last executing test programs: 11.047617812s ago: executing program 1 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='27', 0x2) socket$nl_route(0x10, 0x3, 0x0) unshare(0xa000200) 11.022153954s ago: executing program 1 (id=191): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8913, &(0x7f00000000c0)='veth0:') 10.955778912s ago: executing program 1 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r0, &(0x7f00000002c0)='1', 0x1) 10.955523221s ago: executing program 1 (id=196): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000001c0)={[{@nogrpid}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nogrpid}, {@grpjquota}, {@dioread_nolock}]}, 0x3, 0x446, &(0x7f0000000440)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000b80)='./dev\x00', &(0x7f0000000bc0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000c40)=@filename='./dev/sda1\x00', &(0x7f0000000c80)='./mnt\x00', &(0x7f0000000cc0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000d00)='./mnt\x00') syz_mount_image$msdos(&(0x7f0000000d40), &(0x7f0000000d80)='.\x00', 0x820f8, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, &(0x7f0000000e00)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f00000008c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x103) 10.621779595s ago: executing program 1 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000280001801400040000000200000000000000ffffac1414aa060001000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 9.193352921s ago: executing program 1 (id=239): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000081) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file2\x00', 0x2010410, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000280)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair(0x1, 0x1, 0x0, 0x0) setfsgid(0x0) mount$bpf(0x0, 0x0, 0x0, 0x48, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 9.123655478s ago: executing program 32 (id=239): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000081) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file2\x00', 0x2010410, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000280)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair(0x1, 0x1, 0x0, 0x0) setfsgid(0x0) mount$bpf(0x0, 0x0, 0x0, 0x48, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 6.722175514s ago: executing program 2 (id=269): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x24, 0x2020}, 0x20) 6.646349451s ago: executing program 2 (id=271): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x9}}) 6.527320733s ago: executing program 2 (id=273): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000140)="fc", 0x1, 0x2e7a) copy_file_range(r0, 0x0, r0, &(0x7f0000000280)=0x7, 0x2, 0x0) 6.517659285s ago: executing program 2 (id=274): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000003c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x2, 0x3, &(0x7f0000002f40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000002f80)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002fc0)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000003000)='./file2\x00', &(0x7f0000003040)=[0x2], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) 6.419093815s ago: executing program 2 (id=278): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x1a, 0xc, 0x122, 0x0}) 5.910931267s ago: executing program 2 (id=282): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0500000003"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.900865168s ago: executing program 33 (id=282): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0500000003"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.842437413s ago: executing program 4 (id=285): r0 = io_uring_setup(0x5d38, &(0x7f0000000040)={0x0, 0xcf32, 0x2, 0x3, 0x109}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) close_range(r0, r0, 0x0) 4.533084447s ago: executing program 4 (id=302): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56170, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x2}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) getpgid(0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) 4.50697011s ago: executing program 4 (id=303): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x540, 0x330, 0xffffff80, 0x178, 0x330, 0x178, 0x470, 0x22b, 0x258, 0x540, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {0x34}, {0x0, 0x0, 0xfd}, {0xa8}, {}, {}, {0x20, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x9}, {}, {0xfffd}, {0xffff}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x8, 0x3}, {}, {}, {}, {0x2}, {0x3, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x3}, {0x200}, {0x0, 0xa}, {}, {}, {0x1}, {}, {}, {0x0, 0x8a}, {}, {}, {0xffff, 0x0, 0xfc}]}}, @common=@unspec=@cluster={{0x30}, {0x8a, 0x4, 0x401}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x10000000]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 4.424117388s ago: executing program 4 (id=306): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) mkdir(&(0x7f0000002bc0)='./file0\x00', 0x18b) mount$bind(&(0x7f0000002c80)='.