last executing test programs: 57.484870546s ago: executing program 4 (id=901): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x20000000) 57.470814217s ago: executing program 4 (id=902): r0 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000000200)=0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000280)={0x1802, 0x0, 0x0, 0x5, 0xffed, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x10, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) io_cancel(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0) 57.370397849s ago: executing program 4 (id=921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x202}) io_setup(0x9, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xd, r0, 0x0, 0x0, 0x7fffffff}]) 57.186667844s ago: executing program 4 (id=919): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000290000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{r1, 0xffffffffffffffff}, &(0x7f0000001a00), &(0x7f0000001a40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001a80)={r2, &(0x7f0000001ac0), 0x0}, 0x20) 57.163689054s ago: executing program 4 (id=923): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 57.103894306s ago: executing program 0 (id=928): socket$packet(0x11, 0xa, 0x300) mlockall(0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 57.103683826s ago: executing program 4 (id=929): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) 57.049637377s ago: executing program 0 (id=933): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r1, 0x5, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r1, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) 56.986744688s ago: executing program 0 (id=937): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9ad, @local, 0x5}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000001340)=""/4111, &(0x7f0000002380)=0x100f) 56.802969403s ago: executing program 0 (id=943): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x350c0e91c590370c, 0xa, 0x8}, &(0x7f0000000100)=0x10) 56.740416264s ago: executing program 0 (id=944): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x100000000}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x400d4) 55.491897985s ago: executing program 0 (id=969): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 41.998012123s ago: executing program 32 (id=929): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) 40.316225724s ago: executing program 33 (id=969): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 31.003182018s ago: executing program 5 (id=1488): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000240)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x11, 0x0, @opaque="acbc8e44b8817e42f6"}}}}}, 0x0) 30.988859398s ago: executing program 5 (id=1490): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000b00)={r0}) recvfrom$inet(r2, 0x0, 0x0, 0x60, 0x0, 0x0) 30.972115898s ago: executing program 5 (id=1491): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x298}, 0xc004) 30.938320859s ago: executing program 5 (id=1492): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60083, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f00000001c0)={0x1f}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 30.858041471s ago: executing program 5 (id=1493): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 30.840732151s ago: executing program 5 (id=1494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 15.744116737s ago: executing program 34 (id=1494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 11.276550096s ago: executing program 7 (id=1636): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x20842, 0x4) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x20000, 0x80) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f00000005c0)="d0", 0x1}], 0x1, 0x7) 10.514188604s ago: executing program 7 (id=1641): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='0', 0x1) 10.347297509s ago: executing program 7 (id=1646): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002040), 0x101000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000400), 0x0) 10.331651769s ago: executing program 7 (id=1647): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0xa05044, 0x0) pivot_root(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0/../file0\x00') 10.319537349s ago: executing program 7 (id=1648): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000003240)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) 10.082225825s ago: executing program 7 (id=1650): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000380)='syzkaller\x00'}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2f00, 0xe, 0x0, &(0x7f0000000480)="e0e9abc81b6f5bec320691d254dc", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) 10.082012425s ago: executing program 35 (id=1650): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000380)='syzkaller\x00'}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2f00, 0xe, 0x0, &(0x7f0000000480)="e0e9abc81b6f5bec320691d254dc", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) 8.092572923s ago: executing program 3 (id=1697): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x8) write(r0, &(0x7f0000000700)='7', 0x1) socket$kcm(0x29, 0x5, 0x0) 8.048343855s ago: executing program 3 (id=1698): unshare(0x28020480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x13e) ioctl$BLKPG(r0, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) 8.046361815s ago: executing program 3 (id=1699): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000380)='./file0\x00') open$dir(&(0x7f00000003c0)='./file0\x00', 0x8400, 0x2) 7.922508178s ago: executing program 3 (id=1700): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x9) 7.922220308s ago: executing program 3 (id=1701): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xff, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1}, &(0x7f00000001c0)=0x8) 7.644384274s ago: executing program 3 (id=1710): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0xf98, r1, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000280), 0x4000000000001f2, 0x0) 7.643946154s ago: executing program 36 (id=1710): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0xf98, r1, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000280), 0x4000000000001f2, 0x0) 2.925078859s ago: executing program 2 (id=1828): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xffffff69) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) 2.896380819s ago: executing program 9 (id=1829): syz_open_dev$usbfs(0x0, 0x204, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) 2.87338436s ago: executing program 2 (id=1831): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x392, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.743730893s ago: executing program 2 (id=1834): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x274) 2.624181256s ago: executing program 2 (id=1835): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10f) write(r0, &(0x7f0000000180)='8', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 2.562001528s ago: executing program 2 (id=1838): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 2.530206528s ago: executing program 2 (id=1839): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x8) ptrace(0x4208, r0) 1.688992699s ago: executing program 6 (id=1853): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.595380791s ago: executing program 9 (id=1855): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000240)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x11, 0x0, @opaque="acbc8e44b8817e42f6"}}}}}, 0x0) 1.525302693s ago: executing program 9 (id=1859): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x100000000}, 0xa4, 0xf40, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000b40)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001040)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.521126893s ago: executing program 6 (id=1860): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8a010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x201, 0xe7e, 0x0, 0x4, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}}, 0x0) 1.453872025s ago: executing program 8 (id=1861): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x9f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\xfc\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4t\xca\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\aD\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\xf4\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xfe\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) write(r0, &(0x7f0000000080)='4', 0x1) 1.453080545s ago: executing program 1 (id=1873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000200)={0x20, r1, 0x405, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040084) 1.131446263s ago: executing program 8 (id=1862): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000700)={[{@nobarrier}, {@data_journal}, {@norecovery}]}, 0x3, 0x497, &(0x7f0000000240)="$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") chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000940)='proc_dir\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/87, 0x57) 1.016198625s ago: executing program 8 (id=1863): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc05ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc9, 0x1224, 0x88, 0x1, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x8, 0x800, 0x1, 0x5, 0x8, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 572.156406ms ago: executing program 6 (id=1864): mkdirat(0xffffffffffffff9c, 0x0, 0x12) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa, 0xff}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x13, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x1c0002, 0x0) 566.714116ms ago: executing program 9 (id=1865): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x841e, &(0x7f00000001c0), 0x3, 0x42f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x101042, 0x15) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@abort}, {@block_validity}, {@grpid}]}, 0x1, 0x77f, &(0x7f00000009c0)="$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") sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000009c0)=ANY=[]) 486.059178ms ago: executing program 1 (id=1867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@random="163e79baae36", @local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x4e22, 0x17c1, 0x8}}}}}}, 0x2e) 485.499128ms ago: executing program 6 (id=1868): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) write$binfmt_script(r0, 0x0, 0x0) 424.288089ms ago: executing program 9 (id=1869): unshare(0x68040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 423.927529ms ago: executing program 6 (id=1871): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185042, 0x1fb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 409.87032ms ago: executing program 1 (id=1872): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000faffffff00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x69, 0x0, 0x7, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}}, {0x17, 0xff, 0x0, @empty}}}}}, 0x0) 369.659891ms ago: executing program 1 (id=1874): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r3, 0xbacc31b28cb8523d, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24008400) 358.749911ms ago: executing program 8 (id=1875): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) socket$inet_tcp(0x2, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 210.728215ms ago: executing program 9 (id=1876): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x9f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\xfc\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4t\xca\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\aD\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\xf4\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xfe\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) write(r0, &(0x7f0000000080)='4', 0x1) 209.731235ms ago: executing program 6 (id=1886): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc05ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc9, 0x1224, 0x88, 0x1, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x8, 0x800, 0x1, 0x5, 0x8, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 209.512025ms ago: executing program 1 (id=1877): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000700)={[{@nobarrier}, {@data_journal}, {@norecovery}]}, 0x3, 0x497, &(0x7f0000000240)="$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") chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000940)='proc_dir\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/87, 0x57) 209.387195ms ago: executing program 8 (id=1878): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000034001a80060000000200000028000580"], 0x54}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 50.691619ms ago: executing program 1 (id=1879): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x200000, &(0x7f0000000400), 0x1, 0x4dd, &(0x7f0000019740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000019c40)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000019c80)={@id={0x2, 0x0, @d}}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000200)={@id={0x2, 0x0, @d}}) 0s ago: executing program 8 (id=1880): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000002680)={[{@noauto_da_alloc}, {@noblock_validity}]}, 0x2, 0x544, &(0x7f00000011c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x104, 0x1) getdents64(r0, 0x0, 0x4f) kernel console output (not intermixed with test programs): l 2038-01-19 (0x7fffffff) [ 71.053507][ T6046] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.1101: lblock 0 mapped to illegal pblock 0 (length 1) [ 71.053822][ T6046] EXT4-fs (loop2): Remounting filesystem read-only [ 71.128494][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.313443][ T6059] Invalid ELF header magic: != ELF [ 71.552378][ T6065] EXT4-fs: Ignoring removed bh option [ 71.552816][ T6065] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.558729][ T6065] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 71.564743][ T6065] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 71.565645][ T6065] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.567772][ T6065] EXT4-fs warning (device loop1): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.568496][ T6065] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 71.572012][ T6065] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.1111: Invalid block bitmap block 0 in block_group 0 [ 71.572051][ T6065] loop1: lost filesystem error report for type 5 error -117 [ 71.572998][ T6065] EXT4-fs (loop1): Remounting filesystem read-only [ 71.573469][ T6065] EXT4-fs (loop1): 1 orphan inode deleted [ 71.580788][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.750560][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.915244][ T3434] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.040479][ T6092] EXT4-fs: Ignoring removed bh option [ 72.062293][ T6092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 72.092344][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 72.176247][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 72.176264][ T30] audit: type=1400 audit(1792032295.748:1556): avc: denied { create } for pid=6099 comm="syz.3.