last executing test programs: 1m0.849613359s ago: executing program 0 (id=85): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m0.568202991s ago: executing program 0 (id=91): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x20) 1m0.545066902s ago: executing program 0 (id=92): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r1, 0x5437, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0xf77, 0x9, 0x7, 0x561, 0x19, "72bbba2f8348f8d6f34b037a537a1c35646f88"}) 1m0.524922963s ago: executing program 0 (id=93): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 1m0.497033244s ago: executing program 0 (id=94): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m0.401274409s ago: executing program 0 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0xc, 0x10}, {0x1, 0xb}, {0x8, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x14) 45.319290298s ago: executing program 32 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0xc, 0x10}, {0x1, 0xb}, {0x8, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x14) 5.071139555s ago: executing program 5 (id=877): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lblc\x00', 0x1d, 0x80002, 0x64}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0xdac098b1337ed02a, 0xcd, 0x4}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.025809497s ago: executing program 5 (id=878): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x4008, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) shutdown(0xffffffffffffffff, 0x1) r0 = memfd_create(&(0x7f0000000440)='-B\xd5O4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\xb90a\xa9\xb2\x00\x00\x00\x00=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7V\x00@Ip]D\xd6\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xf6L\\\xa3O\x92\x90i\xed\xd36\xf3\xa5\xaf\x87\x90@k\xe2\x14/rn$x\x13/\xc5\\W\x04\br\x17\xd18\xd9L:\xc2\x11\xfb2\a\x99i\x90/\x19@\x1cq\xeb\xc8\xb9KvJ\x8c\xf2c\xfe\x8d]k\x01\xb7\x84H?\xc0z:\x913\xfa8\xac\xd3q\xe4vPGUQ\x93\xca1\xff\xf8\x13\x0fT\xa9\xc3\xcfozi_\x9a1\x97\xd4\xb1\x96\xc0\r\xdd\xe8\xe7P\x16\xbcT\xa5\t\xe2X\x1e\x19\xff\xfd\xa0\r\x94c\r\xb8\f\xed.M0[y\xfbz\xeb{\\j~\xf6\xca\xd9\xa5\xf13\t-\x00j\xf5\x88\x94p\x04\xe9\x93\xadcn~\xb9:\x0e+P\x97\x7f\xa3\xcd\xe8\xb8\x9c+\x9c|\x90\xdcg_t\x92l\x88UU\xf0\xdc\xd9\x00\xb4\xa5\xe3*\xb7\xba\x81\xbazT\xb8\xb7\xf8\xbb\xcew\xb3\x0e\xc47BR\x88B\xe4\xffQt\x96\xbd_\xaashy\xd3\x1d\xcc\xf9G\xc1wpAL\v\xf3|\x93\x00%+\xe4\xef\x97\xc9\xde\x98(\x01\x85\xe5;\xd6a\xb5\x14\x1f\xc9\x0e\xf0\x8a\xe4\x9a\xc2\x86\xb85\x8e\x85)\xaa\a1\x86\x82B|\xee\a\xca5\xb2\x06\xf4_\x86\x15z`\x8e\xd3\x81\aT\xd4}\xea\xc82\xbb\xfc\xc5\xad\x9dgf\xd6L\xcf\x17)\xc6v\x06\xe8O\xcdd\x91\x06|\xbe\xc1\xb8\n\x18+\x04\x81\xdc\xdf~Q\x85{\x10x\x18c#6\x96Bl\x00~\x7f\x16eQe{\xa2\xf9q\xb6\xc1t*S\\\xff:\x8b\xa3\x11\xb0\x86t\xac\xc4(8V&*B+[<\xde\xab\xc8X\xd6\x1d\x1b\xdf\xa8b\x82l\x94ecwrDb\x15\xc8r\xec\x91\x88\xc9\xf4\x81C\xee\x8c\x93\xbdr\x1d_\xd7\xc9\x90\xef\xf3n1\fy\xbe\x93\x060x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0xb, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.960515543s ago: executing program 4 (id=939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1}}}}}}, 0x26) 1.899662836s ago: executing program 2 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfffff2bd, 0x4) 1.592665419s ago: executing program 4 (id=943): socket$kcm(0x2, 0x3, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000045) 1.515910403s ago: executing program 1 (id=945): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000040)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x40) 1.515785563s ago: executing program 4 (id=946): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) 1.515523293s ago: executing program 6 (id=947): unshare(0x40200) r0 = semget$private(0x0, 0x7, 0x85) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) semop(r0, &(0x7f0000000340)=[{0x1, 0xce92, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0xff, 0xa, 0x0, 0x8, 0x1]) unshare(0x40400) 1.457527925s ago: executing program 1 (id=950): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000000000000000000000000ffffffffffffff"], 0xb8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 652.765881ms ago: executing program 6 (id=951): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x2, 0xbaa, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) 652.640191ms ago: executing program 1 (id=952): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa0300bb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x8c1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x40c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 652.568631ms ago: executing program 2 (id=953): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2b}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 650.037191ms ago: executing program 3 (id=954): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/59, 0x3b}, {0x0}], 0x2) 649.604211ms ago: executing program 4 (id=955): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'fo\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x0, 0x77}, {@remote, 0x4e20, 0x1, 0x6, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 610.806313ms ago: executing program 4 (id=956): socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x1c, 0x2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x24) 569.250184ms ago: executing program 3 (id=957): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r1], 0x30}, 0x4004000) 510.325798ms ago: executing program 1 (id=958): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, 0x0, 0x6) 506.341267ms ago: executing program 2 (id=959): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x12}, {&(0x7f0000000180)=""/250, 0xfa}], 0x2}, 0x10009}], 0x1, 0x30100, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)='\x00', 0x1}], 0x1}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 496.503018ms ago: executing program 4 (id=961): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000100c0)={0x6, 0x1, 0x4, 0x2af, 0x8, "eca144f13d760700"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xfffffff9, 0x5, 0xb2, 0x10, "1b09000940000000ebffffe578000000001000"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 448.92861ms ago: executing program 3 (id=962): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 375.498503ms ago: executing program 1 (id=963): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff, 0xfffffffc}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) setrlimit(0x8, &(0x7f0000000240)={0x5, 0x8}) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file3\x00', 0x181242, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 375.011103ms ago: executing program 1 (id=964): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r2, 0x371fee32, 0xa2, 0x98a}, &(0x7f0000000200)=0x10) 326.839706ms ago: executing program 3 (id=965): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000009600)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 283.113097ms ago: executing program 6 (id=966): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0}, 0x1080e8, 0x0, 0x7, 0x4, 0x9, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 247.546449ms ago: executing program 6 (id=967): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @multicast}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfe1d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) 245.303129ms ago: executing program 3 (id=968): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x50, 0x0, &(0x7f0000000000)) 165.172233ms ago: executing program 3 (id=969): socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcc776000) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) 135.744904ms ago: executing program 6 (id=970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 81.096316ms ago: executing program 2 (id=971): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259866ec9c3740ce1b22bb3327ef4f001dffffffffffffff7fd858bf9a7ae95bc7f52363c468b257ff3e248525f2deb01efd54f11ed2c453c97e4af37017ea6b16b694bb4a6e4606c3e519d1d2bd3c8c4e97da2213f9d509ae0400000000000000c279f03558083916666827d61dcc3a633bffce540b5a293e3877adc1662edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a216c28665f7f46c70d4e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="cc7766d47465642e"], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) 0s ago: executing program 2 (id=972): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x1ff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x4, 0x7, 0x7}}], 0x38, 0x10000000}], 0x1, 0x40804) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x27, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) futex_waitv(&(0x7f0000001b00)=[{0xffb, 0x0, 0xa}], 0x1, 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): ve_0 [ 36.302808][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.304296][ T345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.304357][ T345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.304428][ T345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.304476][ T345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.335204][ T3301] veth1_vlan: entered promiscuous mode [ 36.371558][ T3295] veth0_macvtap: entered promiscuous mode [ 36.381972][ T3295] veth1_macvtap: entered promiscuous mode [ 36.400896][ T3302] veth0_vlan: entered promiscuous mode [ 36.411353][ T3302] veth1_vlan: entered promiscuous mode [ 36.414303][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.414405][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.414438][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.414528][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.446197][ T3300] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.476073][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.476851][ T3301] veth0_macvtap: entered promiscuous mode [ 36.499194][ T3301] veth1_macvtap: entered promiscuous mode [ 36.509949][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.547509][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.555363][ T3302] veth0_macvtap: entered promiscuous mode [ 36.566395][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.589405][ T3302] veth1_macvtap: entered promiscuous mode [ 36.637312][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.645011][ T345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.645878][ T345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.646028][ T345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.646123][ T345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.646323][ T345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.652003][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.745856][ T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.746355][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.746749][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.784148][ T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.784316][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.787726][ T3511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3511 comm=syz.3.8 [ 36.791211][ T31] IPVS: starting estimator thread 0... [ 36.844090][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.844132][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.894231][ T3516] IPVS: using max 2208 ests per chain, 110400 per kthread [ 36.919408][ T3525] capability: warning: `syz.2.10' uses deprecated v2 capabilities in a way that may be insecure [ 36.931799][ T3523] sg_write: data in/out 335872/136 bytes for SCSI command 0x0-- guessing data in; [ 36.931799][ T3523] program syz.4.5 not setting count and/or reply_len properly [ 36.961877][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 36.961894][ T29] audit: type=1400 audit(1789126846.317:191): avc: denied { name_connect } for pid=3526 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 36.963115][ T29] audit: type=1400 audit(1789126846.317:192): avc: denied { listen } for pid=3526 comm="syz.1.11" lport=55212 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.963464][ T29] audit: type=1400 audit(1789126846.317:193): avc: denied { accept } for pid=3526 comm="syz.1.11" lport=55212 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.963943][ T29] audit: type=1400 audit(1789126846.317:194): avc: denied { setopt } for pid=3526 comm="syz.1.11" lport=55212 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 37.064167][ T29] audit: type=1400 audit(1789126846.427:195): avc: denied { create } for pid=3528 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.111991][ T29] audit: type=1400 audit(1789126846.467:196): avc: denied { create } for pid=3530 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.113241][ T29] audit: type=1400 audit(1789126846.467:197): avc: denied { prog_run } for pid=3531 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.134469][ T29] audit: type=1400 audit(1789126846.487:198): avc: denied { write } for pid=3530 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.181216][ T3535] netlink: 5 bytes leftover after parsing attributes in process `syz.0.13'. [ 37.268216][ T29] audit: type=1400 audit(1789126846.627:199): avc: denied { ioctl } for pid=3541 comm="syz.3.18" path="socket:[4672]" dev="sockfs" ino=4672 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.303281][ T3544] loop2: detected capacity change from 0 to 256 [ 37.316110][ T29] audit: type=1400 audit(1789126846.677:200): avc: denied { mount } for pid=3543 comm="syz.2.19" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.382434][ T3548] loop0: detected capacity change from 0 to 512 [ 37.382789][ T3548] ======================================================= [ 37.382789][ T3548] WARNING: The mand mount option has been deprecated and [ 37.382789][ T3548] and is ignored by this kernel. Remove the mand [ 37.382789][ T3548] option from the mount to silence this warning. [ 37.382789][ T3548] ======================================================= [ 37.397979][ T3548] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.398045][ T3548] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.442325][ T3548] EXT4-fs (loop0): 1 truncate cleaned up [ 37.443343][ T3548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.469766][ T3542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 37.610637][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.851360][ T3571] loop3: detected capacity change from 0 to 512 [ 38.136865][ T3577] sctp: [Deprecated]: syz.3.32 (pid 3577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 38.136865][ T3577] Use struct sctp_sack_info instead [ 38.630148][ T3600] syz.1.41 uses obsolete (PF_INET,SOCK_PACKET) [ 38.828778][ T3608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.46'. [ 38.828819][ T3608] netlink: 'syz.1.46': attribute type 7 has an invalid length. [ 38.828836][ T3608] netlink: 'syz.1.46': attribute type 8 has an invalid length. [ 38.828864][ T3608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 38.860897][ T3608] erspan0: entered promiscuous mode [ 38.878949][ T3608] gretap0: entered promiscuous mode [ 38.901398][ T3608] erspan0: left promiscuous mode [ 38.907866][ T3608] gretap0: left promiscuous mode [ 39.002426][ T3608] syz.1.46 (3608) used greatest stack depth: 11224 bytes left [ 39.114464][ T3626] FAULT_INJECTION: forcing a failure. [ 39.114464][ T3626] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.114664][ T3626] CPU: 1 UID: 0 PID: 3626 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.114695][ T3626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.114715][ T3626] Call Trace: [ 39.114722][ T3626] [ 39.114731][ T3626] __dump_stack+0x1d/0x30 [ 39.114762][ T3626] dump_stack_lvl+0x95/0xd0 [ 39.114925][ T3626] dump_stack+0x15/0x1b [ 39.115017][ T3626] should_fail_ex+0x262/0x280 [ 39.115042][ T3626] should_fail+0xb/0x20 [ 39.115062][ T3626] should_fail_usercopy+0x1a/0x20 [ 39.115092][ T3626] _copy_from_user+0x1c/0xb0 [ 39.115144][ T3626] copy_clone_args_from_user+0x149/0x4f0 [ 39.115181][ T3626] __se_sys_clone3+0x79/0x230 [ 39.115226][ T3626] ? switch_fpu_return+0xe7/0x1b0 [ 39.115265][ T3626] __x64_sys_clone3+0x31/0x40 [ 39.115364][ T3626] x64_sys_call+0x437/0x2550 [ 39.115399][ T3626] do_syscall_64+0x112/0x360 [ 39.115521][ T3626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.115592][ T3626] RIP: 0033:0x7fbe17f0e159 [ 39.115669][ T3626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.115711][ T3626] RSP: 002b:00007fbe16966ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 39.115732][ T3626] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbe17f0e159 [ 39.115746][ T3626] RDX: 00007fbe16966f10 RSI: 0000000000000058 RDI: 00007fbe16966f10 [ 39.115762][ T3626] RBP: 00007fbe17fa503b R08: 0000000000000000 R09: 0000000000000058 [ 39.115813][ T3626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.115829][ T3626] R13: 00007fbe18196038 R14: 00007fbe18195fa0 R15: 00007ffe799b13e8 [ 39.115857][ T3626] [ 39.658104][ T3650] loop1: detected capacity change from 0 to 128 [ 39.671266][ T3650] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.671513][ T3650] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.699729][ T3650] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.60: No space for directory leaf checksum. Please run e2fsck -D. [ 39.699758][ T3650] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.60: Directory block failed checksum [ 39.740727][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.827746][ T3666] loop2: detected capacity change from 0 to 512 [ 39.844310][ T3666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.844410][ T3666] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.885937][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.007429][ T3682] netlink: 'syz.2.72': attribute type 298 has an invalid length. [ 40.119980][ T3690] loop0: detected capacity change from 0 to 1024 [ 40.135972][ T3690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.155105][ T3690] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 40.156307][ T3690] EXT4-fs (loop0): Remounting filesystem read-only [ 40.173327][ T3690] syz.0.76 (3690) used greatest stack depth: 9984 bytes left [ 40.195866][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.269077][ T3698] FAULT_INJECTION: forcing a failure. [ 40.269077][ T3698] name failslab, interval 1, probability 0, space 0, times 1 [ 40.269101][ T3698] CPU: 0 UID: 0 PID: 3698 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.269124][ T3698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.269180][ T3698] Call Trace: [ 40.269186][ T3698] [ 40.269192][ T3698] __dump_stack+0x1d/0x30 [ 40.269224][ T3698] dump_stack_lvl+0x95/0xd0 [ 40.269243][ T3698] dump_stack+0x15/0x1b [ 40.269260][ T3698] should_fail_ex+0x262/0x280 [ 40.269305][ T3698] ? __request_module+0x1c4/0x3c0 [ 40.269322][ T3698] should_failslab+0x8c/0xb0 [ 40.269348][ T3698] __kmalloc_cache_noprof+0x7a/0x400 [ 40.269375][ T3698] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 40.269467][ T3698] ? __request_module+0x1c4/0x3c0 [ 40.269485][ T3698] ? netlink_create+0x16b/0x460 [ 40.269547][ T3698] __request_module+0x1c4/0x3c0 [ 40.269564][ T3698] ? should_failslab+0x8c/0xb0 [ 40.269590][ T3698] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 40.269658][ T3698] netlink_create+0x16b/0x460 [ 40.269770][ T3698] ? __pfx_sock_alloc_inode+0x10/0x10 [ 40.269795][ T3698] __sock_create+0x2e5/0x580 [ 40.269832][ T3698] __sys_socket+0xaf/0x180 [ 40.269867][ T3698] __x64_sys_socket+0x3f/0x50 [ 40.269898][ T3698] x64_sys_call+0x246e/0x2550 [ 40.269991][ T3698] do_syscall_64+0x112/0x360 [ 40.270020][ T3698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.270038][ T3698] RIP: 0033:0x7fbe17f0e159 [ 40.270051][ T3698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.270071][ T3698] RSP: 002b:00007fbe16967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 40.270088][ T3698] RAX: ffffffffffffffda RBX: 00007fbe18195fa0 RCX: 00007fbe17f0e159 [ 40.270100][ T3698] RDX: 0000000000000013 RSI: 0000000000000003 RDI: 0000000000000010 [ 40.270110][ T3698] RBP: 00007fbe17fa503b R08: 0000000000000000 R09: 0000000000000000 [ 40.270121][ T3698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.270150][ T3698] R13: 00007fbe18196038 R14: 00007fbe18195fa0 R15: 00007ffe799b13e8 [ 40.270194][ T3698] [ 40.460605][ T3702] netlink: 'syz.0.81': attribute type 34 has an invalid length. [ 41.106062][ T3740] loop4: detected capacity change from 0 to 1024 [ 41.142436][ T3740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.147689][ T3744] loop3: detected capacity change from 0 to 512 [ 41.173821][ T3740] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 41.189345][ T3740] EXT4-fs (loop4): Remounting filesystem read-only [ 41.192230][ T3744] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 41.211066][ T3744] EXT4-fs (loop3): orphan cleanup on readonly fs [ 41.211246][ T3744] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.101: bad orphan inode 15 [ 41.211277][ T3744] loop3: lost filesystem error report for type 5 error -117 [ 41.211459][ T3744] ext4_test_bit(bit=14, block=18) = 1 [ 41.211479][ T3744] is_bad_inode(inode)=0 [ 41.211489][ T3744] NEXT_ORPHAN(inode)=1023 [ 41.211499][ T3744] max_ino=32 [ 41.211507][ T3744] i_nlink=0 [ 41.211630][ T3744] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #15: comm syz.3.101: corrupted xattr block 19: e_value size too large [ 41.211668][ T3744] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.211861][ T3744] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 41.212250][ T3744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 41.320714][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.446531][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.621770][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 42.030946][ T3776] loop1: detected capacity change from 0 to 1024 [ 42.050841][ T3776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.052993][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 42.053025][ T29] audit: type=1400 audit(1789126851.407:266): avc: denied { write } for pid=3773 comm="syz.1.113" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.097197][ T3776] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 42.097495][ T3776] EXT4-fs (loop1): Remounting filesystem read-only [ 42.156202][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.195061][ T29] audit: type=1400 audit(1789126851.557:267): avc: denied { create } for pid=3785 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 42.220028][ T29] audit: type=1400 audit(1789126851.577:268): avc: denied { getopt } for pid=3785 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 42.224637][ T3789] Zero length message leads to an empty skb [ 42.264719][ T29] audit: type=1400 audit(1789126851.627:269): avc: denied { watch } for pid=3791 comm="syz.3.120" path="/22/trace" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.056904][ T29] audit: type=1400 audit(1789126852.417:270): avc: denied { name_bind } for pid=3806 comm="syz.4.125" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 43.219211][ T29] audit: type=1400 audit(1789126852.577:271): avc: denied { getopt } for pid=3811 comm="syz.1.127" lport=42656 faddr=255.255.255.254 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 43.517704][ T3828] FAULT_INJECTION: forcing a failure. [ 43.517704][ T3828] name failslab, interval 1, probability 0, space 0, times 0 [ 43.517739][ T3828] CPU: 1 UID: 0 PID: 3828 Comm: syz.1.133 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.517776][ T3828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.517794][ T3828] Call Trace: [ 43.517804][ T3828] [ 43.517815][ T3828] __dump_stack+0x1d/0x30 [ 43.517849][ T3828] dump_stack_lvl+0x95/0xd0 [ 43.517872][ T3828] dump_stack+0x15/0x1b [ 43.517900][ T3828] should_fail_ex+0x262/0x280 [ 43.517988][ T3828] ? call_usermodehelper_setup+0x72/0x190 [ 43.518023][ T3828] should_failslab+0x8c/0xb0 [ 43.518055][ T3828] __kmalloc_cache_noprof+0x7a/0x400 [ 43.518109][ T3828] ? call_usermodehelper_setup+0x72/0x190 [ 43.518148][ T3828] ? __pfx_free_modprobe_argv+0x10/0x10 [ 43.518170][ T3828] call_usermodehelper_setup+0x72/0x190 [ 43.518284][ T3828] __request_module+0x264/0x3c0 [ 43.518310][ T3828] ? should_failslab+0x8c/0xb0 [ 43.518341][ T3828] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 43.518367][ T3828] netlink_create+0x16b/0x460 [ 43.518446][ T3828] ? __pfx_sock_alloc_inode+0x10/0x10 [ 43.518532][ T3828] __sock_create+0x2e5/0x580 [ 43.518594][ T3828] __sys_socket+0xaf/0x180 [ 43.518647][ T3828] __x64_sys_socket+0x3f/0x50 [ 43.518700][ T3828] x64_sys_call+0x246e/0x2550 [ 43.518794][ T3828] do_syscall_64+0x112/0x360 [ 43.518917][ T3828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.518945][ T3828] RIP: 0033:0x7f5e5c36e159 [ 43.518966][ T3828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.518997][ T3828] RSP: 002b:00007f5e5adc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 43.519023][ T3828] RAX: ffffffffffffffda RBX: 00007f5e5c5f5fa0 RCX: 00007f5e5c36e159 [ 43.519044][ T3828] RDX: 0000000000000013 RSI: 0000000000000003 RDI: 0000000000000010 [ 43.519060][ T3828] RBP: 00007f5e5c40503b R08: 0000000000000000 R09: 0000000000000000 [ 43.519077][ T3828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.519167][ T3828] R13: 00007f5e5c5f6038 R14: 00007f5e5c5f5fa0 R15: 00007ffd79bff118 [ 43.519193][ T3828] [ 43.606937][ T3823] loop3: detected capacity change from 0 to 1764 [ 43.804972][ T29] audit: type=1400 audit(1789126853.167:272): avc: denied { mount } for pid=3831 comm="syz.1.134" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 43.806743][ T29] audit: type=1400 audit(1789126853.167:274): avc: denied { search } for pid=3831 comm="syz.1.134" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.806828][ T29] audit: type=1400 audit(1789126853.167:275): avc: denied { search } for pid=3831 comm="syz.1.134" name="target" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.806901][ T29] audit: type=1400 audit(1789126853.167:276): avc: denied { search } for pid=3831 comm="syz.1.134" name="core" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.290311][ T3856] FAULT_INJECTION: forcing a failure. [ 44.290311][ T3856] name failslab, interval 1, probability 0, space 0, times 0 [ 44.290339][ T3856] CPU: 1 UID: 0 PID: 3856 Comm: syz.2.145 Not tainted syzkaller #0 PREEMPT(lazy) [ 44.290370][ T3856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.290388][ T3856] Call Trace: [ 44.290396][ T3856] [ 44.290405][ T3856] __dump_stack+0x1d/0x30 [ 44.290506][ T3856] dump_stack_lvl+0x95/0xd0 [ 44.290528][ T3856] dump_stack+0x15/0x1b [ 44.290548][ T3856] should_fail_ex+0x262/0x280 [ 44.290576][ T3856] ? call_usermodehelper_setup+0x72/0x190 [ 44.290676][ T3856] should_failslab+0x8c/0xb0 [ 44.290731][ T3856] __kmalloc_cache_noprof+0x7a/0x400 [ 44.290770][ T3856] ? call_usermodehelper_setup+0x72/0x190 [ 44.290851][ T3856] ? __pfx_free_modprobe_argv+0x10/0x10 [ 44.290876][ T3856] call_usermodehelper_setup+0x72/0x190 [ 44.290917][ T3856] __request_module+0x264/0x3c0 [ 44.290942][ T3856] ? should_failslab+0x8c/0xb0 [ 44.290979][ T3856] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 44.291051][ T3856] netlink_create+0x16b/0x460 [ 44.291158][ T3856] ? __pfx_sock_alloc_inode+0x10/0x10 [ 44.291194][ T3856] __sock_create+0x2e5/0x580 [ 44.291323][ T3856] __sys_socket+0xaf/0x180 [ 44.291359][ T3856] __x64_sys_socket+0x3f/0x50 [ 44.291450][ T3856] x64_sys_call+0x246e/0x2550 [ 44.291476][ T3856] do_syscall_64+0x112/0x360 [ 44.291520][ T3856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.291549][ T3856] RIP: 0033:0x7fb38c13e159 [ 44.291597][ T3856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.291621][ T3856] RSP: 002b:00007fb38ab97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 44.291648][ T3856] RAX: ffffffffffffffda RBX: 00007fb38c3c5fa0 RCX: 00007fb38c13e159 [ 44.291667][ T3856] RDX: 0000000000000013 RSI: 0000000000000003 RDI: 0000000000000010 [ 44.291693][ T3856] RBP: 00007fb38c1d503b R08: 0000000000000000 R09: 0000000000000000 [ 44.291711][ T3856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.291727][ T3856] R13: 00007fb38c3c6038 R14: 00007fb38c3c5fa0 R15: 00007fffd12ae148 [ 44.291748][ T3856] [ 44.631057][ T3862] netlink: 'syz.1.148': attribute type 5 has an invalid length. [ 44.683602][ T3868] netlink: 'syz.1.148': attribute type 5 has an invalid length. [ 44.824241][ T3872] loop1: detected capacity change from 0 to 512 [ 44.836716][ T3872] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.152: Unrecognised inode hash code 255 [ 44.836749][ T3872] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.152: Corrupt directory, running e2fsck is recommended [ 44.880988][ T3872] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 44.881040][ T3872] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.152: corrupted in-inode xattr: invalid ea_ino [ 44.881066][ T3872] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.882557][ T3872] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.152: couldn't read orphan inode 15 (err -117) [ 44.882589][ T3872] loop1: lost filesystem error report for type 5 error -117 [ 44.883894][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 44.883948][ C0] EXT4-fs (loop1): initial error at time 1789126854: ext4_iget_extra_inode:5210: inode 15 [ 44.884001][ C0] EXT4-fs (loop1): last error at time 1789126854: ext4_orphan_get:1408 [ 44.928472][ T3872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.002222][ T3872] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.152: Unrecognised inode hash code 255 [ 45.002257][ T3872] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.152: Corrupt directory, running e2fsck is recommended [ 45.002297][ T3872] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 4: comm syz.1.152: path /27/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 45.137880][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.313400][ T3884] loop1: detected capacity change from 0 to 256 [ 45.662393][ T3902] loop3: detected capacity change from 0 to 4096 [ 45.691914][ T3902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.027323][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.130644][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 56.130663][ T29] audit: type=1400 audit(1789126865.487:299): avc: denied { perfmon } for pid=3921 comm="syz.3.173" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.188885][ T29] audit: type=1400 audit(1789126865.547:300): avc: denied { module_request } for pid=3925 comm="syz-executor" kmod="netdev-nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.279201][ T3936] loop4: detected capacity change from 0 to 512 [ 56.281504][ T29] audit: type=1400 audit(1789126865.637:301): avc: denied { bpf } for pid=3935 comm="syz.3.176" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.296007][ T3937] RDS: rds_bind could not find a transport for 0:0:2f63:6163::, load rds_tcp or rds_rdma? [ 56.464480][ T3947] loop2: detected capacity change from 0 to 512 [ 56.570756][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.616047][ T3953] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc00 [ 56.634703][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.640503][ T29] audit: type=1400 audit(1789126865.997:302): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 56.674252][ T3960] loop3: detected capacity change from 0 to 128 [ 56.698812][ T3960] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.698967][ T3960] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.711768][ T29] audit: type=1400 audit(1789126866.057:303): avc: denied { write } for pid=3959 comm="syz.3.182" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.718424][ T29] audit: type=1400 audit(1789126866.077:304): avc: denied { setattr } for pid=3959 comm="syz.3.182" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.728131][ T29] audit: type=1400 audit(1789126866.087:305): avc: denied { write } for pid=3959 comm="syz.3.182" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.728230][ T29] audit: type=1400 audit(1789126866.087:306): avc: denied { add_name } for pid=3959 comm="syz.3.182" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.728300][ T29] audit: type=1400 audit(1789126866.087:307): avc: denied { read append open } for pid=3959 comm="syz.3.182" path="/31/file0/file0/cpu.stat" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.792705][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.883175][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.906941][ T3973] Illegal XDP return value 31 on prog (id 24) dev syz_tun, expect packet loss! [ 56.923408][ T3925] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.923510][ T3925] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.923702][ T3925] bridge_slave_0: entered allmulticast mode [ 56.926935][ T3925] bridge_slave_0: entered promiscuous mode [ 56.932624][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.932701][ T3925] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.932956][ T3925] bridge_slave_1: entered allmulticast mode [ 56.938231][ T3925] bridge_slave_1: entered promiscuous mode [ 56.981785][ T3969] loop3: detected capacity change from 0 to 4096 [ 56.994411][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.018230][ T3969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.038189][ T3925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.040668][ T3925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.065427][ T29] audit: type=1400 audit(1789126866.427:308): avc: denied { create } for pid=3978 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 57.069941][ T3925] team0: Port device team_slave_0 added [ 57.072302][ T3925] team0: Port device team_slave_1 added [ 57.136920][ T3925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.136939][ T3925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.136968][ T3925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.137603][ T3925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.137648][ T3925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.137758][ T3925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.242487][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.288583][ T31] bridge_slave_1: left allmulticast mode [ 57.288606][ T31] bridge_slave_1: left promiscuous mode [ 57.288784][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.300977][ T31] bridge_slave_0: left allmulticast mode [ 57.301041][ T31] bridge_slave_0: left promiscuous mode [ 57.301411][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.332799][ T3987] netlink: 132 bytes leftover after parsing attributes in process `syz.1.192'. [ 57.400747][ T3989] loop4: detected capacity change from 0 to 512 [ 57.426908][ T3989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.442209][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.443472][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.445778][ T31] bond0 (unregistering): Released all slaves [ 57.452522][ T3989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.453417][ T3989] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.466615][ T3989] EXT4-fs error (device loop4): ext4_generic_delete_entry:2675: inode #2: block 3: comm syz.4.194: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=2048 fake=0 [ 57.467132][ T3989] EXT4-fs error (device loop4) in ext4_delete_entry:2746: Corrupt filesystem [ 57.524162][ T3925] hsr_slave_0: entered promiscuous mode [ 57.524513][ T3925] hsr_slave_1: entered promiscuous mode [ 57.524772][ T3925] debugfs: 'hsr0' already exists in 'hsr' [ 57.524785][ T3925] Cannot create hsr debugfs directory [ 57.524933][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.542777][ T31] hsr_slave_0: left promiscuous mode [ 57.559978][ T31] hsr_slave_1: left promiscuous mode [ 57.561007][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.561043][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.568687][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.568725][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.615698][ T31] veth1_macvtap: left promiscuous mode [ 57.615761][ T31] veth0_macvtap: left promiscuous mode [ 57.615814][ T31] veth1_vlan: left promiscuous mode [ 57.615849][ T31] veth0_vlan: left promiscuous mode [ 57.652919][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 57.652951][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 57.694512][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 57.771813][ T3833] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 57.771850][ T3833] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 57.771881][ T3833] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 57.771911][ T3833] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 57.771941][ T3833] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 57.772031][ T3833] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 57.772053][ T3833] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 57.772077][ T3833] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 57.775654][ T3833] hid-generic 0000:0000:0001.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 57.852627][ T4017] fido_id[4017]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.936976][ T31] team0 (unregistering): Port device team_slave_1 removed [ 57.940045][ T31] team0 (unregistering): Port device team_slave_0 removed [ 58.110741][ T4036] loop2: detected capacity change from 0 to 1024 [ 58.144259][ T4036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.226564][ T4054] loop4: detected capacity change from 0 to 512 [ 58.230844][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.265060][ T4054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.265175][ T4054] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.307864][ T4054] EXT4-fs error (device loop4): __ext4_remount:6872: comm syz.4.219: Abort forced by user [ 58.308072][ T4054] EXT4-fs (loop4): Remounting filesystem read-only [ 58.308153][ T4054] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.353839][ T3925] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.365719][ T3925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.369973][ T3925] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.392565][ T3925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.402116][ T3925] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.414964][ T3925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.415788][ T4070] loop1: detected capacity change from 0 to 256 [ 58.422124][ T4070] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.422520][ T3925] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.479187][ T3925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.528780][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 58.546575][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.594941][ T3925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.627879][ T3925] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.644577][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.644610][ T3423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.646302][ T3423] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.646448][ T3423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.715785][ T4095] loop2: detected capacity change from 0 to 256 [ 58.757065][ T1041] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.757695][ T1041] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.940930][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 58.993010][ T3925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.174712][ T4144] loop1: detected capacity change from 0 to 1024 [ 59.193770][ T4149] netlink: 7 bytes leftover after parsing attributes in process `syz.3.231'. [ 59.193793][ T4149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 59.194106][ T4149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 59.212683][ T4144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.282370][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 59.301839][ T3925] veth0_vlan: entered promiscuous mode [ 59.313406][ T3925] veth1_vlan: entered promiscuous mode [ 59.327658][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.333481][ T3925] veth0_macvtap: entered promiscuous mode [ 59.351408][ T3925] veth1_macvtap: entered promiscuous mode [ 59.371605][ T3925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.387574][ T3925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.394569][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.394856][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.395013][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.395108][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.730298][ T4173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.730387][ T4173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.749405][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 59.882257][ T4205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.902149][ T4207] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc01 [ 59.967386][ T4177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.972383][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.064796][ T4226] gtp0: entered promiscuous mode [ 60.064818][ T4226] gtp0: entered allmulticast mode [ 60.065904][ T4226] team0: Device gtp0 is of different type [ 60.110438][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.345779][ T4255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.345863][ T4255] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.393433][ T4264] EXT4-fs: Ignoring removed bh option [ 60.404840][ T4264] EXT4-fs (loop3): 1 truncate cleaned up [ 60.405299][ T4264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.519237][ T4255] EXT4-fs error (device loop2): __ext4_remount:6872: comm syz.2.263: Abort forced by user [ 60.520912][ T4255] EXT4-fs (loop2): Remounting filesystem read-only [ 60.520928][ T4255] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 60.578919][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.641485][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.691564][ T4284] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.697505][ T4284] EXT4-fs (loop1): 1 truncate cleaned up [ 60.698671][ T4284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.742611][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.798203][ T4297] netlink: 104 bytes leftover after parsing attributes in process `syz.2.279'. [ 60.893329][ T4302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.997755][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.091607][ T4311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.091710][ T4311] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.118677][ T4311] EXT4-fs error (device loop1): __ext4_remount:6872: comm syz.1.284: Abort forced by user [ 61.118823][ T4311] EXT4-fs (loop1): Remounting filesystem read-only [ 61.118873][ T4311] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.202547][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.212641][ T4320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.212857][ T4320] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.292348][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 61.292367][ T29] audit: type=1400 audit(1789126870.647:374): avc: denied { read } for pid=4329 comm="syz.1.291" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.322117][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.363712][ T29] audit: type=1400 audit(1789126870.717:375): avc: denied { create } for pid=4332 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.495515][ T4338] set_capacity_and_notify: 11 callbacks suppressed [ 61.495552][ T4338] loop2: detected capacity change from 0 to 4096 [ 61.516581][ T4338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.573068][ T29] audit: type=1400 audit(1789126870.927:376): avc: denied { write } for pid=4337 comm="syz.2.295" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.621987][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.688717][ T29] audit: type=1400 audit(1789126871.047:377): avc: denied { map } for pid=4346 comm="syz.2.308" path="socket:[8349]" dev="sockfs" ino=8349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.688754][ T29] audit: type=1400 audit(1789126871.047:378): avc: denied { read } for pid=4346 comm="syz.2.308" path="socket:[8349]" dev="sockfs" ino=8349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.737222][ T4350] loop4: detected capacity change from 0 to 512 [ 61.863533][ T4354] loop2: detected capacity change from 0 to 1024 [ 61.879808][ T4354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 61.879887][ T4354] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.901143][ T4354] EXT4-fs (loop2): shut down requested (0) [ 61.908012][ T29] audit: type=1400 audit(1789126871.267:379): avc: denied { read } for pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 61.908068][ T29] audit: type=1400 audit(1789126871.267:380): avc: denied { search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.914058][ T29] audit: type=1400 audit(1789126871.267:381): avc: denied { write search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.914095][ T29] audit: type=1400 audit(1789126871.267:382): avc: denied { add_name } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.914127][ T29] audit: type=1400 audit(1789126871.267:383): avc: denied { create } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.957704][ T4354] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 61.957741][ T4354] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 62.011845][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.127756][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.152720][ T4365] loop5: detected capacity change from 0 to 1024 [ 62.153218][ T4365] EXT4-fs: Ignoring removed orlov option [ 62.178906][ T4365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.233378][ T4365] EXT4-fs error (device loop5): ext4_rename:3822: inode #12: comm syz.5.304: target of rename is already freed [ 62.275386][ T3925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.376751][ T4378] loop4: detected capacity change from 0 to 512 [ 62.401407][ T4378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.403014][ T4378] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.482267][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.615915][ T1041] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 62.617000][ T1041] hid-generic 0000:0000:0001.0003: hidraw0: HID v0.10 Device [syz0] on syz1 [ 62.682264][ T4390] fido_id[4390]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.787672][ T4400] loop5: detected capacity change from 0 to 512 [ 62.840083][ T4384] loop4: detected capacity change from 0 to 1024 [ 62.904801][ T4405] loop2: detected capacity change from 0 to 512 [ 62.909687][ T4405] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.918821][ T4405] EXT4-fs (loop2): 1 truncate cleaned up [ 62.919810][ T4405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.960877][ T4384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.987735][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.000126][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.029770][ T4419] process 'syz.1.325' launched './file0' with NULL argv: empty string added [ 63.125942][ T9] hid_parser_main: 7 callbacks suppressed [ 63.126029][ T9] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 63.126055][ T9] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 63.126103][ T9] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 63.126132][ T9] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 63.126160][ T9] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 63.126189][ T9] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 63.126304][ T9] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 63.126334][ T9] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 63.128105][ T9] hid-generic 0000:0000:0001.0004: hidraw0: HID v0.10 Device [syz0] on syz1 [ 63.233533][ T4430] fido_id[4430]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.275145][ T4439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.275333][ T4439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.278349][ T4438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.278513][ T4438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.949138][ T4465] loop2: detected capacity change from 0 to 128 [ 63.962131][ T4466] loop1: detected capacity change from 0 to 512 [ 63.962482][ T4465] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.962732][ T4465] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.001520][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.195867][ T4475] ip_tables: iptables: counters copy to user failed while replacing table [ 64.285847][ T4479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=4479 comm=syz.4.350 [ 64.388707][ T4486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.354'. [ 64.388783][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.415016][ T4486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.354'. [ 64.415080][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.563013][ T4500] EXT4-fs: Ignoring removed bh option [ 64.571961][ T4500] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 64.601189][ T4500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.617281][ T4500] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.744218][ T4511] EXT4-fs: inline encryption not supported [ 64.744691][ T4511] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.744712][ T4511] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.744724][ T4511] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 64.748144][ T4506] 9pnet: p9_errstr2errno: server reported unknown error pt,da [ 64.805200][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.887073][ T4519] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.887118][ T4519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.887140][ T4519] IPv6: NLM_F_CREATE should be set when creating new route [ 64.889672][ T4519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.889687][ T4519] IPv6: NLM_F_CREATE should be set when creating new route [ 66.549548][ T4617] set_capacity_and_notify: 6 callbacks suppressed [ 66.549570][ T4617] loop1: detected capacity change from 0 to 256 [ 66.635292][ T4611] loop4: detected capacity change from 0 to 1764 [ 66.760784][ T4625] syz.5.404 (4625) used greatest stack depth: 9720 bytes left [ 66.996813][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 67.031983][ T4634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.407'. [ 67.058090][ T4634] ip6erspan0: entered promiscuous mode [ 67.068473][ T4637] loop3: detected capacity change from 0 to 512 [ 67.077401][ T4637] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.086515][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 67.086532][ T29] audit: type=1400 audit(1789126876.447:496): avc: denied { create } for pid=4636 comm="syz.5.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.122407][ T29] audit: type=1400 audit(1789126876.467:497): avc: denied { write } for pid=4636 comm="syz.5.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.144948][ T4637] EXT4-fs (loop3): 1 truncate cleaned up [ 67.145408][ T4637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.159926][ T29] audit: type=1400 audit(1789126876.517:498): avc: denied { write } for pid=4635 comm="syz.3.408" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.159956][ T29] audit: type=1400 audit(1789126876.517:499): avc: denied { create } for pid=4635 comm="syz.3.408" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 67.185935][ T4637] EXT4-fs (loop3): shut down requested (0) [ 67.218779][ T4646] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.408: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 67.240755][ T29] audit: type=1400 audit(1789126876.607:500): avc: denied { create } for pid=4643 comm="syz.5.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.269240][ T4645] loop5: detected capacity change from 0 to 164 [ 67.299761][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.702803][ T4673] loop5: detected capacity change from 0 to 1024 [ 67.739794][ T4673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 67.739913][ T4673] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.774261][ T4673] EXT4-fs (loop5): shut down requested (0) [ 67.807966][ T4677] loop3: detected capacity change from 0 to 256 [ 67.960025][ T4680] loop3: detected capacity change from 0 to 1024 [ 67.970610][ T4680] EXT4-fs: Ignoring removed orlov option [ 67.988603][ T4680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.004262][ T29] audit: type=1400 audit(1789126877.367:501): avc: denied { write } for pid=4679 comm="syz.3.425" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.004953][ T29] audit: type=1400 audit(1789126877.367:502): avc: denied { write } for pid=4679 comm="syz.3.425" name="A" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 68.005696][ T29] audit: type=1400 audit(1789126877.367:503): avc: denied { write } for pid=4679 comm="syz.3.425" name="A" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 68.006404][ T4680] EXT4-fs error (device loop3): ext4_rename:3822: inode #12: comm syz.3.425: target of rename is already freed [ 68.006468][ T29] audit: type=1400 audit(1789126877.367:504): avc: denied { write } for pid=4679 comm="syz.3.425" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.006498][ T29] audit: type=1400 audit(1789126877.367:505): avc: denied { write } for pid=4679 comm="syz.3.425" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.140996][ T4684] loop5: detected capacity change from 0 to 512 [ 68.177552][ T4684] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.268539][ T4692] loop4: detected capacity change from 0 to 512 [ 68.637783][ T4711] netlink: 'syz.4.436': attribute type 5 has an invalid length. [ 68.706622][ T4711] netlink: 'syz.4.436': attribute type 5 has an invalid length. [ 68.721247][ T4693] loop1: detected capacity change from 0 to 1764 [ 68.925328][ T4724] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.927519][ T4724] EXT4-fs (loop3): shut down requested (0) [ 68.958633][ T4724] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 68.958667][ T4724] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 69.014124][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 69.071111][ T4739] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 69.071814][ T4739] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.071955][ T4739] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.447: bad orphan inode 15 [ 69.071975][ T4739] loop4: lost filesystem error report for type 5 error -117 [ 69.072103][ T4739] ext4_test_bit(bit=14, block=18) = 1 [ 69.072119][ T4739] is_bad_inode(inode)=0 [ 69.072126][ T4739] NEXT_ORPHAN(inode)=1023 [ 69.072133][ T4739] max_ino=32 [ 69.072139][ T4739] i_nlink=0 [ 69.072307][ T4739] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #15: comm syz.4.447: corrupted xattr block 19: e_value size too large [ 69.072335][ T4739] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.072436][ T4739] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 69.748166][ T4766] netlink: 'syz.5.457': attribute type 5 has an invalid length. [ 69.799860][ T4770] netlink: 'syz.5.457': attribute type 5 has an invalid length. [ 69.816253][ T4773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=4773 comm=syz.3.471 [ 69.916498][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 71.232979][ T4844] netlink: 'syz.2.476': attribute type 5 has an invalid length. [ 71.299549][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 71.313589][ T4860] netlink: 'syz.2.476': attribute type 5 has an invalid length. [ 71.360075][ T4859] EXT4-fs mount: 10 callbacks suppressed [ 71.360092][ T4859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.446382][ T3925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.633485][ T4874] set_capacity_and_notify: 5 callbacks suppressed [ 71.633508][ T4874] loop4: detected capacity change from 0 to 4096 [ 71.651187][ T4874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.671606][ T4878] loop2: detected capacity change from 0 to 1024 [ 71.674545][ T4878] EXT4-fs: Ignoring removed bh option [ 71.692300][ T4878] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 71.705969][ T4878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.728746][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.738646][ T4870] loop5: detected capacity change from 0 to 1764 [ 71.884439][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.263198][ T4919] loop4: detected capacity change from 0 to 512 [ 72.285518][ T4919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.285588][ T4919] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.291514][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.496'. [ 72.335411][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.362089][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 72.362107][ T29] audit: type=1400 audit(1789126881.717:529): avc: denied { read } for pid=4924 comm="syz.1.498" name="trace_pipe_raw" dev="tracefs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 72.362164][ T29] audit: type=1400 audit(1789126881.717:530): avc: denied { open } for pid=4924 comm="syz.1.498" path="/98/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 72.362971][ T29] audit: type=1400 audit(1789126881.717:531): avc: denied { ioctl } for pid=4924 comm="syz.1.498" path="/98/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1446 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 72.464500][ T4931] ip_tables: iptables: counters copy to user failed while replacing table [ 72.492062][ T4933] loop3: detected capacity change from 0 to 1024 [ 72.499209][ T4933] EXT4-fs: Ignoring removed bh option [ 72.515164][ T4933] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 72.527194][ T4933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.560442][ T29] audit: type=1400 audit(1789126881.917:532): avc: denied { write } for pid=4932 comm="syz.3.501" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.570196][ T29] audit: type=1400 audit(1789126881.927:533): avc: denied { write } for pid=4932 comm="syz.3.501" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.668318][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.649213][ T4947] loop4: detected capacity change from 0 to 1764 [ 73.972083][ T4966] ip_tables: iptables: counters copy to user failed while replacing table [ 74.362112][ T4983] loop1: detected capacity change from 0 to 512 [ 74.370547][ T4983] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.384552][ T4983] EXT4-fs (loop1): 1 truncate cleaned up [ 74.385017][ T4983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.389840][ T4990] loop5: detected capacity change from 0 to 1024 [ 74.390288][ T4990] EXT4-fs: Ignoring removed bh option [ 74.393369][ T4990] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 74.393997][ T29] audit: type=1400 audit(1789126883.747:534): avc: denied { write } for pid=4982 comm="syz.1.517" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.470208][ T4990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.507179][ T29] audit: type=1400 audit(1789126883.867:535): avc: denied { write } for pid=4988 comm="syz.5.518" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.510172][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.512621][ T29] audit: type=1400 audit(1789126883.867:536): avc: denied { write } for pid=4988 comm="syz.5.518" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.708612][ T3925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.709620][ T29] audit: type=1400 audit(1789126884.067:537): avc: denied { read write } for pid=5010 comm="syz.3.527" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 74.709654][ T29] audit: type=1400 audit(1789126884.067:538): avc: denied { open } for pid=5010 comm="syz.3.527" path="/104/dev/mapper/control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 75.588205][ T5038] loop4: detected capacity change from 0 to 512 [ 75.608495][ T5040] loop2: detected capacity change from 0 to 512 [ 75.612915][ T5038] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.614073][ T5040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.648443][ T5038] EXT4-fs (loop4): 1 truncate cleaned up [ 75.649109][ T5038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.650138][ T5040] EXT4-fs (loop2): 1 truncate cleaned up [ 75.683343][ T5040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.721490][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.797079][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.582669][ T5095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'. [ 76.582709][ T5095] netlink: 'syz.5.558': attribute type 21 has an invalid length. [ 76.582724][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.558'. [ 76.618907][ T5095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'. [ 76.618985][ T5095] netlink: 'syz.5.558': attribute type 21 has an invalid length. [ 76.619013][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.558'. [ 76.624114][ T31] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.624202][ T31] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.624245][ T31] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.624283][ T31] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.866757][ T5118] set_capacity_and_notify: 4 callbacks suppressed [ 76.866794][ T5118] loop1: detected capacity change from 0 to 512 [ 76.867340][ T5118] EXT4-fs: inline encryption not supported [ 76.889325][ T5118] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.889371][ T5118] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.889413][ T5118] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 76.926056][ T5113] 9pnet: p9_errstr2errno: server reported unknown error pt,da [ 77.001929][ T5120] loop4: detected capacity change from 0 to 128 [ 79.794429][ T5108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 79.868167][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.591'. [ 79.895033][ T5156] loop1: detected capacity change from 0 to 4096 [ 79.899734][ T5159] loop2: detected capacity change from 0 to 128 [ 79.928253][ T5156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.982248][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.585'. [ 79.982308][ T5165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.585'. [ 80.012437][ T5165] geneve2: entered promiscuous mode [ 80.012480][ T5165] geneve2: entered allmulticast mode [ 80.095932][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.188653][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 80.188671][ T29] audit: type=1400 audit(1789126889.547:579): avc: denied { append } for pid=5169 comm="syz.2.588" name="uprobe_events" dev="tracefs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 80.247748][ T5181] ip6gretap1: entered promiscuous mode [ 80.297982][ T29] audit: type=1400 audit(1789126889.657:580): avc: denied { mounton } for pid=5183 comm="syz.3.594" path="/114/file0" dev="tmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 80.347389][ T5189] loop5: detected capacity change from 0 to 2048 [ 80.352214][ T29] audit: type=1400 audit(1789126889.707:581): avc: denied { mount } for pid=5190 comm="syz.4.598" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.384028][ T5191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.384225][ T5191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.454963][ T29] audit: type=1400 audit(1789126889.807:582): avc: denied { wake_alarm } for pid=5193 comm="syz.1.599" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.725821][ T5213] netlink: 5036 bytes leftover after parsing attributes in process `syz.2.607'. [ 80.725864][ T5213] netlink: 5036 bytes leftover after parsing attributes in process `syz.2.607'. [ 81.164722][ T5217] SELinux: DCCP has been removed, pid=5217 comm=syz.3.609 [ 81.333951][ T5228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 81.428416][ T29] audit: type=1400 audit(1789126890.787:583): avc: denied { write } for pid=5241 comm="syz.1.620" name="mcfilter" dev="proc" ino=4026532408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 81.429418][ T29] audit: type=1400 audit(1789126890.787:584): avc: denied { setattr } for pid=5241 comm="syz.1.620" name="mcfilter" dev="proc" ino=4026532408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 81.491555][ T5234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.556654][ T5250] loop5: detected capacity change from 0 to 512 [ 81.558365][ T5250] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 81.558655][ T5250] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.623: attempt to clear invalid blocks 1024 len 1 [ 81.558744][ T5250] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 81.559108][ T5250] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.623: invalid indirect mapped block 1819239214 (level 0) [ 81.559175][ T5250] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 81.559330][ T5250] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.623: invalid indirect mapped block 33554432 (level 2) [ 81.559356][ T5250] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 81.560111][ T5250] EXT4-fs (loop5): 1 truncate cleaned up [ 81.561050][ T5250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.587363][ T29] audit: type=1400 audit(1789126890.947:585): avc: denied { write } for pid=5249 comm="syz.5.623" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.656121][ T3925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.777531][ T5257] loop5: detected capacity change from 0 to 128 [ 81.779856][ T5263] __nla_validate_parse: 1 callbacks suppressed [ 81.779920][ T5263] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.628'. [ 81.918175][ T29] audit: type=1400 audit(1789126891.277:586): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.967225][ T5275] FAULT_INJECTION: forcing a failure. [ 81.967225][ T5275] name failslab, interval 1, probability 0, space 0, times 0 [ 81.967342][ T5275] CPU: 0 UID: 0 PID: 5275 Comm: syz.4.634 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.967373][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.967390][ T5275] Call Trace: [ 81.967399][ T5275] [ 81.967408][ T5275] __dump_stack+0x1d/0x30 [ 81.967450][ T5275] dump_stack_lvl+0x95/0xd0 [ 81.967480][ T5275] dump_stack+0x15/0x1b [ 81.967507][ T5275] should_fail_ex+0x262/0x280 [ 81.967652][ T5275] should_failslab+0x8c/0xb0 [ 81.967680][ T5275] __kmalloc_node_noprof+0xdb/0x500 [ 81.967719][ T5275] ? crypto_create_tfm_node+0x5b/0x230 [ 81.967747][ T5275] ? crypto_create_tfm_node+0x5b/0x230 [ 81.967872][ T5275] crypto_create_tfm_node+0x5b/0x230 [ 81.967897][ T5275] ? crypto_alg_mod_lookup+0x2f9/0x490 [ 81.967926][ T5275] crypto_alloc_tfm_node+0xb8/0x280 [ 81.967955][ T5275] crypto_alloc_sig+0x2d/0x40 [ 81.968002][ T5275] public_key_verify_signature+0x142/0x4e0 [ 81.968060][ T5275] ? should_fail_ex+0xdb/0x280 [ 81.968100][ T5275] x509_check_for_self_signed+0x1c4/0x250 [ 81.968127][ T5275] x509_cert_parse+0x3bf/0x450 [ 81.968246][ T5275] x509_key_preparse+0x3c/0x420 [ 81.968276][ T5275] asymmetric_key_preparse+0x68/0xb0 [ 81.968394][ T5275] __key_create_or_update+0x2df/0x840 [ 81.968435][ T5275] key_create_or_update+0x42/0x60 [ 81.968465][ T5275] __se_sys_add_key+0x2a5/0x360 [ 81.968584][ T5275] __x64_sys_add_key+0x67/0x80 [ 81.968664][ T5275] x64_sys_call+0x1fa9/0x2550 [ 81.968720][ T5275] do_syscall_64+0x112/0x360 [ 81.968755][ T5275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.968793][ T5275] RIP: 0033:0x7f825565e159 [ 81.968820][ T5275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.968845][ T5275] RSP: 002b:00007f82540b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 81.968920][ T5275] RAX: ffffffffffffffda RBX: 00007f82558e5fa0 RCX: 00007f825565e159 [ 81.968935][ T5275] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 81.968952][ T5275] RBP: 00007f82556f503b R08: fffffffffffffffc R09: 0000000000000000 [ 81.968971][ T5275] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 81.968989][ T5275] R13: 00007f82558e6038 R14: 00007f82558e5fa0 R15: 00007ffec0cef3b8 [ 81.969047][ T5275] [ 81.969115][ T29] audit: type=1400 audit(1789126891.327:587): avc: denied { write } for pid=5274 comm="syz.4.634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.191986][ T5281] FAULT_INJECTION: forcing a failure. [ 82.191986][ T5281] name failslab, interval 1, probability 0, space 0, times 0 [ 82.192147][ T5281] CPU: 0 UID: 0 PID: 5281 Comm: syz.2.636 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.192229][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.192268][ T5281] Call Trace: [ 82.192282][ T5281] [ 82.192370][ T5281] __dump_stack+0x1d/0x30 [ 82.192443][ T5281] dump_stack_lvl+0x95/0xd0 [ 82.192524][ T5281] dump_stack+0x15/0x1b [ 82.192609][ T5281] should_fail_ex+0x262/0x280 [ 82.192734][ T5281] ? copy_fs_struct+0x31/0x110 [ 82.192839][ T5281] should_failslab+0x8c/0xb0 [ 82.192930][ T5281] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 82.193024][ T5281] ? copy_fs_struct+0x31/0x110 [ 82.193164][ T5281] copy_fs_struct+0x31/0x110 [ 82.193299][ T5281] ksys_unshare+0x2f1/0x710 [ 82.193394][ T5281] __x64_sys_unshare+0x1f/0x30 [ 82.193566][ T5281] x64_sys_call+0x1e33/0x2550 [ 82.193689][ T5281] do_syscall_64+0x112/0x360 [ 82.193808][ T5281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.193917][ T5281] RIP: 0033:0x7fb38c13e159 [ 82.193982][ T5281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.194049][ T5281] RSP: 002b:00007fb38ab97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 82.194123][ T5281] RAX: ffffffffffffffda RBX: 00007fb38c3c5fa0 RCX: 00007fb38c13e159 [ 82.194165][ T5281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 82.194265][ T5281] RBP: 00007fb38c1d503b R08: 0000000000000000 R09: 0000000000000000 [ 82.194300][ T5281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.194340][ T5281] R13: 00007fb38c3c6038 R14: 00007fb38c3c5fa0 R15: 00007fffd12ae148 [ 82.194489][ T5281] [ 82.557918][ T29] audit: type=1400 audit(1789126891.917:588): avc: denied { write } for pid=5299 comm="syz.5.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.594878][ T5298] loop2: detected capacity change from 0 to 128 [ 82.612781][ T5303] loop1: detected capacity change from 0 to 256 [ 82.797090][ T5315] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 82.797117][ T5315] syzkaller1: Linktype set failed because interface is up [ 82.925682][ T5326] ip_tables: iptables: counters copy to user failed while replacing table [ 83.063906][ T5332] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 83.093837][ T5332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.351663][ T5342] loop3: detected capacity change from 0 to 128 [ 83.454951][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.666'. [ 83.460360][ T5351] FAULT_INJECTION: forcing a failure. [ 83.460360][ T5351] name failslab, interval 1, probability 0, space 0, times 0 [ 83.460400][ T5351] CPU: 1 UID: 0 PID: 5351 Comm: syz.1.665 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.460439][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.460458][ T5351] Call Trace: [ 83.460467][ T5351] [ 83.460477][ T5351] __dump_stack+0x1d/0x30 [ 83.460510][ T5351] dump_stack_lvl+0x95/0xd0 [ 83.460541][ T5351] dump_stack+0x15/0x1b [ 83.460614][ T5351] should_fail_ex+0x262/0x280 [ 83.460648][ T5351] should_failslab+0x8c/0xb0 [ 83.460698][ T5351] __kvmalloc_node_noprof+0x168/0x5c0 [ 83.460733][ T5351] ? __rhashtable_init_noprof+0x320/0x490 [ 83.460792][ T5351] ? __rhashtable_init_noprof+0x320/0x490 [ 83.460866][ T5351] __rhashtable_init_noprof+0x320/0x490 [ 83.460966][ T5351] ipc_init_ids+0x58/0xb0 [ 83.461004][ T5351] sem_init_ns+0x83/0x90 [ 83.461072][ T5351] copy_ipcs+0x3da/0x460 [ 83.461105][ T5351] create_new_namespaces+0x121/0x420 [ 83.461141][ T5351] unshare_nsproxy_namespaces+0x115/0x150 [ 83.461185][ T5351] ksys_unshare+0x42b/0x710 [ 83.461272][ T5351] __x64_sys_unshare+0x1f/0x30 [ 83.461338][ T5351] x64_sys_call+0x1e33/0x2550 [ 83.461440][ T5351] do_syscall_64+0x112/0x360 [ 83.461473][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.461566][ T5351] RIP: 0033:0x7f5e5c36e159 [ 83.461582][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.461678][ T5351] RSP: 002b:00007f5e5adc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 83.461706][ T5351] RAX: ffffffffffffffda RBX: 00007f5e5c5f5fa0 RCX: 00007f5e5c36e159 [ 83.461726][ T5351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 83.461743][ T5351] RBP: 00007f5e5c40503b R08: 0000000000000000 R09: 0000000000000000 [ 83.461757][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.461769][ T5351] R13: 00007f5e5c5f6038 R14: 00007f5e5c5f5fa0 R15: 00007ffd79bff118 [ 83.461804][ T5351] [ 83.554564][ T5356] loop2: detected capacity change from 0 to 2048 [ 83.808776][ T5354] loop4: detected capacity change from 0 to 256 [ 83.932832][ T5376] loop1: detected capacity change from 0 to 512 [ 83.965990][ T5376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.966092][ T5376] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.004443][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.016845][ T5377] loop5: detected capacity change from 0 to 128 [ 84.994409][ T5399] loop5: detected capacity change from 0 to 128 [ 85.071096][ T5390] syz.1.681 (5390) used greatest stack depth: 9240 bytes left [ 85.168041][ T5422] loop2: detected capacity change from 0 to 512 [ 85.202550][ T5422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.202662][ T5422] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.231041][ T5431] xt_hashlimit: size too large, truncated to 1048576 [ 85.246894][ T5422] capability: warning: `syz.2.695' uses 32-bit capabilities (legacy support in use) [ 85.258822][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 85.258854][ T29] audit: type=1400 audit(1789126894.617:594): avc: denied { setattr } for pid=5421 comm="syz.2.695" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.291205][ T29] audit: type=1400 audit(1789126894.637:595): avc: denied { write } for pid=5421 comm="syz.2.695" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.362217][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.673666][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 85.888643][ T5465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.713'. [ 86.272923][ T5468] loop5: detected capacity change from 0 to 128 [ 86.281157][ T5472] FAULT_INJECTION: forcing a failure. [ 86.281157][ T5472] name failslab, interval 1, probability 0, space 0, times 0 [ 86.281213][ T5472] CPU: 0 UID: 0 PID: 5472 Comm: syz.1.717 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.281311][ T5472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.281328][ T5472] Call Trace: [ 86.281335][ T5472] [ 86.281344][ T5472] __dump_stack+0x1d/0x30 [ 86.281371][ T5472] dump_stack_lvl+0x95/0xd0 [ 86.281397][ T5472] dump_stack+0x15/0x1b [ 86.281428][ T5472] should_fail_ex+0x262/0x280 [ 86.281558][ T5472] ? mpi_alloc+0x31/0xd0 [ 86.281585][ T5472] should_failslab+0x8c/0xb0 [ 86.281630][ T5472] __kmalloc_cache_noprof+0x7a/0x400 [ 86.281677][ T5472] ? mpi_alloc+0x31/0xd0 [ 86.281705][ T5472] mpi_alloc+0x31/0xd0 [ 86.281762][ T5472] rsa_enc+0x3b/0x290 [ 86.281796][ T5472] rsassa_pkcs1_verify+0x2b5/0x650 [ 86.281847][ T5472] public_key_verify_signature+0x412/0x4e0 [ 86.281905][ T5472] x509_check_for_self_signed+0x1c4/0x250 [ 86.282011][ T5472] x509_cert_parse+0x3bf/0x450 [ 86.282049][ T5472] x509_key_preparse+0x3c/0x420 [ 86.282074][ T5472] asymmetric_key_preparse+0x68/0xb0 [ 86.282189][ T5472] __key_create_or_update+0x2df/0x840 [ 86.282278][ T5472] key_create_or_update+0x42/0x60 [ 86.282312][ T5472] __se_sys_add_key+0x2a5/0x360 [ 86.282401][ T5472] __x64_sys_add_key+0x67/0x80 [ 86.282426][ T5472] x64_sys_call+0x1fa9/0x2550 [ 86.282459][ T5472] do_syscall_64+0x112/0x360 [ 86.282497][ T5472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.282548][ T5472] RIP: 0033:0x7f5e5c36e159 [ 86.282572][ T5472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.282599][ T5472] RSP: 002b:00007f5e5adc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 86.282628][ T5472] RAX: ffffffffffffffda RBX: 00007f5e5c5f5fa0 RCX: 00007f5e5c36e159 [ 86.282650][ T5472] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 86.282669][ T5472] RBP: 00007f5e5c40503b R08: fffffffffffffffc R09: 0000000000000000 [ 86.282732][ T5472] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 86.282751][ T5472] R13: 00007f5e5c5f6038 R14: 00007f5e5c5f5fa0 R15: 00007ffd79bff118 [ 86.282782][ T5472] [ 86.609517][ T29] audit: type=1400 audit(1789126895.967:596): avc: denied { getopt } for pid=5480 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.630269][ T29] audit: type=1400 audit(1789126895.977:597): avc: denied { write } for pid=5480 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.675491][ T29] audit: type=1400 audit(1789126896.037:598): avc: denied { watch_reads } for pid=5486 comm="syz.5.723" path="/95" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.379381][ T5519] batadv_slave_1: entered promiscuous mode [ 87.380115][ T5518] batadv_slave_1: left promiscuous mode [ 87.427702][ T5521] smc: net device vlan1 applied user defined pnetid SYZ2 [ 87.428207][ T5521] smc: net device vlan1 erased user defined pnetid SYZ2 [ 87.545484][ T5515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.545601][ T5515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.629839][ T29] audit: type=1326 audit(1789126896.987:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.4.740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825565e159 code=0x7ffc0000 [ 87.629942][ T29] audit: type=1326 audit(1789126896.987:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.4.740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825565e159 code=0x7ffc0000 [ 87.630876][ T29] audit: type=1326 audit(1789126896.987:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.4.740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825565e159 code=0x7ffc0000 [ 87.630991][ T29] audit: type=1326 audit(1789126896.987:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.4.740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825565e159 code=0x7ffc0000 [ 87.631026][ T29] audit: type=1326 audit(1789126896.987:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.4.740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f825565e159 code=0x7ffc0000 [ 87.678005][ T5535] set_capacity_and_notify: 1 callbacks suppressed [ 87.678063][ T5535] loop1: detected capacity change from 0 to 512 [ 87.683029][ T5535] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.897990][ T5546] pimreg1: tun_chr_ioctl cmd 1074025677 [ 87.898064][ T5546] pimreg1: linktype set to 778 [ 87.995881][ T5552] loop4: detected capacity change from 0 to 128 [ 88.133771][ T5557] FAULT_INJECTION: forcing a failure. [ 88.133771][ T5557] name fail_futex, interval 1, probability 0, space 0, times 1 [ 88.133808][ T5557] CPU: 0 UID: 0 PID: 5557 Comm: syz.2.752 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.133836][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.133857][ T5557] Call Trace: [ 88.133867][ T5557] [ 88.133878][ T5557] __dump_stack+0x1d/0x30 [ 88.133979][ T5557] dump_stack_lvl+0x95/0xd0 [ 88.134006][ T5557] dump_stack+0x15/0x1b [ 88.134038][ T5557] should_fail_ex+0x262/0x280 [ 88.134132][ T5557] should_fail+0xb/0x20 [ 88.134161][ T5557] get_futex_key+0x12d/0xb10 [ 88.134222][ T5557] futex_wake+0x89/0x400 [ 88.134271][ T5557] ? should_fail_ex+0xdb/0x280 [ 88.134303][ T5557] do_futex+0x3f8/0x460 [ 88.134346][ T5557] __se_sys_futex+0x2f6/0x370 [ 88.134448][ T5557] __x64_sys_futex+0x78/0x90 [ 88.134492][ T5557] x64_sys_call+0x22e2/0x2550 [ 88.134528][ T5557] do_syscall_64+0x112/0x360 [ 88.134578][ T5557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.134661][ T5557] RIP: 0033:0x7fb38c13e159 [ 88.134756][ T5557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.134782][ T5557] RSP: 002b:00007fb38ab970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.134805][ T5557] RAX: ffffffffffffffda RBX: 00007fb38c3c5fa8 RCX: 00007fb38c13e159 [ 88.134822][ T5557] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb38c3c5fac [ 88.134885][ T5557] RBP: 00007fb38c3c5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 88.134910][ T5557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.134928][ T5557] R13: 00007fb38c3c6038 R14: 00007fffd12ae060 R15: 00007fffd12ae148 [ 88.134954][ T5557] [ 88.165538][ T5546] geneve2: left promiscuous mode [ 88.600292][ T5581] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 88.631567][ T5581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.683361][ T5581] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 88.693482][ T5579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.736163][ T31] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 88.818971][ T5589] FAULT_INJECTION: forcing a failure. [ 88.818971][ T5589] name failslab, interval 1, probability 0, space 0, times 0 [ 88.819010][ T5589] CPU: 0 UID: 0 PID: 5589 Comm: syz.4.763 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.819067][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.819086][ T5589] Call Trace: [ 88.819095][ T5589] [ 88.819106][ T5589] __dump_stack+0x1d/0x30 [ 88.819222][ T5589] dump_stack_lvl+0x95/0xd0 [ 88.819256][ T5589] dump_stack+0x15/0x1b [ 88.819288][ T5589] should_fail_ex+0x262/0x280 [ 88.819323][ T5589] ? copy_utsname+0x113/0x3a0 [ 88.819439][ T5589] should_failslab+0x8c/0xb0 [ 88.819485][ T5589] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 88.819529][ T5589] ? copy_utsname+0x113/0x3a0 [ 88.819560][ T5589] copy_utsname+0x113/0x3a0 [ 88.819675][ T5589] create_new_namespaces+0xda/0x420 [ 88.819783][ T5589] unshare_nsproxy_namespaces+0x115/0x150 [ 88.819835][ T5589] ksys_unshare+0x42b/0x710 [ 88.819870][ T5589] __x64_sys_unshare+0x1f/0x30 [ 88.819931][ T5589] x64_sys_call+0x1e33/0x2550 [ 88.820041][ T5589] do_syscall_64+0x112/0x360 [ 88.820089][ T5589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.820122][ T5589] RIP: 0033:0x7f825565e159 [ 88.820257][ T5589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.820281][ T5589] RSP: 002b:00007f82540b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 88.820312][ T5589] RAX: ffffffffffffffda RBX: 00007f82558e5fa0 RCX: 00007f825565e159 [ 88.820332][ T5589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 88.820429][ T5589] RBP: 00007f82556f503b R08: 0000000000000000 R09: 0000000000000000 [ 88.820460][ T5589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.820479][ T5589] R13: 00007f82558e6038 R14: 00007f82558e5fa0 R15: 00007ffec0cef3b8 [ 88.820511][ T5589] [ 88.855991][ T38] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 89.141245][ T5567] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.141289][ T5567] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.141392][ T5567] bridge_slave_0: entered allmulticast mode [ 89.142121][ T5567] bridge_slave_0: entered promiscuous mode [ 89.144828][ T5567] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.144931][ T5567] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.145155][ T5567] bridge_slave_1: entered allmulticast mode [ 89.146605][ T5567] bridge_slave_1: entered promiscuous mode [ 89.172109][ T5567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.182702][ T5567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.209232][ T5567] team0: Port device team_slave_0 added [ 89.211563][ T5567] team0: Port device team_slave_1 added [ 89.236235][ T5567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.236280][ T5567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.236361][ T5567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.237069][ T5567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.237082][ T5567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.237114][ T5567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.331451][ T5567] hsr_slave_0: entered promiscuous mode [ 89.339232][ T5567] hsr_slave_1: entered promiscuous mode [ 89.339615][ T5567] debugfs: 'hsr0' already exists in 'hsr' [ 89.339633][ T5567] Cannot create hsr debugfs directory [ 89.951869][ T5567] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.016719][ T5567] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.189528][ T5567] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.250618][ T5567] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.293327][ T5642] syzkaller0: mtu greater than device maximum [ 90.303157][ T5644] FAULT_INJECTION: forcing a failure. [ 90.303157][ T5644] name failslab, interval 1, probability 0, space 0, times 0 [ 90.303192][ T5644] CPU: 1 UID: 0 PID: 5644 Comm: syz.4.784 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.303228][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.303247][ T5644] Call Trace: [ 90.303256][ T5644] [ 90.303267][ T5644] __dump_stack+0x1d/0x30 [ 90.303311][ T5644] dump_stack_lvl+0x95/0xd0 [ 90.303374][ T5644] dump_stack+0x15/0x1b [ 90.303398][ T5644] should_fail_ex+0x262/0x280 [ 90.303424][ T5644] should_failslab+0x8c/0xb0 [ 90.303495][ T5644] __kvmalloc_node_noprof+0x168/0x5c0 [ 90.303543][ T5644] ? __rhashtable_init_noprof+0x320/0x490 [ 90.303616][ T5644] ? __rhashtable_init_noprof+0x320/0x490 [ 90.303661][ T5644] __rhashtable_init_noprof+0x320/0x490 [ 90.303699][ T5644] ipc_init_ids+0x58/0xb0 [ 90.303736][ T5644] sem_init_ns+0x83/0x90 [ 90.303835][ T5644] copy_ipcs+0x3da/0x460 [ 90.303869][ T5644] create_new_namespaces+0x121/0x420 [ 90.303915][ T5644] unshare_nsproxy_namespaces+0x115/0x150 [ 90.304033][ T5644] ksys_unshare+0x42b/0x710 [ 90.304075][ T5644] __x64_sys_unshare+0x1f/0x30 [ 90.304192][ T5644] x64_sys_call+0x1e33/0x2550 [ 90.304232][ T5644] do_syscall_64+0x112/0x360 [ 90.304330][ T5644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.304362][ T5644] RIP: 0033:0x7f825565e159 [ 90.304386][ T5644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.304414][ T5644] RSP: 002b:00007f82540b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 90.304444][ T5644] RAX: ffffffffffffffda RBX: 00007f82558e5fa0 RCX: 00007f825565e159 [ 90.304466][ T5644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 90.304524][ T5644] RBP: 00007f82556f503b R08: 0000000000000000 R09: 0000000000000000 [ 90.304544][ T5644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.304575][ T5644] R13: 00007f82558e6038 R14: 00007f82558e5fa0 R15: 00007ffec0cef3b8 [ 90.304603][ T5644] [ 90.545573][ T5567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.549010][ T5567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.549685][ T5567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.576529][ T5567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.593991][ T5567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.598306][ T5567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.598894][ T5567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.603095][ T5567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.681327][ T5661] xt_hashlimit: size too large, truncated to 1048576 [ 90.711052][ T5567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.727305][ T5567] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.732880][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.732921][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.734742][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.734774][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.978076][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 90.978098][ T29] audit: type=1400 audit(1789126900.337:647): avc: denied { bind } for pid=5676 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.979766][ T29] audit: type=1400 audit(1789126900.337:648): avc: denied { setopt } for pid=5676 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.041208][ T345] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.186242][ T5567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.470081][ T5567] veth0_vlan: entered promiscuous mode [ 91.481870][ T5567] veth1_vlan: entered promiscuous mode [ 91.502275][ T5567] veth0_macvtap: entered promiscuous mode [ 91.512020][ T5567] veth1_macvtap: entered promiscuous mode [ 91.524970][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.531187][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.544909][ T29] audit: type=1400 audit(1789126900.907:649): avc: denied { kexec_image_load } for pid=5700 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 91.574317][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.605494][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.610236][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.610289][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.610989][ T29] audit: type=1400 audit(1789126900.967:650): avc: denied { mounton } for pid=5567 comm="syz-executor" path="/root/syzkaller.ImwtG4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 91.614885][ T29] audit: type=1400 audit(1789126900.977:651): avc: denied { mount } for pid=5567 comm="syz-executor" name="/" dev="gadgetfs" ino=5190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 91.695587][ T29] audit: type=1400 audit(1789126901.057:652): avc: denied { getopt } for pid=5705 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.942498][ T29] audit: type=1326 audit(1789126901.297:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.1.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933726e159 code=0x7fc00000 [ 91.943220][ T29] audit: type=1326 audit(1789126901.297:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.1.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f933726e159 code=0x7fc00000 [ 91.946892][ T29] audit: type=1326 audit(1789126901.307:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.1.