\x00', &(0x7f0000002cc0)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) mount$bpf(0x0, &(0x7f0000002d00)='./file0\x00', 0x0, 0x84000, 0x0) 4.424040368s ago: executing program 4 (id=307): r0 = syz_io_uring_setup(0x26bc, &(0x7f00000005c0)={0x0, 0x4161, 0x110100, 0x3, 0x149}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x18) 4.138948667s ago: executing program 4 (id=310): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 4.138764268s ago: executing program 34 (id=310): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 2.912143213s ago: executing program 6 (id=290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc7", 0x22}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef34", 0xb2}, {&(0x7f0000000880)="fa8f73530bdc6839", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464c9f5d825e803f7ff71", 0x18}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d", 0xc4}, {0x0}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.825440682s ago: executing program 3 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) sendfile(r1, r0, 0x0, 0x101) 2.693494735s ago: executing program 7 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) 2.517631633s ago: executing program 6 (id=290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc7", 0x22}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef34", 0xb2}, {&(0x7f0000000880)="fa8f73530bdc6839", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464c9f5d825e803f7ff71", 0x18}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d", 0xc4}, {0x0}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.426893392s ago: executing program 3 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) 2.170208468s ago: executing program 7 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) 1.477318279s ago: executing program 6 (id=290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc7", 0x22}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef34", 0xb2}, {&(0x7f0000000880)="fa8f73530bdc6839", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464c9f5d825e803f7ff71", 0x18}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d", 0xc4}, {0x0}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.263327741s ago: executing program 3 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.263202491s ago: executing program 7 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) 1.158257021s ago: executing program 0 (id=340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 1.119818485s ago: executing program 6 (id=290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc7", 0x22}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef34", 0xb2}, {&(0x7f0000000880)="fa8f73530bdc6839", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464c9f5d825e803f7ff71", 0x18}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d", 0xc4}, {0x0}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.029224145s ago: executing program 3 (id=341): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="22000000040000001000000032"], 0x48) unshare(0x2020400) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x70, 0x0, 0x20, 0x6, 0xffffffffffffeffd}, &(0x7f0000000000)={0x1f, 0xfffffffffffffffc, 0x4, 0x100000000000, 0x0, 0xdb, 0x1000000000}, 0x0, 0x0, 0x0) 1.029024655s ago: executing program 0 (id=342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000900)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000009c0)={'macsec0\x00', 0x300}) 1.028961185s ago: executing program 5 (id=240): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000001}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000b00)='.\x00', 0x2) 935.188874ms ago: executing program 7 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) 850.407133ms ago: executing program 0 (id=343): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 850.306423ms ago: executing program 5 (id=240): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000001}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000b00)='.\x00', 0x2) 760.531422ms ago: executing program 6 (id=290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc7", 0x22}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef34", 0xb2}, {&(0x7f0000000880)="fa8f73530bdc6839", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464c9f5d825e803f7ff71", 0x18}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d", 0xc4}, {0x0}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 677.050041ms ago: executing program 3 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0xfe) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1a7) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x40, 0x0) r0 = open$dir(&(0x7f0000000640)='./mnt\x00', 0x0, 0x2) readlinkat(r0, &(0x7f00000008c0)='./dev/sda1\x00', &(0x7f0000000900)=""/221, 0xdd) renameat2(r0, &(0x7f0000000680)='./dev\x00', r0, &(0x7f00000006c0)='./mnt\x00', 0x4) 676.810561ms ago: executing program 0 (id=345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 676.706181ms ago: executing program 5 (id=240): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000001}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000b00)='.\x00', 0x2) 575.748831ms ago: executing program 7 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) 479.517121ms ago: executing program 0 (id=346): r0 = socket(0x1d, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 479.449051ms ago: executing program 5 (id=240): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000001}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000b00)='.