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.177149][ T30] audit: type=1400 audit(1792032295.748:1557): avc: denied { setopt } for pid=6099 comm="syz.3.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.177311][ T30] audit: type=1400 audit(1792032295.748:1558): avc: denied { connect } for pid=6099 comm="syz.3.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.471089][ T30] audit: type=1400 audit(1792032296.048:1559): avc: denied { ioctl } for pid=6103 comm="syz.1.1128" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.471477][ T6105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.472073][ T6105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.930906][ T6109] EXT4-fs: inline encryption not supported [ 72.934171][ T6109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.934192][ T6109] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.966082][ T6109] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 1 [ 72.966121][ T6109] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 72.966147][ T6109] EXT4-fs error (device loop3): ext4_acquire_dquot:7070: comm syz.3.1130: Failed to acquire dquot type 1 [ 72.966168][ T6109] loop3: lost filesystem error report for type 5 error -5 [ 72.966288][ T6109] EXT4-fs (loop3): Remounting filesystem read-only [ 72.966322][ T6109] EXT4-fs (loop3): 1 truncate cleaned up [ 72.967888][ T6109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.059810][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.979865][ T3698] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.003659][ T30] audit: type=1400 audit(1792032297.578:1560): avc: denied { ioctl } for pid=6134 comm="syz.2.1140" path="socket:[13558]" dev="sockfs" ino=13558 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.003707][ T6135] syzkaller1: entered promiscuous mode [ 74.003737][ T6135] syzkaller1: entered allmulticast mode [ 74.079114][ T6138] set_capacity_and_notify: 4 callbacks suppressed [ 74.079130][ T6138] loop2: detected capacity change from 0 to 256 [ 74.096642][ T30] audit: type=1400 audit(1792032297.678:1561): avc: denied { module_request } for pid=6136 comm="syz.2.1142" kmod="nls_cp855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.111692][ T6142] FAULT_INJECTION: forcing a failure. [ 74.111692][ T6142] name failslab, interval 1, probability 0, space 0, times 0 [ 74.111721][ T6142] CPU: 1 UID: 0 PID: 6142 Comm: syz.1.1144 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.111770][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.111784][ T6142] Call Trace: [ 74.111791][ T6142] [ 74.111842][ T6142] __dump_stack+0x1d/0x30 [ 74.111870][ T6142] dump_stack_lvl+0x95/0xd0 [ 74.111894][ T6142] dump_stack+0x15/0x1b [ 74.111918][ T6142] should_fail_ex+0x262/0x280 [ 74.111983][ T6142] ? prepare_creds+0x38/0x550 [ 74.112011][ T6142] should_failslab+0x8c/0xb0 [ 74.112047][ T6142] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 74.112093][ T6142] ? prepare_creds+0x38/0x550 [ 74.112124][ T6142] prepare_creds+0x38/0x550 [ 74.112229][ T6142] lookup_user_key+0x26b/0xd60 [ 74.112265][ T6142] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 74.112303][ T6142] keyctl_session_to_parent+0x28/0x4c0 [ 74.112405][ T6142] __se_sys_keyctl+0x484/0xb70 [ 74.112443][ T6142] ? __se_sys_futex+0x2f6/0x370 [ 74.112479][ T6142] ? xfd_validate_state+0x45/0xf0 [ 74.112568][ T6142] ? restore_fpregs_from_fpstate+0x61/0x110 [ 74.112611][ T6142] __x64_sys_keyctl+0x67/0x80 [ 74.112680][ T6142] x64_sys_call+0x1fe0/0x2550 [ 74.112711][ T6142] do_syscall_64+0x112/0x360 [ 74.112741][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.112824][ T6142] RIP: 0033:0x7ff81a93e559 [ 74.112841][ T6142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.112861][ T6142] RSP: 002b:00007ff819397028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 74.112885][ T6142] RAX: ffffffffffffffda RBX: 00007ff81abc5fa0 RCX: 00007ff81a93e559 [ 74.112908][ T6142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 74.112934][ T6142] RBP: 00007ff81a9d58b0 R08: 0000000000000000 R09: 0000000000000000 [ 74.112948][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.112962][ T6142] R13: 00007ff81abc6038 R14: 00007ff81abc5fa0 R15: 00007ffd47beb7d8 [ 74.112984][ T6142] [ 74.398414][ T6138] FAT-fs (loop2): codepage cp855 not found [ 74.428139][ T6155] loop2: detected capacity change from 0 to 128 [ 74.435258][ T30] audit: type=1400 audit(1792032297.998:1562): avc: denied { create } for pid=6152 comm="syz.1.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.435909][ T6155] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 74.437412][ T6155] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.454873][ T30] audit: type=1400 audit(1792032298.018:1563): avc: denied { write } for pid=6153 comm="syz.2.1149" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.455870][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.877832][ T6200] FAULT_INJECTION: forcing a failure. [ 74.877832][ T6200] name failslab, interval 1, probability 0, space 0, times 0 [ 74.877862][ T6200] CPU: 0 UID: 0 PID: 6200 Comm: syz.1.1170 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.877886][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.877901][ T6200] Call Trace: [ 74.877909][ T6200] [ 74.877917][ T6200] __dump_stack+0x1d/0x30 [ 74.877995][ T6200] dump_stack_lvl+0x95/0xd0 [ 74.878016][ T6200] dump_stack+0x15/0x1b [ 74.878036][ T6200] should_fail_ex+0x262/0x280 [ 74.878066][ T6200] ? copy_net_ns+0xd6/0x490 [ 74.878113][ T6200] should_failslab+0x8c/0xb0 [ 74.878148][ T6200] __kmalloc_noprof+0xd0/0x4d0 [ 74.878228][ T6200] ? copy_net_ns+0xd6/0x490 [ 74.878266][ T6200] copy_net_ns+0xd6/0x490 [ 74.878301][ T6200] create_new_namespaces+0x1f6/0x420 [ 74.878401][ T6200] unshare_nsproxy_namespaces+0x115/0x150 [ 74.878437][ T6200] ksys_unshare+0x3fd/0x6f0 [ 74.878496][ T6200] __x64_sys_unshare+0x1f/0x30 [ 74.878522][ T6200] x64_sys_call+0x1e33/0x2550 [ 74.878550][ T6200] do_syscall_64+0x112/0x360 [ 74.878587][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.878613][ T6200] RIP: 0033:0x7ff81a93e559 [ 74.878697][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.878719][ T6200] RSP: 002b:00007ff819397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 74.878743][ T6200] RAX: ffffffffffffffda RBX: 00007ff81abc5fa0 RCX: 00007ff81a93e559 [ 74.878761][ T6200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040040400 [ 74.878776][ T6200] RBP: 00007ff81a9d58b0 R08: 0000000000000000 R09: 0000000000000000 [ 74.878790][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.878852][ T6200] R13: 00007ff81abc6038 R14: 00007ff81abc5fa0 R15: 00007ffd47beb7d8 [ 74.878883][ T6200] [ 75.076188][ T6208] FAULT_INJECTION: forcing a failure. [ 75.076188][ T6208] name failslab, interval 1, probability 0, space 0, times 0 [ 75.076277][ T6208] CPU: 0 UID: 0 PID: 6208 Comm: syz.2.1174 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.076306][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.076321][ T6208] Call Trace: [ 75.076328][ T6208] [ 75.076336][ T6208] __dump_stack+0x1d/0x30 [ 75.076391][ T6208] dump_stack_lvl+0x95/0xd0 [ 75.076412][ T6208] dump_stack+0x15/0x1b [ 75.076432][ T6208] should_fail_ex+0x262/0x280 [ 75.076466][ T6208] ? alloc_empty_file+0x70/0x1e0 [ 75.076632][ T6208] should_failslab+0x8c/0xb0 [ 75.076666][ T6208] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 75.076705][ T6208] ? alloc_empty_file+0x70/0x1e0 [ 75.076732][ T6208] alloc_empty_file+0x70/0x1e0 [ 75.076822][ T6208] alloc_file_pseudo+0x92/0x120 [ 75.076852][ T6208] sock_alloc_file+0x9c/0x1e0 [ 75.076957][ T6208] __sys_socket+0x118/0x180 [ 75.076997][ T6208] __x64_sys_socket+0x3f/0x50 [ 75.077019][ T6208] x64_sys_call+0x246e/0x2550 [ 75.077051][ T6208] do_syscall_64+0x112/0x360 [ 75.077106][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.077199][ T6208] RIP: 0033:0x7fd6a836e559 [ 75.077215][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.077272][ T6208] RSP: 002b:00007fd6a6dc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 75.077291][ T6208] RAX: ffffffffffffffda RBX: 00007fd6a85f5fa0 RCX: 00007fd6a836e559 [ 75.077305][ T6208] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 75.077320][ T6208] RBP: 00007fd6a84058b0 R08: 0000000000000000 R09: 0000000000000000 [ 75.077336][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.077352][ T6208] R13: 00007fd6a85f6038 R14: 00007fd6a85f5fa0 R15: 00007ffc913d9298 [ 75.077389][ T6208] [ 75.188652][ T6215] loop2: detected capacity change from 0 to 512 [ 75.230346][ T6215] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 75.232079][ T6215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.232209][ T6215] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.278321][ T6216] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.361460][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.391432][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'. [ 75.579658][ T6246] loop2: detected capacity change from 0 to 512 [ 75.591052][ T6246] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.1190: corrupted in-inode xattr: invalid ea_ino [ 75.591084][ T6246] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.591205][ T6246] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1190: couldn't read orphan inode 15 (err -117) [ 75.591234][ T6246] loop2: lost filesystem error report for type 5 error -117 [ 75.641029][ T6246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.657261][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.916759][ T6265] loop1: detected capacity change from 0 to 256 [ 75.926850][ T6265] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 76.587888][ T6284] loop3: detected capacity change from 0 to 512 [ 76.695434][ T6292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.697459][ T6292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.031681][ T6308] loop1: detected capacity change from 0 to 1024 [ 77.035440][ T6308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.056148][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.092378][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.290390][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 77.290445][ T30] audit: type=1400 audit(1792032300.868:1611): avc: denied { read } for pid=6325 comm="syz.1.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.309166][ T30] audit: type=1400 audit(1792032300.878:1612): avc: denied { create } for pid=6328 comm="syz.3.1228" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 77.311964][ T30] audit: type=1400 audit(1792032300.888:1613): avc: denied { write } for pid=6328 comm="syz.3.1228" name="file0" dev="tmpfs" ino=1499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 77.312000][ T30] audit: type=1400 audit(1792032300.888:1614): avc: denied { open } for pid=6328 comm="syz.3.1228" path="/283/file0" dev="tmpfs" ino=1499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 77.312513][ T30] audit: type=1400 audit(1792032300.888:1615): avc: denied { ioctl } for pid=6328 comm="syz.3.1228" path="/283/file0" dev="tmpfs" ino=1499 ioctlcmd=0x1263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 77.323443][ T6329] loop1: detected capacity change from 0 to 2048 [ 77.329874][ T30] audit: type=1400 audit(1792032300.898:1616): avc: denied { unlink } for pid=3299 comm="syz-executor" name="file0" dev="tmpfs" ino=1499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 77.371615][ T30] audit: type=1326 audit(1792032300.948:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.3.1229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab550ce559 code=0x7ffc0000 [ 77.377890][ T30] audit: type=1326 audit(1792032300.948:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.3.1229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab550ce559 code=0x7ffc0000 [ 77.385201][ T30] audit: type=1326 audit(1792032300.958:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.3.1229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab550ce559 code=0x7ffc0000 [ 77.386665][ T30] audit: type=1326 audit(1792032300.958:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.3.1229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fab550ce559 code=0x7ffc0000 [ 77.446981][ T6329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.635109][ T6337] loop3: detected capacity change from 0 to 8192 [ 77.672693][ T6337] loop3: p1[EZD] p3 p4 [ 77.674358][ T6337] loop3: p3 start 150994944 is beyond EOD, truncated [ 77.756364][ T3488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.756402][ T3488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.795283][ T6340] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.799561][ T6352] device-mapper: ioctl: Invalid ioctl structure: name t, dev ffffffff [ 77.833320][ T3488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.833360][ T3488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.866229][ T6356] loop2: detected capacity change from 0 to 512 [ 77.868285][ T6356] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 77.868300][ T6356] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.869562][ T6356] EXT4-fs (loop2): 1 truncate cleaned up [ 77.870128][ T6356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.885744][ T6356] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 77.886302][ T6356] EXT4-fs (loop2): Remounting filesystem read-only [ 77.886379][ T6356] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 77.905618][ T3488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.905651][ T3488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.935643][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.989547][ T3488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.989583][ T3488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.067572][ T6366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.067636][ T6366] ext4 filesystem being mounted at /292/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.125684][ T3488] bridge_slave_1: left promiscuous mode [ 78.125783][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.126349][ T3488] bridge_slave_0: left allmulticast mode [ 78.126368][ T3488] bridge_slave_0: left promiscuous mode [ 78.126492][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.127929][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.227904][ T3434] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 78.232120][ T3434] EXT4-fs (loop1): Remounting filesystem read-only [ 78.254279][ T3488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.268963][ T3488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.269634][ T3488] bond0 (unregistering): Released all slaves [ 78.334659][ T3488] tipc: Disabling bearer [ 78.334693][ T3488] tipc: Left network mode [ 78.366016][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.366049][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.366212][ T6340] bridge_slave_0: entered allmulticast mode [ 78.402311][ T6340] bridge_slave_0: entered promiscuous mode [ 78.403163][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.403190][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.403235][ T6340] bridge_slave_1: entered allmulticast mode [ 78.404185][ T6340] bridge_slave_1: entered promiscuous mode [ 78.442524][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.449603][ T3488] hsr_slave_0: left promiscuous mode [ 78.459295][ T3488] hsr_slave_1: left promiscuous mode [ 78.461660][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.461677][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.464343][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.464356][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.485396][ T3488] veth1_macvtap: left promiscuous mode [ 78.485455][ T3488] veth0_macvtap: left promiscuous mode [ 78.485511][ T3488] veth1_vlan: left promiscuous mode [ 78.485545][ T3488] veth0_vlan: left promiscuous mode [ 78.551059][ T6392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.596430][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.698813][ T3488] team0 (unregistering): Port device team_slave_1 removed [ 78.707299][ T3488] team0 (unregistering): Port device team_slave_0 removed [ 78.767741][ T6340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.769429][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 78.786934][ T6340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.828129][ T6340] team0: Port device team_slave_0 added [ 78.829123][ T6340] team0: Port device team_slave_1 added [ 78.859155][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.859171][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.859204][ T6340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.860645][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.860657][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.860701][ T6340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.903880][ T6340] hsr_slave_0: entered promiscuous mode [ 78.911806][ T6340] hsr_slave_1: entered promiscuous mode [ 78.912160][ T6340] debugfs: 'hsr0' already exists in 'hsr' [ 78.912172][ T6340] Cannot create hsr debugfs directory [ 79.119253][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 79.127153][ T6340] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.133361][ T6340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.139445][ T6340] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.140476][ T3488] IPVS: stop unused estimator thread 0... [ 79.151676][ T6340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.154073][ T6340] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.168474][ T6340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.170239][ T6340] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.182706][ T6340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.334985][ T6340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.353107][ T6340] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.358803][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.358841][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.383082][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.383120][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.407412][ T6474] set_capacity_and_notify: 2 callbacks suppressed [ 79.407432][ T6474] loop2: detected capacity change from 0 to 764 [ 79.435299][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.464871][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 79.505949][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.536196][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.552713][ T6467] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.595588][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.759948][ T6340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.805119][ T70] bridge_slave_1: left allmulticast mode [ 79.805144][ T70] bridge_slave_1: left promiscuous mode [ 79.805341][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.816098][ T70] bridge_slave_0: left allmulticast mode [ 79.816119][ T70] bridge_slave_0: left promiscuous mode [ 79.816228][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.821146][ T6514] random: crng reseeded on system resumption [ 79.842014][ T6514] Restarting kernel threads ... [ 79.843581][ T6514] Done restarting kernel threads. [ 79.984355][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.996264][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.010978][ T70] bond0 (unregistering): Released all slaves [ 80.018811][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 80.126330][ T6507] loop3: detected capacity change from 0 to 512 [ 80.128243][ T6507] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.128644][ T70] hsr_slave_0: left promiscuous mode [ 80.149773][ T70] hsr_slave_1: left promiscuous mode [ 80.150203][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.150220][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.150632][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.150646][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.157346][ T70] veth1_macvtap: left promiscuous mode [ 80.157373][ T70] veth0_macvtap: left promiscuous mode [ 80.157447][ T70] veth1_vlan: left promiscuous mode [ 80.157478][ T70] veth0_vlan: left promiscuous mode [ 80.196298][ T6507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.196366][ T6507] ext4 filesystem being mounted at /299/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.282182][ T6539] loop1: detected capacity change from 0 to 1024 [ 80.305110][ T6539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 80.361807][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 80.379653][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.420475][ T70] team0 (unregistering): Port device team_slave_1 removed [ 80.424923][ T70] team0 (unregistering): Port device team_slave_0 removed [ 80.521958][ T6556] loop1: detected capacity change from 0 to 256 [ 80.529813][ T6556] vfat: Unknown parameter 'codepagen:' [ 80.541706][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.541748][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.541795][ T6467] bridge_slave_0: entered allmulticast mode [ 80.542413][ T6467] bridge_slave_0: entered promiscuous mode [ 80.543243][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.543273][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.543318][ T6467] bridge_slave_1: entered allmulticast mode [ 80.543828][ T6467] bridge_slave_1: entered promiscuous mode [ 80.554312][ T6467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.555384][ T6467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.565386][ T6467] team0: Port device team_slave_0 added [ 80.566280][ T6467] team0: Port device team_slave_1 added [ 80.575791][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.575805][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.575832][ T6467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.576294][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.576305][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.576333][ T6467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.592082][ T6467] hsr_slave_0: entered promiscuous mode [ 80.592388][ T6467] hsr_slave_1: entered promiscuous mode [ 80.592590][ T6467] debugfs: 'hsr0' already exists in 'hsr' [ 80.592603][ T6467] Cannot create hsr debugfs directory [ 80.779277][ T6340] veth0_vlan: entered promiscuous mode [ 80.787119][ T6340] veth1_vlan: entered promiscuous mode [ 80.816821][ T6340] veth0_macvtap: entered promiscuous mode [ 80.817433][ T6467] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 80.819421][ T6467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.840020][ T6467] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 80.841964][ T6467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.842960][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 80.843773][ T6340] veth1_macvtap: entered promiscuous mode [ 80.844278][ T6467] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 80.845985][ T6467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.846590][ T6467] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.847993][ T6467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.876736][ T6340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.883903][ T6340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.888076][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.888169][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.888241][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.888275][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.957241][ T6467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.968118][ T6467] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.974466][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.974500][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.980127][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.980166][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.159683][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 81.206068][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1289'. [ 81.206341][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.206531][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.317568][ T6467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.352980][ T6660] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1298'. [ 81.353570][ T6662] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 81.353696][ T6662] SELinux: failed to load policy [ 81.439112][ T6678] loop3: detected capacity change from 0 to 256 [ 81.453106][ T6678] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.514255][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 81.578755][ T6467] veth0_vlan: entered promiscuous mode [ 81.588013][ T6692] loop5: detected capacity change from 0 to 512 [ 81.590461][ T6467] veth1_vlan: entered promiscuous mode [ 81.624935][ T6692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.632928][ T6467] veth0_macvtap: entered promiscuous mode [ 81.634565][ T6692] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.639426][ T6467] veth1_macvtap: entered promiscuous mode [ 81.653497][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.657522][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.680631][ T32] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.680668][ T32] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.680699][ T32] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.720607][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.873270][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 82.062204][ T6340] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.112230][ T6738] loop6: detected capacity change from 0 to 128 [ 82.124742][ T6738] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.124880][ T6738] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.134987][ T6739] netlink: 'syz.5.1311': attribute type 3 has an invalid length. [ 82.135007][ T6739] netlink: 'syz.5.1311': attribute type 3 has an invalid length. [ 82.184297][ T6467] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.524882][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 82.524897][ T30] audit: type=1326 audit(1792032306.098:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.1.1317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff81a93e559 code=0x7ffc0000 [ 82.571979][ T6774] xt_hashlimit: size too large, truncated to 1048576 [ 82.618177][ T30] audit: type=1400 audit(1792032306.188:1747): avc: denied { write } for pid=6780 comm="syz.2.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.618207][ T30] audit: type=1400 audit(1792032306.188:1748): avc: denied { nlmsg_write } for pid=6780 comm="syz.2.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.695244][ T30] audit: type=1400 audit(1792032306.268:1749): avc: denied { write } for pid=6788 comm="syz.5.1333" name="kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 82.695278][ T30] audit: type=1400 audit(1792032306.268:1750): avc: denied { open } for pid=6788 comm="syz.5.1333" path="/16/dev/kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 82.696447][ T1522] kernel read not supported for file /35/fd (pid: 1522 comm: kworker/0:3) [ 82.696480][ T30] audit: type=1400 audit(1792032306.268:1751): avc: denied { mounton } for pid=6788 comm="syz.5.1333" path="/16/dev/kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 82.810291][ T12] IPVS: starting estimator thread 0... [ 82.814087][ T30] audit: type=1400 audit(1792032306.388:1752): avc: denied { create } for pid=6798 comm="syz.1.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.815639][ T30] audit: type=1400 audit(1792032306.388:1753): avc: denied { setopt } for pid=6798 comm="syz.1.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.817544][ T30] audit: type=1400 audit(1792032306.388:1754): avc: denied { bind } for pid=6798 comm="syz.1.