last executing test programs: 2m0.682565824s ago: executing program 4 (id=397): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10810d, 0x7fffffff, 0x0, 0x0, 0x3, 0x9, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 2m0.657589275s ago: executing program 4 (id=398): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 2m0.614986868s ago: executing program 4 (id=400): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, 0x0, 0x1, 0x10c) preadv2(r1, &(0x7f0000000140)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffff, 0x4) 2m0.471310344s ago: executing program 4 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {0xc, 0xffff}, {0x8, 0x2}}}, 0x24}}, 0x0) 2m0.293844983s ago: executing program 4 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2m0.167538378s ago: executing program 4 (id=406): membarrier(0x10, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) 1m47.6655616s ago: executing program 32 (id=518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r1, r2, 0x25, 0x2, @val=@tcx}, 0x1c) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) 1m45.089688402s ago: executing program 33 (id=406): membarrier(0x10, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) 1m30.140214538s ago: executing program 0 (id=626): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{0x0, 0xea}, {&(0x7f00000015c0)=""/4096, 0x94}], 0x2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m28.982943533s ago: executing program 0 (id=639): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, 0x0) 1m28.61053347s ago: executing program 0 (id=643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000340)=0xd031, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xfe, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x9}}}}}}}, 0x0) 1m28.453159108s ago: executing program 0 (id=647): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f0000000540)={[{@usrquota}, {@debug}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xacda, 0x21002, 0x0, 0x0, 0x4, 0x14, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000003008000000b00", [0x4, 0x7]}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r1, 0x8, 0x2000000, 0x10000) 1m27.726791732s ago: executing program 0 (id=659): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m26.309258739s ago: executing program 0 (id=678): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0xb0) write(r0, &(0x7f0000000000)='3', 0x4e) renameat(r0, 0x0, r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x100000000000000) 1m26.27919193s ago: executing program 34 (id=678): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0xb0) write(r0, &(0x7f0000000000)='3', 0x4e) renameat(r0, 0x0, r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x100000000000000) 1m12.96869954s ago: executing program 5 (id=773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 1m12.644171656s ago: executing program 5 (id=779): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x119}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 1m12.401516067s ago: executing program 5 (id=782): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/174, 0xae}, 0x1}], 0x1, 0x45833af92e4b38df, 0x0) 1m11.856320522s ago: executing program 5 (id=785): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f0000000540)={[{@usrquota}, {@debug}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xacda, 0x21002, 0x0, 0x0, 0x4, 0x14, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000003008000000b00", [0x4, 0x7]}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r1, 0x8, 0x2000000, 0x10000) 1m11.220515532s ago: executing program 5 (id=794): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m10.938027156s ago: executing program 5 (id=797): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0x1, 0x8, 0x0, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m10.672725148s ago: executing program 35 (id=797): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0x1, 0x8, 0x0, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m10.514788486s ago: executing program 7 (id=803): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40902, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x9, 0x0, 0x0, "810002ee0900598c44ff00be875f3c00"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x5, 0xff7f, 0x1, 0x9, 0x5, "995e825fc02930cf"}) fcntl$setstatus(r1, 0x4, 0x102800) fsetxattr$security_evm(r0, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], 0x1009, 0x2) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 1m10.329159005s ago: executing program 7 (id=805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xa, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xbf, 0x3, 0x2}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r1, r2, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) 1m10.201266051s ago: executing program 7 (id=806): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x2bfb}], 0x1, 0x5405, 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0x20) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000001c0)={0xc, r1, 0x9, 0x1, 0x400, 0xfffffffffdffffff}) 1m9.731562743s ago: executing program 7 (id=809): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f0000000540)={[{@usrquota}, {@debug}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xacda, 0x21002, 0x0, 0x0, 0x4, 0x14, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000003008000000b00", [0x4, 0x7]}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r1, 0x8, 0x2000000, 0x10000) 1m9.256402825s ago: executing program 7 (id=814): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) keyctl$unlink(0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0xfffe, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m8.030727903s ago: executing program 7 (id=818): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000240)={0x0, 0x20, 0x2, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f00000091c0)=""/16384, 0x4000) 1m7.712285818s ago: executing program 36 (id=818): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000240)={0x0, 0x20, 0x2, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f00000091c0)=""/16384, 0x4000) 28.521039031s ago: executing program 1 (id=1146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000480)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) sendto$inet6(r3, 0x0, 0x0, 0x24004030, 0x0, 0x0) 28.404690197s ago: executing program 1 (id=1149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007002000850000009e0000001801000020644d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000fd8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff2cf0085d375101cc81d105a5", 0x0, 0x20, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 25.417043838s ago: executing program 1 (id=1153): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 25.15922696s ago: executing program 1 (id=1158): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 24.999383998s ago: executing program 1 (id=1159): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 23.572835515s ago: executing program 1 (id=1167): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 23.26815354s ago: executing program 37 (id=1167): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 8.961176156s ago: executing program 9 (id=1296): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}], 0x1}}], 0x2, 0x4000000) 8.754904586s ago: executing program 9 (id=1289): r0 = epoll_create1(0x80000) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) 8.44573915s ago: executing program 9 (id=1293): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0xfffc, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @loopback, 0xfffffffe}}}, 0x11f) close_range(r0, 0xffffffffffffffff, 0x0) 8.331659196s ago: executing program 9 (id=1306): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 7.804568561s ago: executing program 9 (id=1302): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbb0c070000bbbbbbbb080045"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.38800275s ago: executing program 9 (id=1307): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 7.323603413s ago: executing program 38 (id=1307): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 4.054745428s ago: executing program 2 (id=1326): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x2, @perf_config_ext={0x80000001, 0x1}, 0x200, 0x0, 0x7fff, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='enable_event:sched:sched_process_for', 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000000030102000000000000000002000001080001000200931e406a60bc792cdf1ec1aa0bb44c6a6e318eb71eee18ee99d1c12d83c44a5d310f0fe21ecedfdd41a7f6116b57f00c321460d63c"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) 3.845233188s ago: executing program 2 (id=1328): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.455982676s ago: executing program 8 (id=1332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff34, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 2.32846496s ago: executing program 2 (id=1335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c00}, 0x20000084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x215, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {0x6, 0xf}, {0xf, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 2.229109374s ago: executing program 8 (id=1336): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x4, 0x8}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.697585699s ago: executing program 3 (id=1343): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x40, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) 1.508736208s ago: executing program 6 (id=1344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) 1.482394929s ago: executing program 8 (id=1345): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) 1.47240927s ago: executing program 3 (id=1346): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x4, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.25974448s ago: executing program 8 (id=1347): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@data_ordered}, {@noblock_validity}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@grpid}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}, {@errors_remount}, {@noinit_itable}]}, 0x6, 0x61f, &(0x7f0000000340)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") r0 = inotify_init() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, 0x0, 0x0) getdents(r1, 0x0, 0x0) 1.25582965s ago: executing program 3 (id=1348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xffffe48d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000048c0)=[{&(0x7f0000000340)=""/169, 0xa9}], 0x1, 0x9b90, 0x1) 1.247740551s ago: executing program 2 (id=1349): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.218481772s ago: executing program 6 (id=1350): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2004444, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) bind$bt_l2cap(r0, 0x0, 0x0) io_setup(0x8001, 0x0) 1.062731759s ago: executing program 2 (id=1351): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xff, 0x27a, &(0x7f0000000980)="$eJzs3TtoJHUcB/Df7CMPEyRqI4gPEBENhFgIgo02CoEQgoigQkTEShIhJthlrWwstFZJZRPEztyVxzXhmoNrc3cpcs0VF664cMVdscfs7OY2yYbsZV8h8/nAZua/+38t7Pc/m5CZCSC3JiLio4goRsRkRJQjImmu8Eb2mKgX10e3FiKq1c/uJ7V6WTnTaDcWEZWI+CCi1HhtdfOr3Yfbn77920r5rX82vxzt1/trtre7M7v/99yv/8+8t1qoPzde3za/j25KWjxXSiJe7MVg50RSGvQMaMf8z//dTHP/UkS8Wct/OQr1yP6+PHS1HO/+dVLbP+7deKWfcwW6r1otp8fAShXInULtO3BSmIqIbL9QmJrKvsPfKibxw9LyT5PfL60sfjfolQroSNNv3eMRO59cHr40diT/d4tZ/tvyfq8mCpzJcHvV0vx/Pr9xO93fL/Z4TsD58Gq2SfM/+c3aOyH/kDvyD/l1kP9Z+Ye8cfyHC+CM2ZV/uKhO//da+Yf8kn+4wMqNnUrLl+Uf8kv+Ib+e5n8kzX/jDwZDA54W0AfNx38AIF+qw4M+AxkYlEGvPwAAAAAAAAAAAAAAAAAAwHHro1sLjUe/xrz2Z8TexxFROjx+dgvTYu1+xBEjtZ/PPUjSageSrFlHvn69ww469G+Xz76ea/Perw3P3+nu+M/q+mu96feXw8UTL4a/thhRSStPl0rHP/9J/fN3qhP7f+GUhuVv2xugW5Ij5Q+/6O/4Rz3eGOz4M9sRV9L1Z7rV+leIl2vb1uvPePMlls/ox0cddgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDfPAkAAP//Z9RrGg==") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x49) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0xd3, 0x2, 0x2, 0x8d, 0x7ff, 0x3, 0x3, 0x4001, 0x198, 0x38, 0x1025e, 0x408, 0x4, 0x20, 0x1, 0xb, 0x4, 0x6}, [{0x2, 0x1000, 0x1, 0x5d, 0x2, 0x2, 0x7, 0x200}]}, 0x58) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 991.870343ms ago: executing program 3 (id=1352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0x1) 869.607668ms ago: executing program 6 (id=1353): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 762.975424ms ago: executing program 8 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0xf4db158ec847dc81, 0xfffffffc, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x15}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 645.113459ms ago: executing program 2 (id=1355): mknod$loop(0x0, 0x100000000000600d, 0x1) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x3000000, 0x40001000}) 447.559208ms ago: executing program 6 (id=1356): setresgid(0xee00, 0xee01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='wchan\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 373.668282ms ago: executing program 8 (id=1357): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 145.081153ms ago: executing program 3 (id=1358): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x58}}, 0x4000) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x11}}], 0x1, 0x24008094) 121.669724ms ago: executing program 6 (id=1359): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 18.555168ms ago: executing program 3 (id=1360): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x9, @empty, 0xe226, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 6 (id=1361): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000040)='./file7\x00', 0x2000c12, &(0x7f0000000f40)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c73657373696f6e3d3078303030303030303030303030303031622c696f636861727365743d69736f383835392d322c636865636b3d72656c617865642c6f76657272696465726f636b7065726d2c7362736563746f723d3078303030303030303030303030303030312c6e6f636f6d70726573732c6e6f726f636b2c6d61703d61636f726e2c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303034312c6d61703d6f66662c696f636861727365743d64656661756c742c6d6f64653d3078303030303030303030303030303166662c00adf4f46931beee427fb8150c02932a09c208f641399c340d359df90a7208c3cf842387085cbb3141b4af5a0038c09940e75d1a4ce640245598b68f58cbd8f225b5a2e532824b535019bdb86060090cd8ca84a1a3337071d78e6e57184ad7415af2e651c67d22efb30c569bdab7231ab7e8dbcb787db7e913f5120073d2020c19ca73e6cf61f34cc916084c7b2c27192498d5ba0c30910592f97d3d10332afd7828829d7d3e0b32903c86fb21352a928b5b8e951f591ddea69a4df7339a07a3f63d248459af8f5f3c04bdc8b45eaee458d7dafec2000000000000"], 0x4, 0xa07, &(0x7f0000001f80)="$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") syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T6874] __kmalloc_cache_noprof+0x7a/0x400 [ 128.776807][ T6874] ? single_open+0x3e/0x170 [ 128.776843][ T6874] ? __pfx_proc_setgroups_show+0x10/0x10 [ 128.776944][ T6874] single_open+0x3e/0x170 [ 128.777022][ T6874] proc_setgroups_open+0x1b1/0x2c0 [ 128.777073][ T6874] do_dentry_open+0x49f/0xa60 [ 128.777101][ T6874] ? __pfx_proc_setgroups_open+0x10/0x10 [ 128.777139][ T6874] vfs_open+0x37/0x1e0 [ 128.777239][ T6874] path_openat+0xc01/0x10d0 [ 128.777331][ T6874] do_file_open+0x16c/0x290 [ 128.777484][ T6874] ? __pfx_kfree_link+0x10/0x10 [ 128.777513][ T6874] do_sys_openat2+0xa0/0x130 [ 128.777537][ T6874] __x64_sys_openat+0xf2/0x120 [ 128.777607][ T6874] x64_sys_call+0x1f72/0x2550 [ 128.777633][ T6874] do_syscall_64+0x112/0x360 [ 128.777709][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.777732][ T6874] RIP: 0033:0x7f3d46a5e98e [ 128.777776][ T6874] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.777796][ T6874] RSP: 002b:00007f3d454f6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.777822][ T6874] RAX: ffffffffffffffda RBX: 00007f3d454f76c0 RCX: 00007f3d46a5e98e [ 128.777838][ T6874] RDX: 0000000000000002 RSI: 00007f3d454f6f90 RDI: ffffffffffffff9c [ 128.777930][ T6874] RBP: 00007f3d46b3503b R08: 0000000000000000 R09: 0000000000000000 [ 128.777947][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.777961][ T6874] R13: 00007f3d46d26038 R14: 00007f3d46d25fa0 R15: 00007ffee9a06ff8 [ 128.777979][ T6874] [ 128.781101][ T29] audit: type=1400 audit(1789446610.288:726): avc: denied { write } for pid=6867 comm="syz.2.889" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.129041][ T6888] loop6: detected capacity change from 0 to 256 [ 129.272882][ T6892] bio_check_eod: 32 callbacks suppressed [ 129.272910][ T6892] syz.6.896: attempt to access beyond end of device [ 129.272910][ T6892] loop6: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 129.287663][ T6888] syz.6.896: attempt to access beyond end of device [ 129.287663][ T6888] loop6: rw=8388608, sector=1860, nr_sectors = 4 limit=256 [ 129.310252][ T6890] loop8: detected capacity change from 0 to 1024 [ 129.311200][ T6890] EXT4-fs: Ignoring removed nobh option [ 129.362729][ T6890] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #3: comm syz.8.897: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 129.362869][ T6890] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 129.365874][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 129.365905][ C0] EXT4-fs (loop8): initial error at time 1789446610: ext4_ext_check_inode:521: inode 3 [ 129.365951][ C0] EXT4-fs (loop8): last error at time 1789446610: ext4_ext_check_inode:521: inode 3 [ 129.368024][ T6890] EXT4-fs error (device loop8): ext4_quota_enable:7263: comm syz.8.897: Bad quota inode: 3, type: 0 [ 129.368056][ T6890] fserror_report: 4 callbacks suppressed [ 129.368069][ T6890] loop8: lost filesystem error report for type 5 error -117 [ 129.372141][ T6890] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 129.372462][ T6890] EXT4-fs (loop8): mount failed [ 129.544596][ T4134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.649877][ T6905] FAULT_INJECTION: forcing a failure. [ 129.649877][ T6905] name failslab, interval 1, probability 0, space 0, times 0 [ 129.649916][ T6905] CPU: 1 UID: 0 PID: 6905 Comm: syz.1.904 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.649986][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.650005][ T6905] Call Trace: [ 129.650016][ T6905] [ 129.650029][ T6905] __dump_stack+0x1d/0x30 [ 129.650056][ T6905] dump_stack_lvl+0x95/0xd0 [ 129.650080][ T6905] dump_stack+0x15/0x1b [ 129.650136][ T6905] should_fail_ex+0x262/0x280 [ 129.650193][ T6905] ? alloc_pwq+0x629/0x670 [ 129.650271][ T6905] should_failslab+0x8c/0xb0 [ 129.650312][ T6905] kmem_cache_alloc_node_noprof+0x82/0x400 [ 129.650352][ T6905] ? alloc_pwq+0x629/0x670 [ 129.650438][ T6905] alloc_pwq+0x629/0x670 [ 129.650467][ T6905] apply_wqattrs_prepare+0x1d3/0x840 [ 129.650499][ T6905] alloc_workqueue_va+0xac1/0x1630 [ 129.650598][ T6905] alloc_workqueue_noprof+0x84/0xb0 [ 129.650625][ T6905] nci_register_device+0x11e/0x510 [ 129.650659][ T6905] virtual_ncidev_open+0xca/0x130 [ 129.650711][ T6905] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 129.650778][ T6905] misc_open+0x1df/0x220 [ 129.650902][ T6905] chrdev_open+0x2eb/0x3a0 [ 129.650934][ T6905] do_dentry_open+0x49f/0xa60 [ 129.650957][ T6905] ? __pfx_chrdev_open+0x10/0x10 [ 129.651051][ T6905] vfs_open+0x37/0x1e0 [ 129.651072][ T6905] path_openat+0xc01/0x10d0 [ 129.651100][ T6905] do_file_open+0x16c/0x290 [ 129.651145][ T6905] do_sys_openat2+0xa0/0x130 [ 129.651169][ T6905] __x64_sys_openat+0xf2/0x120 [ 129.651192][ T6905] x64_sys_call+0x1f72/0x2550 [ 129.651293][ T6905] do_syscall_64+0x112/0x360 [ 129.651324][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.651419][ T6905] RIP: 0033:0x7f3d46a9e159 [ 129.651438][ T6905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.651528][ T6905] RSP: 002b:00007f3d454f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.651554][ T6905] RAX: ffffffffffffffda RBX: 00007f3d46d25fa0 RCX: 00007f3d46a9e159 [ 129.651569][ T6905] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 129.651584][ T6905] RBP: 00007f3d46b3503b R08: 0000000000000000 R09: 0000000000000000 [ 129.651599][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.651687][ T6905] R13: 00007f3d46d26038 R14: 00007f3d46d25fa0 R15: 00007ffee9a06ff8 [ 129.651712][ T6905] [ 129.652064][ T29] audit: type=1400 audit(1789446611.158:727): avc: denied { bind } for pid=6899 comm="syz.6.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.249516][ T6927] loop8: detected capacity change from 0 to 512 [ 130.250546][ T6927] EXT4-fs: Ignoring removed i_version option [ 130.252740][ T6927] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 130.259652][ T6927] EXT4-fs (loop8): 1 truncate cleaned up [ 130.260578][ T6927] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.409405][ T6930] loop9: detected capacity change from 0 to 128 [ 130.433493][ T6360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.434222][ T6930] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.462122][ T6930] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.502978][ T29] audit: type=1400 audit(1789446612.008:728): avc: denied { write } for pid=6929 comm="syz.9.910" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.761010][ T6949] netlink: 'syz.1.918': attribute type 1 has an invalid length. [ 130.840174][ T6949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.871719][ T6952] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.872892][ T6443] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.893864][ T6952] bond1: (slave team0): Enslaving as a backup interface with an up link [ 131.054110][ T6961] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 131.085046][ T6961] bond2: entered promiscuous mode [ 131.085212][ T6961] bond2: entered allmulticast mode [ 131.085693][ T6961] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.152737][ T6964] erspan1: entered allmulticast mode [ 131.192055][ T6966] loop8: detected capacity change from 0 to 512 [ 131.203356][ T6966] FAT-fs (loop8): invalid media value (0x03) [ 131.203383][ T6966] FAT-fs (loop8): Can't find a valid FAT filesystem [ 131.205678][ T6964] bond2: (slave erspan1): making interface the new active one [ 131.231084][ T6964] erspan1: entered promiscuous mode [ 131.241623][ T6964] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 131.802027][ T6992] loop8: detected capacity change from 0 to 512 [ 131.835336][ T6992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.858386][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 131.858422][ T29] audit: type=1400 audit(1789446613.368:731): avc: denied { write } for pid=6991 comm="syz.8.933" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.936847][ T29] audit: type=1400 audit(1789446613.448:732): avc: denied { write } for pid=6991 comm="syz.8.933" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.943944][ T6992] loop8: detected capacity change from 512 to 64 [ 131.979526][ T6992] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 131.979557][ T6992] EXT4-fs error (device loop8): ext4_write_dquot:7049: comm syz.8.933: Failed to commit dquot type 0 [ 131.980753][ T6992] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 131.980785][ T6992] EXT4-fs error (device loop8): ext4_write_dquot:7049: comm syz.8.933: Failed to commit dquot type 1 [ 132.050613][ T6998] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.050731][ T6998] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.089986][ T29] audit: type=1400 audit(1789446613.598:733): avc: denied { write } for pid=6360 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.095354][ T6360] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 132.095384][ T6360] EXT4-fs error (device loop8): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 132.097961][ T6360] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 132.097989][ T6360] EXT4-fs error (device loop8): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 132.100133][ T6360] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 132.100159][ T6360] EXT4-fs error (device loop8): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 132.102268][ T6360] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 132.102291][ T6360] EXT4-fs error (device loop8): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 132.104037][ T29] audit: type=1400 audit(1789446613.608:734): avc: denied { write } for pid=6360 comm="syz-executor" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.109993][ T6360] EXT4-fs error (device loop8): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 132.111872][ T6360] EXT4-fs error (device loop8): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 132.113466][ T6360] EXT4-fs error (device loop8): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 132.115473][ T6360] EXT4-fs error (device loop8): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 132.185694][ T6360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.233815][ T6993] kmmpd-loop8: attempt to access beyond end of device [ 132.233815][ T6993] loop8: rw=8402945, sector=68, nr_sectors = 2 limit=64 [ 132.233853][ T6993] buffer_io_error: 18 callbacks suppressed [ 132.233900][ T6993] Buffer I/O error on dev loop8, logical block 34, lost sync page write [ 132.350440][ T6443] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.463798][ T7012] EXT4-fs: Ignoring removed i_version option [ 132.471129][ T7014] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 132.482106][ T7012] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 132.489513][ T7012] EXT4-fs (loop9): 1 truncate cleaned up [ 132.499492][ T7012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.532356][ T7006] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.937: bg 0: block 4: invalid block bitmap [ 132.532397][ T7006] loop6: lost filesystem error report for type 5 error -117 [ 132.534565][ T7006] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 132.534592][ T7006] loop6: lost filesystem error report for type 5 error -117 [ 132.535496][ T7006] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.937: invalid indirect mapped block 1 (level 1) [ 132.535593][ T7006] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 132.535864][ C0] EXT4-fs (loop6): error count since last fsck: 3 [ 132.535890][ C0] EXT4-fs (loop6): initial error at time 1789446614: ext4_validate_block_bitmap:436 [ 132.535924][ C0] EXT4-fs (loop6): last error at time 1789446614: ext4_free_branches:1023: inode 11 [ 132.549704][ T7006] EXT4-fs (loop6): 1 truncate cleaned up [ 132.556763][ T7006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.599397][ T7014] bond3: entered promiscuous mode [ 132.602433][ T7014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.690231][ T6443] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.733065][ T7022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.734096][ T7022] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 132.734141][ T7022] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 132.769781][ T7022] bond3: (slave ip6gre1): making interface the new active one [ 132.769842][ T7022] ip6gre1: entered promiscuous mode [ 132.773517][ T7022] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 132.819576][ T5057] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.934101][ T7035] ip_tables: iptables: counters copy to user failed while replacing table [ 134.023035][ T7057] batman_adv: batadv0: Adding interface: syzkaller0 [ 134.023056][ T7057] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.023096][ T7057] batman_adv: batadv0: Interface activated: syzkaller0 [ 134.060957][ T7055] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 134.074851][ T7055] batman_adv: batadv0: Removing interface: syzkaller0 [ 134.121457][ T7062] set_capacity_and_notify: 3 callbacks suppressed [ 134.121527][ T7062] loop2: detected capacity change from 0 to 512 [ 134.128216][ T7060] loop1: detected capacity change from 0 to 512 [ 134.155305][ T7062] EXT4-fs (loop2): 1 truncate cleaned up [ 134.171606][ T7062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.178861][ T7060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.178999][ T7060] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.205207][ T7068] netlink: 'syz.9.956': attribute type 1 has an invalid length. [ 134.464204][ T7072] FAULT_INJECTION: forcing a failure. [ 134.464204][ T7072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.464245][ T7072] CPU: 1 UID: 0 PID: 7072 Comm: syz.6.958 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.464297][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.464311][ T7072] Call Trace: [ 134.464321][ T7072] [ 134.464332][ T7072] __dump_stack+0x1d/0x30 [ 134.464383][ T7072] dump_stack_lvl+0x95/0xd0 [ 134.464414][ T7072] dump_stack+0x15/0x1b [ 134.464444][ T7072] should_fail_ex+0x262/0x280 [ 134.464478][ T7072] should_fail+0xb/0x20 [ 134.464536][ T7072] should_fail_usercopy+0x1a/0x20 [ 134.464569][ T7072] _copy_from_user+0x1c/0xb0 [ 134.464604][ T7072] copy_from_sockptr_offset+0x66/0xa0 [ 134.464639][ T7072] do_tcp_getsockopt+0x971/0x1bc0 [ 134.464680][ T7072] ? __rcu_read_unlock+0x4e/0x70 [ 134.464788][ T7072] ? __rcu_read_unlock+0x4e/0x70 [ 134.464829][ T7072] ? avc_has_perm_noaudit+0xa3/0x120 [ 134.464864][ T7072] ? avc_has_perm+0x101/0x190 [ 134.464914][ T7072] tcp_getsockopt+0x6e/0xe0 [ 134.464971][ T7072] sock_common_getsockopt+0x60/0x70 [ 134.465008][ T7072] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 134.465040][ T7072] do_sock_getsockopt+0x2f5/0x570 [ 134.465156][ T7072] ? trace_buffer_unlock_commit_regs+0x115/0x310 [ 134.465262][ T7072] __x64_sys_getsockopt+0x11d/0x1a0 [ 134.465312][ T7072] x64_sys_call+0x1032/0x2550 [ 134.465348][ T7072] do_syscall_64+0x112/0x360 [ 134.465458][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.465507][ T7072] RIP: 0033:0x7fee430ce159 [ 134.465534][ T7072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.465601][ T7072] RSP: 002b:00007fee41b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 134.465627][ T7072] RAX: ffffffffffffffda RBX: 00007fee43355fa0 RCX: 00007fee430ce159 [ 134.465698][ T7072] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 134.465718][ T7072] RBP: 00007fee4316503b R08: 00002000000002c0 R09: 0000000000000000 [ 134.465738][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.465758][ T7072] R13: 00007fee43356038 R14: 00007fee43355fa0 R15: 00007ffcf4343f18 [ 134.465785][ T7072] [ 134.536996][ T6078] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.789757][ T7082] loop6: detected capacity change from 0 to 1024 [ 134.793601][ T7082] EXT4-fs: Ignoring removed nobh option [ 134.828441][ T7082] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #3: comm syz.6.972: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 134.828586][ T7082] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 134.833106][ T7082] EXT4-fs error (device loop6): ext4_quota_enable:7263: comm syz.6.972: Bad quota inode: 3, type: 0 [ 134.833146][ T7082] loop6: lost filesystem error report for type 5 error -117 [ 134.835830][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 134.835859][ C0] EXT4-fs (loop6): initial error at time 1789446616: ext4_ext_check_inode:521: inode 3 [ 134.835942][ C0] EXT4-fs (loop6): last error at time 1789446616: ext4_quota_enable:7263 [ 134.845006][ T7082] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 134.845809][ T7082] EXT4-fs (loop6): mount failed [ 135.132857][ T7101] ip_tables: iptables: counters copy to user failed while replacing table [ 135.649407][ T4134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.755701][ T7117] netlink: 'syz.6.969': attribute type 1 has an invalid length. [ 135.804068][ T7117] bond3: entered promiscuous mode [ 135.804665][ T7117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.948915][ T7124] loop1: detected capacity change from 0 to 256 [ 136.072664][ T7117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.082040][ T7117] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 136.082068][ T7117] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 136.185675][ T7127] syz.1.970: attempt to access beyond end of device [ 136.185675][ T7127] loop1: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 136.212978][ T7127] syz.1.970: attempt to access beyond end of device [ 136.212978][ T7127] loop1: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 136.237621][ T7117] bond3: (slave ip6gre1): making interface the new active one [ 136.237752][ T7117] ip6gre1: entered promiscuous mode [ 136.247324][ T7130] loop9: detected capacity change from 0 to 512 [ 136.271925][ T7130] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.302419][ T7117] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 136.390256][ T7130] loop9: detected capacity change from 512 to 64 [ 136.437727][ T7130] EXT4-fs error (device loop9): ext4_write_dquot:7049: comm syz.9.973: Failed to commit dquot type 0 [ 136.440229][ T7130] EXT4-fs error (device loop9): ext4_write_dquot:7049: comm syz.9.973: Failed to commit dquot type 1 [ 136.533334][ T6443] EXT4-fs error (device loop9): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 136.536026][ T6443] EXT4-fs error (device loop9): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 136.538329][ T6443] EXT4-fs error (device loop9): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 136.543789][ T6443] EXT4-fs error (device loop9): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 