\x00', 0x2) 395.977619ms ago: executing program 6 (id=290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc7", 0x22}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef34", 0xb2}, {&(0x7f0000000880)="fa8f73530bdc6839", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464c9f5d825e803f7ff71", 0x18}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d", 0xc4}, {0x0}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 311.315248ms ago: executing program 3 (id=347): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000002c0)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0xbffe, @multicast1}, 0x10) 311.207318ms ago: executing program 0 (id=348): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003940), 0x4000140, 0x40000002, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 311.163448ms ago: executing program 5 (id=240): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000001}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000b00)='.\x00', 0x2) 188.764091ms ago: executing program 7 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) 0s ago: executing program 5 (id=240): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000001}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000b00)='.\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 18.475565][ T28] audit: type=1400 audit(1792947657.969:64): avc: denied { mounton } for pid=265 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.476697][ T265] cgroup: Unknown subsys name 'net' [ 18.498251][ T28] audit: type=1400 audit(1792947657.969:65): avc: denied { mount } for pid=265 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.525497][ T28] audit: type=1400 audit(1792947657.999:66): avc: denied { unmount } for pid=265 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.525654][ T265] cgroup: Unknown subsys name 'devices' [ 18.653237][ T265] cgroup: Unknown subsys name 'hugetlb' [ 18.658846][ T265] cgroup: Unknown subsys name 'rlimit' [ 18.790652][ T28] audit: type=1400 audit(1792947658.279:67): avc: denied { setattr } for pid=265 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.813856][ T28] audit: type=1400 audit(1792947658.279:68): avc: denied { mounton } for pid=265 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 18.837851][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.839011][ T28] audit: type=1400 audit(1792947658.279:69): avc: denied { mount } for pid=265 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.870539][ T28] audit: type=1400 audit(1792947658.349:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.875674][ T265] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.896118][ T28] audit: type=1400 audit(1792947658.349:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.930415][ T28] audit: type=1400 audit(1792947658.369:72): avc: denied { read } for pid=265 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.955995][ T28] audit: type=1400 audit(1792947658.369:73): avc: denied { open } for pid=265 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.727161][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.734266][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.741819][ T287] device bridge_slave_0 entered promiscuous mode [ 19.748626][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.755906][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.763260][ T288] device bridge_slave_0 entered promiscuous mode [ 19.780549][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.787642][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.795050][ T287] device bridge_slave_1 entered promiscuous mode [ 19.809245][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.816360][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.823672][ T288] device bridge_slave_1 entered promiscuous mode [ 19.836906][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.843958][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.851189][ T289] device bridge_slave_0 entered promiscuous mode [ 19.860750][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.867817][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.875183][ T289] device bridge_slave_1 entered promiscuous mode [ 19.968447][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.975536][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.982884][ T290] device bridge_slave_0 entered promiscuous mode [ 19.999026][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.006253][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.013594][ T291] device bridge_slave_0 entered promiscuous mode [ 20.032695][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.039743][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.047128][ T290] device bridge_slave_1 entered promiscuous mode [ 20.066199][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.073295][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.080614][ T291] device bridge_slave_1 entered promiscuous mode [ 