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.888185][ T6805] FAULT_INJECTION: forcing a failure. [ 82.888185][ T6805] name failslab, interval 1, probability 0, space 0, times 0 [ 82.888216][ T6805] CPU: 1 UID: 0 PID: 6805 Comm: syz.5.1339 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.888242][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.888255][ T6805] Call Trace: [ 82.888261][ T6805] [ 82.888268][ T6805] __dump_stack+0x1d/0x30 [ 82.888295][ T6805] dump_stack_lvl+0x95/0xd0 [ 82.888318][ T6805] dump_stack+0x15/0x1b [ 82.888337][ T6805] should_fail_ex+0x262/0x280 [ 82.888365][ T6805] ? anon_vma_clone+0xc2/0x450 [ 82.888388][ T6805] should_failslab+0x8c/0xb0 [ 82.888420][ T6805] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 82.888453][ T6805] ? anon_vma_clone+0xc2/0x450 [ 82.888475][ T6805] anon_vma_clone+0xc2/0x450 [ 82.888499][ T6805] copy_vma+0x5d9/0x7a0 [ 82.888537][ T6805] move_vma+0x6f3/0xf50 [ 82.888567][ T6805] ? __rcu_read_unlock+0x4e/0x70 [ 82.888597][ T6805] ? cap_mmap_addr+0xb1/0x250 [ 82.888623][ T6805] ? __get_unmapped_area+0x2c8/0x2f0 [ 82.888646][ T6805] mremap_to+0x3ef/0x450 [ 82.888677][ T6805] ? check_prep_vma+0x463/0x640 [ 82.888709][ T6805] __se_sys_mremap+0x8b6/0xc50 [ 82.888749][ T6805] __x64_sys_mremap+0x67/0x80 [ 82.888782][ T6805] x64_sys_call+0x1072/0x2550 [ 82.888811][ T6805] do_syscall_64+0x112/0x360 [ 82.888837][ T6805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.888860][ T6805] RIP: 0033:0x7f73ec74e559 [ 82.888878][ T6805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.888897][ T6805] RSP: 002b:00007f73eb1a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 82.888917][ T6805] RAX: ffffffffffffffda RBX: 00007f73ec9d5fa0 RCX: 00007f73ec74e559 [ 82.888930][ T6805] RDX: 0000000000600000 RSI: 0000000000600000 RDI: 0000200000000000 [ 82.888942][ T6805] RBP: 00007f73ec7e58b0 R08: 0000200000a00000 R09: 0000000000000000 [ 82.888955][ T6805] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 82.888967][ T6805] R13: 00007f73ec9d6038 R14: 00007f73ec9d5fa0 R15: 00007ffcf6f30d88 [ 82.888984][ T6805] [ 82.909167][ T6807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6807 comm=syz.1.1340 [ 82.921055][ T6797] IPVS: using max 2352 ests per chain, 117600 per kthread [ 83.047285][ T30] audit: type=1400 audit(1792032306.618:1755): avc: denied { lock } for pid=6818 comm="syz.1.1346" path="socket:[16831]" dev="sockfs" ino=16831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 83.167910][ T6828] loop2: detected capacity change from 0 to 1024 [ 83.194884][ T6828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.218121][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.268533][ T6837] team0: Device ipip0 is up. Set it down before adding it as a team port [ 83.441923][ T6850] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.576720][ T6861] vxcan0: tx address claim with different name [ 83.612972][ T6863] loop6: detected capacity change from 0 to 512 [ 83.613468][ T6863] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 83.613480][ T6863] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 83.614341][ T6863] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1365: bad orphan inode 131072 [ 83.614427][ T6863] loop6: lost filesystem error report for type 5 error -117 [ 83.662970][ T6863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.702737][ T6467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.722223][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1366'. [ 83.722254][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1366'. [ 83.755510][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1366'. [ 83.755556][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1366'. [ 83.769954][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.770452][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.770535][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.770569][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.344123][ T6915] loop2: detected capacity change from 0 to 1024 [ 84.344593][ T6915] EXT4-fs: Ignoring removed orlov option [ 84.362206][ T6915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.366703][ T6915] EXT4-fs error (device loop2): __ext4_new_inode:1289: comm syz.2.1386: failed to insert inode 12: doubly allocated? [ 84.420340][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.503203][ T6927] loop5: detected capacity change from 0 to 512 [ 84.503684][ T6927] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.505502][ T6927] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.524966][ T6927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.525110][ T6927] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.556706][ T6340] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.596500][ T6938] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.597555][ T6936] loop2: detected capacity change from 0 to 512 [ 84.601059][ T6936] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1405: invalid indirect mapped block 11 (level 0) [ 84.601101][ T6936] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 84.601228][ T6936] EXT4-fs (loop2): Remounting filesystem read-only [ 84.601698][ T6936] EXT4-fs (loop2): 1 truncate cleaned up [ 84.601992][ T6936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.628028][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.659985][ T6942] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.732729][ T6955] loop1: detected capacity change from 0 to 128 [ 84.736181][ T6955] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.736365][ T6955] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.790573][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.831582][ T6964] loop6: detected capacity change from 0 to 512 [ 84.855414][ T6964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.855516][ T6964] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.897578][ T6467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.820579][ T6992] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.960277][ T7009] loop1: detected capacity change from 0 to 512 [ 85.974799][ T7009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.974869][ T7009] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.013556][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.129974][ T7024] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1432'. [ 86.130011][ T7024] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1432'. [ 86.359367][ T7036] loop3: detected capacity change from 0 to 1764 [ 86.502632][ T7043] FAULT_INJECTION: forcing a failure. [ 86.502632][ T7043] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.502667][ T7043] CPU: 0 UID: 0 PID: 7043 Comm: syz.3.1439 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.502697][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.502823][ T7043] Call Trace: [ 86.502831][ T7043] [ 86.502840][ T7043] __dump_stack+0x1d/0x30 [ 86.502886][ T7043] dump_stack_lvl+0x95/0xd0 [ 86.502932][ T7043] dump_stack+0x15/0x1b [ 86.503029][ T7043] should_fail_ex+0x262/0x280 [ 86.503076][ T7043] should_fail+0xb/0x20 [ 86.503104][ T7043] should_fail_usercopy+0x1a/0x20 [ 86.503192][ T7043] set_fd_set+0x29/0x90 [ 86.503216][ T7043] core_sys_select+0x5aa/0x730 [ 86.503270][ T7043] __se_sys_pselect6+0x23f/0x2a0 [ 86.503300][ T7043] __x64_sys_pselect6+0x78/0x90 [ 86.503326][ T7043] x64_sys_call+0x1dfc/0x2550 [ 86.503415][ T7043] do_syscall_64+0x112/0x360 [ 86.503443][ T7043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.503469][ T7043] RIP: 0033:0x7fab550ce559 [ 86.503501][ T7043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.503523][ T7043] RSP: 002b:00007fab53b27028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 86.503544][ T7043] RAX: ffffffffffffffda RBX: 00007fab55355fa0 RCX: 00007fab550ce559 [ 86.503558][ T7043] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 86.503573][ T7043] RBP: 00007fab551658b0 R08: 0000200000000200 R09: 0000200000000280 [ 86.503590][ T7043] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 86.503645][ T7043] R13: 00007fab55356038 R14: 00007fab55355fa0 R15: 00007ffeac404f28 [ 86.503665][ T7043] [ 87.562642][ T30] kauditd_printk_skb: 552 callbacks suppressed [ 87.562678][ T30] audit: type=1400 audit(1792032311.138:2308): avc: denied { mounton } for pid=7085 comm="syz.2.1467" path="/339/my_tracefs" dev="tmpfs" ino=1788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.562705][ T30] audit: type=1400 audit(1792032311.138:2309): avc: denied { mount } for pid=7085 comm="syz.2.1467" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 87.563898][ T30] audit: type=1400 audit(1792032311.138:2310): avc: denied { search } for pid=7085 comm="syz.2.1467" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 87.563927][ T30] audit: type=1400 audit(1792032311.138:2311): avc: denied { search } for pid=7085 comm="syz.2.1467" name="events" dev="tracefs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 87.563950][ T30] audit: type=1400 audit(1792032311.138:2312): avc: denied { search } for pid=7085 comm="syz.2.1467" name="task" dev="tracefs" ino=11432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 87.564017][ T30] audit: type=1400 audit(1792032311.138:2313): avc: denied { search } for pid=7085 comm="syz.2.1467" name="task_rename" dev="tracefs" ino=11434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 87.564039][ T30] audit: type=1400 audit(1792032311.138:2314): avc: denied { write } for pid=7085 comm="syz.2.1467" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 87.564060][ T30] audit: type=1400 audit(1792032311.138:2315): avc: denied { open } for pid=7085 comm="syz.2.1467" path="/339/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 87.576022][ T30] audit: type=1400 audit(1792032311.148:2316): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 87.817632][ T30] audit: type=1400 audit(1792032311.388:2317): avc: denied { write } for pid=7089 comm="syz.5.1458" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.818113][ T7092] loop5: detected capacity change from 0 to 256 [ 88.006475][ T7125] tap0: tun_chr_ioctl cmd 2147767520 [ 88.054267][ T7131] size and base must be multiples of 4 kiB [ 88.054291][ T7131] CPU: 0 UID: 0 PID: 7131 Comm: syz.5.1475 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.054322][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.054379][ T7131] Call Trace: [ 88.054386][ T7131] [ 88.054394][ T7131] __dump_stack+0x1d/0x30 [ 88.054430][ T7131] dump_stack_lvl+0x95/0xd0 [ 88.054534][ T7131] dump_stack+0x15/0x1b [ 88.054554][ T7131] mtrr_del+0xbf/0xd0 [ 88.054579][ T7131] mtrr_ioctl+0xb62/0xfb0 [ 88.054659][ T7130] loop3: detected capacity change from 0 to 512 [ 88.054690][ T7131] ? __pfx_mtrr_ioctl+0x10/0x10 [ 88.054715][ T7131] ? proc_reg_poll+0x141/0x1a0 [ 88.054742][ T7131] proc_reg_unlocked_ioctl+0x123/0x1b0 [ 88.054805][ T7131] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 88.054909][ T7131] __se_sys_ioctl+0xce/0x140 [ 88.054991][ T7131] __x64_sys_ioctl+0x43/0x50 [ 88.055101][ T7131] x64_sys_call+0x239d/0x2550 [ 88.055139][ T7131] do_syscall_64+0x112/0x360 [ 88.055169][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.055257][ T7131] RIP: 0033:0x7f73ec74e559 [ 88.055275][ T7131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.055305][ T7131] RSP: 002b:00007f73eb1a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.055349][ T7131] RAX: ffffffffffffffda RBX: 00007f73ec9d5fa0 RCX: 00007f73ec74e559 [ 88.055366][ T7131] RDX: 0000200000000200 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 88.055380][ T7131] RBP: 00007f73ec7e58b0 R08: 0000000000000000 R09: 0000000000000000 [ 88.055393][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.055405][ T7131] R13: 00007f73ec9d6038 R14: 00007f73ec9d5fa0 R15: 00007ffcf6f30d88 [ 88.055424][ T7131] [ 88.074847][ T7130] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 88.074871][ T7130] FAT-fs (loop3): Filesystem has been set read-only [ 88.074950][ T7130] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 88.075231][ T7130] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 88.075369][ T7130] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 88.075720][ T7130] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 88.077331][ T7130] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 88.077614][ T7130] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 88.077766][ T7130] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 88.078032][ T7130] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 88.078141][ T7130] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 88.359947][ T7145] loop3: detected capacity change from 0 to 512 [ 88.377627][ T7145] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.1483: Invalid inode bitmap blk 4 in block_group 0 [ 88.377787][ T7145] loop3: lost filesystem error report for type 5 error -117 [ 88.395018][ T7145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.453973][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.935055][ T7187] netlink: 'syz.6.1502': attribute type 8 has an invalid length. [ 89.334157][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1514'. [ 89.485789][ T7225] Invalid argument reading file caps for ./file0 [ 89.829380][ T7242] loop1: detected capacity change from 0 to 8192 [ 89.855144][ T7242] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 89.855156][ T7242] loop1: partition table partially beyond EOD, truncated [ 89.855287][ T7242] loop1: p1 start 100663296 is beyond EOD, truncated [ 89.855303][ T7242] loop1: p2 size 134217732 extends beyond EOD, truncated [ 89.862133][ T7242] loop1: p4 size 14876672 extends beyond EOD, truncated [ 89.869990][ T7242] loop1: p5 size 134217732 extends beyond EOD, truncated [ 89.876522][ T7242] loop1: p6 size 14876672 extends beyond EOD, truncated [ 90.218628][ T7255] loop3: detected capacity change from 0 to 1024 [ 90.228258][ T7255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.228275][ T7255] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 90.228426][ T7255] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 90.228797][ T7255] JBD2: no valid journal superblock found [ 90.228808][ T7255] EXT4-fs (loop3): Could not load journal inode [ 92.977138][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 92.977221][ T30] audit: type=1400 audit(1792032316.548:2438): avc: denied { write } for pid=7323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.024787][ T30] audit: type=1400 audit(1792032316.598:2439): avc: denied { write } for pid=7334 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.467241][ T30] audit: type=1400 audit(1792032317.038:2440): avc: denied { write } for pid=7337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.492850][ T30] audit: type=1400 audit(1792032317.048:2441): avc: denied { write } for pid=7348 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.596831][ T30] audit: type=1400 audit(1792032317.168:2442): avc: denied { write } for pid=7351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.622882][ T30] audit: type=1400 audit(1792032317.178:2443): avc: denied { write } for pid=7362 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.823649][ T30] audit: type=1400 audit(1792032317.398:2444): avc: denied { write } for pid=7365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.852957][ T30] audit: type=1400 audit(1792032317.408:2445): avc: denied { write } for pid=7376 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.858131][ T30] audit: type=1400 audit(1792032327.428:2446): avc: denied { execmem } for pid=7379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 103.879922][ T30] audit: type=1400 audit(1792032327.448:2447): avc: denied { mounton } for pid=7380 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 103.882144][ T30] audit: type=1400 audit(1792032327.458:2448): avc: denied { module_request } for pid=7380 comm="syz-executor" kmod="netdev-nr7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 103.889290][ T30] audit: type=1400 audit(1792032327.458:2449): avc: denied { sys_module } for pid=7380 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.960272][ T7380] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.986003][ T70] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.022660][ T70] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.068597][ T70] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.069355][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.069373][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.069487][ T7380] bridge_slave_0: entered allmulticast mode [ 104.069995][ T7380] bridge_slave_0: entered promiscuous mode [ 104.070799][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.070829][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.070988][ T7380] bridge_slave_1: entered allmulticast mode [ 104.071412][ T7380] bridge_slave_1: entered promiscuous mode [ 104.082391][ T7380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.083427][ T7380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.093998][ T7380] team0: Port device team_slave_0 added [ 104.094833][ T7380] team0: Port device team_slave_1 added [ 104.105387][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.105402][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.105479][ T7380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.106205][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.106217][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.106245][ T7380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.123025][ T7380] hsr_slave_0: entered promiscuous mode [ 104.123566][ T7380] hsr_slave_1: entered promiscuous mode [ 104.123710][ T7380] debugfs: 'hsr0' already exists in 'hsr' [ 104.123724][ T7380] Cannot create hsr debugfs directory [ 104.190445][ T7380] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 104.199205][ T7380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.200372][ T7380] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 104.210065][ T7380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.252497][ T70] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.257463][ T7380] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 104.264619][ T7380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.265307][ T7380] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 104.271463][ T7380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.316662][ T30] audit: type=1400 audit(1792032327.888:2450): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 104.340423][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.340456][ T7380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.340591][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.340802][ T7380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.359096][ T7413] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1541'. [ 104.402329][ T70] bridge_slave_1: left allmulticast mode [ 104.402351][ T70] bridge_slave_1: left promiscuous mode [ 104.402473][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.403279][ T70] bridge_slave_0: left allmulticast mode [ 104.403299][ T70] bridge_slave_0: left promiscuous mode [ 104.403459][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.457819][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.458937][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.460775][ T70] bond0 (unregistering): Released all slaves [ 104.487442][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.488190][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.516605][ T7380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.524471][ T7380] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.528748][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.528781][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.531883][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.531916][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.557291][ T70] hsr_slave_0: left promiscuous mode [ 104.564560][ T70] hsr_slave_1: left promiscuous mode [ 104.565032][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.565047][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.570305][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.570338][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.583262][ T70] veth1_macvtap: left promiscuous mode [ 104.583288][ T70] veth0_macvtap: left promiscuous mode [ 104.583330][ T70] veth1_vlan: left promiscuous mode [ 104.583442][ T70] veth0_vlan: left promiscuous mode [ 104.628149][ T30] audit: type=1400 audit(1792032328.198:2451): avc: denied { write } for pid=7415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.669525][ T30] audit: type=1400 audit(1792032328.238:2452): avc: denied { write } for pid=7426 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.711670][ T70] team0 (unregistering): Port device team_slave_1 removed [ 104.714038][ T70] team0 (unregistering): Port device team_slave_0 removed [ 104.740831][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 104.831469][ T30] audit: type=1400 audit(1792032328.408:2453): avc: denied { write } for pid=7430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.849294][ T7380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.880493][ T30] audit: type=1400 audit(1792032328.458:2454): avc: denied { write } for pid=7453 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.916643][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 104.965199][ T70] IPVS: stop unused estimator thread 0... [ 104.965996][ T7380] veth0_vlan: entered promiscuous mode [ 104.970561][ T7380] veth1_vlan: entered promiscuous mode [ 104.995940][ T7380] veth0_macvtap: entered promiscuous mode [ 104.997500][ T7380] veth1_macvtap: entered promiscuous mode [ 105.014299][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.015761][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.022225][ T30] audit: type=1400 audit(1792032328.598:2455): avc: denied { write } for pid=7464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.060036][ T70] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.060176][ T70] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.060334][ T70] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.063230][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 105.079930][ T70] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.338938][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 105.635083][ T7524] loop2: detected capacity change from 0 to 512 [ 105.637568][ T7524] EXT4-fs: Ignoring removed bh option [ 105.658427][ T7524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.658495][ T7524] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.707608][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.809514][ T7546] loop2: detected capacity change from 0 to 512 [ 105.816221][ T7546] EXT4-fs: Ignoring removed bh option [ 105.840039][ T7546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.840201][ T7546] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.909959][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.017412][ T7577] loop7: detected capacity change from 0 to 1024 [ 106.019347][ T7577] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 106.031035][ T7577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.070802][ T7380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.316241][ T7607] loop2: detected capacity change from 0 to 2048 [ 106.341152][ T7607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.374797][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.745442][ T7612] loop2: detected capacity change from 0 to 512 [ 106.755083][ T7612] EXT4-fs: Ignoring removed bh option [ 106.755443][ T7612] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.767123][ T7612] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 106.773143][ T7612] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 106.774357][ T7612] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.776222][ T7612] EXT4-fs warning (device loop2): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.777071][ T7612] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 106.779044][ T7612] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.1591: Invalid block bitmap block 0 in block_group 0 [ 106.779244][ T7612] loop2: lost filesystem error report for type 5 error -117 [ 106.779781][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 106.779798][ C1] EXT4-fs (loop2): last error at time 1792032330: ext4_read_block_bitmap_nowait:487 [ 106.780062][ T7612] EXT4-fs (loop2): Remounting filesystem read-only [ 106.780732][ T7612] EXT4-fs (loop2): 1 orphan inode deleted [ 106.787827][ T7612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.177873][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.214650][ T7640] loop2: detected capacity change from 0 to 512 [ 107.235196][ T7640] EXT4-fs (loop2): 1 truncate cleaned up [ 107.235576][ T7640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.297937][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.366103][ T7653] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.780436][ T7680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61712 sclass=netlink_route_socket pid=7680 comm=syz.6.1620 [ 107.983746][ T7695] loop1: detected capacity change from 0 to 512 [ 107.984144][ T7695] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.012736][ T7695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.012877][ T7695] ext4 filesystem being mounted at /356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.085423][ T7708] loop7: detected capacity change from 0 to 512 [ 108.114722][ T7708] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.114790][ T7708] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.938453][ T7380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.939142][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.975614][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 108.975630][ T30] audit: type=1400 audit(1792032332.548:2530): avc: denied { write } for pid=7720 comm="syz.3.1639" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.034855][ T30] audit: type=1400 audit(1792032332.608:2531): avc: denied { setopt } for pid=7729 comm="syz.1.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.102627][ T30] audit: type=1400 audit(1792032332.678:2532): avc: denied { listen } for pid=7735 comm="syz.6.1644" lport=39407 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.103092][ T30] audit: type=1400 audit(1792032332.678:2533): avc: denied { accept } for pid=7735 comm="syz.6.1644" lport=39407 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.104948][ T30] audit: type=1400 audit(1792032332.678:2534): avc: denied { getopt } for pid=7735 comm="syz.6.1644" lport=39407 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 109.222830][ T30] audit: type=1400 audit(1792032332.798:2535): avc: denied { unmount } for pid=7380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.406846][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.443157][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.484484][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.511733][ T7755] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.534272][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.615161][ T12] bridge_slave_1: left allmulticast mode [ 109.615175][ T12] bridge_slave_1: left promiscuous mode [ 109.615324][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.615915][ T12] bridge_slave_0: left allmulticast mode [ 109.615932][ T12] bridge_slave_0: left promiscuous mode [ 109.616028][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.673091][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.674427][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.675283][ T12] bond0 (unregistering): Released all slaves [ 109.696543][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.696576][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.696716][ T7755] bridge_slave_0: entered allmulticast mode [ 109.697111][ T7755] bridge_slave_0: entered promiscuous mode [ 109.698609][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.698641][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.698706][ T7755] bridge_slave_1: entered allmulticast mode [ 109.699212][ T7755] bridge_slave_1: entered promiscuous mode [ 109.713556][ T7755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.714777][ T7755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.738393][ T7755] team0: Port device team_slave_0 added [ 109.753792][ T7755] team0: Port device team_slave_1 added [ 109.794954][ T12] hsr_slave_0: left promiscuous mode [ 109.795310][ T12] hsr_slave_1: left promiscuous mode [ 109.795698][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.795739][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.796118][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.796132][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.798902][ T12] veth1_macvtap: left promiscuous mode [ 109.798928][ T12] veth0_macvtap: left promiscuous mode [ 109.798967][ T12] veth1_vlan: left promiscuous mode [ 109.799067][ T12] veth0_vlan: left promiscuous mode [ 109.886979][ T30] audit: type=1400 audit(1792032333.458:2536): avc: denied { write } for pid=7771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.930608][ T30] audit: type=1400 audit(1792032333.508:2537): avc: denied { write } for pid=7783 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.940444][ T7788] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1655'. [ 109.972228][ T12] team0 (unregistering): Port device team_slave_1 removed [ 109.979537][ T12] team0 (unregistering): Port device team_slave_0 removed [ 110.018985][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.019001][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.019031][ T7755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.019693][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.019707][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.019743][ T7755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.033555][ T30] audit: type=1400 audit(1792032333.608:2538): avc: denied { sqpoll } for pid=7796 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 110.077709][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 110.116414][ T7755] hsr_slave_0: entered promiscuous mode [ 110.116790][ T7755] hsr_slave_1: entered promiscuous mode [ 110.117120][ T7755] debugfs: 'hsr0' already exists in 'hsr' [ 110.117134][ T7755] Cannot create hsr debugfs directory [ 110.229360][ T7755] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 110.238366][ T7755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.239071][ T7755] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 110.241668][ T7755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.242475][ T7755] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 110.259141][ T7755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.261475][ T7755] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 110.265525][ T7755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.317644][ T7755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.317805][ T30] audit: type=1400 audit(1792032333.888:2539): avc: denied { write } for pid=7803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.322041][ T7755] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.356072][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.356107][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.358988][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.359021][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.411049][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 110.492225][ T7755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.545046][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 110.606740][ T7755] veth0_vlan: entered promiscuous mode [ 110.609349][ T7755] veth1_vlan: entered promiscuous mode [ 110.623133][ T7755] veth0_macvtap: entered promiscuous mode [ 110.624875][ T7755] veth1_macvtap: entered promiscuous mode [ 110.631328][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.635096][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.650961][ T70] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.651006][ T70] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.651047][ T70] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.651084][ T70] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.757628][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 110.808010][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.996774][ T7922] loop3: detected capacity change from 0 to 512 [ 111.006827][ T7922] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 111.006847][ T7922] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 111.007044][ T7922] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.007607][ T7922] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1679: bg 0: block 15: invalid block bitmap [ 111.007636][ T7922] loop3: lost filesystem error report for type 5 error -117 [ 111.007770][ T7922] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 111.007789][ T7922] loop3: lost filesystem error report for type 5 error -117 [ 111.007988][ T7922] EXT4-fs (loop3): 1 truncate cleaned up [ 111.008486][ T7922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.011058][ T7922] EXT4-fs (loop3): shut down requested (1) [ 111.011412][ T7922] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 111.011512][ T7922] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 111.011712][ T7922] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 111.026680][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.052552][ T7925] tun0: tun_chr_ioctl cmd 1074025675 [ 111.052572][ T7925] tun0: persist enabled [ 111.052668][ T7925] tun0: tun_chr_ioctl cmd 1074025675 [ 111.052683][ T7925] tun0: persist disabled [ 111.118163][ T7927] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.206456][ T7938] loop8: detected capacity change from 0 to 4096 [ 111.220608][ T7938] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.245785][ T7755] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.358509][ T7956] loop3: detected capacity change from 0 to 2048 [ 111.381562][ T7956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.382642][ T7956] EXT4-fs error (device loop3): ext4_lookup:1779: inode #2: comm syz.3.1694: bad inode number: 15 [ 111.382879][ T7956] EXT4-fs (loop3): Remounting filesystem read-only [ 111.389489][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.454395][ T7965] FAULT_INJECTION: forcing a failure. [ 111.454395][ T7965] name failslab, interval 1, probability 0, space 0, times 0 [ 111.454415][ T7965] CPU: 1 UID: 0 PID: 7965 Comm: syz.3.1697 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.454493][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.454501][ T7965] Call Trace: [ 111.454505][ T7965] [ 111.454509][ T7965] __dump_stack+0x1d/0x30 [ 111.454526][ T7965] dump_stack_lvl+0x95/0xd0 [ 111.454601][ T7965] dump_stack+0x15/0x1b [ 111.454613][ T7965] should_fail_ex+0x262/0x280 [ 111.454631][ T7965] ? kcm_create+0x125/0x3b0 [ 111.454674][ T7965] should_failslab+0x8c/0xb0 [ 111.454694][ T7965] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 111.454713][ T7965] ? kcm_create+0x125/0x3b0 [ 111.454730][ T7965] kcm_create+0x125/0x3b0 [ 111.454802][ T7965] __sock_create+0x2e5/0x580 [ 111.454823][ T7965] __sys_socket+0xaf/0x180 [ 111.454865][ T7965] __x64_sys_socket+0x3f/0x50 [ 111.454877][ T7965] x64_sys_call+0x246e/0x2550 [ 111.454892][ T7965] do_syscall_64+0x112/0x360 [ 111.454908][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.454998][ T7965] RIP: 0033:0x7fab550ce559 [ 111.455043][ T7965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.455055][ T7965] RSP: 002b:00007fab53b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 111.455068][ T7965] RAX: ffffffffffffffda RBX: 00007fab55355fa0 RCX: 00007fab550ce559 [ 111.455079][ T7965] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000029 [ 111.455088][ T7965] RBP: 00007fab551658b0 R08: 0000000000000000 R09: 0000000000000000 [ 111.455096][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.455184][ T7965] R13: 00007fab55356038 R14: 00007fab55355fa0 R15: 00007ffeac404f28 [ 111.455196][ T7965] [ 111.845101][ T7992] loop6: detected capacity change from 0 to 764 [ 111.865913][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.925979][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.963595][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.986342][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.095763][ T70] bridge_slave_1: left allmulticast mode [ 112.095784][ T70] bridge_slave_1: left promiscuous mode [ 112.095920][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.104428][ T70] bridge_slave_0: left allmulticast mode [ 112.104449][ T70] bridge_slave_0: left promiscuous mode [ 112.104578][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.192712][ T8038] loop8: detected capacity change from 0 to 512 [ 112.216160][ T8038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.216221][ T8038] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.216236][ T8045] loop2: detected capacity change from 0 to 512 [ 112.268890][ T8045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.268980][ T8045] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.294564][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.310468][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.316534][ T70] bond0 (unregistering): Released all slaves [ 112.337436][ T7755] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.338169][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.341546][ T8003] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.358795][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 112.510935][ T70] hsr_slave_0: left promiscuous mode [ 112.513667][ T70] hsr_slave_1: left promiscuous mode [ 112.514268][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.514333][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.514800][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.514813][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.522190][ T70] veth1_macvtap: left promiscuous mode [ 112.522217][ T70] veth0_macvtap: left promiscuous mode [ 112.522343][ T70] veth1_vlan: left promiscuous mode [ 112.522376][ T70] veth0_vlan: left promiscuous mode [ 112.608860][ T8074] loop8: detected capacity change from 0 to 128 [ 112.631828][ T8074] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.632050][ T8074] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.719614][ T7755] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.790885][ T70] team0 (unregistering): Port device team_slave_1 removed [ 112.799082][ T70] team0 (unregistering): Port device team_slave_0 removed [ 112.860163][ T3698] Bluetooth: hci0: command 0x1003 tx timeout [ 112.860191][ T6084] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.862244][ T7893] Bluetooth: hci0: Opcode 0x0c1a failed: -19 [ 112.898979][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 112.968752][ T8092] loop1: detected capacity change from 0 to 1024 [ 112.986124][ T8092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.986199][ T8092] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.013997][ T8092] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1744: bg 0: block 112: padding at end of block bitmap is not set [ 113.031526][ T8092] EXT4-fs (loop1): Remounting filesystem read-only [ 113.067762][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.131417][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.131447][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.131501][ T8003] bridge_slave_0: entered allmulticast mode [ 113.132036][ T8003] bridge_slave_0: entered promiscuous mode [ 113.135820][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.135852][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.135947][ T8003] bridge_slave_1: entered allmulticast mode [ 113.137672][ T8003] bridge_slave_1: entered promiscuous mode [ 113.143030][ T70] IPVS: stop unused estimator thread 0... [ 113.173859][ T8003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.177959][ T8003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.208899][ T8003] team0: Port device team_slave_0 added [ 113.209715][ T8003] team0: Port device team_slave_1 added [ 113.224269][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.224283][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.224317][ T8003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.224819][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.224830][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.224889][ T8003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.246934][ T8003] hsr_slave_0: entered promiscuous mode [ 113.247302][ T8003] hsr_slave_1: entered promiscuous mode [ 113.247548][ T8003] debugfs: 'hsr0' already exists in 'hsr' [ 113.247561][ T8003] Cannot create hsr debugfs directory [ 113.322638][ T8131] loop1: detected capacity change from 0 to 512 [ 113.359048][ T8131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.359129][ T8131] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.364555][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 113.417609][ T8003] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 113.430922][ T8003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.433142][ T8003] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 113.437169][ T8003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.437799][ T8003] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 113.468325][ T8003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.471126][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.486396][ T8003] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 113.499552][ T8003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.531358][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.531396][ T8003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.578907][ T8003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.590537][ T8162] loop6: detected capacity change from 0 to 512 [ 113.592870][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.617001][ T8162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.617100][ T8162] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.635840][ T8162] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 113.653888][ T8003] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.658768][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.658800][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.664768][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.664801][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.702119][ T6467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.711745][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 113.877783][ T8202] FAULT_INJECTION: forcing a failure. [ 113.877783][ T8202] name failslab, interval 1, probability 0, space 0, times 0 [ 113.877834][ T8202] CPU: 0 UID: 0 PID: 8202 Comm: syz.6.1757 Not tainted syzkaller #0 PREEMPT(lazy) [ 113.877863][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.877879][ T8202] Call Trace: [ 113.877887][ T8202] [ 113.877895][ T8202] __dump_stack+0x1d/0x30 [ 113.877925][ T8202] dump_stack_lvl+0x95/0xd0 [ 113.878005][ T8202] dump_stack+0x15/0x1b [ 113.878025][ T8202] should_fail_ex+0x262/0x280 [ 113.878054][ T8202] should_failslab+0x8c/0xb0 [ 113.878094][ T8202] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 113.878147][ T8202] ? kstrdup_const+0x3e/0x50 [ 113.878170][ T8202] ? kstrdup_const+0x3e/0x50 [ 113.878248][ T8202] ? widen_string+0x42/0x210 [ 113.878268][ T8202] kstrdup+0x3e/0xd0 [ 113.878291][ T8202] kstrdup_const+0x3e/0x50 [ 113.878316][ T8202] __kernfs_new_node+0x42/0x440 [ 113.878434][ T8202] ? vsnprintf+0x857/0x8c0 [ 113.878470][ T8202] kernfs_new_node+0xcf/0xf0 [ 113.878498][ T8202] __kernfs_create_file+0x4b/0x180 [ 113.878528][ T8202] cgroup_addrm_files+0x50e/0x660 [ 113.878642][ T8202] css_populate_dir+0x9f/0x230 [ 113.878667][ T8202] cgroup_apply_control_enable+0x468/0x9c0 [ 113.878703][ T8202] cgroup_mkdir+0xbfd/0xcb0 [ 113.878759][ T8202] ? __pfx_cgroup_mkdir+0x10/0x10 [ 113.878787][ T8202] kernfs_iop_mkdir+0x11e/0x1c0 [ 113.878813][ T8202] vfs_mkdir+0x291/0x3e0 [ 113.878832][ T8202] filename_mkdirat+0x138/0x300 [ 113.878923][ T8202] __se_sys_mkdirat+0x32/0xf0 [ 113.878944][ T8202] __x64_sys_mkdirat+0x43/0x50 [ 113.879067][ T8202] x64_sys_call+0x368/0x2550 [ 113.879162][ T8202] do_syscall_64+0x112/0x360 [ 113.879189][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.879216][ T8202] RIP: 0033:0x7fbdfed1e559 [ 113.879235][ T8202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.879256][ T8202] RSP: 002b:00007fbdfd777028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 113.879365][ T8202] RAX: ffffffffffffffda RBX: 00007fbdfefa5fa0 RCX: 00007fbdfed1e559 [ 113.879383][ T8202] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 113.879400][ T8202] RBP: 00007fbdfedb58b0 R08: 0000000000000000 R09: 0000000000000000 [ 113.879416][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.879481][ T8202] R13: 00007fbdfefa6038 R14: 00007fbdfefa5fa0 R15: 00007ffd3e364b38 [ 113.879504][ T8202] [ 113.885818][ T8202] cgroup: cgroup_addrm_files: failed to add allow, err=-12 [ 113.966849][ T8210] vcan0: tx address claim with dest, not broadcast [ 114.010023][ T8003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.080205][ T8222] EXT4-fs: Ignoring removed oldalloc option [ 114.080572][ T8222] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 114.080584][ T8222] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 114.082184][ T8222] EXT4-fs (loop8): 1 truncate cleaned up [ 114.082637][ T8222] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.084134][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 114.084169][ T30] audit: type=1400 audit(1792032337.638:2592): avc: denied { write } for pid=8219 comm="syz.8.1764" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.136038][ T30] audit: type=1400 audit(1792032337.708:2593): avc: denied { map } for pid=8219 comm="syz.8.1764" path="/21/bus/blkio.bfq.empty_time" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 114.179875][ T7755] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.212072][ T30] audit: type=1326 audit(1792032337.788:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.8.1766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf12a1e559 code=0x7ffc0000 [ 114.214464][ T30] audit: type=1326 audit(1792032337.788:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.8.1766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf12a1e559 