136.552281][ T6443] EXT4-fs error (device loop9): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 136.554896][ T6443] EXT4-fs error (device loop9): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 136.562482][ T6443] EXT4-fs error (device loop9): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 136.564008][ T6443] EXT4-fs error (device loop9): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 136.633844][ T7137] loop6: detected capacity change from 0 to 512 [ 136.645899][ T7137] FAT-fs (loop6): invalid media value (0x03) [ 136.645953][ T7137] FAT-fs (loop6): Can't find a valid FAT filesystem [ 136.674603][ T6443] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.691734][ T7131] kmmpd-loop9: attempt to access beyond end of device [ 136.691734][ T7131] loop9: rw=8402945, sector=68, nr_sectors = 2 limit=64 [ 136.691770][ T7131] Buffer I/O error on dev loop9, logical block 34, lost sync page write [ 137.035363][ T7124] syz.1.970: attempt to access beyond end of device [ 137.035363][ T7124] loop1: rw=2049, sector=1928, nr_sectors = 32 limit=256 [ 137.035593][ T7124] syz.1.970: attempt to access beyond end of device [ 137.035593][ T7124] loop1: rw=2049, sector=1992, nr_sectors = 32 limit=256 [ 137.036020][ T7124] syz.1.970: attempt to access beyond end of device [ 137.036020][ T7124] loop1: rw=2049, sector=2056, nr_sectors = 32 limit=256 [ 137.036233][ T7124] syz.1.970: attempt to access beyond end of device [ 137.036233][ T7124] loop1: rw=2049, sector=2120, nr_sectors = 32 limit=256 [ 137.036382][ T7124] syz.1.970: attempt to access beyond end of device [ 137.036382][ T7124] loop1: rw=2049, sector=2184, nr_sectors = 32 limit=256 [ 137.038120][ T7124] syz.1.970: attempt to access beyond end of device [ 137.038120][ T7124] loop1: rw=2049, sector=2248, nr_sectors = 32 limit=256 [ 137.038404][ T7124] syz.1.970: attempt to access beyond end of device [ 137.038404][ T7124] loop1: rw=2049, sector=2312, nr_sectors = 32 limit=256 [ 137.095693][ T7148] loop8: detected capacity change from 0 to 512 [ 137.114381][ T7148] EXT4-fs (loop8): 1 truncate cleaned up [ 137.115376][ T7148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.142132][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 137.142151][ T29] audit: type=1400 audit(1789446618.648:768): avc: denied { write } for pid=7145 comm="syz.8.979" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.142260][ T29] audit: type=1400 audit(1789446618.648:769): avc: denied { write } for pid=7145 comm="syz.8.979" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.309576][ T7153] loop1: detected capacity change from 0 to 1024 [ 137.323994][ T7153] EXT4-fs: Ignoring removed bh option [ 137.331939][ T7153] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 137.357192][ T7153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.391099][ T29] audit: type=1400 audit(1789446618.898:770): avc: denied { write } for pid=7152 comm="syz.1.980" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.405690][ T29] audit: type=1400 audit(1789446618.908:771): avc: denied { create } for pid=7157 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 137.411000][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 137.411257][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 137.411274][ T7158] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 137.411413][ T29] audit: type=1400 audit(1789446618.918:772): avc: denied { write } for pid=7157 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 137.999095][ T6995] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 138.145644][ T29] audit: type=1400 audit(1789446619.648:773): avc: denied { write } for pid=7169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.322223][ T29] audit: type=1400 audit(1789446619.828:774): avc: denied { write } for pid=7181 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.610749][ T29] audit: type=1400 audit(1789446620.118:775): avc: denied { write } for pid=7184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.650356][ T6360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.664058][ T6078] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.703932][ T29] audit: type=1400 audit(1789446620.208:776): avc: denied { write } for pid=7195 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.749433][ T7198] netlink: 'syz.8.988': attribute type 1 has an invalid length. [ 138.851669][ T7198] bond1: entered promiscuous mode [ 138.852224][ T7198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.907617][ T7209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.910917][ T7209] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 138.911020][ T7209] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 138.960014][ T7209] bond1: (slave ip6gre1): making interface the new active one [ 138.960039][ T7209] ip6gre1: entered promiscuous mode [ 138.963873][ T7209] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 138.986786][ T7212] ptp ptp0: only physical clock in use now [ 139.015503][ T29] audit: type=1400 audit(1789446620.518:777): avc: denied { ioctl } for pid=7214 comm="syz.1.994" path="/48/dev/mapper/control" dev="devtmpfs" ino=247 ioctlcmd=0xfd02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 139.047313][ T7212] ptp ptp0: new virtual clock ptp1 [ 139.050780][ T7212] ptp ptp0: new virtual clock ptp2 [ 139.057287][ T7212] ptp ptp0: new virtual clock ptp3 [ 139.081113][ T7212] ptp ptp0: new virtual clock ptp4 [ 139.084588][ T7212] ptp ptp0: new virtual clock ptp5 [ 139.084673][ T7212] ptp ptp0: guarantee physical clock free running [ 139.302829][ T7228] xt_hashlimit: size too large, truncated to 1048576 [ 139.384374][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.8.998'. [ 139.701419][ T7248] loop8: detected capacity change from 0 to 512 [ 139.723071][ T7248] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.1000: inode has both inline data and extents flags [ 139.723245][ T7248] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.723652][ T7248] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.1000: couldn't read orphan inode 15 (err -117) [ 139.723723][ T7248] loop8: lost filesystem error report for type 5 error -117 [ 139.724908][ T7248] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.880667][ T7248] FAULT_INJECTION: forcing a failure. [ 139.880667][ T7248] name failslab, interval 1, probability 0, space 0, times 0 [ 139.880721][ T7248] CPU: 0 UID: 0 PID: 7248 Comm: syz.8.1000 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.880773][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.880794][ T7248] Call Trace: [ 139.880807][ T7248] [ 139.880821][ T7248] __dump_stack+0x1d/0x30 [ 139.880892][ T7248] dump_stack_lvl+0x95/0xd0 [ 139.880937][ T7248] dump_stack+0x15/0x1b [ 139.880960][ T7248] should_fail_ex+0x262/0x280 [ 139.881157][ T7248] ? syslog_print_all+0x79/0x3c0 [ 139.881195][ T7248] should_failslab+0x8c/0xb0 [ 139.881312][ T7248] __kmalloc_cache_noprof+0x7a/0x400 [ 139.881388][ T7248] ? syslog_print_all+0x79/0x3c0 [ 139.881506][ T7248] syslog_print_all+0x79/0x3c0 [ 139.881542][ T7248] ? avc_has_perm+0x101/0x190 [ 139.881579][ T7248] do_syslog+0x2fd/0x7f0 [ 139.881627][ T7248] __x64_sys_syslog+0x41/0x50 [ 139.881667][ T7248] x64_sys_call+0x1d36/0x2550 [ 139.881702][ T7248] do_syscall_64+0x112/0x360 [ 139.881746][ T7248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.881850][ T7248] RIP: 0033:0x7fa39962e159 [ 139.881871][ T7248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.881909][ T7248] RSP: 002b:00007fa398087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 139.881937][ T7248] RAX: ffffffffffffffda RBX: 00007fa3998b5fa0 RCX: 00007fa39962e159 [ 139.881955][ T7248] RDX: 0000000000000063 RSI: 00002000000001c0 RDI: 0000000000000004 [ 139.881971][ T7248] RBP: 00007fa3996c503b R08: 0000000000000000 R09: 0000000000000000 [ 139.882029][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.882050][ T7248] R13: 00007fa3998b6038 R14: 00007fa3998b5fa0 R15: 00007ffcf7aa9838 [ 139.882076][ T7248] [ 140.147251][ T7261] SELinux: ebitmap start bit (939524928) is beyond the end of the bitmap (1472) [ 140.147468][ T7261] SELinux: invalid class [ 140.149277][ T7261] SELinux: failed to load policy [ 140.180193][ T6360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.379394][ T7279] netlink: 'syz.1.1007': attribute type 1 has an invalid length. [ 140.474335][ T7279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.611054][ T7289] bond4: (slave ip6erspan0): making interface the new active one [ 140.628422][ T7289] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 141.042864][ T7310] ip_tables: iptables: counters copy to user failed while replacing table [ 141.237013][ T7314] mmap: syz.6.1017 (7314) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.409239][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 142.409262][ T29] audit: type=1400 audit(1789446623.918:789): avc: denied { write } for pid=7329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.519004][ T29] audit: type=1326 audit(1789446624.028:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.6.1023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee430ce159 code=0x7ffc0000 [ 142.519135][ T29] audit: type=1326 audit(1789446624.028:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.6.1023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee430ce159 code=0x7ffc0000 [ 142.521847][ T29] audit: type=1326 audit(1789446624.028:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.6.1023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee430ce159 code=0x7ffc0000 [ 142.521897][ T29] audit: type=1326 audit(1789446624.028:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.6.1023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee430ce159 code=0x7ffc0000 [ 142.522109][ T29] audit: type=1326 audit(1789446624.028:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.6.1023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee430ce159 code=0x7ffc0000 [ 142.522383][ T29] audit: type=1326 audit(1789446624.028:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.6.1023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee430ce159 code=0x7ffc0000 [ 142.522423][ T29] audit: type=1326 audit(1789446624.028:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.6.1023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee430ce159 code=0x7ffc0000 [ 142.522691][ T29] audit: type=1326 audit(1789446624.028:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.6.1023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee430ce159 code=0x7ffc0000 [ 142.522751][ T29] audit: type=1326 audit(1789446624.028:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.6.1023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee430ce159 code=0x7ffc0000 [ 144.145079][ T7389] ip_tables: iptables: counters copy to user failed while replacing table [ 145.187660][ T7398] loop2: detected capacity change from 0 to 512 [ 145.213135][ T7398] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1035: bg 0: block 4: invalid block bitmap [ 145.213182][ T7398] loop2: lost filesystem error report for type 5 error -117 [ 145.214204][ T7398] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 145.214291][ T7398] loop2: lost filesystem error report for type 5 error -117 [ 145.216116][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 145.216155][ C1] EXT4-fs (loop2): initial error at time 1789446626: ext4_validate_block_bitmap:436 [ 145.216184][ C1] EXT4-fs (loop2): last error at time 1789446626: ext4_mb_clear_bb:6680 [ 145.282013][ T7398] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1035: invalid indirect mapped block 1 (level 1) [ 145.282059][ T7398] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.299938][ T7398] EXT4-fs (loop2): 1 truncate cleaned up [ 145.302753][ T7398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.315412][ T7399] loop8: detected capacity change from 0 to 8192 [ 145.446354][ T4134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.572366][ T7415] usb usb9: usbfs: process 7415 (syz.6.1041) did not claim interface 0 before use [ 145.680476][ T7420] FAULT_INJECTION: forcing a failure. [ 145.680476][ T7420] name failslab, interval 1, probability 0, space 0, times 0 [ 145.680514][ T7420] CPU: 0 UID: 0 PID: 7420 Comm: syz.8.1044 Not tainted syzkaller #0 PREEMPT(lazy) [ 145.680594][ T7420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.680611][ T7420] Call Trace: [ 145.680621][ T7420] [ 145.680632][ T7420] __dump_stack+0x1d/0x30 [ 145.680685][ T7420] dump_stack_lvl+0x95/0xd0 [ 145.680715][ T7420] dump_stack+0x15/0x1b [ 145.680741][ T7420] should_fail_ex+0x262/0x280 [ 145.680772][ T7420] ? alloc_workqueue_va+0x500/0x1630 [ 145.680812][ T7420] should_failslab+0x8c/0xb0 [ 145.680850][ T7420] __kmalloc_cache_node_noprof+0x81/0x420 [ 145.680940][ T7420] ? alloc_workqueue_va+0x500/0x1630 [ 145.680977][ T7420] alloc_workqueue_va+0x500/0x1630 [ 145.681090][ T7420] alloc_workqueue_noprof+0x84/0xb0 [ 145.681127][ T7420] nci_register_device+0x20c/0x510 [ 145.681167][ T7420] virtual_ncidev_open+0xca/0x130 [ 145.681234][ T7420] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 145.681272][ T7420] misc_open+0x1df/0x220 [ 145.681304][ T7420] chrdev_open+0x2eb/0x3a0 [ 145.681414][ T7420] do_dentry_open+0x49f/0xa60 [ 145.681442][ T7420] ? __pfx_chrdev_open+0x10/0x10 [ 145.681490][ T7420] vfs_open+0x37/0x1e0 [ 145.681518][ T7420] path_openat+0xc01/0x10d0 [ 145.681653][ T7420] do_file_open+0x16c/0x290 [ 145.681741][ T7420] do_sys_openat2+0xa0/0x130 [ 145.681773][ T7420] __x64_sys_openat+0xf2/0x120 [ 145.681869][ T7420] x64_sys_call+0x1f72/0x2550 [ 145.681896][ T7420] do_syscall_64+0x112/0x360 [ 145.681935][ T7420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.682044][ T7420] RIP: 0033:0x7fa39962e159 [ 145.682078][ T7420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.682105][ T7420] RSP: 002b:00007fa398087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.682165][ T7420] RAX: ffffffffffffffda RBX: 00007fa3998b5fa0 RCX: 00007fa39962e159 [ 145.682186][ T7420] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 145.682205][ T7420] RBP: 00007fa3996c503b R08: 0000000000000000 R09: 0000000000000000 [ 145.682224][ T7420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.682257][ T7420] R13: 00007fa3998b6038 R14: 00007fa3998b5fa0 R15: 00007ffcf7aa9838 [ 145.682284][ T7420] [ 146.006500][ T7434] FAULT_INJECTION: forcing a failure. [ 146.006500][ T7434] name failslab, interval 1, probability 0, space 0, times 0 [ 146.006557][ T7434] CPU: 1 UID: 0 PID: 7434 Comm: syz.2.1049 Not tainted syzkaller #0 PREEMPT(lazy) [ 146.006591][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.006609][ T7434] Call Trace: [ 146.006621][ T7434] [ 146.006647][ T7434] __dump_stack+0x1d/0x30 [ 146.006676][ T7434] dump_stack_lvl+0x95/0xd0 [ 146.006765][ T7434] dump_stack+0x15/0x1b [ 146.006798][ T7434] should_fail_ex+0x262/0x280 [ 146.006831][ T7434] ? x509_fabricate_name+0x3bd/0x4b0 [ 146.006860][ T7434] should_failslab+0x8c/0xb0 [ 146.006924][ T7434] __kmalloc_noprof+0xd0/0x4d0 [ 146.006964][ T7434] ? x509_fabricate_name+0x3bd/0x4b0 [ 146.006995][ T7434] x509_fabricate_name+0x3bd/0x4b0 [ 146.007104][ T7434] ? x509_note_OID+0x91/0xc0 [ 146.007241][ T7434] x509_note_subject+0x6e/0x80 [ 146.007296][ T7434] asn1_ber_decoder+0x11db/0x1490 [ 146.007323][ T7434] ? trace_event_raw_event_kmalloc+0xb7/0x110 [ 146.007356][ T7434] x509_cert_parse+0x11b/0x450 [ 146.007473][ T7434] x509_key_preparse+0x3c/0x420 [ 146.007504][ T7434] asymmetric_key_preparse+0x68/0xb0 [ 146.007544][ T7434] __key_create_or_update+0x2df/0x840 [ 146.007610][ T7434] key_create_or_update+0x42/0x60 [ 146.007711][ T7434] __se_sys_add_key+0x2a5/0x360 [ 146.007738][ T7434] __x64_sys_add_key+0x67/0x80 [ 146.007767][ T7434] x64_sys_call+0x1fa9/0x2550 [ 146.007858][ T7434] do_syscall_64+0x112/0x360 [ 146.007890][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.007914][ T7434] RIP: 0033:0x7ff9acb1e159 [ 146.007969][ T7434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.007992][ T7434] RSP: 002b:00007ff9ab577028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 146.008026][ T7434] RAX: ffffffffffffffda RBX: 00007ff9acda5fa0 RCX: 00007ff9acb1e159 [ 146.008065][ T7434] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 146.008083][ T7434] RBP: 00007ff9acbb503b R08: ffffffffffffffff R09: 0000000000000000 [ 146.008101][ T7434] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 146.008116][ T7434] R13: 00007ff9acda6038 R14: 00007ff9acda5fa0 R15: 00007ffd187a7f58 [ 146.008175][ T7434] [ 146.173550][ T7437] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 146.416315][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1052'. [ 146.528862][ T7452] loop1: detected capacity change from 0 to 512 [ 146.565108][ T7452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.679532][ T7452] loop1: detected capacity change from 512 to 64 [ 146.727795][ T7452] EXT4-fs error (device loop1): ext4_write_dquot:7049: comm syz.1.1056: Failed to commit dquot type 0 [ 146.728665][ T7452] EXT4-fs error (device loop1): ext4_write_dquot:7049: comm syz.1.1056: Failed to commit dquot type 1 [ 146.803232][ T6078] EXT4-fs error (device loop1): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 146.810355][ T6078] EXT4-fs error (device loop1): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 146.812661][ T6078] EXT4-fs error (device loop1): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 146.813341][ T6078] EXT4-fs error (device loop1): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 146.819891][ T6078] EXT4-fs error (device loop1): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 146.824821][ T6078] EXT4-fs error (device loop1): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 146.826999][ T6078] EXT4-fs error (device loop1): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 146.831740][ T6078] EXT4-fs error (device loop1): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 146.920005][ T6078] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.934844][ T7468] netlink: 'syz.8.1062': attribute type 1 has an invalid length. [ 146.966843][ T7468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.980945][ T7453] bio_check_eod: 9 callbacks suppressed [ 146.980967][ T7453] kmmpd-loop1: attempt to access beyond end of device [ 146.980967][ T7453] loop1: rw=8402945, sector=68, nr_sectors = 2 limit=64 [ 146.981026][ T7453] Buffer I/O error on dev loop1, logical block 34, lost sync page write [ 147.137273][ T7468] bond2: (slave ip6erspan0): making interface the new active one [ 147.155622][ T7468] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 147.329216][ T7479] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 147.779106][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 147.779127][ T29] audit: type=1400 audit(1789446629.288:879): avc: denied { getopt } for pid=7488 comm="syz.9.