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933726e159 code=0x7fc00000 [ 92.052706][ T5726] loop1: detected capacity change from 0 to 512 [ 92.124133][ T5728] gtp0: entered allmulticast mode [ 92.596380][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 92.611889][ T5732] all: renamed from veth1_to_bridge (while UP) [ 92.673588][ T5738] loop1: detected capacity change from 0 to 512 [ 92.690203][ T5738] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.705381][ T5738] EXT4-fs (loop1): 1 truncate cleaned up [ 92.705863][ T5738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.709107][ T29] audit: type=1400 audit(1789126902.067:656): avc: denied { write } for pid=5737 comm="syz.1.824" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.872722][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.816'. [ 92.872747][ T5752] netlink: 316 bytes leftover after parsing attributes in process `syz.5.816'. [ 92.872770][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.816'. [ 92.872877][ T5752] netlink: 316 bytes leftover after parsing attributes in process `syz.5.816'. [ 93.082766][ T5761] loop3: detected capacity change from 0 to 512 [ 93.087079][ T5681] Bluetooth: hci0: command 0x1003 tx timeout [ 93.090983][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.109497][ T5761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.109576][ T5761] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.160498][ T5766] FAULT_INJECTION: forcing a failure. [ 93.160498][ T5766] name failslab, interval 1, probability 0, space 0, times 0 [ 93.160535][ T5766] CPU: 0 UID: 0 PID: 5766 Comm: syz.5.823 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.160567][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.160583][ T5766] Call Trace: [ 93.160592][ T5766] [ 93.160601][ T5766] __dump_stack+0x1d/0x30 [ 93.160651][ T5766] dump_stack_lvl+0x95/0xd0 [ 93.160727][ T5766] dump_stack+0x15/0x1b [ 93.160752][ T5766] should_fail_ex+0x262/0x280 [ 93.160782][ T5766] ? copy_cgroup_ns+0x156/0x400 [ 93.160808][ T5766] should_failslab+0x8c/0xb0 [ 93.160914][ T5766] __kmalloc_cache_noprof+0x7a/0x400 [ 93.160952][ T5766] ? copy_cgroup_ns+0x156/0x400 [ 93.160980][ T5766] copy_cgroup_ns+0x156/0x400 [ 93.161015][ T5766] create_new_namespaces+0x1af/0x420 [ 93.161120][ T5766] unshare_nsproxy_namespaces+0x115/0x150 [ 93.161188][ T5766] ksys_unshare+0x42b/0x710 [ 93.161226][ T5766] __x64_sys_unshare+0x1f/0x30 [ 93.161256][ T5766] x64_sys_call+0x1e33/0x2550 [ 93.161357][ T5766] do_syscall_64+0x112/0x360 [ 93.161407][ T5766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.161433][ T5766] RIP: 0033:0x7fba0712e159 [ 93.161458][ T5766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.161491][ T5766] RSP: 002b:00007fba05b87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 93.161542][ T5766] RAX: ffffffffffffffda RBX: 00007fba073b5fa0 RCX: 00007fba0712e159 [ 93.161564][ T5766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 93.161584][ T5766] RBP: 00007fba071c503b R08: 0000000000000000 R09: 0000000000000000 [ 93.161604][ T5766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.161623][ T5766] R13: 00007fba073b6038 R14: 00007fba073b5fa0 R15: 00007ffc27fa7b58 [ 93.161653][ T5766] [ 93.311182][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.319463][ T5770] netlink: 'syz.5.825': attribute type 1 has an invalid length. [ 93.385117][ T5770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.408183][ T5772] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 93.494003][ T31] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 93.569096][ T5567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.574493][ T5785] loop2: detected capacity change from 0 to 128 [ 93.605382][ T135] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 93.685645][ T5790] FAULT_INJECTION: forcing a failure. [ 93.685645][ T5790] name failslab, interval 1, probability 0, space 0, times 0 [ 93.685719][ T5790] CPU: 0 UID: 0 PID: 5790 Comm: syz.4.835 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.685751][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.685765][ T5790] Call Trace: [ 93.685774][ T5790] [ 93.685782][ T5790] __dump_stack+0x1d/0x30 [ 93.685833][ T5790] dump_stack_lvl+0x95/0xd0 [ 93.685858][ T5790] dump_stack+0x15/0x1b [ 93.685880][ T5790] should_fail_ex+0x262/0x280 [ 93.685985][ T5790] should_failslab+0x8c/0xb0 [ 93.686023][ T5790] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 93.686157][ T5790] ? __d_alloc+0x34/0x320 [ 93.686192][ T5790] ? __d_alloc+0x34/0x320 [ 93.686233][ T5790] ? _raw_spin_unlock+0x9/0x30 [ 93.686258][ T5790] __d_alloc+0x34/0x320 [ 93.686290][ T5790] d_alloc_name+0x6b/0x160 [ 93.686358][ T5790] proc_setup_self+0x2a/0x110 [ 93.686395][ T5790] proc_fill_super+0x314/0x3c0 [ 93.686421][ T5790] ? __pfx_proc_fill_super+0x10/0x10 [ 93.686503][ T5790] get_tree_nodev+0x83/0x100 [ 93.686541][ T5790] proc_get_tree+0x1c/0x30 [ 93.686598][ T5790] vfs_get_tree+0x57/0x1d0 [ 93.686699][ T5790] do_new_mount+0x288/0x8d0 [ 93.686743][ T5790] ? security_capable+0x7b/0x90 [ 93.686776][ T5790] path_mount+0x4ad/0xb90 [ 93.686867][ T5790] __se_sys_mount+0x28c/0x2e0 [ 93.686906][ T5790] __x64_sys_mount+0x67/0x80 [ 93.686927][ T5790] x64_sys_call+0xc3b/0x2550 [ 93.687077][ T5790] do_syscall_64+0x112/0x360 [ 93.687121][ T5790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.687152][ T5790] RIP: 0033:0x7f825565e159 [ 93.687172][ T5790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.687273][ T5790] RSP: 002b:00007f82540b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.687302][ T5790] RAX: ffffffffffffffda RBX: 00007f82558e5fa0 RCX: 00007f825565e159 [ 93.687337][ T5790] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 93.687373][ T5790] RBP: 00007f82556f503b R08: 0000000000000000 R09: 0000000000000000 [ 93.687394][ T5790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.687412][ T5790] R13: 00007f82558e6038 R14: 00007f82558e5fa0 R15: 00007ffec0cef3b8 [ 93.687460][ T5790] [ 93.687565][ T5790] proc_fill_super: can't allocate /proc/self [ 94.016866][ T5799] FAULT_INJECTION: forcing a failure. [ 94.016866][ T5799] name failslab, interval 1, probability 0, space 0, times 0 [ 94.016908][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz.3.837 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.016945][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.016964][ T5799] Call Trace: [ 94.016974][ T5799] [ 94.016984][ T5799] __dump_stack+0x1d/0x30 [ 94.017019][ T5799] dump_stack_lvl+0x95/0xd0 [ 94.017121][ T5799] dump_stack+0x15/0x1b [ 94.017182][ T5799] should_fail_ex+0x262/0x280 [ 94.017211][ T5799] ? copy_utsname+0x113/0x3a0 [ 94.017251][ T5799] should_failslab+0x8c/0xb0 [ 94.017286][ T5799] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 94.017365][ T5799] ? copy_utsname+0x113/0x3a0 [ 94.017428][ T5799] copy_utsname+0x113/0x3a0 [ 94.017459][ T5799] create_new_namespaces+0xda/0x420 [ 94.017502][ T5799] unshare_nsproxy_namespaces+0x115/0x150 [ 94.017583][ T5799] ksys_unshare+0x42b/0x710 [ 94.017626][ T5799] __x64_sys_unshare+0x1f/0x30 [ 94.017716][ T5799] x64_sys_call+0x1e33/0x2550 [ 94.017754][ T5799] do_syscall_64+0x112/0x360 [ 94.017824][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.017850][ T5799] RIP: 0033:0x7f499991e159 [ 94.017871][ T5799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.017891][ T5799] RSP: 002b:00007f4998377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 94.017913][ T5799] RAX: ffffffffffffffda RBX: 00007f4999ba5fa0 RCX: 00007f499991e159 [ 94.017934][ T5799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 94.017973][ T5799] RBP: 00007f49999b503b R08: 0000000000000000 R09: 0000000000000000 [ 94.017992][ T5799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.018012][ T5799] R13: 00007f4999ba6038 R14: 00007f4999ba5fa0 R15: 00007ffd519b69e8 [ 94.018040][ T5799] [ 94.250664][ T5805] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 94.289466][ T5805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.331896][ T5805] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 94.394061][ T345] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 94.504056][ T31] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 94.614312][ T5824] FAULT_INJECTION: forcing a failure. [ 94.614312][ T5824] name failslab, interval 1, probability 0, space 0, times 0 [ 94.614352][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz.3.847 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.614385][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.614462][ T5824] Call Trace: [ 94.614470][ T5824] [ 94.614480][ T5824] __dump_stack+0x1d/0x30 [ 94.614514][ T5824] dump_stack_lvl+0x95/0xd0 [ 94.614543][ T5824] dump_stack+0x15/0x1b [ 94.614612][ T5824] should_fail_ex+0x262/0x280 [ 94.614643][ T5824] ? alloc_uid+0xff/0x360 [ 94.614674][ T5824] should_failslab+0x8c/0xb0 [ 94.614710][ T5824] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 94.614788][ T5824] ? alloc_uid+0xff/0x360 [ 94.614876][ T5824] alloc_uid+0xff/0x360 [ 94.614907][ T5824] __sys_setreuid+0x400/0x530 [ 94.614950][ T5824] __x64_sys_setreuid+0x2d/0x40 [ 94.614991][ T5824] x64_sys_call+0x2161/0x2550 [ 94.615131][ T5824] do_syscall_64+0x112/0x360 [ 94.615172][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.615200][ T5824] RIP: 0033:0x7f499991e159 [ 94.615220][ T5824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.615245][ T5824] RSP: 002b:00007f4998377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 94.615322][ T5824] RAX: ffffffffffffffda RBX: 00007f4999ba5fa0 RCX: 00007f499991e159 [ 94.615345][ T5824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 94.615361][ T5824] RBP: 00007f49999b503b R08: 0000000000000000 R09: 0000000000000000 [ 94.615378][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.615395][ T5824] R13: 00007f4999ba6038 R14: 00007f4999ba5fa0 R15: 00007ffd519b69e8 [ 94.615451][ T5824] [ 94.816247][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.816372][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.012939][ T3376] kernel write not supported for file /input/event0 (pid: 3376 comm: kworker/1:3) [ 96.013075][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 96.013092][ T29] audit: type=1400 audit(1789126905.367:689): avc: denied { write } for pid=5882 comm="syz.1.883" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.174635][ T5889] FAULT_INJECTION: forcing a failure. [ 96.174635][ T5889] name failslab, interval 1, probability 0, space 0, times 0 [ 96.174710][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: syz.2.876 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.174744][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.174763][ T5889] Call Trace: [ 96.174776][ T5889] [ 96.174787][ T5889] __dump_stack+0x1d/0x30 [ 96.174821][ T5889] dump_stack_lvl+0x95/0xd0 [ 96.174911][ T5889] dump_stack+0x15/0x1b [ 96.174940][ T5889] should_fail_ex+0x262/0x280 [ 96.174974][ T5889] ? __se_sys_fsopen+0x10d/0x1e0 [ 96.175010][ T5889] should_failslab+0x8c/0xb0 [ 96.175068][ T5889] __kmalloc_cache_noprof+0x7a/0x400 [ 96.175112][ T5889] ? __se_sys_fsopen+0x10d/0x1e0 [ 96.175149][ T5889] __se_sys_fsopen+0x10d/0x1e0 [ 96.175238][ T5889] __x64_sys_fsopen+0x31/0x40 [ 96.175279][ T5889] x64_sys_call+0x1f0f/0x2550 [ 96.175356][ T5889] do_syscall_64+0x112/0x360 [ 96.175400][ T5889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.175430][ T5889] RIP: 0033:0x7fb38c13e159 [ 96.175468][ T5889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.175492][ T5889] RSP: 002b:00007fb38ab97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 96.175518][ T5889] RAX: ffffffffffffffda RBX: 00007fb38c3c5fa0 RCX: 00007fb38c13e159 [ 96.175537][ T5889] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 96.175626][ T5889] RBP: 00007fb38c1d503b R08: 0000000000000000 R09: 0000000000000000 [ 96.175688][ T5889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.175704][ T5889] R13: 00007fb38c3c6038 R14: 00007fb38c3c5fa0 R15: 00007fffd12ae148 [ 96.175731][ T5889] [ 96.378870][ T51] IPVS: starting estimator thread 0... [ 96.471709][ T29] audit: type=1400 audit(1789126905.827:690): avc: denied { create } for pid=5895 comm="syz.1.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.483583][ T29] audit: type=1400 audit(1789126905.837:691): avc: denied { bind } for pid=5895 comm="syz.1.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.485355][ T5892] IPVS: using max 1824 ests per chain, 91200 per kthread [ 96.537870][ T5898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.880'. [ 96.561872][ T5898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.880'. [ 96.776471][ T5915] all: renamed from veth1_to_bridge (while UP) [ 96.905238][ T5924] loop5: detected capacity change from 0 to 256 [ 96.944207][ T3925] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 96.944233][ T3925] FAT-fs (loop5): Filesystem has been set read-only [ 96.944321][ T3925] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 97.209898][ T5933] loop4: detected capacity change from 0 to 512 [ 97.334103][ T5947] netlink: 'syz.2.902': attribute type 1 has an invalid length. [ 97.345054][ T5947] bond2: entered allmulticast mode [ 97.375611][ T5947] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 97.375697][ T5947] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 97.377489][ T5947] bond2: (slave vti0): making interface the new active one [ 97.377513][ T5947] vti0: entered allmulticast mode [ 97.378067][ T5947] bond2: (slave vti0): Enslaving as an active interface with an up link [ 97.482316][ T5958] gtp0: entered allmulticast mode [ 97.742117][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.742154][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.742332][ T5943] bridge_slave_0: entered allmulticast mode [ 97.742948][ T5943] bridge_slave_0: entered promiscuous mode [ 97.772139][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.772260][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.772472][ T5943] bridge_slave_1: entered allmulticast mode [ 97.773840][ T5943] bridge_slave_1: entered promiscuous mode [ 97.840393][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.841612][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.888176][ T5943] team0: Port device team_slave_0 added [ 97.889346][ T5996] netlink: 27 bytes leftover after parsing attributes in process `syz.1.914'. [ 97.890408][ T5943] team0: Port device team_slave_1 added [ 97.937720][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.937735][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.937764][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.938475][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.938488][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.938522][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.019426][ T5943] hsr_slave_0: entered promiscuous mode [ 98.022288][ T5943] hsr_slave_1: entered promiscuous mode [ 98.022996][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 98.023039][ T5943] Cannot create hsr debugfs directory [ 98.076972][ T29] audit: type=1400 audit(1789126907.437:692): avc: denied { read } for pid=6002 comm="syz.1.916" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.077010][ T29] audit: type=1400 audit(1789126907.437:693): avc: denied { read open } for pid=6002 comm="syz.1.916" path="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.202863][ T5943] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 98.212853][ T5943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.215527][ T5943] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 98.226023][ T5943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.227675][ T5943] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 98.232070][ T5943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.233738][ T5943] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 98.247955][ T5943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.268005][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.268036][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.268139][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.268165][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.313418][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.324719][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.325422][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.330056][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.334533][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.334602][ T3423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.343928][ T3423] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.344037][ T3423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.492105][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.612807][ T5943] veth0_vlan: entered promiscuous mode [ 98.618398][ T5943] veth1_vlan: entered promiscuous mode [ 98.637563][ T5943] veth0_macvtap: entered promiscuous mode [ 98.639839][ T5943] veth1_macvtap: entered promiscuous mode [ 98.656058][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.676196][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.696278][ T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.696331][ T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.696374][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.744198][ T135] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.783258][ T29] audit: type=1400 audit(1789126908.137:694): avc: denied { read } for pid=6040 comm="syz.2.927" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.784304][ T29] audit: type=1326 audit(1789126908.147:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.4.929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825565e159 code=0x7ffc0000 [ 98.804617][ T29] audit: type=1326 audit(1789126908.167:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.4.929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825565e159 code=0x7ffc0000 [ 98.804734][ T29] audit: type=1326 audit(1789126908.167:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.4.929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825565e159 code=0x7ffc0000 [ 98.811041][ T29] audit: type=1326 audit(1789126908.167:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.4.929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f825565e159 code=0x7ffc0000 [ 98.973621][ T6052] loop3: detected capacity change from 0 to 512 [ 98.977726][ T6052] EXT4-fs: inline encryption not supported [ 98.995019][ T6052] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 98.995313][ T6052] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.919: invalid indirect mapped block 2683928664 (level 1) [ 98.995343][ T6052] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 99.002425][ T6052] EXT4-fs (loop3): 1 truncate cleaned up [ 99.003078][ T6052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.147871][ T6052] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.919: Invalid block bitmap block 3 in block_group 0 [ 99.148147][ T6052] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.919: Invalid block bitmap block 3 in block_group 0 [ 99.148428][ T6052] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.919: Invalid block bitmap block 3 in block_group 0 [ 99.276769][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.401118][ T6079] loop2: detected capacity change from 0 to 512 [ 99.424423][ T6079] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 99.852336][ T6105] syz.4.943 (6105) used greatest stack depth: 8944 bytes left [ 99.857142][ T6107] io-wq is not configured for unbound workers [ 100.798572][ T51] IPVS: starting estimator thread 0... [ 100.884014][ T6133] IPVS: using max 2208 ests per chain, 110400 per kthread [ 100.997942][ T6146] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 101.017977][ T6146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.065626][ T6146] bond2: (slave ip6gretap1): making interface the new active one [ 101.066315][ T6146] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 101.306450][ T6166] pimreg1: tun_chr_ioctl cmd 1074025677 [ 101.306590][ T6166] pimreg1: linktype set to 778 [ 101.369417][ T6169] loop2: detected capacity change from 0 to 512 [ 101.464166][ T3833] pimreg1: tun_net_xmit 90 [ 101.482090][ T2982] ================================================================== [ 101.482123][ T2982] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 101.482157][ T2982] [ 101.482165][ T2982] write to 0xffff88810555ec00 of 4 bytes by task 3980 on cpu 1: [ 101.482187][ T2982] d_make_discardable+0x4f/0x90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 101.482212][ T2982] simple_unlink+0x68/0x80 [ 101.482241][ T2982] shmem_unlink+0x12d/0x140 [ 101.482259][ T2982] vfs_unlink+0x1c3/0x490 [ 101.482295][ T2982] filename_unlinkat+0x1dc/0x410 [ 101.482344][ T2982] __se_sys_unlink+0x2b/0xe0 [ 101.482384][ T2982] __x64_sys_unlink+0x1f/0x30 [ 101.482438][ T2982] x64_sys_call+0x18ee/0x2550 [ 101.482468][ T2982] do_syscall_64+0x112/0x360 [ 101.482498][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.482519][ T2982] [ 101.482524][ T2982] read to 0xffff88810555ec00 of 4 bytes by task 2982 on cpu 0: [ 101.482541][ T2982] step_into_slowpath+0x139/0x4c0 [ 101.482572][ T2982] path_lookupat+0x2eb/0x4c0 [ 101.482594][ T2982] filename_lookup+0x18f/0x390 [ 101.482622][ T2982] do_readlinkat+0x74/0x2f0 [ 101.482652][ T2982] __x64_sys_readlink+0x47/0x60 [ 101.482675][ T2982] x64_sys_call+0x1d41/0x2550 [ 101.482699][ T2982] do_syscall_64+0x112/0x360 [ 101.482734][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.482762][ T2982] [ 101.482767][ T2982] value changed: 0x08300080 -> 0x00004080 [ 101.482830][ T2982] [ 101.482835][ T2982] Reported by Kernel Concurrency Sanitizer on: [ 101.482850][ T2982] CPU: 0 UID: 0 PID: 2982 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 101.482895][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.482910][ T2982] ================================================================== [ 101.975329][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.038440][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.076741][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.127272][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.188336][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.228135][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.277734][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.278370][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 102.278386][ T29] audit: type=1400 audit(1789126911.637:719): avc: denied { write } for pid=6175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.316651][ T29] audit: type=1400 audit(1789126911.677:720): avc: denied { write } for pid=6186 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.352078][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.353467][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 102.430952][ T51] bridge_slave_1: left allmulticast mode [ 102.430974][ T51] bridge_slave_1: left promiscuous mode [ 102.431085][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.432465][ T51] bridge_slave_0: left allmulticast mode [ 102.432481][ T51] bridge_slave_0: left promiscuous mode [ 102.432654][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.446650][ T51] bridge_slave_1: left allmulticast mode [ 102.446719][ T51] bridge_slave_1: left promiscuous mode [ 102.446993][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.465650][ T51] bridge_slave_0: left allmulticast mode [ 102.465714][ T51] bridge_slave_0: left promiscuous mode [ 102.466028][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.498675][ T29] audit: type=1400 audit(1789126911.857:721): avc: denied { write } for pid=6189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.548422][ T29] audit: type=1400 audit(1789126911.907:722): avc: denied { write } for pid=6200 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.636046][ T51] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 102.636180][ T51] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 102.661040][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.662555][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.663546][ T51] bond0 (unregistering): Released all slaves [ 102.670678][ T51] bond1 (unregistering): Released all slaves [ 102.694901][ T51] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 102.713193][ T51] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 102.713331][ T51] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 102.735633][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.736980][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.737946][ T51] bond0 (unregistering): Released all slaves [ 102.739460][ T51] bond1 (unregistering): Released all slaves [ 102.742233][ T51] bond2 (unregistering): Released all slaves [ 102.762299][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 102.792142][ T51] hsr_slave_0: left promiscuous mode [ 102.792469][ T51] hsr_slave_1: left promiscuous mode [ 102.792994][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.793013][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.793397][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.793414][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.799395][ T51] hsr_slave_0: left promiscuous mode [ 102.804969][ T51] hsr_slave_1: left promiscuous mode [ 102.805905][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.805949][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.812874][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.812925][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.834501][ T51] veth1_vlan: left promiscuous mode [ 102.834653][ T51] veth0_vlan: left promiscuous mode [ 102.855558][ T51] veth1_vlan: left promiscuous mode [ 102.855767][ T51] veth0_vlan: left promiscuous mode [ 102.950927][ T29] audit: type=1400 audit(1789126912.307:723): avc: denied { write } for pid=6203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.989551][ T29] audit: type=1400 audit(1789126912.347:724): avc: denied { write } for pid=6214 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.016429][ T51] team0 (unregistering): Port device team_slave_1 removed [ 103.025311][ T51] team0 (unregistering): Port device team_slave_0 removed [ 103.077740][ T51] team0 (unregistering): Port device team_slave_1 removed [ 103.080382][ T51] team0 (unregistering): Port device team_slave_0 removed [ 103.115661][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 103.195464][ T29] audit: type=1400 audit(1789126912.557:725): avc: denied { write } for pid=6217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.234405][ T29] audit: type=1400 audit(1789126912.597:726): avc: denied { write } for pid=6228 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.269483][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 103.363080][ T29] audit: type=1400 audit(1789126912.717:727): avc: denied { write } for pid=6232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.396929][ T29] audit: type=1400 audit(1789126912.757:728): avc: denied { write } for pid=6243 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.429988][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 103.539231][ T51] IPVS: stop unused estimator thread 0... [ 103.541035][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 103.672353][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 103.718519][ T51] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.757934][ T51] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.797397][ T51] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.799010][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 103.824274][ T51] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.901930][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.927445][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.978234][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.027486][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.047077][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 104.101790][ T51] bridge_slave_1: left allmulticast mode [ 104.101846][ T51] bridge_slave_1: left promiscuous mode [ 104.102097][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.102866][ T51] bridge_slave_0: left promiscuous mode [ 104.103028][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.138947][ T51] bridge_slave_1: left allmulticast mode [ 104.139021][ T51] bridge_slave_1: left promiscuous mode [ 104.139162][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.139984][ T51] bridge_slave_0: left allmulticast mode [ 104.140021][ T51] bridge_slave_0: left promiscuous mode [ 104.140156][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.257951][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.259205][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.260040][ T51] bond0 (unregistering): Released all slaves [ 104.301726][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.302963][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.303792][ T51] bond0 (unregistering): Released all slaves [ 104.329621][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 104.356224][ T51] hsr_slave_0: left promiscuous mode [ 104.356595][ T51] hsr_slave_1: left promiscuous mode [ 104.357183][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.357199][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.357516][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.357554][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.359664][ T51] hsr_slave_0: left promiscuous mode [ 104.360084][ T51] hsr_slave_1: left promiscuous mode [ 104.360582][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.360602][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.361078][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.361096][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.370469][ T51] veth1_macvtap: left promiscuous mode [ 104.370562][ T51] veth0_macvtap: left promiscuous mode [ 104.370805][ T51] veth1_vlan: left promiscuous mode [ 104.370974][ T51] veth0_vlan: left promiscuous mode [ 104.391505][ T51] veth1_macvtap: left promiscuous mode [ 104.391642][ T51] veth0_macvtap: left promiscuous mode [ 104.391859][ T51] veth1_vlan: left promiscuous mode [ 104.391965][ T51] veth0_vlan: left promiscuous mode [ 104.584754][ T51] team0 (unregistering): Port device team_slave_1 removed [ 104.588022][ T51] team0 (unregistering): Port device team_slave_0 removed [ 104.654652][ T51] team0 (unregistering): Port device team_slave_1 removed [ 104.657090][ T51] team0 (unregistering): Port device team_slave_0 removed [ 104.694338][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 104.841399][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 104.973759][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 105.105053][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 105.230201][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 105.376373][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20