code=0x7ffc0000 [ 114.214568][ T30] audit: type=1326 audit(1792032337.788:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.8.1766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf12a1e559 code=0x7ffc0000 [ 114.214818][ T30] audit: type=1326 audit(1792032337.788:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.8.1766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdf12a1e559 code=0x7ffc0000 [ 114.215030][ T30] audit: type=1326 audit(1792032337.788:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.8.1766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf12a1e2c2 code=0x7ffc0000 [ 114.215344][ T30] audit: type=1326 audit(1792032337.788:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.8.1766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf12a1e2c2 code=0x7ffc0000 [ 114.215463][ T30] audit: type=1326 audit(1792032337.788:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.8.1766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf12a1e559 code=0x7ffc0000 [ 114.215763][ T30] audit: type=1326 audit(1792032337.788:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.8.1766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf12a1e559 code=0x7ffc0000 [ 114.378097][ T8240] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 114.455986][ T8003] veth0_vlan: entered promiscuous mode [ 114.459312][ T8003] veth1_vlan: entered promiscuous mode [ 114.470324][ T8003] veth0_macvtap: entered promiscuous mode [ 114.471972][ T8003] veth1_macvtap: entered promiscuous mode [ 114.479216][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.492101][ T8244] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 114.492260][ T8244] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.515726][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.551576][ T51] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.551615][ T51] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.551649][ T51] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.551725][ T51] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.597296][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.624532][ T8259] FAULT_INJECTION: forcing a failure. [ 114.624532][ T8259] name failslab, interval 1, probability 0, space 0, times 0 [ 114.624562][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.8.1774 Not tainted syzkaller #0 PREEMPT(lazy) [ 114.624592][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.624683][ T8259] Call Trace: [ 114.624690][ T8259] [ 114.624698][ T8259] __dump_stack+0x1d/0x30 [ 114.624738][ T8259] dump_stack_lvl+0x95/0xd0 [ 114.624765][ T8259] dump_stack+0x15/0x1b [ 114.624790][ T8259] should_fail_ex+0x262/0x280 [ 114.624818][ T8259] ? do_getname+0x2e/0x1c0 [ 114.624861][ T8259] should_failslab+0x8c/0xb0 [ 114.624956][ T8259] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 114.625012][ T8259] ? do_getname+0x2e/0x1c0 [ 114.625033][ T8259] ? xfd_validate_state+0x45/0xf0 [ 114.625061][ T8259] do_getname+0x2e/0x1c0 [ 114.625113][ T8259] getname_flags+0x1d/0x30 [ 114.625139][ T8259] __x64_sys_execve+0x42/0x80 [ 114.625177][ T8259] x64_sys_call+0x1cd2/0x2550 [ 114.625202][ T8259] do_syscall_64+0x112/0x360 [ 114.625227][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.625250][ T8259] RIP: 0033:0x7fdf12a1e559 [ 114.625385][ T8259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.625406][ T8259] RSP: 002b:00007fdf11477028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 114.625429][ T8259] RAX: ffffffffffffffda RBX: 00007fdf12ca5fa0 RCX: 00007fdf12a1e559 [ 114.625443][ T8259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.625455][ T8259] RBP: 00007fdf12ab58b0 R08: 0000000000000000 R09: 0000000000000000 [ 114.625468][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.625502][ T8259] R13: 00007fdf12ca6038 R14: 00007fdf12ca5fa0 R15: 00007fffe4184008 [ 114.625526][ T8259] [ 114.840218][ T8275] sctp: [Deprecated]: syz.8.1780 (pid 8275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.840218][ T8275] Use struct sctp_sack_info instead [ 114.948803][ T8289] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 114.948822][ T8289] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 114.948883][ T8289] System zones: 0-1, 15-15, 18-18, 34-34 [ 114.949102][ T8289] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.949145][ T8289] EXT4-fs warning (device loop2): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 114.949176][ T8289] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 114.967029][ T8289] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1788: bg 0: block 40: padding at end of block bitmap is not set [ 114.967140][ T8289] loop2: lost filesystem error report for type 5 error -117 [ 114.967303][ T8289] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 114.967322][ T8289] loop2: lost filesystem error report for type 5 error -117 [ 114.967556][ T8289] EXT4-fs (loop2): 1 truncate cleaned up [ 114.968021][ T8289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.969481][ T8289] EXT4-fs (loop2): shut down requested (1) [ 114.969824][ T8289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 114.969851][ T8289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 114.970864][ T8289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 114.999313][ T8300] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 114.999330][ T8300] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 115.007362][ T8300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 115.007394][ T8300] System zones: 1-12 [ 115.007523][ T8300] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1793: bad orphan inode 131072 [ 115.007545][ T8300] loop6: lost filesystem error report for type 5 error -117 [ 115.008062][ T8300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.031737][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.034037][ T6467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.173746][ T8314] FAULT_INJECTION: forcing a failure. [ 115.173746][ T8314] name failslab, interval 1, probability 0, space 0, times 0 [ 115.173775][ T8314] CPU: 1 UID: 0 PID: 8314 Comm: syz.2.1798 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.173863][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.173877][ T8314] Call Trace: [ 115.173884][ T8314] [ 115.173893][ T8314] __dump_stack+0x1d/0x30 [ 115.173960][ T8314] dump_stack_lvl+0x95/0xd0 [ 115.174031][ T8314] dump_stack+0x15/0x1b [ 115.174056][ T8314] should_fail_ex+0x262/0x280 [ 115.174087][ T8314] should_failslab+0x8c/0xb0 [ 115.174157][ T8314] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 115.174193][ T8314] ? __d_alloc+0x34/0x320 [ 115.174321][ T8314] ? __d_alloc+0x34/0x320 [ 115.174348][ T8314] __d_alloc+0x34/0x320 [ 115.174428][ T8314] ? d_alloc_pseudo+0x13/0x80 [ 115.174463][ T8314] d_alloc_pseudo+0x1e/0x80 [ 115.174499][ T8314] alloc_path_pseudo+0xa4/0x140 [ 115.174536][ T8314] alloc_file_pseudo+0x55/0x120 [ 115.174561][ T8314] sock_alloc_file+0x9c/0x1e0 [ 115.174594][ T8314] __sys_socket+0x118/0x180 [ 115.174681][ T8314] __x64_sys_socket+0x3f/0x50 [ 115.174702][ T8314] x64_sys_call+0x246e/0x2550 [ 115.174787][ T8314] do_syscall_64+0x112/0x360 [ 115.174818][ T8314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.174839][ T8314] RIP: 0033:0x7fd6a836e559 [ 115.174855][ T8314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.174949][ T8314] RSP: 002b:00007fd6a6dc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 115.174969][ T8314] RAX: ffffffffffffffda RBX: 00007fd6a85f5fa0 RCX: 00007fd6a836e559 [ 115.174986][ T8314] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 115.175002][ T8314] RBP: 00007fd6a84058b0 R08: 0000000000000000 R09: 0000000000000000 [ 115.175018][ T8314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.175089][ T8314] R13: 00007fd6a85f6038 R14: 00007fd6a85f5fa0 R15: 00007ffc913d9298 [ 115.175107][ T8314] [ 115.335580][ T8331] FAULT_INJECTION: forcing a failure. [ 115.335580][ T8331] name failslab, interval 1, probability 0, space 0, times 0 [ 115.335610][ T8331] CPU: 0 UID: 0 PID: 8331 Comm: syz.6.1806 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.335639][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.335654][ T8331] Call Trace: [ 115.335661][ T8331] [ 115.335742][ T8331] __dump_stack+0x1d/0x30 [ 115.335771][ T8331] dump_stack_lvl+0x95/0xd0 [ 115.335795][ T8331] dump_stack+0x15/0x1b [ 115.335818][ T8331] should_fail_ex+0x262/0x280 [ 115.335904][ T8331] should_failslab+0x8c/0xb0 [ 115.335945][ T8331] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 115.336012][ T8331] ? setup_ipc_sysctls+0x49/0x8d0 [ 115.336038][ T8331] ? setup_ipc_sysctls+0x49/0x8d0 [ 115.336066][ T8331] kmemdup_noprof+0x2b/0x70 [ 115.336160][ T8331] setup_ipc_sysctls+0x49/0x8d0 [ 115.336205][ T8331] copy_ipcs+0x297/0x460 [ 115.336237][ T8331] create_new_namespaces+0x121/0x420 [ 115.336385][ T8331] unshare_nsproxy_namespaces+0x115/0x150 [ 115.336423][ T8331] ksys_unshare+0x3fd/0x6f0 [ 115.336455][ T8331] __x64_sys_unshare+0x1f/0x30 [ 115.336497][ T8331] x64_sys_call+0x1e33/0x2550 [ 115.336526][ T8331] do_syscall_64+0x112/0x360 [ 115.336631][ T8331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.336656][ T8331] RIP: 0033:0x7fbdfed1e559 [ 115.336673][ T8331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.336695][ T8331] RSP: 002b:00007fbdfd777028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 115.336757][ T8331] RAX: ffffffffffffffda RBX: 00007fbdfefa5fa0 RCX: 00007fbdfed1e559 [ 115.336773][ T8331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000e000000 [ 115.336789][ T8331] RBP: 00007fbdfedb58b0 R08: 0000000000000000 R09: 0000000000000000 [ 115.336804][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.336872][ T8331] R13: 00007fbdfefa6038 R14: 00007fbdfefa5fa0 R15: 00007ffd3e364b38 [ 115.336931][ T8331] [ 115.337633][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1802'. [ 115.347306][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1802'. [ 115.540195][ T8348] FAULT_INJECTION: forcing a failure. [ 115.540195][ T8348] name failslab, interval 1, probability 0, space 0, times 0 [ 115.540270][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.9.1811 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.540298][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.540315][ T8348] Call Trace: [ 115.540322][ T8348] [ 115.540332][ T8348] __dump_stack+0x1d/0x30 [ 115.540402][ T8348] dump_stack_lvl+0x95/0xd0 [ 115.540427][ T8348] dump_stack+0x15/0x1b [ 115.540449][ T8348] should_fail_ex+0x262/0x280 [ 115.540550][ T8348] ? copy_fs_struct+0x31/0x110 [ 115.540585][ T8348] should_failslab+0x8c/0xb0 [ 115.540621][ T8348] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 115.540695][ T8348] ? copy_fs_struct+0x31/0x110 [ 115.540730][ T8348] copy_fs_struct+0x31/0x110 [ 115.540792][ T8348] ksys_unshare+0x2f3/0x6f0 [ 115.540889][ T8348] __x64_sys_unshare+0x1f/0x30 [ 115.540917][ T8348] x64_sys_call+0x1e33/0x2550 [ 115.540985][ T8348] do_syscall_64+0x112/0x360 [ 115.541015][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.541041][ T8348] RIP: 0033:0x7f8fea34e559 [ 115.541104][ T8348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.541126][ T8348] RSP: 002b:00007f8fe8da7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 115.541148][ T8348] RAX: ffffffffffffffda RBX: 00007f8fea5d5fa0 RCX: 00007f8fea34e559 [ 115.541226][ T8348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 115.541241][ T8348] RBP: 00007f8fea3e58b0 R08: 0000000000000000 R09: 0000000000000000 [ 115.541256][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.541270][ T8348] R13: 00007f8fea5d6038 R14: 00007f8fea5d5fa0 R15: 00007fffdc195b48 [ 115.541292][ T8348] [ 115.566928][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.567125][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.567177][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.567226][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.567354][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.567437][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.567506][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.567550][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.567651][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.567700][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.567751][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.567974][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.568047][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.568094][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.573438][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.573584][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.573633][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.573686][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.573800][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.573863][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.573930][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.574015][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.574064][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.574115][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.574209][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.574291][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.574339][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.574488][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.574567][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.574625][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.574736][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.579329][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.579494][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.579544][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.579691][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.583272][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.583403][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.583496][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.583680][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.583729][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.583777][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.583846][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.583957][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.584006][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.587116][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.587166][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.587281][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.587330][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.587393][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.587441][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.587545][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.587592][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.587704][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