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.911681][ T7494] loop8: detected capacity change from 0 to 256 [ 148.013001][ T7497] syz.8.1069: attempt to access beyond end of device [ 148.013001][ T7497] loop8: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 148.279074][ T7503] loop2: detected capacity change from 0 to 512 [ 148.308434][ T7503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.349243][ T29] audit: type=1400 audit(1789446629.858:880): avc: denied { write } for pid=7502 comm="syz.2.1072" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.425363][ T7507] ip_tables: iptables: counters copy to user failed while replacing table [ 148.503244][ T29] audit: type=1400 audit(1789446630.008:881): avc: denied { write } for pid=7502 comm="syz.2.1072" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.530202][ T7503] loop2: detected capacity change from 512 to 64 [ 148.583001][ T7503] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 148.583075][ T7503] EXT4-fs error (device loop2): ext4_write_dquot:7049: comm syz.2.1072: Failed to commit dquot type 0 [ 148.584859][ T7503] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 148.584886][ T7503] EXT4-fs error (device loop2): ext4_write_dquot:7049: comm syz.2.1072: Failed to commit dquot type 1 [ 148.733300][ T29] audit: type=1400 audit(1789446630.238:882): avc: denied { write } for pid=4134 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.737867][ T4134] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 148.737921][ T4134] EXT4-fs error (device loop2): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 148.740151][ T4134] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 148.740221][ T4134] EXT4-fs error (device loop2): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 148.743750][ T4134] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 148.743775][ T4134] EXT4-fs error (device loop2): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 148.748797][ T4134] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 148.748827][ T4134] EXT4-fs error (device loop2): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 148.752465][ T4134] EXT4-fs error (device loop2): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 148.764345][ T4134] EXT4-fs error (device loop2): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 148.766141][ T4134] EXT4-fs error (device loop2): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 0 [ 148.768691][ T4134] EXT4-fs error (device loop2): ext4_write_dquot:7049: comm syz-executor: Failed to commit dquot type 1 [ 148.860379][ T7515] netlink: 'syz.9.1075': attribute type 1 has an invalid length. [ 148.890305][ T4134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.921174][ T7504] kmmpd-loop2: attempt to access beyond end of device [ 148.921174][ T7504] loop2: rw=8402945, sector=68, nr_sectors = 2 limit=64 [ 148.921259][ T7504] Buffer I/O error on dev loop2, logical block 34, lost sync page write [ 148.976525][ T7494] syz.8.1069: attempt to access beyond end of device [ 148.976525][ T7494] loop8: rw=2049, sector=1896, nr_sectors = 32 limit=256 [ 148.976750][ T7494] syz.8.1069: attempt to access beyond end of device [ 148.976750][ T7494] loop8: rw=2049, sector=1960, nr_sectors = 32 limit=256 [ 148.976931][ T7494] syz.8.1069: attempt to access beyond end of device [ 148.976931][ T7494] loop8: rw=2049, sector=2024, nr_sectors = 32 limit=256 [ 148.977215][ T7494] syz.8.1069: attempt to access beyond end of device [ 148.977215][ T7494] loop8: rw=2049, sector=2088, nr_sectors = 32 limit=256 [ 148.977493][ T7494] syz.8.1069: attempt to access beyond end of device [ 148.977493][ T7494] loop8: rw=2049, sector=2152, nr_sectors = 32 limit=256 [ 148.984556][ T7515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.985975][ T7494] syz.8.1069: attempt to access beyond end of device [ 148.985975][ T7494] loop8: rw=2049, sector=2216, nr_sectors = 32 limit=256 [ 148.986219][ T7494] syz.8.1069: attempt to access beyond end of device [ 148.986219][ T7494] loop8: rw=2049, sector=2280, nr_sectors = 32 limit=256 [ 149.102042][ T7519] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.155141][ T7519] bond1: (slave team0): Enslaving as a backup interface with an up link [ 149.212211][ T7521] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 149.316787][ T7521] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.461908][ T7525] bond3: (slave ip6erspan0): making interface the new active one [ 149.486007][ T7525] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 149.819401][ T7540] loop6: detected capacity change from 0 to 512 [ 149.844171][ T7540] EXT4-fs (loop6): 1 truncate cleaned up [ 149.845127][ T7540] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.906976][ T7544] FAULT_INJECTION: forcing a failure. [ 149.906976][ T7544] name failslab, interval 1, probability 0, space 0, times 0 [ 149.907014][ T7544] CPU: 1 UID: 0 PID: 7544 Comm: syz.2.1085 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.907048][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.907066][ T7544] Call Trace: [ 149.907125][ T7544] [ 149.907139][ T7544] __dump_stack+0x1d/0x30 [ 149.907169][ T7544] dump_stack_lvl+0x95/0xd0 [ 149.907197][ T7544] dump_stack+0x15/0x1b [ 149.907237][ T7544] should_fail_ex+0x262/0x280 [ 149.907265][ T7544] ? simple_attr_open+0x44/0xe0 [ 149.907334][ T7544] should_failslab+0x8c/0xb0 [ 149.907369][ T7544] __kmalloc_cache_noprof+0x7a/0x400 [ 149.907446][ T7544] ? simple_attr_open+0x44/0xe0 [ 149.907471][ T7544] ? __pfx_fops_atomic_t_open+0x10/0x10 [ 149.907498][ T7544] ? __pfx_debugfs_atomic_t_set+0x10/0x10 [ 149.907527][ T7544] ? __pfx_debugfs_atomic_t_get+0x10/0x10 [ 149.907609][ T7544] simple_attr_open+0x44/0xe0 [ 149.907632][ T7544] ? __pfx_fops_atomic_t_open+0x10/0x10 [ 149.907701][ T7544] fops_atomic_t_open+0x32/0x40 [ 149.907731][ T7544] open_proxy_open+0x230/0x310 [ 149.907762][ T7544] do_dentry_open+0x49f/0xa60 [ 149.907787][ T7544] ? __pfx_open_proxy_open+0x10/0x10 [ 149.907881][ T7544] vfs_open+0x37/0x1e0 [ 149.907910][ T7544] path_openat+0xc01/0x10d0 [ 149.907945][ T7544] do_file_open+0x16c/0x290 [ 149.908052][ T7544] do_sys_openat2+0xa0/0x130 [ 149.908131][ T7544] __x64_sys_openat+0xf2/0x120 [ 149.908211][ T7544] x64_sys_call+0x1f72/0x2550 [ 149.908242][ T7544] do_syscall_64+0x112/0x360 [ 149.908356][ T7544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.908382][ T7544] RIP: 0033:0x7ff9acb1e159 [ 149.908404][ T7544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.908471][ T7544] RSP: 002b:00007ff9ab577028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.908561][ T7544] RAX: ffffffffffffffda RBX: 00007ff9acda5fa0 RCX: 00007ff9acb1e159 [ 149.908582][ T7544] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 149.908603][ T7544] RBP: 00007ff9acbb503b R08: 0000000000000000 R09: 0000000000000000 [ 149.908621][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.908694][ T7544] R13: 00007ff9acda6038 R14: 00007ff9acda5fa0 R15: 00007ffd187a7f58 [ 149.908787][ T7544] [ 149.965600][ T7548] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 150.031716][ T7552] ip_tables: iptables: counters copy to user failed while replacing table [ 150.035315][ T7548] bond5: entered promiscuous mode [ 150.054846][ T7548] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.442864][ T7560] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1103'. [ 150.493389][ T7563] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 150.602107][ T7563] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.654728][ T7571] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 150.666518][ T7571] FAULT_INJECTION: forcing a failure. [ 150.666518][ T7571] name failslab, interval 1, probability 0, space 0, times 0 [ 150.666555][ T7571] CPU: 0 UID: 0 PID: 7571 Comm: syz.8.1096 Not tainted syzkaller #0 PREEMPT(lazy) [ 150.666656][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.666672][ T7571] Call Trace: [ 150.666681][ T7571] [ 150.666693][ T7571] __dump_stack+0x1d/0x30 [ 150.666836][ T7571] dump_stack_lvl+0x95/0xd0 [ 150.666862][ T7571] dump_stack+0x15/0x1b [ 150.666886][ T7571] should_fail_ex+0x262/0x280 [ 150.666941][ T7571] ? security_inode_alloc+0x37/0x100 [ 150.667050][ T7571] should_failslab+0x8c/0xb0 [ 150.667084][ T7571] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 150.667116][ T7571] ? security_inode_alloc+0x37/0x100 [ 150.667167][ T7571] security_inode_alloc+0x37/0x100 [ 150.667196][ T7571] inode_init_always_gfp+0x495/0x4e0 [ 150.667222][ T7571] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 150.667261][ T7571] alloc_inode+0x58/0x170 [ 150.667359][ T7571] new_inode+0x1d/0xe0 [ 150.667384][ T7571] shmem_get_inode+0x250/0x7b0 [ 150.667485][ T7571] __shmem_file_setup+0x14f/0x260 [ 150.667518][ T7571] shmem_file_setup+0x3b/0x50 [ 150.667549][ T7571] memfd_alloc_file+0x4e/0x300 [ 150.667635][ T7571] __se_sys_memfd_create+0x2e1/0x3b0 [ 150.667667][ T7571] __x64_sys_memfd_create+0x31/0x40 [ 150.667697][ T7571] x64_sys_call+0x1955/0x2550 [ 150.667774][ T7571] do_syscall_64+0x112/0x360 [ 150.667884][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.667911][ T7571] RIP: 0033:0x7fa39962e159 [ 150.667952][ T7571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.667986][ T7571] RSP: 002b:00007fa398086e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 150.668031][ T7571] RAX: ffffffffffffffda RBX: 000000000000049e RCX: 00007fa39962e159 [ 150.668049][ T7571] RDX: 00007fa398086ee0 RSI: 0000000000000000 RDI: 00007fa3996c521b [ 150.668152][ T7571] RBP: 0000200000000f40 R08: 00000000ffffffff R09: 0000000000000000 [ 150.668169][ T7571] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 150.668186][ T7571] R13: 00007fa398086ee0 R14: 00007fa398086ea0 R15: 0000200000000100 [ 150.668209][ T7571] [ 150.733329][ T7566] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.791396][ T7566] bond4: (slave team0): Enslaving as a backup interface with an up link [ 151.081202][ T7577] ALSA: seq fatal error: cannot create timer (-22) [ 151.597607][ T7455] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 151.732259][ T7587] loop5: detected capacity change from 0 to 7 [ 151.734615][ T7587] loop5: [ 151.818289][ T7585] usb usb9: usbfs: process 7585 (syz.2.1102) did not claim interface 0 before use [ 152.213817][ T5154] bridge_slave_1: left allmulticast mode [ 152.213847][ T5154] bridge_slave_1: left promiscuous mode [ 152.214076][ T5154] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.245085][ T5154] bridge_slave_0: left allmulticast mode [ 152.245114][ T5154] bridge_slave_0: left promiscuous mode [ 152.245331][ T5154] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.293481][ T7605] EXT4-fs warning (device sda1): __ext4_ioctl:1564: Setting inode version is not supported with metadata_csum enabled. [ 152.551855][ T5057] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.762036][ T7613] netlink: 'syz.6.1115': attribute type 1 has an invalid length. [ 152.784366][ T5154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.803337][ T5154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.810327][ T5154] bond0 (unregistering): Released all slaves [ 153.020469][ T7602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.057806][ T7619] netlink: 'syz.9.1117': attribute type 1 has an invalid length. [ 153.064142][ T7602] team0: Port device bond5 added [ 153.114622][ T7613] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.189431][ T7616] bond4: (slave ip6erspan0): making interface the new active one [ 153.213975][ T7616] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 153.284903][ T5154] hsr_slave_0: left promiscuous mode [ 153.293174][ T5154] hsr_slave_1: left promiscuous mode [ 153.294497][ T5154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.294548][ T5154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.310612][ T5154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.310636][ T5154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.469588][ T7625] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 153.469816][ T7625] SELinux: failed to load policy [ 153.472889][ T5154] veth1_macvtap: left promiscuous mode [ 153.472923][ T5154] veth0_macvtap: left promiscuous mode [ 153.473077][ T5154] veth1_vlan: left promiscuous mode [ 153.473114][ T5154] @ÿ: left promiscuous mode [ 153.922380][ T7635] loop1: detected capacity change from 0 to 512 [ 153.944338][ T7635] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1121: bg 0: block 4: invalid block bitmap [ 153.944449][ T7635] loop1: lost filesystem error report for type 5 error -117 [ 153.945857][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 153.945885][ C1] EXT4-fs (loop1): initial error at time 1789446635: ext4_validate_block_bitmap:436 [ 153.945919][ C1] EXT4-fs (loop1): last error at time 1789446635: ext4_validate_block_bitmap:436 [ 153.993151][ T7635] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 153.993177][ T7635] loop1: lost filesystem error report for type 5 error -117 [ 153.997162][ T7635] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1121: invalid indirect mapped block 1 (level 1) [ 153.997425][ T7635] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 154.010838][ T7635] EXT4-fs (loop1): 1 truncate cleaned up [ 154.012158][ T7635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.061528][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 154.061605][ T29] audit: type=1400 audit(1789446635.568:900): avc: denied { write } for pid=7634 comm="syz.1.1121" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.098708][ T5154] team0 (unregistering): Port device team_slave_1 removed [ 154.134200][ T5154] team0 (unregistering): Port device team_slave_0 removed [ 154.278767][ T6078] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.475235][ T7619] bond2: entered promiscuous mode [ 154.480826][ T7619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.542618][ T7622] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.543567][ T7622] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 154.543613][ T7622] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 154.572578][ T7622] bond2: (slave ip6gre1): making interface the new active one [ 154.572667][ T7622] ip6gre1: entered promiscuous mode [ 154.589648][ T7622] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 154.707859][ T29] audit: type=1400 audit(1789446636.218:901): avc: denied { create } for pid=7645 