20.129750][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.136814][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.144120][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.151133][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.194363][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.201435][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.208694][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.215726][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.248975][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.256728][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.264085][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.272103][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.279250][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.318065][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.326306][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.333345][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.340746][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.349228][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.356278][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.378745][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.386134][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.393653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.402089][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.409098][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.416885][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.425021][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.432618][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.462510][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.470521][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.478003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.486317][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.493394][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.501574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.509670][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.516711][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.524080][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.532534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.540393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.548549][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.555569][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.563015][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.570605][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.586992][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.595106][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.602157][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.609555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.617992][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.629467][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.638331][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.649655][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.668966][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.676964][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.689632][ T287] device veth0_vlan entered promiscuous mode [ 20.699615][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.707856][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.716288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.724692][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.733055][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.740437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.753469][ T288] device veth0_vlan entered promiscuous mode [ 20.764293][ T290] device veth0_vlan entered promiscuous mode [ 20.771809][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.779740][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.787874][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.796303][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.804724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.812671][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.820528][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.828081][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.835526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.842968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.855031][ T287] device veth1_macvtap entered promiscuous mode [ 20.865786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.873936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.882285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.889817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.898277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.910982][ T289] device veth0_vlan entered promiscuous mode [ 20.923181][ T288] device veth1_macvtap entered promiscuous mode [ 20.931746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.939191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.946663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.954911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.963072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.971272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.979490][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.986547][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.993930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.002032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.010090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.018245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.026428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.034165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.042447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.050699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.058238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.065704][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.082103][ T290] device veth1_macvtap