][ T7460] bridge_slave_1: left allmulticast mode [ 164.887935][ T7460] bridge_slave_1: left promiscuous mode [ 164.888059][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.901316][ T7460] bridge_slave_0: left allmulticast mode [ 164.901338][ T7460] bridge_slave_0: left promiscuous mode [ 164.901514][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.930674][ T7460] bridge_slave_1: left allmulticast mode [ 164.930746][ T7460] bridge_slave_1: left promiscuous mode [ 164.930896][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.943571][ T7460] bridge_slave_0: left allmulticast mode [ 164.943591][ T7460] bridge_slave_0: left promiscuous mode [ 164.943729][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.062572][ T7460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.063548][ T7460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.064474][ T7460] bond0 (unregistering): Released all slaves [ 165.094194][ T7460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.095550][ T7460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.096223][ T7460] bond0 (unregistering): Released all slaves [ 165.122409][ T7460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.123764][ T7460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.124552][ T7460] bond0 (unregistering): Released all slaves [ 165.152886][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 165.153333][ T9282] infiniband syz0: ib_query_port failed (-19) [ 165.177770][ T7460] tipc: Left network mode [ 165.178451][ T7460] tipc: Left network mode [ 165.189388][ T7460] IPVS: stopping master sync thread 4159 ... [ 165.197416][ T7460] hsr_slave_0: left promiscuous mode [ 165.197705][ T7460] hsr_slave_1: left promiscuous mode [ 165.198189][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.198207][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.198748][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.198761][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.241219][ T7460] hsr_slave_0: left promiscuous mode [ 165.241501][ T7460] hsr_slave_1: left promiscuous mode [ 165.242051][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.242068][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.242373][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.242474][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.244731][ T7460] hsr_slave_0: left promiscuous mode [ 165.245106][ T7460] hsr_slave_1: left promiscuous mode [ 165.245577][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.245605][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.246002][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.246018][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.248008][ T7460] hsr_slave_0: left promiscuous mode [ 165.248373][ T7460] hsr_slave_1: left promiscuous mode [ 165.296085][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.296105][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.300680][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.300696][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.323204][ T7460] veth1_macvtap: left promiscuous mode [ 165.323231][ T7460] veth0_macvtap: left promiscuous mode [ 165.323271][ T7460] veth1_vlan: left promiscuous mode [ 165.323353][ T7460] veth0_vlan: left promiscuous mode [ 165.348387][ T7460] veth1_macvtap: left promiscuous mode [ 165.348460][ T7460] veth0_macvtap: left promiscuous mode [ 165.348517][ T7460] veth1_vlan: left promiscuous mode [ 165.348622][ T7460] veth0_vlan: left promiscuous mode [ 165.375646][ T7460] veth1_macvtap: left promiscuous mode [ 165.375733][ T7460] veth0_macvtap: left promiscuous mode [ 165.375853][ T7460] veth1_vlan: left promiscuous mode [ 165.375926][ T7460] veth0_vlan: left promiscuous mode [ 165.397686][ T7460] veth1_macvtap: left promiscuous mode [ 165.397714][ T7460] veth0_macvtap: left promiscuous mode [ 165.397785][ T7460] veth1_vlan: left promiscuous mode [ 165.397819][ T7460] veth0_vlan: left promiscuous mode [ 165.554699][ T7460] team0 (unregistering): Port device team_slave_1 removed [ 165.556756][ T7460] team0 (unregistering): Port device team_slave_0 removed [ 165.602700][ T7460] team0 (unregistering): Port device team_slave_1 removed [ 165.604895][ T7460] team0 (unregistering): Port device team_slave_0 removed [ 165.653615][ T7460] team0 (unregistering): Port device team_slave_1 removed [ 165.655581][ T7460] team0 (unregistering): Port device team_slave_0 removed [ 165.700636][ T7460] team0 (unregistering): Port device team_slave_1 removed [ 165.702387][ T7460] team0 (unregistering): Port device team_slave_0 removed [ 165.729567][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 165.825363][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 165.925880][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 166.019808][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 166.129354][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 166.221589][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 166.329992][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 166.398049][ T7460] IPVS: stop unused estimator thread 0... [ 166.441565][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 166.535794][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 166.628232][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20