comm="syz.1.1123" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.732232][ T29] audit: type=1400 audit(1789446636.238:902): avc: denied { unlink } for pid=7645 comm="syz.1.1123" name="bus" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.732277][ T29] audit: type=1400 audit(1789446636.238:903): avc: denied { rename } for pid=7645 comm="syz.1.1123" name="bus" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.771846][ T29] audit: type=1400 audit(1789446636.278:904): avc: denied { read write } for pid=7645 comm="syz.1.1123" name="file0" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.771889][ T29] audit: type=1400 audit(1789446636.278:905): avc: denied { open } for pid=7645 comm="syz.1.1123" path="/74/file0" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.985326][ T29] audit: type=1326 audit(1789446636.488:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.2.1124" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9acb1e159 code=0x7ffc0000 [ 154.985653][ T29] audit: type=1326 audit(1789446636.488:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.2.1124" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9acb1e159 code=0x7ffc0000 [ 154.987497][ T29] audit: type=1326 audit(1789446636.498:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.2.1124" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9acb1e159 code=0x7ffc0000 [ 154.988481][ T29] audit: type=1326 audit(1789446636.498:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.2.1124" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7ff9acb1e159 code=0x7ffc0000 [ 155.071625][ T5154] IPVS: stop unused estimator thread 0... [ 155.097136][ T7651] loop6: detected capacity change from 0 to 4096 [ 155.165239][ T7651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.275583][ T3387] lg-g15 0003:046D:0A07.0002: item fetching failed at offset 13/14 [ 155.276349][ T3387] lg-g15 0003:046D:0A07.0002: probe with driver lg-g15 failed with error -22 [ 155.428666][ T5057] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.801177][ T7670] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1134'. [ 155.881064][ T7672] netlink: 43 bytes leftover after parsing attributes in process `syz.9.1135'. [ 156.191262][ T7681] loop1: detected capacity change from 0 to 2048 [ 156.220518][ T7681] loop1: p1 < > p3 [ 156.221981][ T7681] loop1: p3 size 134217728 extends beyond EOD, truncated [ 156.509685][ T7686] macvtap1: entered promiscuous mode [ 156.509854][ T7686] macvtap1: entered allmulticast mode [ 156.509871][ T7686] veth1_vlan: entered allmulticast mode [ 156.636472][ T7686] macvtap2: entered promiscuous mode [ 156.636501][ T7686] macvtap2: entered allmulticast mode [ 156.860933][ T7694] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 156.861089][ T7694] SELinux: failed to load policy [ 157.412624][ T7710] ALSA: seq fatal error: cannot create timer (-22) [ 160.321617][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 160.321638][ T29] audit: type=1400 audit(1789446641.828:916): avc: denied { write } for pid=7713 comm="syz.8.1156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 160.386022][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.403138][ T7720] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.428925][ T29] audit: type=1400 audit(1789446641.938:917): avc: denied { create } for pid=7721 comm="syz.8.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.431920][ T29] audit: type=1400 audit(1789446641.938:918): avc: denied { write } for pid=7721 comm="syz.8.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.650338][ T7755] loop9: detected capacity change from 0 to 4096 [ 161.679834][ T7755] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.821928][ T3384] lg-g15 0003:046D:0A07.0003: item fetching failed at offset 13/14 [ 161.822297][ T3384] lg-g15 0003:046D:0A07.0003: probe with driver lg-g15 failed with error -22 [ 161.984287][ T6443] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.157114][ T809] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.274845][ T809] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.379180][ T809] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.455124][ T809] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.713370][ T809] bridge_slave_1: left allmulticast mode [ 162.713399][ T809] bridge_slave_1: left promiscuous mode [ 162.713596][ T809] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.744325][ T809] bridge_slave_0: left allmulticast mode [ 162.744351][ T809] bridge_slave_0: left promiscuous mode [ 162.744509][ T809] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.884019][ T29] audit: type=1400 audit(1789446644.388:919): avc: denied { sys_module } for pid=7806 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 163.044415][ T809] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 163.044444][ T809] ip6gre1 (unregistering): left promiscuous mode [ 163.065624][ T809] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 163.220191][ T809] bond2 (unregistering): (slave erspan1): Releasing active interface [ 163.220245][ T809] erspan1 (unregistering): left promiscuous mode [ 163.278480][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1175'. [ 163.311440][ T809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.337165][ T809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.350457][ T809] bond0 (unregistering): Released all slaves [ 163.368770][ T809] bond1 (unregistering): (slave team0): Removing an active aggregator [ 163.373858][ T809] bond1 (unregistering): (slave team0): Releasing backup interface [ 163.397092][ T809] bond1 (unregistering): Released all slaves [ 163.443686][ T809] bond2 (unregistering): Released all slaves [ 163.468840][ T809] bond3 (unregistering): Released all slaves [ 163.495339][ T809] bond4 (unregistering): Released all slaves [ 163.522235][ T809] bond5 (unregistering): Released all slaves [ 163.612140][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1175'. [ 163.616693][ T75] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.626675][ T75] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.636242][ T75] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.638737][ T75] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.663408][ T809] IPVS: stopping master sync thread 7479 ... [ 163.742090][ T809] hsr_slave_0: left promiscuous mode [ 163.748331][ T809] hsr_slave_1: left promiscuous mode [ 163.751429][ T809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.751448][ T809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.777963][ T809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.777983][ T809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.839762][ T809] veth1_macvtap: left promiscuous mode [ 163.839791][ T809] veth0_macvtap: left promiscuous mode [ 163.839939][ T809] veth1_vlan: left promiscuous mode [ 163.839978][ T809] veth0_vlan: left promiscuous mode [ 164.001591][ T7838] loop9: detected capacity change from 0 to 512 [ 164.022820][ T809] team0 (unregistering): Port device team_slave_1 removed [ 164.025650][ T7838] EXT4-fs (loop9): 1 truncate cleaned up [ 164.029252][ T7838] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.038713][ T29] audit: type=1400 audit(1789446645.548:920): avc: denied { write } for pid=7837 comm="syz.9.1179" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.038824][ T29] audit: type=1400 audit(1789446645.548:921): avc: denied { write } for pid=7837 comm="syz.9.1179" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.121721][ T809] team0 (unregistering): Port device team_slave_0 removed [ 164.583047][ T29] audit: type=1400 audit(1789446646.088:922): avc: denied { write } for pid=7848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.725219][ T29] audit: type=1400 audit(1789446646.228:923): avc: denied { write } for pid=7862 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.886205][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 164.895930][ T7871] loop2: detected capacity change from 0 to 256 [ 164.918122][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1192'. [ 165.078401][ T7875] bio_check_eod: 8 callbacks suppressed [ 165.078540][ T7875] syz.2.1183: attempt to access beyond end of device [ 165.078540][ T7875] loop2: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 165.323440][ T6443] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.325275][ T7806] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.325325][ T7806] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.350731][ T7806] bridge_slave_0: entered allmulticast mode [ 165.352501][ T7806] bridge_slave_0: entered promiscuous mode [ 165.369022][ T7806] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.369081][ T7806] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.370032][ T7806] bridge_slave_1: entered allmulticast mode [ 165.371789][ T7806] bridge_slave_1: entered promiscuous mode [ 165.428196][ T7806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.433725][ T7806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.482123][ T7806] team0: Port device team_slave_0 added [ 165.494238][ T7806] team0: Port device team_slave_1 added [ 165.523211][ T7806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.523233][ T7806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.523303][ T7806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.525299][ T7806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.525318][ T7806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.525381][ T7806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.712125][ T7806] hsr_slave_0: entered promiscuous mode [ 165.726181][ T7806] hsr_slave_1: entered promiscuous mode [ 165.728905][ T7806] debugfs: 'hsr0' already exists in 'hsr' [ 165.728928][ T7806] Cannot create hsr debugfs directory [ 165.818759][ T7871] syz.2.1183: attempt to access beyond end of device [ 165.818759][ T7871] loop2: rw=2049, sector=1896, nr_sectors = 32 limit=256 [ 165.819070][ T7871] syz.2.1183: attempt to access beyond end of device [ 165.819070][ T7871] loop2: rw=2049, sector=1960, nr_sectors = 32 limit=256 [ 165.819298][ T7871] syz.2.1183: attempt to access beyond end of device [ 165.819298][ T7871] loop2: rw=2049, sector=2024, nr_sectors = 32 limit=256 [ 165.819510][ T7871] syz.2.1183: attempt to access beyond end of device [ 165.819510][ T7871] loop2: rw=2049, sector=2088, nr_sectors = 32 limit=256 [ 165.819744][ T7871] syz.2.1183: attempt to access beyond end of device [ 165.819744][ T7871] loop2: rw=2049, sector=2152, nr_sectors = 32 limit=256 [ 165.825035][ T7871] syz.2.1183: attempt to access beyond end of device [ 165.825035][ T7871] loop2: rw=2049, sector=2216, nr_sectors = 32 limit=256 [ 165.825249][ T7871] syz.2.1183: attempt to access beyond end of device [ 165.825249][ T7871] loop2: rw=2049, sector=2280, nr_sectors = 32 limit=256 [ 165.825543][ T7871] syz.2.1183: attempt to access beyond end of device [ 165.825543][ T7871] loop2: rw=2049, sector=2344, nr_sectors = 8 limit=256 [ 165.848781][ T29] audit: type=1400 audit(1789446647.358:924): avc: denied { write } for pid=7874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.029686][ T29] audit: type=1400 audit(1789446647.538:925): avc: denied { write } for pid=7899 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.031708][ T29] audit: type=1400 audit(1789446647.538:926): avc: denied { write } for pid=7895 comm="syz.8.1188" name="anycast6" dev="proc" ino=4026533625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 166.109091][ T7898] syzkaller1: entered promiscuous mode [ 166.109120][ T7898] syzkaller1: entered allmulticast mode [ 166.295341][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 166.433667][ T7907] loop8: detected capacity change from 0 to 512 [ 166.462655][ T7907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 166.462773][ T7907] System zones: 1-12 [ 166.465082][ T7907] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.1190: missing EA_INODE flag [ 166.465184][ T7907] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 166.465844][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 166.465871][ C0] EXT4-fs (loop8): initial error at time 1789446647: ext4_xattr_inode_iget:437: inode 12 [ 166.465916][ C0] EXT4-fs (loop8): last error at time 1789446647: ext4_xattr_inode_iget:437: inode 12 [ 166.473146][ T7907] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.1190: error while reading EA inode 12 err=-117 [ 166.473182][ T7907] loop8: lost filesystem error report for type 5 error -117 [ 166.474811][ T7907] EXT4-fs (loop8): 1 orphan inode deleted [ 166.479549][ T7907] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.490123][ T29] audit: type=1326 audit(1789446647.998:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.9.1191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2cc2e159 code=0x7ffc0000 [ 166.493065][ T29] audit: type=1326 audit(1789446647.998:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.9.1191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2cc2e159 code=0x7ffc0000 [ 166.493110][ T29] audit: type=1326 audit(1789446647.998:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.9.1191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2cc2e159 code=0x7ffc0000 [ 166.493683][ T29] audit: type=1326 audit(1789446647.998:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.9.1191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdc2cc2e159 code=0x7ffc0000 [ 166.494079][ T29] audit: type=1326 audit(1789446647.998:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.9.1191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2cc2e159 code=0x7ffc0000 [ 166.495259][ T29] audit: type=1326 audit(1789446647.998:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.9.1191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2cc2e159 code=0x7ffc0000 [ 166.500452][ T29] audit: type=1326 audit(1789446648.008:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.9.1191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2cc2e159 code=0x7ffc0000 [ 166.544670][ T6360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.811730][ T7806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.837855][ T7806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.841994][ T7806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.861347][ T7806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.869029][ T7806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.894325][ T7806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.906457][ T7806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.941979][ T7806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.138581][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 167.202191][ T7806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.247466][ T7806] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.272681][ T809] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.272819][ T809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.308376][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.308472][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.779815][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24 [ 167.931134][ T7806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.133846][ T7806] veth0_vlan: entered promiscuous mode [ 168.142802][ T7806] veth1_vlan: entered promiscuous mode [ 168.185491][ T7806] veth0_macvtap: entered promiscuous mode [ 168.193272][ T7806] veth1_macvtap: entered promiscuous mode [ 168.215707][ T7806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.230340][ T7806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.257432][ T809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.258759][ T809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.259382][ T809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.259504][ T809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.474913][ T8008] FAULT_INJECTION: forcing a failure. [ 168.474913][ T8008] name failslab, interval 1, probability 0, space 0, times 0 [ 168.474949][ T8008] CPU: 0 UID: 0 PID: 8008 Comm: syz.8.1208 Not tainted syzkaller #0 PREEMPT(lazy) [ 168.474979][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.474999][ T8008] Call Trace: [ 168.475011][ T8008] [ 168.475052][ T8008] __dump_stack+0x1d/0x30 [ 168.475143][ T8008] dump_stack_lvl+0x95/0xd0 [ 168.475213][ T8008] dump_stack+0x15/0x1b [ 168.475242][ T8008] should_fail_ex+0x262/0x280 [ 168.475277][ T8008] should_failslab+0x8c/0xb0 [ 168.475333][ T8008] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 168.475377][ T8008] ? kstrdup_const+0x3e/0x50 [ 168.475459][ T8008] ? kstrdup_const+0x3e/0x50 [ 168.475497][ T8008] kstrdup+0x3e/0xd0 [ 168.475527][ T8008] kstrdup_const+0x3e/0x50 [ 168.475557][ T8008] __kernfs_new_node+0x42/0x440 [ 168.475626][ T8008] kernfs_new_node+0xcf/0xf0 [ 168.475703][ T8008] kernfs_create_link+0x70/0x130 [ 168.475737][ T8008] sysfs_do_create_link_sd+0x6a/0x100 [ 168.475856][ T8008] sysfs_create_link+0x51/0x70 [ 168.475897][ T8008] module_add_driver+0x1c7/0x250 [ 168.475930][ T8008] bus_add_driver+0x2a8/0x450 [ 168.475975][ T8008] driver_register+0x162/0x220 [ 168.476092][ T8008] usb_gadget_register_driver_owner+0x92/0x1a0 [ 168.476136][ T8008] raw_ioctl+0xc5b/0x1df0 [ 168.476185][ T8008] ? ioctl_has_perm+0x273/0x2c0 [ 168.476218][ T8008] ? do_vfs_ioctl+0x848/0xe50 [ 168.476261][ T8008] ? selinux_file_ioctl+0x33c/0x3c0 [ 168.476325][ T8008] ? __fget_files+0x184/0x1c0 [ 168.476358][ T8008] ? __pfx_raw_ioctl+0x10/0x10 [ 168.476395][ T8008] __se_sys_ioctl+0xce/0x140 [ 168.476491][ T8008] __x64_sys_ioctl+0x43/0x50 [ 168.476529][ T8008] x64_sys_call+0x239d/0x2550 [ 168.476567][ T8008] do_syscall_64+0x112/0x360 [ 168.476670][ T8008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.476699][ T8008] RIP: 0033:0x7fa39962ddeb [ 168.476723][ T8008] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 168.476783][ T8008] RSP: 002b:00007fa398084f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.476816][ T8008] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa39962ddeb [ 168.476837][ T8008] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 168.476889][ T8008] RBP: 00007fa398085fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 168.476910][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.476929][ T8008] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 168.476982][ T8008] [ 168.495432][ T8008] bus_add_driver: failed to create module links for raw-gadget.0 [ 168.495537][ T8008] UDC core: USB Raw Gadget: driver registration failed: -12 [ 168.495558][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 168.775277][ T8023] loop3: detected capacity change from 0 to 512 [ 168.794774][ T8023] EXT4-fs (loop3): 1 truncate cleaned up [ 168.808409][ T8023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.979251][ T8033] loop9: detected capacity change from 0 to 256 [ 169.143294][ T8041] syz.9.1198: attempt to access beyond end of device [ 169.143294][ T8041] loop9: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 169.285179][ T8045] syzkaller1: entered promiscuous mode [ 169.285258][ T8045] syzkaller1: entered allmulticast mode [ 169.617114][ T8060] loop8: detected capacity change from 0 to 512 [ 169.624055][ T8060] EXT4-fs (loop8): blocks per group (8192) and clusters per group (2304) inconsistent [ 169.656258][ T8059] loop6: detected capacity change from 0 to 164 [ 169.712213][ T8059] rock: directory entry would overflow storage [ 169.712232][ T8059] rock: sig=0x66, size=4, remaining=3 [ 169.775467][ T8059] device-mapper: table: 252:0: too large device [ 169.775489][ T8059] device-mapper: ioctl: error adding target to table [ 170.169406][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1220'. [ 170.193764][ T5136] Bluetooth: hci0: Frame reassembly failed (-84) [ 170.352848][ T7806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.433281][ T8094] FAULT_INJECTION: forcing a failure. [ 170.433281][ T8094] name failslab, interval 1, probability 0, space 0, times 0 [ 170.433315][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.6.1225 Not tainted syzkaller #0 PREEMPT(lazy) [ 170.433406][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.433425][ T8094] Call Trace: [ 170.433437][ T8094] [ 170.433450][ T8094] __dump_stack+0x1d/0x30 [ 170.433484][ T8094] dump_stack_lvl+0x95/0xd0 [ 170.433560][ T8094] dump_stack+0x15/0x1b [ 170.433592][ T8094] should_fail_ex+0x262/0x280 [ 170.433619][ T8094] should_failslab+0x8c/0xb0 [ 170.433659][ T8094] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 170.433741][ T8094] ? __d_alloc+0x34/0x320 [ 170.433770][ T8094] ? __d_alloc+0x34/0x320 [ 170.433800][ T8094] __d_alloc+0x34/0x320 [ 170.433831][ T8094] ? d_alloc_pseudo+0x13/0x80 [ 170.433884][ T8094] d_alloc_pseudo+0x1e/0x80 [ 170.433910][ T8094] alloc_path_pseudo+0xa4/0x140 [ 170.433939][ T8094] alloc_file_pseudo+0x55/0x120 [ 170.434001][ T8094] __anon_inode_getfile+0x105/0x180 [ 170.434031][ T8094] anon_inode_create_getfile+0x38/0x50 [ 170.434059][ T8094] io_uring_create+0x3ca/0x4f0 [ 170.434093][ T8094] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 170.434129][ T8094] __x64_sys_io_uring_setup+0x31/0x40 [ 170.434157][ T8094] x64_sys_call+0x1fbf/0x2550 [ 170.434231][ T8094] do_syscall_64+0x112/0x360 [ 170.434279][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.434309][ T8094] RIP: 0033:0x7fee430ce159 [ 170.434348][ T8094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.434374][ T8094] RSP: 002b:00007fee41b27028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 170.434411][ T8094] RAX: ffffffffffffffda RBX: 00007fee43355fa0 RCX: 00007fee430ce159 [ 170.434432][ T8094] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000bbc [ 170.434453][ T8094] RBP: 00007fee4316503b R08: 0000000000000000 R09: 0000000000000000 [ 170.434544][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.434562][ T8094] R13: 00007fee43356038 R14: 00007fee43355fa0 R15: 00007ffcf4343f18 [ 170.434588][ T8094] [ 170.472458][ T8099] loop3: detected capacity change from 0 to 256 [ 170.473545][ T8099] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.498753][ T8099] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.965070][ T5136] IPVS: starting estimator thread 0... [ 171.046177][ T8121] IPVS: using max 2448 ests per chain, 122400 per kthread [ 171.134103][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 171.134146][ T29] audit: type=1400 audit(1789446652.638:970): avc: denied { write } for pid=8097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.253746][ T29] audit: type=1400 audit(1789446652.758:971): avc: denied { write } for pid=8134 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.618412][ T29] audit: type=1400 audit(1789446653.128:972): avc: denied { write } for pid=8136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.745988][ T8128] loop3: detected capacity change from 0 to 512 [ 171.747009][ T8128] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.776077][ T8128] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1234: corrupted in-inode xattr: e_value size too large [ 171.776146][ T8128] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.779546][ T8128] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1234: couldn't read orphan inode 15 (err -117) [ 171.779606][ T8128] loop3: lost filesystem error report for type 5 error -117 [ 171.782641][ T8128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.826072][ T29] audit: type=1400 audit(1789446653.328:973): avc: denied { write } for pid=8127 comm="syz.3.1234" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.901113][ T29] audit: type=1400 audit(1789446653.408:974): avc: denied { write } for pid=8164 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.236311][ T3534] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 172.253342][ T7806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.423447][ T29] audit: type=1400 audit(1789446653.928:975): avc: denied { write } for pid=8175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.433391][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1250'. [ 172.473584][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1250'. [ 172.477945][ T75] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.479024][ T75] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.479129][ T75] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.479261][ T75] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.701025][ T29] audit: type=1400 audit(1789446654.208:976): avc: denied { bind } for pid=8201 comm="syz.6.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.706142][ T29] audit: type=1400 audit(1789446654.208:977): avc: denied { listen } for pid=8201 comm="syz.6.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.708095][ T29] audit: type=1400 audit(1789446654.218:978): avc: denied { mounton } for pid=8201 comm="syz.6.1251" path="/160/file0" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.708777][ T9] kernel read not supported for file /387/oom_score_adj (pid: 9 comm: kworker/0:0) [ 172.795336][ T29] audit: type=1400 audit(1789446654.298:979): avc: denied { write } for pid=8203 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.505979][ T8241] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 173.584774][ T8247] FAULT_INJECTION: forcing a failure. [ 173.584774][ T8247] name failslab, interval 1, probability 0, space 0, times 0 [ 173.584838][ T8247] CPU: 0 UID: 0 PID: 8247 Comm: syz.3.1259 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.584894][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.584909][ T8247] Call Trace: [ 173.584922][ T8247] [ 173.584936][ T8247] __dump_stack+0x1d/0x30 [ 173.585009][ T8247] dump_stack_lvl+0x95/0xd0 [ 173.585035][ T8247] dump_stack+0x15/0x1b [ 173.585059][ T8247] should_fail_ex+0x262/0x280 [ 173.585143][ T8247] ? alloc_vfsmnt+0x2d/0x2f0 [ 173.585177][ T8247] should_failslab+0x8c/0xb0 [ 173.585248][ T8247] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 173.585287][ T8247] ? alloc_vfsmnt+0x140/0x2f0 [ 173.585322][ T8247] ? alloc_vfsmnt+0x2d/0x2f0 [ 173.585358][ T8247] alloc_vfsmnt+0x2d/0x2f0 [ 173.585457][ T8247] clone_mnt+0x30/0x5d0 [ 173.585495][ T8247] copy_tree+0x2dc/0x890 [ 173.585581][ T8247] copy_mnt_ns+0x1d2/0x720 [ 173.585628][ T8247] create_new_namespaces+0x7f/0x420 [ 173.585672][ T8247] unshare_nsproxy_namespaces+0x115/0x150 [ 173.585792][ T8247] ksys_unshare+0x42b/0x710 [ 173.585838][ T8247] __x64_sys_unshare+0x1f/0x30 [ 173.585894][ T8247] x64_sys_call+0x1e33/0x2550 [ 173.585929][ T8247] do_syscall_64+0x112/0x360 [ 173.586030][ T8247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.586061][ T8247] RIP: 0033:0x7fe5921fe159 [ 173.586086][ T8247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.586109][ T8247] RSP: 002b:00007fe590c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 173.586205][ T8247] RAX: ffffffffffffffda RBX: 00007fe592485fa0 RCX: 00007fe5921fe159 [ 173.586227][ T8247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 173.586248][ T8247] RBP: 00007fe59229503b R08: 0000000000000000 R09: 0000000000000000 [ 173.586330][ T8247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.586350][ T8247] R13: 00007fe592486038 R14: 00007fe592485fa0 R15: 00007ffd6644fa08 [ 173.586453][ T8247] [ 174.724794][ T8270] program syz.3.1265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.873635][ T8274] FAULT_INJECTION: forcing a failure. [ 174.873635][ T8274] name failslab, interval 1, probability 0, space 0, times 0 [ 174.873675][ T8274] CPU: 0 UID: 0 PID: 8274 Comm: syz.8.1269 Not tainted syzkaller #0 PREEMPT(lazy) [ 174.873707][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.873724][ T8274] Call Trace: [ 174.873733][ T8274] [ 174.873743][ T8274] __dump_stack+0x1d/0x30 [ 174.873770][ T8274] dump_stack_lvl+0x95/0xd0 [ 174.873800][ T8274] dump_stack+0x15/0x1b [ 174.873827][ T8274] should_fail_ex+0x262/0x280 [ 174.873859][ T8274] ? mas_alloc_nodes+0x1a2/0x210 [ 174.873896][ T8274] should_failslab+0x8c/0xb0 [ 174.873926][ T8274] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 174.873954][ T8274] ? mas_alloc_nodes+0x1a2/0x210 [ 174.873988][ T8274] mas_alloc_nodes+0x1a2/0x210 [ 174.874023][ T8274] mas_preallocate+0x2ca/0x500 [ 174.874060][ T8274] commit_merge+0x39d/0x840 [ 174.874086][ T8274] vma_modify+0x9eb/0xd50 [ 174.874112][ T8274] vma_modify_flags+0x1be/0x250 [ 174.874148][ T8274] mlock_fixup+0x166/0x460 [ 174.874184][ T8274] apply_mlockall_flags+0x1d3/0x250 [ 174.874219][ T8274] __ia32_sys_munlockall+0xdb/0x190 [ 174.874254][ T8274] x64_sys_call+0x1a18/0x2550 [ 174.874283][ T8274] do_syscall_64+0x112/0x360 [ 174.874315][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.874339][ T8274] RIP: 0033:0x7fa39962e159 [ 174.874360][ T8274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.874382][ T8274] RSP: 002b:00007fa398087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 174.874411][ T8274] RAX: ffffffffffffffda RBX: 00007fa3998b5fa0 RCX: 00007fa39962e159 [ 174.874428][ T8274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.874442][ T8274] RBP: 00007fa3998b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 174.874457][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.874471][ T8274] R13: 00007fa3998b6038 R14: 00007fa3998b5fa0 R15: 00007ffcf7aa9838 [ 174.874492][ T8274] [ 175.408500][ T8294] FAULT_INJECTION: forcing a failure. [ 175.408500][ T8294] name failslab, interval 1, probability 0, space 0, times 0 [ 175.408538][ T8294] CPU: 1 UID: 0 PID: 8294 Comm: syz.6.1275 Not tainted syzkaller #0 PREEMPT(lazy) [ 175.408632][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.408652][ T8294] Call Trace: [ 175.408707][ T8294] [ 175.408721][ T8294] __dump_stack+0x1d/0x30 [ 175.408820][ T8294] dump_stack_lvl+0x95/0xd0 [ 175.408850][ T8294] dump_stack+0x15/0x1b [ 175.408916][ T8294] should_fail_ex+0x262/0x280 [ 175.408946][ T8294] ? __register_sysctl_table+0x7a0/0xbe0 [ 175.408975][ T8294] should_failslab+0x8c/0xb0 [ 175.409071][ T8294] __kmalloc_noprof+0xd0/0x4d0 [ 175.409174][ T8294] ? __register_sysctl_table+0x7a0/0xbe0 [ 175.409198][ T8294] __register_sysctl_table+0x7a0/0xbe0 [ 175.409223][ T8294] setup_mq_sysctls+0x398/0x3e0 [ 175.409301][ T8294] copy_ipcs+0x28b/0x460 [ 175.409328][ T8294] create_new_namespaces+0x121/0x420 [ 175.409364][ T8294] unshare_nsproxy_namespaces+0x115/0x150 [ 175.409420][ T8294] ksys_unshare+0x42b/0x710 [ 175.409500][ T8294] __x64_sys_unshare+0x1f/0x30 [ 175.409536][ T8294] x64_sys_call+0x1e33/0x2550 [ 175.409649][ T8294] do_syscall_64+0x112/0x360 [ 175.409692][ T8294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.409724][ T8294] RIP: 0033:0x7fee430ce159 [ 175.409750][ T8294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.409776][ T8294] RSP: 002b:00007fee41b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 175.409821][ T8294] RAX: ffffffffffffffda RBX: 00007fee43355fa0 RCX: 00007fee430ce159 [ 175.409875][ T8294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 175.409959][ T8294] RBP: 00007fee4316503b R08: 0000000000000000 R09: 0000000000000000 [ 175.409978][ T8294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.409997][ T8294] R13: 00007fee43356038 R14: 00007fee43355fa0 R15: 00007ffcf4343f18 [ 175.410070][ T8294] [ 175.480191][ T8294] sysctl could not get directory: /fs/mqueue -12 [ 175.779459][ T8304] loop2: detected capacity change from 0 to 512 [ 175.846295][ T8304] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1279: bg 0: block 4: invalid block bitmap [ 175.846378][ T8304] loop2: lost filesystem error report for type 5 error -117 [ 175.856223][ T8304] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 175.856256][ T8304] loop2: lost filesystem error report for type 5 error -117 [ 175.868964][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 175.868993][ C1] EXT4-fs (loop2): initial error at time 1789446657: ext4_validate_block_bitmap:436 [ 175.869030][ C1] EXT4-fs (loop2): last error at time 1789446657: ext4_mb_clear_bb:6680 [ 175.893620][ T8304] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1279: invalid indirect mapped block 1 (level 1) [ 175.893663][ T8304] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 175.899765][ T8304] EXT4-fs (loop2): 1 truncate cleaned up [ 175.948902][ T8304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.258680][ T4134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.425261][ T8329] FAULT_INJECTION: forcing a failure. [ 176.425261][ T8329] name failslab, interval 1, probability 0, space 0, times 0 [ 176.425301][ T8329] CPU: 1 UID: 0 PID: 8329 Comm: syz.2.1282 Not tainted syzkaller #0 PREEMPT(lazy) [ 176.425334][ T8329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.425402][ T8329] Call Trace: [ 176.425412][ T8329] [ 176.425425][ T8329] __dump_stack+0x1d/0x30 [ 176.425509][ T8329] dump_stack_lvl+0x95/0xd0 [ 176.425538][ T8329] dump_stack+0x15/0x1b [ 176.425576][ T8329] should_fail_ex+0x262/0x280 [ 176.425602][ T8329] should_failslab+0x8c/0xb0 [ 176.425699][ T8329] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 176.425742][ T8329] ? __d_alloc+0x34/0x320 [ 176.425773][ T8329] ? __d_alloc+0x34/0x320 [ 176.425798][ T8329] __d_alloc+0x34/0x320 [ 176.425903][ T8329] ? d_alloc_pseudo+0x13/0x80 [ 176.425936][ T8329] d_alloc_pseudo+0x1e/0x80 [ 176.426038][ T8329] alloc_path_pseudo+0xa4/0x140 [ 176.426071][ T8329] alloc_file_pseudo+0x55/0x120 [ 176.426110][ T8329] __anon_inode_getfile+0x105/0x180 [ 176.426140][ T8329] anon_inode_create_getfile+0x38/0x50 [ 176.426178][ T8329] io_uring_create+0x3ca/0x4f0 [ 176.426269][ T8329] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 176.426311][ T8329] __x64_sys_io_uring_setup+0x31/0x40 [ 176.426343][ T8329] x64_sys_call+0x1fbf/0x2550 [ 176.426428][ T8329] do_syscall_64+0x112/0x360 [ 176.426469][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.426500][ T8329] RIP: 0033:0x7ff9acb1e159 [ 176.426522][ T8329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.426624][ T8329] RSP: 002b:00007ff9ab577028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 176.426659][ T8329] RAX: ffffffffffffffda RBX: 00007ff9acda5fa0 RCX: 00007ff9acb1e159 [ 176.426680][ T8329] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000bbc [ 176.426701][ T8329] RBP: 00007ff9acbb503b R08: 0000000000000000 R09: 0000000000000000 [ 176.426721][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.426736][ T8329] R13: 00007ff9acda6038 R14: 00007ff9acda5fa0 R15: 00007ffd187a7f58 [ 176.426809][ T8329] [ 176.552035][ T8330] loop3: detected capacity change from 0 to 2048 [ 176.621716][ T8330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.667095][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 176.667116][ T29] audit: type=1400 audit(1789446658.178:988): avc: denied { write } for pid=8328 comm="syz.3.1284" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.693685][ T29] audit: type=1400 audit(1789446658.198:989): avc: denied { execute } for pid=8328 comm="syz.3.1284" path="/12/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.766417][ T8328] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 176.766580][ T8328] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 176.766605][ T8328] EXT4-fs (loop3): This should not happen!! Data will be lost [ 176.766605][ T8328] [ 176.766620][ T8328] EXT4-fs (loop3): Total free blocks count 0 [ 176.766639][ T8328] EXT4-fs (loop3): Free/Dirty block details [ 176.766655][ T8328] EXT4-fs (loop3): free_blocks=4096 [ 176.766681][ T8328] EXT4-fs (loop3): dirty_blocks=32 [ 176.766699][ T8328] EXT4-fs (loop3): Block reservation details [ 176.766717][ T8328] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 176.932725][ T29] audit: type=1400 audit(1789446658.438:990): avc: denied { write } for pid=8311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.985658][ T7806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.155971][ T29] audit: type=1400 audit(1789446658.658:991): avc: denied { write } for pid=8356 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.353260][ T8365] batadv_slave_1: entered promiscuous mode [ 177.384691][ T8365] batadv_slave_1: left promiscuous mode [ 177.458883][ T8372] loop9: detected capacity change from 0 to 512 [ 177.480172][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 177.483412][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1297'. [ 177.547671][ T29] audit: type=1400 audit(1789446659.058:992): avc: denied { mounton } for pid=8369 comm="syz.9.1306" path="/91/file2/bus" dev="loop9" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 177.640658][ T8372] loop9: detected capacity change from 512 to 0 [ 177.644260][ T8378] FAT-fs (loop9): FAT read failed (blocknr 32) [ 177.731654][ T8382] FAULT_INJECTION: forcing a failure. [ 177.731654][ T8382] name failslab, interval 1, probability 0, space 0, times 0 [ 177.735542][ T8382] CPU: 0 UID: 0 PID: 8382 Comm: syz.3.1298 Not tainted syzkaller #0 PREEMPT(lazy) [ 177.735581][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.735626][ T8382] Call Trace: [ 177.735641][ T8382] [ 177.735654][ T8382] __dump_stack+0x1d/0x30 [ 177.735757][ T8382] dump_stack_lvl+0x95/0xd0 [ 177.735781][ T8382] dump_stack+0x15/0x1b [ 177.735810][ T8382] should_fail_ex+0x262/0x280 [ 177.735872][ T8382] ? do_getname+0x2e/0x1c0 [ 177.735900][ T8382] should_failslab+0x8c/0xb0 [ 177.735977][ T8382] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 177.736017][ T8382] ? do_getname+0x2e/0x1c0 [ 177.736043][ T8382] do_getname+0x2e/0x1c0 [ 177.736143][ T8382] getname_flags+0x1d/0x30 [ 177.736173][ T8382] do_sys_openat2+0x6c/0x130 [ 177.736279][ T8382] __x64_sys_openat+0xf2/0x120 [ 177.736305][ T8382] x64_sys_call+0x1f72/0x2550 [ 177.736341][ T8382] do_syscall_64+0x112/0x360 [ 177.736435][ T8382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.736468][ T8382] RIP: 0033:0x7fe5921be98e [ 177.736564][ T8382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.736587][ T8382] RSP: 002b:00007fe590c56ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.736622][ T8382] RAX: ffffffffffffffda RBX: 00007fe590c576c0 RCX: 00007fe5921be98e [ 177.736694][ T8382] RDX: 0000000000000000 RSI: 00007fe590c56f90 RDI: ffffffffffffff9c [ 177.736710][ T8382] RBP: 00007fe59229503b R08: 0000000000000000 R09: 0000000000000000 [ 177.736726][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.736801][ T8382] R13: 00007fe592486038 R14: 00007fe592485fa0 R15: 00007ffd6644fa08 [ 177.736827][ T8382] [ 177.828168][ T29] audit: type=1400 audit(1789446659.328:993): avc: denied { name_bind } for pid=8386 comm="syz.2.1300" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 177.861466][ T6443] FAT-fs (loop9): Directory bread(block 34) failed [ 177.861512][ T6443] FAT-fs (loop9): Directory bread(block 35) failed [ 177.861607][ T6443] FAT-fs (loop9): Directory bread(block 36) failed [ 177.861631][ T6443] FAT-fs (loop9): Directory bread(block 37) failed [ 177.861654][ T6443] FAT-fs (loop9): Directory bread(block 38) failed [ 177.861720][ T6443] FAT-fs (loop9): Directory bread(block 39) failed [ 177.861743][ T6443] FAT-fs (loop9): Directory bread(block 40) failed [ 177.861767][ T6443] FAT-fs (loop9): Directory bread(block 41) failed [ 177.959195][ T29] audit: type=1400 audit(1789446659.468:994): avc: denied { write } for pid=8359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.183184][ T29] audit: type=1400 audit(1789446659.688:995): avc: denied { write } for pid=8396 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.259671][ T5146] FAT-fs (loop9): bread failed in fat_clusters_flush [ 178.260248][ T6443] FAT-fs (loop9): unable to read boot sector to mark fs as dirty [ 179.146982][ T8395] loop2: detected capacity change from 0 to 512 [ 179.147728][ T8395] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.228593][ T8395] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.1304: corrupted in-inode xattr: e_value size too large [ 179.228680][ T8395] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.235805][ T8433] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.245798][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 179.245827][ C1] EXT4-fs (loop2): initial error at time 1789446660: ext4_iget_extra_inode:5210: inode 15 [ 179.245904][ C1] EXT4-fs (loop2): last error at time 1789446660: ext4_iget_extra_inode:5210: inode 15 [ 179.254583][ T8395] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1304: couldn't read orphan inode 15 (err -117) [ 179.254624][ T8395] loop2: lost filesystem error report for type 5 error -117 [ 179.270346][ T8395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.300572][ T8433] team0: Port device bond5 added [ 179.315792][ T29] audit: type=1400 audit(1789446660.818:996): avc: denied { write } for pid=8393 comm="syz.2.1304" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.043013][ T41] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.302308][ T41] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.370397][ T4134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.396708][ T41] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.405161][ T8500] loop8: detected capacity change from 0 to 1024 [ 180.423490][ T8500] EXT4-fs: Ignoring removed bh option [ 180.431065][ T8500] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 180.473083][ T8500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.512693][ T41] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.607907][ T29] audit: type=1400 audit(1789446662.118:997): avc: denied { connect } for pid=8509 comm="syz.6.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.302052][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.302101][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.302630][ T8411] bridge_slave_0: entered allmulticast mode [ 181.311903][ T8411] bridge_slave_0: entered promiscuous mode [ 181.324608][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.324663][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.325439][ T8411] bridge_slave_1: entered allmulticast mode [ 181.329525][ T8411] bridge_slave_1: entered promiscuous mode [ 181.468390][ T8411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.507408][ T6360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.558751][ T41] bridge_slave_1: left allmulticast mode [ 181.558780][ T41] bridge_slave_1: left promiscuous mode [ 181.558958][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.615371][ T41] bridge_slave_0: left allmulticast mode [ 181.615397][ T41] bridge_slave_0: left promiscuous mode [ 181.615546][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.790556][ T41] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 181.790586][ T41] ip6gre1 (unregistering): left promiscuous mode [ 181.913497][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.935212][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.951516][ T41] bond0 (unregistering): Released all slaves [ 181.972052][ T41] bond1 (unregistering): (slave team0): Removing an active aggregator [ 181.977654][ T41] bond1 (unregistering): (slave team0): Releasing backup interface [ 182.134076][ T8566] FAULT_INJECTION: forcing a failure. [ 182.134076][ T8566] name failslab, interval 1, probability 0, space 0, times 0 [ 182.134160][ T8566] CPU: 0 UID: 0 PID: 8566 Comm: syz.8.1331 Not tainted syzkaller #0 PREEMPT(lazy) [ 182.134272][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.134290][ T8566] Call Trace: [ 182.134302][ T8566] [ 182.134314][ T8566] __dump_stack+0x1d/0x30 [ 182.134346][ T8566] dump_stack_lvl+0x95/0xd0 [ 182.134373][ T8566] dump_stack+0x15/0x1b [ 182.134444][ T8566] should_fail_ex+0x262/0x280 [ 182.134477][ T8566] ? sctp_auth_shkey_create+0x65/0x110 [ 182.134588][ T8566] should_failslab+0x8c/0xb0 [ 182.134625][ T8566] __kmalloc_cache_noprof+0x7a/0x400 [ 182.134747][ T8566] ? sctp_auth_shkey_create+0x65/0x110 [ 182.134781][ T8566] sctp_auth_shkey_create+0x65/0x110 [ 182.134884][ T8566] sctp_endpoint_new+0x2cc/0x560 [ 182.134960][ T8566] sctp_init_sock+0x619/0x6f0 [ 182.134996][ T8566] inet_create+0x720/0x790 [ 182.135096][ T8566] __sock_create+0x2e5/0x580 [ 182.135139][ T8566] __sys_socket+0xaf/0x180 [ 182.135175][ T8566] __x64_sys_socket+0x3f/0x50 [ 182.135207][ T8566] x64_sys_call+0x246e/0x2550 [ 182.135280][ T8566] do_syscall_64+0x112/0x360 [ 182.135324][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.135402][ T8566] RIP: 0033:0x7fa39962e159 [ 182.135426][ T8566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.135555][ T8566] RSP: 002b:00007fa398087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 182.135589][ T8566] RAX: ffffffffffffffda RBX: 00007fa3998b5fa0 RCX: 00007fa39962e159 [ 182.135610][ T8566] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 182.135629][ T8566] RBP: 00007fa3996c503b R08: 0000000000000000 R09: 0000000000000000 [ 182.135645][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.135728][ T8566] R13: 00007fa3998b6038 R14: 00007fa3998b5fa0 R15: 00007ffcf7aa9838 [ 182.135756][ T8566] [ 183.287629][ T41] bond1 (unregistering): Released all slaves [ 183.313323][ T41] bond2 (unregistering): Released all slaves [ 183.338345][ T8411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.368043][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 183.461353][ T41] hsr_slave_0: left promiscuous mode [ 183.464287][ T41] hsr_slave_1: left promiscuous mode [ 183.465938][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.465960][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.501906][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.501927][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.589702][ T41] veth1_macvtap: left promiscuous mode [ 183.589743][ T41] veth0_macvtap: left promiscuous mode [ 183.589797][ T41] veth1_vlan: left promiscuous mode [ 183.589838][ T41] veth0_vlan: left promiscuous mode [ 183.808987][ T8645] loop6: detected capacity change from 0 to 512 [ 183.840556][ T8645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 183.840667][ T8645] System zones: 1-12 [ 183.858407][ T8645] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.1340: missing EA_INODE flag [ 183.858440][ T8645] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 183.860999][ T8645] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1340: error while reading EA inode 12 err=-117 [ 183.861045][ T8645] loop6: lost filesystem error report for type 5 error -117 [ 183.864856][ T8645] EXT4-fs (loop6): 1 orphan inode deleted [ 183.872952][ T8645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.923652][ T41] team0 (unregistering): Port device team_slave_1 removed [ 183.958497][ T41] team0 (unregistering): Port device team_slave_0 removed [ 184.064953][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 184.064981][ T29] audit: type=1400 audit(1789446665.568:1000): avc: denied { write } for pid=8628 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.072113][ T8411] team0: Port device team_slave_0 added [ 184.105156][ T8411] team0: Port device team_slave_1 added [ 184.159028][ T29] audit: type=1400 audit(1789446665.668:1001): avc: denied { write } for pid=8660 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.163656][ T5057] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.243646][ T29] audit: type=1400 audit(1789446665.748:1002): avc: denied { mounton } for pid=8665 comm="syz.8.1345" path="/proc/242/cgroup" dev="proc" ino=23584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 184.293009][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.293057][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.293270][ T8411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.318727][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.318788][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.318818][ T8411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.503197][ T8679] FAULT_INJECTION: forcing a failure. [ 184.503197][ T8679] name failslab, interval 1, probability 0, space 0, times 0 [ 184.503231][ T8679] CPU: 0 UID: 0 PID: 8679 Comm: syz.6.1350 Not tainted syzkaller #0 PREEMPT(lazy) [ 184.503294][ T8679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.503380][ T8679] Call Trace: [ 184.503396][ T8679] [ 184.503409][ T8679] __dump_stack+0x1d/0x30 [ 184.503483][ T8679] dump_stack_lvl+0x95/0xd0 [ 184.503513][ T8679] dump_stack+0x15/0x1b [ 184.503546][ T8679] should_fail_ex+0x262/0x280 [ 184.503612][ T8679] ? ioctx_alloc+0xe3/0x480 [ 184.503648][ T8679] should_failslab+0x8c/0xb0 [ 184.503678][ T8679] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 184.503819][ T8679] ? ioctx_alloc+0xe3/0x480 [ 184.503898][ T8679] ioctx_alloc+0xe3/0x480 [ 184.503934][ T8679] __se_sys_io_setup+0x6b/0x1b0 [ 184.503980][ T8679] __x64_sys_io_setup+0x31/0x40 [ 184.504015][ T8679] x64_sys_call+0x1a9f/0x2550 [ 184.504043][ T8679] do_syscall_64+0x112/0x360 [ 184.504140][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.504172][ T8679] RIP: 0033:0x7fee430ce159 [ 184.504197][ T8679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.504227][ T8679] RSP: 002b:00007fee41b27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 184.504261][ T8679] RAX: ffffffffffffffda RBX: 00007fee43355fa0 RCX: 00007fee430ce159 [ 184.504279][ T8679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008001 [ 184.504295][ T8679] RBP: 00007fee4316503b R08: 0000000000000000 R09: 0000000000000000 [ 184.504311][ T8679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.504359][ T8679] R13: 00007fee43356038 R14: 00007fee43355fa0 R15: 00007ffcf4343f18 [ 184.504384][ T8679] [ 184.599607][ T8678] loop8: detected capacity change from 0 to 1024 [ 184.614735][ T8678] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 184.615098][ T8678] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 184.627739][ T8411] hsr_slave_0: entered promiscuous mode [ 184.631266][ T8678] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 2: comm syz.8.1347: lblock 2 mapped to illegal pblock 2 (length 1) [ 184.631306][ T8678] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 184.633094][ T8678] EXT4-fs (loop8): Remounting filesystem read-only [ 184.633113][ T8678] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 184.633164][ T8678] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 184.633283][ T8678] EXT4-fs (loop8): 1 orphan inode deleted [ 184.634134][ T8678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.635831][ T8411] hsr_slave_1: entered promiscuous mode [ 184.657418][ T8682] loop2: detected capacity change from 0 to 128 [ 184.688003][ T29] audit: type=1400 audit(1789446666.188:1003): avc: denied { watch watch_reads } for pid=8673 comm="syz.8.1347" path="/101/file0" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.706474][ T8682] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.717257][ T8682] ext4 filesystem being mounted at /229/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.782174][ T29] audit: type=1400 audit(1789446666.288:1004): avc: denied { write } for pid=8680 comm="syz.2.1351" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.883465][ T8682] Invalid argument reading file caps for ./file0 [ 184.884952][ T29] audit: type=1400 audit(1789446666.368:1005): avc: denied { execute_no_trans } for pid=8680 comm="syz.2.1351" path="/229/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 184.893156][ T6360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.962168][ T29] audit: type=1400 audit(1789446666.418:1006): avc: denied { relabelfrom } for pid=8684 comm="syz.3.