.587806][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.587854][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.587901][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.588052][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.588116][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.588165][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.588297][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.588333][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.588446][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.599710][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.599938][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.599987][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.600083][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.600183][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.600247][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.600299][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.600350][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.600416][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.600562][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.600612][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.600678][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.600726][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.600841][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.600889][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.601053][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.603793][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.603845][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.603908][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.603961][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604039][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604089][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604171][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604219][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604304][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604371][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604419][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604502][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604549][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604602][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604743][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604811][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604862][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604910][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.604975][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.610533][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.610598][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.834845][ T8333] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 116.236970][ T8374] set_capacity_and_notify: 4 callbacks suppressed [ 116.237086][ T8374] loop1: detected capacity change from 0 to 512 [ 116.300557][ T8374] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.1818: Invalid inode bitmap blk 4 in block_group 0 [ 116.300658][ T8374] loop1: lost filesystem error report for type 5 error -117 [ 116.333358][ T8374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.459040][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.687408][ T8421] loop2: detected capacity change from 0 to 512 [ 116.734637][ T8421] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 116.734726][ T8421] FAT-fs (loop2): Filesystem has been set read-only [ 116.734802][ T8421] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 116.734970][ T8421] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 116.735088][ T8421] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 116.735311][ T8421] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 116.735546][ T8421] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 116.735741][ T8421] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 116.740893][ T8421] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 116.741138][ T8421] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 116.741237][ T8421] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 116.825790][ T8429] loop6: detected capacity change from 0 to 256 [ 116.874334][ T8429] FAT-fs (loop6): codepage cp855 not found [ 116.929696][ T8439] FAULT_INJECTION: forcing a failure. [ 116.929696][ T8439] name failslab, interval 1, probability 0, space 0, times 0 [ 116.929726][ T8439] CPU: 0 UID: 0 PID: 8439 Comm: syz.2.1835 Not tainted syzkaller #0 PREEMPT(lazy) [ 116.929758][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.929821][ T8439] Call Trace: [ 116.929829][ T8439] [ 116.929838][ T8439] __dump_stack+0x1d/0x30 [ 116.929864][ T8439] dump_stack_lvl+0x95/0xd0 [ 116.929885][ T8439] dump_stack+0x15/0x1b [ 116.929906][ T8439] should_fail_ex+0x262/0x280 [ 116.929996][ T8439] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 116.930032][ T8439] should_failslab+0x8c/0xb0 [ 116.930063][ T8439] __kmalloc_cache_noprof+0x7a/0x400 [ 116.930120][ T8439] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 116.930143][ T8439] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 116.930176][ T8439] bpf_prog_alloc_no_stats+0xc4/0x390 [ 116.930206][ T8439] bpf_prog_alloc+0x3c/0x150 [ 116.930228][ T8439] bpf_prog_create_from_user+0x80/0x260 [ 116.930285][ T8439] ? __pfx_seccomp_check_filter+0x10/0x10 [ 116.930356][ T8439] do_seccomp+0x5ef/0xa40 [ 116.930385][ T8439] ? restore_fpregs_from_fpstate+0x61/0x110 [ 116.930409][ T8439] __x64_sys_seccomp+0x40/0x50 [ 116.930522][ T8439] x64_sys_call+0x3f0/0x2550 [ 116.930547][ T8439] do_syscall_64+0x112/0x360 [ 116.930571][ T8439] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 116.930599][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.930635][ T8439] RIP: 0033:0x7fd6a836e559 [ 116.930650][ T8439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.930669][ T8439] RSP: 002b:00007fd6a6dc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 116.930688][ T8439] RAX: ffffffffffffffda RBX: 00007fd6a85f5fa0 RCX: 00007fd6a836e559 [ 116.930762][ T8439] RDX: 0000200000000140 RSI: 000000000000002c RDI: 0000000000000001 [ 116.930775][ T8439] RBP: 00007fd6a84058b0 R08: 0000000000000000 R09: 0000000000000000 [ 116.930788][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.930858][ T8439] R13: 00007fd6a85f6038 R14: 00007fd6a85f5fa0 R15: 00007ffc913d9298 [ 116.930876][ T8439] [ 116.953093][ T3488] IPVS: starting estimator thread 0... [ 117.039862][ T8443] IPVS: using max 2544 ests per chain, 127200 per kthread [ 117.064935][ T8449] loop6: detected capacity change from 0 to 256 [ 117.066049][ T8449] vfat: Unknown parameter 'codepagen:' [ 117.161181][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1841'. [ 117.165962][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1841'. [ 117.166603][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1841'. [ 117.167191][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1841'. [ 117.538414][ T8487] loop1: detected capacity change from 0 to 128 [ 117.567930][ T8487] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.568121][ T8487] ext4 filesystem being mounted at /380/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.738425][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.429964][ T8527] loop8: detected capacity change from 0 to 512 [ 118.448984][ T8527] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 118.448998][ T8527] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 118.473769][ T8527] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.1862: bad orphan inode 131072 [ 118.473798][ T8527] loop8: lost filesystem error report for type 5 error -117 [ 118.474400][ T8527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.936626][ T7755] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.983178][ T8537] loop9: detected capacity change from 0 to 512 [ 118.997609][ T8537] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 118.997626][ T8537] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 119.022929][ T8537] EXT4-fs (loop9): 1 truncate cleaned up [ 119.026957][ T8537] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.077434][ T8003] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.114615][ T8545] rxe_eth0 speed is unknown, defaulting to 1000 [ 119.139042][ T8547] loop6: detected capacity change from 0 to 2048 [ 119.152969][ T8547] loop6: p1 < > p4 [ 119.157126][ T8547] loop6: p4 size 8388608 extends beyond EOD, truncated [ 119.180232][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 119.180249][ T30] audit: type=1400 audit(1792032342.758:2654): avc: denied { read write } for pid=8546 comm="syz.6.1871" name="loop6p4" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.180294][ T30] audit: type=1400 audit(1792032342.758:2655): avc: denied { open } for pid=8546 comm="syz.6.1871" path="/dev/loop6p4" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.201593][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1869'. [ 119.353551][ T8559] loop1: detected capacity change from 0 to 512 [ 119.356627][ T8559] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 119.356642][ T8559] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.392976][ T8559] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1877: bad orphan inode 131072 [ 119.393007][ T8559] loop1: lost filesystem error report for type 5 error -117 [ 119.396531][ T8559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.432761][ T30] audit: type=1400 audit(1792032343.008:2656): avc: denied { write } for pid=8556 comm="syz.1.1877" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.463022][ T8561] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1878'. [ 119.464964][ T8564] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1878'. [ 119.496432][ T8562] ================================================================== [ 119.496478][ T8562] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 119.496522][ T8562] [ 119.496528][ T8562] read-write to 0xffffc9000213bcc0 of 8 bytes by task 8565 on cpu 0: [ 119.496551][ T8562] shmem_writeout+0x2eb/0x8f0 [ 119.496583][ T8562] shrink_folio_list+0x1a81/0x26f0 [ 119.496612][ T8562] evict_folios+0x1c6e/0x2830 [ 119.496635][ T8562] try_to_shrink_lruvec+0x8fd/0xb30 [ 119.496660][ T8562] shrink_lruvec+0x252/0x1d40 [ 119.496680][ T8562] shrink_node+0x67c/0x2000 [ 119.496708][ T8562] do_try_to_free_pages+0x408/0xca0 [ 119.496730][ T8562] try_to_free_mem_cgroup_pages+0x201/0x420 [ 119.496750][ T8562] mem_cgroup_resize_max+0x13d/0x290 [ 119.496778][ T8562] mem_cgroup_write+0x132/0x1c0 [ 119.496803][ T8562] cgroup_file_write+0x197/0x350 [ 119.496836][ T8562] kernfs_fop_write_iter+0x1d2/0x2e0 [ 119.496862][ T8562] vfs_write+0x57f/0x9a0 [ 119.496890][ T8562] ksys_write+0xdc/0x1a0 [ 119.496924][ T8562] __x64_sys_write+0x40/0x50 [ 119.496954][ T8562] x64_sys_call+0x154e/0x2550 [ 119.496981][ T8562] do_syscall_64+0x112/0x360 [ 119.497003][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.497023][ T8562] [ 119.497027][ T8562] read to 0xffffc9000213bcc0 of 8 bytes by task 8562 on cpu 1: [ 119.497042][ T8562] shmem_fallocate+0x5cb/0x8d0 [ 119.497066][ T8562] vfs_fallocate+0x3ac/0x400 [ 119.497086][ T8562] file_ioctl+0x4e1/0x5b0 [ 119.497117][ T8562] do_vfs_ioctl+0x7c4/0xe50 [ 119.497148][ T8562] __se_sys_ioctl+0x82/0x140 [ 119.497179][ T8562] __x64_sys_ioctl+0x43/0x50 [ 119.497213][ T8562] x64_sys_call+0x239d/0x2550 [ 119.497242][ T8562] do_syscall_64+0x112/0x360 [ 119.497269][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.497293][ T8562] [ 119.497298][ T8562] value changed: 0x0000000000000614 -> 0x0000000000000630 [ 119.497311][ T8562] [ 119.497315][ T8562] Reported by Kernel Concurrency Sanitizer on: [ 119.497340][ T8562] CPU: 1 UID: 0 PID: 8562 Comm: syz.9.1876 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.497368][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.497382][ T8562] ================================================================== [ 119.498585][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.566363][ T8569] loop1: detected capacity change from 0 to 512 [ 119.595158][ T8569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.595226][ T8569] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.614714][ T8567] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.614818][ T8567] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.621218][ T8569] EXT4-fs (loop1): shut down requested (2) [ 119.626657][ T30] audit: type=1400 audit(1792032343.198:2657): avc: denied { write } for pid=8566 comm="syz.8.1880" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.724369][ T7755] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.724881][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.532169][ T30] audit: type=1400 audit(1792032345.108:2658): avc: denied { write } for pid=8577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.574821][ T30] audit: type=1400 audit(1792032345.148:2659): avc: denied { write } for pid=8588 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.425404][ T30] audit: type=1400 audit(1792032345.998:2660): avc: denied { write } for pid=8591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.466394][ T30] audit: type=1400 audit(1792032346.038:2661): avc: denied { write } for pid=8602 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.590076][ T30] audit: type=1400 audit(1792032346.168:2662): avc: denied { write } for pid=8605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.632154][ T30] audit: type=1400 audit(1792032346.208:2663): avc: denied { write } for pid=8616 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.573460][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 124.573477][ T30] audit: type=1400 audit(1792032348.148:2666): avc: denied { write } for pid=8633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.621134][ T30] audit: type=1400 audit(1792032348.198:2667): avc: denied { write } for pid=8644 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.105321][ T30] audit: type=1400 audit(1792032348.678:2668): avc: denied { write } for pid=8647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.148091][ T30] audit: type=1400 audit(1792032348.718:2669): avc: denied { write } for pid=8658 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.278572][ T30] audit: type=1400 audit(1792032348.848:2670): avc: denied { write } for pid=8661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.325097][ T30] audit: type=1400 audit(1792032348.898:2671): avc: denied { write } for pid=8672 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.544100][ T30] audit: type=1400 audit(1792032349.118:2672): avc: denied { write } for pid=8675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.586404][ T30] audit: type=1400 audit(1792032349.158:2673): avc: denied { write } for pid=8686 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1