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 184.962209][ T29] audit: type=1400 audit(1789446666.418:1007): avc: denied { relabelto } for pid=8684 comm="syz.3.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 185.050098][ T4134] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.066997][ T8694] FAULT_INJECTION: forcing a failure. [ 185.066997][ T8694] name failslab, interval 1, probability 0, space 0, times 0 [ 185.067036][ T8694] CPU: 0 UID: 0 PID: 8694 Comm: syz.8.1354 Not tainted syzkaller #0 PREEMPT(lazy) [ 185.067150][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.067168][ T8694] Call Trace: [ 185.067178][ T8694] [ 185.067188][ T8694] __dump_stack+0x1d/0x30 [ 185.067268][ T8694] dump_stack_lvl+0x95/0xd0 [ 185.067292][ T8694] dump_stack+0x15/0x1b [ 185.067362][ T8694] should_fail_ex+0x262/0x280 [ 185.067394][ T8694] ? fib_insert_alias+0x2a7/0x7b0 [ 185.067429][ T8694] should_failslab+0x8c/0xb0 [ 185.067491][ T8694] __kmalloc_cache_noprof+0x7a/0x400 [ 185.067552][ T8694] ? fib_insert_alias+0x2a7/0x7b0 [ 185.067582][ T8694] fib_insert_alias+0x2a7/0x7b0 [ 185.067676][ T8694] fib_trie_unmerge+0x456/0xa80 [ 185.067714][ T8694] fib_unmerge+0x7d/0x200 [ 185.067741][ T8694] fib4_rule_configure+0x21f/0x520 [ 185.067832][ T8694] ? fib_nl2rule_locked+0x239/0x260 [ 185.067866][ T8694] fib_newrule+0x4b8/0xa00 [ 185.067897][ T8694] ? avc_has_perm_noaudit+0xa3/0x120 [ 185.067987][ T8694] fib_nl_newrule+0x46/0x60 [ 185.068096][ T8694] ? __pfx_fib_nl_newrule+0x10/0x10 [ 185.068136][ T8694] rtnetlink_rcv_msg+0x64b/0x720 [ 185.068177][ T8694] netlink_rcv_skb+0x11e/0x220 [ 185.068219][ T8694] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.068336][ T8694] rtnetlink_rcv+0x1c/0x30 [ 185.068367][ T8694] netlink_unicast+0x5a9/0x680 [ 185.068441][ T8694] netlink_sendmsg+0x5be/0x6f0 [ 185.068523][ T8694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.068563][ T8694] ____sys_sendmsg+0x532/0x580 [ 185.068626][ T8694] ___sys_sendmsg+0x195/0x1e0 [ 185.068666][ T8694] __x64_sys_sendmsg+0xd4/0x160 [ 185.068748][ T8694] x64_sys_call+0x22ab/0x2550 [ 185.068783][ T8694] do_syscall_64+0x112/0x360 [ 185.068826][ T8694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.068884][ T8694] RIP: 0033:0x7fa39962e159 [ 185.068910][ T8694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.069025][ T8694] RSP: 002b:00007fa398087028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.069061][ T8694] RAX: ffffffffffffffda RBX: 00007fa3998b5fa0 RCX: 00007fa39962e159 [ 185.069082][ T8694] RDX: 0000000000044004 RSI: 0000200000000400 RDI: 0000000000000004 [ 185.069098][ T8694] RBP: 00007fa3996c503b R08: 0000000000000000 R09: 0000000000000000 [ 185.069114][ T8694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.069129][ T8694] R13: 00007fa3998b6038 R14: 00007fa3998b5fa0 R15: 00007ffcf7aa9838 [ 185.069220][ T8694] [ 185.075998][ T8691] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1353'. [ 185.375650][ T8704] loop8: detected capacity change from 0 to 1024 [ 185.381666][ T8702] program syz.2.1355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.399816][ T8704] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 185.436904][ T8704] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.636666][ T8704] loop8: detected capacity change from 1024 to 64 [ 185.641852][ T2983] ================================================================== [ 185.641893][ T2983] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 185.641937][ T2983] [ 185.641949][ T2983] read-write to 0xffff88811a245300 of 4 bytes by task 5539 on cpu 1: [ 185.641969][ T2983] d_delete+0x15a/0x180 [ 185.641995][ T2983] d_delete_notify+0x32/0x100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 185.642024][ T2983] vfs_unlink+0x287/0x490 [ 185.642155][ T2983] filename_unlinkat+0x1dc/0x410 [ 185.642193][ T2983] __se_sys_unlink+0x2b/0xe0 [ 185.642235][ T2983] __x64_sys_unlink+0x1f/0x30 [ 185.642272][ T2983] x64_sys_call+0x18ee/0x2550 [ 185.642299][ T2983] do_syscall_64+0x112/0x360 [ 185.642336][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.642367][ T2983] [ 185.642378][ T2983] read to 0xffff88811a245300 of 4 bytes by task 2983 on cpu 0: [ 185.642401][ T2983] step_into_slowpath+0x139/0x4c0 [ 185.642432][ T2983] path_lookupat+0x2eb/0x4c0 [ 185.642457][ T2983] filename_lookup+0x18f/0x390 [ 185.642483][ T2983] do_readlinkat+0x74/0x2f0 [ 185.642512][ T2983] __x64_sys_readlink+0x47/0x60 [ 185.642535][ T2983] x64_sys_call+0x1d41/0x2550 [ 185.642561][ T2983] do_syscall_64+0x112/0x360 [ 185.642589][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.642616][ T2983] [ 185.642624][ T2983] value changed: 0x00300180 -> 0x00000080 [ 185.642641][ T2983] [ 185.642648][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 185.642663][ T2983] CPU: 0 UID: 0 PID: 2983 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 185.642689][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.642703][ T2983] ================================================================== [ 185.874711][ T8721] loop6: detected capacity change from 0 to 1764 [ 186.096209][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 186.382828][ T5162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.494589][ T5162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.548670][ T6360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.570952][ T8707] bio_check_eod: 2 callbacks suppressed [ 186.570974][ T8707] kmmpd-loop8: attempt to access beyond end of device [ 186.570974][ T8707] loop8: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 186.571069][ T8707] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 186.603548][ T5162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.697529][ T5162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.906917][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 186.910619][ T5162] bridge_slave_1: left allmulticast mode [ 186.910647][ T5162] bridge_slave_1: left promiscuous mode [ 186.910905][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.914139][ T5162] bridge_slave_0: left allmulticast mode [ 186.914210][ T5162] bridge_slave_0: left promiscuous mode [ 186.914413][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.072299][ T5162] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 187.072331][ T5162] ip6gre1 (unregistering): left promiscuous mode [ 187.093465][ T5162] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 187.128638][ T5162] bond1 (unregistering): (slave gretap1): Releasing active interface [ 187.165607][ T5162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.188891][ T5162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.192012][ T5162] bond0 (unregistering): Released all slaves [ 187.194069][ T5162] bond1 (unregistering): Released all slaves [ 187.198218][ T5162] bond2 (unregistering): Released all slaves [ 187.202715][ T5162] bond3 (unregistering): Released all slaves [ 187.218155][ T5162] bond4 (unregistering): (slave team0): Removing an active aggregator [ 187.219322][ T5162] bond4 (unregistering): (slave team0): Releasing backup interface [ 187.242947][ T5162] bond4 (unregistering): Released all slaves [ 187.254250][ T5162] team0: Port device bond5 removed [ 187.255648][ T5162] bond5 (unregistering): Released all slaves [ 187.313964][ T5162] hsr_slave_0: left promiscuous mode [ 187.315250][ T5162] hsr_slave_1: left promiscuous mode [ 187.317746][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.317769][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.322982][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.323000][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.371209][ T5162] veth1_macvtap: left promiscuous mode [ 187.371244][ T5162] veth0_macvtap: left promiscuous mode [ 187.371326][ T5162] veth1_vlan: left promiscuous mode [ 187.371371][ T5162] veth0_vlan: left promiscuous mode [ 187.540780][ T5162] team0 (unregistering): Port device team_slave_1 removed [ 187.567065][ T5162] team0 (unregistering): Port device team_slave_0 removed [ 187.613009][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 187.933804][ T5162] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.933845][ T5162] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.975184][ T5162] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.975240][ T5162] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.020884][ T5162] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.020987][ T5162] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.112922][ T5162] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.112967][ T5162] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.206877][ T5162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.243530][ T5162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.293888][ T5162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.324389][ T5162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.438875][ T5162] bridge_slave_1: left allmulticast mode [ 188.438905][ T5162] bridge_slave_1: left promiscuous mode [ 188.439173][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.443304][ T5162] bridge_slave_0: left allmulticast mode [ 188.443333][ T5162] bridge_slave_0: left promiscuous mode [ 188.443493][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.453466][ T5162] bridge_slave_1: left allmulticast mode [ 188.453492][ T5162] bridge_slave_1: left promiscuous mode [ 188.453688][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.467493][ T5162] bridge_slave_0: left allmulticast mode [ 188.467520][ T5162] bridge_slave_0: left promiscuous mode [ 188.467781][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.498060][ T5162] bridge_slave_1: left allmulticast mode [ 188.498091][ T5162] bridge_slave_1: left promiscuous mode [ 188.498283][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.511652][ T5162] bridge_slave_0: left allmulticast mode [ 188.511680][ T5162] bridge_slave_0: left promiscuous mode [ 188.511887][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.704586][ T5162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.721083][ T5162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.725448][ T5162] bond0 (unregistering): Released all slaves [ 188.749565][ T5162] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 188.749597][ T5162] ip6gre1 (unregistering): left promiscuous mode [ 188.755582][ T5162] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 188.833871][ T5162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.850586][ T5162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.855655][ T5162] bond0 (unregistering): Released all slaves [ 188.861653][ T5162] bond1 (unregistering): Released all slaves [ 188.866289][ T5162] bond2 (unregistering): Released all slaves [ 188.923487][ T5162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.937104][ T5162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.942210][ T5162] bond0 (unregistering): Released all slaves [ 189.002467][ T5162] IPVS: stopping master sync thread 7437 ... [ 189.020688][ T5162] hsr_slave_0: left promiscuous mode [ 189.022322][ T5162] hsr_slave_1: left promiscuous mode [ 189.023686][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.025352][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.052328][ T5162] hsr_slave_0: left promiscuous mode [ 189.058471][ T5162] hsr_slave_1: left promiscuous mode [ 189.059874][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.059912][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.061440][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.061460][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.071447][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 189.071466][ T29] audit: type=1400 audit(1789446670.578:1026): avc: denied { write } for pid=8823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.133552][ T5162] hsr_slave_0: left promiscuous mode [ 189.139467][ T29] audit: type=1400 audit(1789446670.648:1027): avc: denied { write } for pid=8834 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.140100][ T5162] hsr_slave_1: left promiscuous mode [ 189.141808][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.141826][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.165255][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.165275][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.228339][ T5162] veth1_vlan: left allmulticast mode [ 189.228550][ T5162] veth1_macvtap: left promiscuous mode [ 189.228585][ T5162] veth0_macvtap: left promiscuous mode [ 189.228650][ T5162] veth1_vlan: left promiscuous mode [ 189.228708][ T5162] veth0_vlan: left promiscuous mode [ 189.229887][ T5162] veth1_macvtap: left promiscuous mode [ 189.229908][ T5162] veth0_macvtap: left promiscuous mode [ 189.229946][ T5162] veth1_vlan: left promiscuous mode [ 189.229993][ T5162] veth0_vlan: left promiscuous mode [ 189.412427][ T5162] team0 (unregistering): Port device team_slave_1 removed [ 189.424627][ T5162] team0 (unregistering): Port device team_slave_0 removed [ 189.522268][ T5162] team0 (unregistering): Port device team_slave_1 removed [ 189.534800][ T5162] team0 (unregistering): Port device team_slave_0 removed [ 189.635458][ T5162] team0 (unregistering): Port device team_slave_1 removed [ 189.645256][ T5162] team0 (unregistering): Port device team_slave_0 removed [ 189.819391][ T29] audit: type=1400 audit(1789446671.328:1028): avc: denied { write } for pid=8837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.863831][ T29] audit: type=1400 audit(1789446671.368:1029): avc: denied { write } for pid=8848 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.027978][ T29] audit: type=1400 audit(1789446671.538:1030): avc: denied { write } for pid=8850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.073098][ T29] audit: type=1400 audit(1789446671.578:1031): avc: denied { write } for pid=8861 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.233098][ T29] audit: type=1400 audit(1789446671.738:1032): avc: denied { write } for pid=8863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.274741][ T29] audit: type=1400 audit(1789446671.778:1033): avc: denied { write } for pid=8874 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.343908][ T5162] IPVS: stop unused estimator thread 0... [ 190.448144][ T29] audit: type=1400 audit(1789446671.958:1034): avc: denied { write } for pid=8876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.496163][ T29] audit: type=1400 audit(1789446672.008:1035): avc: denied { write } for pid=8887 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.222913][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 191.600894][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 191.803058][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 191.999363][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 192.198096][ T3022] 8021q: adding VLAN 0 to HW filter on device eth25 [ 192.398396][ T3022] 8021q: adding VLAN 0 to HW filter on device eth26 [ 192.773242][ T3022] 8021q: adding VLAN 0 to HW filter on device eth27 [ 192.976125][ T3022] 8021q: adding VLAN 0 to HW filter on device eth28 [ 193.176879][ T3022] 8021q: adding VLAN 0 to HW filter on device eth29 [ 193.410189][ T3022] 8021q: adding VLAN 0 to HW filter on device eth30 [ 193.618626][ T3022] 8021q: adding VLAN 0 to HW filter on device eth31 [ 193.831891][ T3022] 8021q: adding VLAN 0 to HW filter on device eth32