entered promiscuous mode [ 21.093749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.101628][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.109922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.118310][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.125369][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.132805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.140993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.149768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.158077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.166451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.174522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.182547][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.190579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.199289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.207434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.217234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.225481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.234797][ T289] device veth1_macvtap entered promiscuous mode [ 21.247696][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 21.253854][ T291] device veth0_vlan entered promiscuous mode [ 21.261222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.269085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.277515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.285987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.294429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.302688][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.310439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.318506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.326064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.340312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.348575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.357157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.366812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.375910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.384304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.398511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.406663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.417786][ T311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 21.439829][ T291] device veth1_macvtap entered promiscuous mode [ 21.463377][ T314] FAULT_INJECTION: forcing a failure. [ 21.463377][ T314] name failslab, interval 1, probability 0, space 0, times 1 [ 21.476012][ T314] CPU: 0 PID: 314 Comm: syz.3.4 Not tainted syzkaller #0 [ 21.483034][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 21.493098][ T314] Call Trace: [ 21.496376][ T314] [ 21.499303][ T314] __dump_stack+0x21/0x24 [ 21.503652][ T314] dump_stack_lvl+0x110/0x170 [ 21.508328][ T314] ? __cfi_dump_stack_lvl+0x8/0x8 [ 21.513352][ T314] ? stack_trace_save+0xa6/0xf0 [ 21.518212][ T314] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 21.524015][ T314] dump_stack+0x15/0x24 [ 21.528153][ T314] should_fail_ex+0x3bf/0x510 [ 21.532815][ T314] __should_failslab+0xac/0xf0 [ 21.537579][ T314] should_failslab+0x9/0x20 [ 21.542076][ T314] __kmem_cache_alloc_node+0x3d/0x2d0 [ 21.547446][ T314] ? __hw_addr_add_ex+0x1f4/0x6f0 [ 21.552468][ T314] ? do_syscall_64+0x4c/0xa0 [ 21.557051][ T314] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 21.563112][ T314] ? __hw_addr_add_ex+0x1f4/0x6f0 [ 21.568137][ T314] kmalloc_trace+0x29/0xb0 [ 21.572547][ T314] __hw_addr_add_ex+0x1f4/0x6f0 [ 21.577402][ T314] dev_mc_add+0x74/0xd0 [ 21.581555][ T314] igmp_group_added+0x1dc/0x860 [ 21.586412][ T314] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 21.591860][ T314] ? igmpv3_del_delrec+0x6e0/0x6e0 [ 21.596963][ T314] ? _raw_spin_unlock_bh+0x50/0x60 [ 21.602067][ T314] ____ip_mc_inc_group+0x5d7/0x7f0 [ 21.607173][ T314] __ip_mc_join_group+0x333/0x410 [ 21.612191][ T314] ip_mc_join_group_ssm+0x23/0x30 [ 21.617207][ T314] do_ip_setsockopt+0x1d23/0x2fd0 [ 21.622221][ T314] ? __cfi_do_ip_setsockopt+0x10/0x10 [ 21.627584][ T314] ? _raw_spin_unlock+0x4c/0x70 [ 21.632429][ T314] ? finish_task_switch+0x16b/0x7c0 [ 21.637640][ T314] ? switch_mm_irqs_off+0x2fb/0x960 [ 21.642831][ T314] ? __schedule+0xcbb/0x1700 [ 21.647412][ T314] ? avc_has_perm_noaudit+0x390/0x490 [ 21.652776][ T314] ? memcpy+0x56/0x70 [ 21.656746][ T314] ? avc_has_perm_noaudit+0x30a/0x490 [ 21.662112][ T314] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 21.667823][ T314] ? futex_unqueue+0x132/0x160 [ 21.672581][ T314] ? avc_has_perm+0x163/0x250 [ 21.677247][ T314] ? __cfi_futex_wait+0x10/0x10 [ 21.682090][ T314] ? __cfi_avc_has_perm+0x10/0x10 [ 21.687111][ T314] ? security_file_alloc+0x33/0x130 [ 21.692300][ T314] ? selinux_socket_setsockopt+0x282/0x360 [ 21.698104][ T314] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 21.704254][ T314] ip_setsockopt+0x5f/0x100 [ 21.708750][ T314] udp_setsockopt+0x8a/0xa0 [ 21.713247][ T314] sock_common_setsockopt+0xb1/0xc0 [ 21.718441][ T314] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 21.724325][ T314] __sys_setsockopt+0x2ff/0x4e0 [ 21.729171][ T314] ? __cfi___sys_setsockopt+0x10/0x10 [ 21.734538][ T314] ? __this_cpu_preempt_check+0x13/0x20 [ 21.740087][ T314] ? xfd_validate_state+0x70/0x150 [ 21.745196][ T314] ? __kasan_check_write+0x14/0x20 [ 21.750299][ T314] ? fpregs_restore_userregs+0x128/0x260 [ 21.755925][ T314] __x64_sys_setsockopt+0xbf/0xd0 [ 21.760948][ T314] x64_sys_call+0x124/0x9a0 [ 21.765449][ T314] do_syscall_64+0x4c/0xa0 [ 21.769857][ T314] ? clear_bhb_loop+0x30/0x80 [ 21.774527][ T314] ? clear_bhb_loop+0x30/0x80 [ 21.779208][ T314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 21.785115][ T314] RIP: 0033:0x7fcbf959f559 [ 21.789526][ T314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 21.809212][ T314] RSP: 002b:00007fcbfa4e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 21.817638][ T314] RAX: ffffffffffffffda RBX: 00007fcbf9825fa0 RCX: 00007fcbf959f559 [ 21.825609][ T314] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000007 [ 21.833578][ T314] RBP: 00007fcbf9636b20 R08: 000000000000000c R09: 0000000000000000 [ 21.841542][ T314] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 21.849507][ T314] R13: 00007fcbf9826038 R14: 00007fcbf9825fa0 R15: 00007fff666d5908 [ 21.857474][ T314] [ 21.877114][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.901751][ T319] ip_tables: iptables: counters copy to user failed while replacing table [ 21.912877][ T319] ip_tables: iptables: counters copy to user failed while replacing table [ 21.913824][ T318] ip_tables: iptables: counters copy to user failed while replacing table [ 21.926844][ T319] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 21.941247][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.956161][ T319] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.961048][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.980840][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.989613][ T318] ip_tables: iptables: counters copy to user failed while replacing table [ 21.991219][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.999431][ T318] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 22.077570][ T325] FAULT_INJECTION: forcing a failure. [ 22.077570][ T325] name failslab, interval 1, probability 0, space 0, times 0 [ 22.091057][ T325] CPU: 1 PID: 325 Comm: syz.0.1 Not tainted syzkaller #0 [ 22.098099][ T325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 22.108141][ T325] Call Trace: [ 22.111416][ T325] [ 22.114343][ T325] __dump_stack+0x21/0x24 [ 22.118665][ T325] dump_stack_lvl+0x110/0x170 [ 22.123398][ T325] ? __cfi_dump_stack_lvl+0x8/0x8 [ 22.128412][ T325] dump_stack+0x15/0x24 [ 22.132571][ T325] should_fail_ex+0x3bf/0x510 [ 22.137235][ T325] __should_failslab+0xac/0xf0 [ 22.141986][ T325] should_failslab+0x9/0x20 [ 22.146483][ T325] __kmem_cache_alloc_node+0x3d/0x2d0 [ 22.151840][ T325] ? sock_kmalloc+0x99/0xf0 [ 22.156327][ T325] ? ip_mc_leave_group+0x5e0/0x5e0 [ 22.161436][ T325] ? sock_kmalloc+0x99/0xf0 [ 22.165930][ T325] __kmalloc+0xa4/0x1e0 [ 22.170070][ T325] sock_kmalloc+0x99/0xf0 [ 22.174382][ T325] __ip_mc_join_group+0x272/0x410 [ 22.179393][ T325] ip_mc_join_group+0x1f/0x30 [ 22.184052][ T325] ip_mcast_join_leave+0x1ba/0x260 [ 22.189144][ T325] ? compat_ip_mcast_join_leave+0x270/0x270 [ 22.195022][ T325] ? __local_bh_enable_ip+0x58/0x80 [ 22.200207][ T325] ? __cfi_mutex_lock+0x10/0x10 [ 22.205048][ T325] ? __kasan_check_write+0x14/0x20 [ 22.210143][ T325] ? _raw_spin_lock+0x94/0xf0 [ 22.214809][ T325] do_ip_setsockopt+0x876/0x2fd0 [ 22.219734][ T325] ? __cfi_do_ip_setsockopt+0x10/0x10 [ 22.225088][ T325] ? release_firmware_map_entry+0x190/0x190 [ 22.230967][ T325] ? check_preempt_wakeup+0x619/0xbe0 [ 22.236322][ T325] ? __kasan_check_read+0x11/0x20 [ 22.241328][ T325] ? preempt_schedule_common+0xbe/0xf0 [ 22.246771][ T325] ? avc_has_perm_noaudit+0x390/0x490 [ 22.252126][ T325] ? memcpy+0x56/0x70 [ 22.256095][ T325] ? avc_has_perm_noaudit+0x30a/0x490 [ 22.261450][ T325] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 22.267156][ T325] ? avc_has_perm+0x163/0x250 [ 22.271815][ T325] ? __cfi_avc_has_perm+0x10/0x10 [ 22.276820][ T325] ? security_file_alloc+0x33/0x130 [ 22.281999][ T325] ? selinux_socket_setsockopt+0x282/0x360 [ 22.287789][ T325] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 22.293930][ T325] ip_setsockopt+0x5f/0x100 [ 22.298414][ T325] udp_setsockopt+0x8a/0xa0 [ 22.302906][ T325] sock_common_setsockopt+0xb1/0xc0 [ 22.308086][ T325] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 22.313966][ T325] __sys_setsockopt+0x2ff/0x4e0 [ 22.318808][ T325] ? __cfi___sys_setsockopt+0x10/0x10 [ 22.324170][ T325] ? __this_cpu_preempt_check+0x13/0x20 [ 22.329702][ T325] ? xfd_validate_state+0x70/0x150 [ 22.334802][ T325] ? __kasan_check_write+0x14/0x20 [ 22.339896][ T325] ? fpregs_restore_userregs+0x128/0x260 [ 22.345513][ T325] __x64_sys_setsockopt+0xbf/0xd0 [ 22.350527][ T325] x64_sys_call+0x124/0x9a0 [ 22.355013][ T325] do_syscall_64+0x4c/0xa0 [ 22.359411][ T325] ? clear_bhb_loop+0x30/0x80 [ 22.364071][ T325] ? clear_bhb_loop+0x30/0x80 [ 22.368735][ T325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 22.374613][ T325] RIP: 0033:0x7f02d879f559 [ 22.379013][ T325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 22.398605][ T325] RSP: 002b:00007f02d95e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 22.407008][ T325] RAX: ffffffffffffffda RBX: 00007f02d8a25fa0 RCX: 00007f02d879f559 [ 22.414966][ T325] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000008 [ 22.422916][ T325] RBP: 00007f02d8836b20 R08: 0000000000000088 R09: 0000000000000000 [ 22.430871][ T325] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 22.438825][ T325] R13: 00007f02d8a26038 R14: 00007f02d8a25fa0 R15: 00007ffcb422b9e8 [ 22.446786][ T325] [ 22.459759][ T331] Zero length message leads to an empty skb [ 22.475930][ T333] loop2: detected capacity change from 0 to 512 [ 22.538178][ T333] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 22.547669][ T333] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 22.613471][ T341] loop1: detected capacity change from 0 to 512 [ 22.630774][ T333] syz.2.7 (333) used greatest stack depth: 22336 bytes left [ 22.638979][ T289] EXT4-fs (loop2): unmounting filesystem. [ 22.649823][ T341] EXT4-fs (loop1): Test dummy encryption mode enabled [ 22.660530][ T350] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 22.671379][ T341] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 22.694089][ T353] loop0: detected capacity change from 0 to 256 [ 22.701887][ T353] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 22.713016][ T353] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 22.721441][ T341] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 22.733110][ T353] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xae70a7d8, utbl_chksum : 0xe619d30d) [ 22.733721][ T341] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.9: bad orphan inode 131083 [ 22.755545][ T341] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 22.765428][ T358] loop2: detected capacity change from 0 to 512 [ 22.789229][ T358] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 22.808094][ T358] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 22.816831][ T287] EXT4-fs (loop1): unmounting filesystem. [ 22.822896][ T358] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #13: comm syz.2.12: iget: bad i_size value: 12154757448730 [ 22.846789][ T363] loop1: detected capacity change from 0 to 512 [ 22.852036][ T358] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.12: couldn't read orphan inode 13 (err -117) [ 22.872410][ T358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 22.890173][ T358] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 22.920711][ T289] EXT4-fs (loop2): unmounting filesystem. [ 23.060069][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 23.073227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 23.084450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 23.106713][ T393] FAULT_INJECTION: forcing a failure. [ 23.106713][ T393] name failslab, interval 1, probability 0, space 0, times 0 [ 23.143009][ T393] CPU: 1 PID: 393 Comm: syz.4.27 Not tainted syzkaller #0 [ 23.150135][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 23.160186][ T393] Call Trace: [ 23.163455][ T393] [ 23.166377][ T393] __dump_stack+0x21/0x24 [ 23.170702][ T393] dump_stack_lvl+0x110/0x170 [ 23.175371][ T393] ? __cfi_dump_stack_lvl+0x8/0x8 [ 23.180389][ T393] ? selinux_capable+0x2b6/0x3b0 [ 23.185324][ T393] dump_stack+0x15/0x24 [ 23.189476][ T393] should_fail_ex+0x3bf/0x510 [ 23.194150][ T393] ? create_new_namespaces+0x34/0x660 [ 23.194309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 23.199526][ T393] __should_failslab+0xac/0xf0 [ 23.207699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 23.212054][ T393] should_failslab+0x9/0x20 [ 23.220245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 23.224417][ T393] kmem_cache_alloc+0x3b/0x320 [ 23.224444][ T393] create_new_namespaces+0x34/0x660 [ 23.224467][ T393] ? ns_capable+0x8c/0xf0 [ 23.232903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 23.236977][ T393] unshare_nsproxy_namespaces+0x120/0x170 [ 23.243913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 23.246451][ T393] ksys_unshare+0x4d5/0x850 [ 23.254798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 23.260068][ T393] ? __cfi_ksys_unshare+0x10/0x10 [ 23.285210][ T393] ? fpregs_restore_userregs+0x128/0x260 [ 23.290852][ T393] __x64_sys_unshare+0x38/0x40 [ 23.295626][ T393] x64_sys_call+0x767/0x9a0 [ 23.300136][ T393] do_syscall_64+0x4c/0xa0 [ 23.304551][ T393] ? clear_bhb_loop+0x30/0x80 [ 23.309237][ T393] ? clear_bhb_loop+0x30/0x80 [ 23.313913][ T393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 23.319810][ T393] RIP: 0033:0x7f096a59f559 [ 23.324220][ T393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.344081][ T393] RSP: 002b:00007f096b4ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 23.352499][ T393] RAX: ffffffffffffffda RBX: 00007f096a825fa0 RCX: 00007f096a59f559 [ 23.360457][ T393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 23.368408][ T393] RBP: 00007f096a636b20 R08: 0000000000000000 R09: 0000000000000000 [ 23.376365][ T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 23.384323][ T393] R13: 00007f096a826038 R14: 00007f096a825fa0 R15: 00007ffd47e34938 [ 23.392288][ T393] [ 23.538246][ T413] loop2: detected capacity change from 0 to 128 [ 23.538645][ T28] kauditd_printk_skb: 280 callbacks suppressed [ 23.538656][ T28] audit: type=1400 audit(1792947663.029:354): avc: denied { relabelfrom } for pid=406 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 23.571382][ T28] audit: type=1400 audit(1792947663.059:355): avc: denied { relabelto } for pid=406 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 23.575790][ T413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 23.599894][ T413] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 23.620341][ T28] audit: type=1400 audit(1792947663.109:356): avc: denied { create } for pid=412 comm="syz.2.33" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.622973][ T407] device syzkaller0 entered promiscuous mode [ 23.647500][ T413] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 23.657977][ T413] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 23.659281][ T28] audit: type=1400 audit(1792947663.159:357): avc: denied { write } for pid=412 comm="syz.2.33" name="encrypted_dir" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.693456][ T28] audit: type=1400 audit(1792947663.159:358): avc: denied { add_name } for pid=412 comm="syz.2.33" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.713310][ T28] audit: type=1400 audit(1792947663.169:359): avc: denied { write } for pid=418 comm="syz.4.34" name="event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 23.736196][ T28] audit: type=1400 audit(1792947663.169:360): avc: denied { open } for pid=418 comm="syz.4.34" path="/dev/input/event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 23.769398][ T289] EXT4-fs (loop2): unmounting filesystem. [ 23.809297][ T28] audit: type=1400 audit(1792947663.299:361): avc: denied { connect } for pid=424 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 23.858455][ T28] audit: type=1400 audit(1792947663.299:362): avc: denied { write } for pid=424 comm="syz.0.37" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 24.082274][ T28] audit: type=1400 audit(1792947663.319:363): avc: denied { mount } for pid=418 comm="syz.4.34" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 24.177820][ T452] loop1: detected capacity change from 0 to 1024 [ 24.187349][ T452] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 24.198774][ T452] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 24.209106][ T452] JBD2: no valid journal superblock found [ 24.221408][ T452] EXT4-fs (loop1): error loading journal [ 24.291123][ T457] FAULT_INJECTION: forcing a failure. [ 24.291123][ T457] name failslab, interval 1, probability 0, space 0, times 0 [ 24.303859][ T457] CPU: 1 PID: 457 Comm: syz.1.50 Not tainted syzkaller #0 [ 24.310967][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.321014][ T457] Call Trace: [ 24.324284][ T457] [ 24.327198][ T457] __dump_stack+0x21/0x24 [ 24.331511][ T457] dump_stack_lvl+0x110/0x170 [ 24.336187][ T457] ? __cfi_dump_stack_lvl+0x8/0x8 [ 24.341201][ T457] dump_stack+0x15/0x24 [ 24.345355][ T457] should_fail_ex+0x3bf/0x510 [ 24.350020][ T457] ? security_file_alloc+0x33/0x130 [ 24.355214][ T457] __should_failslab+0xac/0xf0 [ 24.359962][ T457] should_failslab+0x9/0x20 [ 24.364445][ T457] kmem_cache_alloc+0x3b/0x320 [ 24.369193][ T457] ? __alloc_file+0x28/0x2a0 [ 24.373770][ T457] security_file_alloc+0x33/0x130 [ 24.378800][ T457] __alloc_file+0xb5/0x2a0 [ 24.383209][ T457] alloc_empty_file+0x97/0x180 [ 24.387956][ T457] dentry_open+0x4e/0x100 [ 24.392272][ T457] __se_sys_open_tree+0x6ad/0x810 [ 24.397284][ T457] ? __x64_sys_open_tree+0x90/0x90 [ 24.402382][ T457] ? fpregs_restore_userregs+0x128/0x260 [ 24.408005][ T457] __x64_sys_open_tree+0x7b/0x90 [ 24.412965][ T457] x64_sys_call+0x5ae/0x9a0 [ 24.417457][ T457] do_syscall_64+0x4c/0xa0 [ 24.421852][ T457] ? clear_bhb_loop+0x30/0x80 [ 24.426519][ T457] ? clear_bhb_loop+0x30/0x80 [ 24.431192][ T457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 24.437089][ T457] RIP: 0033:0x7fd47c39f559 [ 24.441522][ T457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.461122][ T457] RSP: 002b:00007fd47d34b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 24.469530][ T457] RAX: ffffffffffffffda RBX: 00007fd47c625fa0 RCX: 00007fd47c39f559 [ 24.477524][ T457] RDX: 0000000000089901 RSI: 00002000000014c0 RDI: ffffffffffffff9c [ 24.485487][ T457] RBP: 00007fd47c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 24.493465][ T457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.501439][ T457] R13: 00007fd47c626038 R14: 00007fd47c625fa0 R15: 00007ffce7c02658 [ 24.509435][ T457] [ 24.596386][ T463] ======================================================= [ 24.596386][ T463] WARNING: The mand mount option has been deprecated and [ 24.596386][ T463] and is ignored by this kernel. Remove the mand [ 24.596386][ T463] option from the mount to silence this warning. [ 24.596386][ T463] ======================================================= [ 24.610662][ T465] loop1: detected capacity change from 0 to 1024 [ 24.632965][ T463] FAULT_INJECTION: forcing a failure. [ 24.632965][ T463] name failslab, interval 1, probability 0, space 0, times 0 [ 24.650866][ T465] EXT4-fs: Ignoring removed bh option [ 24.657190][ T463] CPU: 0 PID: 463 Comm: syz.4.53 Not tainted syzkaller #0 [ 24.664320][ T463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.667510][ T467] loop2: detected capacity change from 0 to 512 [ 24.674371][ T463] Call Trace: [ 24.674380][ T463] [ 24.674386][ T463] __dump_stack+0x21/0x24 [ 24.674408][ T463] dump_stack_lvl+0x110/0x170 [ 24.695803][ T463] ? __cfi_dump_stack_lvl+0x8/0x8 [ 24.700812][ T463] dump_stack+0x15/0x24 [ 24.704952][ T463] should_fail_ex+0x3bf/0x510 [ 24.709610][ T463] __should_failslab+0xac/0xf0 [ 24.714361][ T463] should_failslab+0x9/0x20 [ 24.718873][ T463] __kmem_cache_alloc_node+0x3d/0x2d0 [ 24.724303][ T463] ? wakeup_source_sysfs_add+0x5a/0x2e0 [ 24.729848][ T463] ? __cfi_ida_alloc_range+0x10/0x10 [ 24.735130][ T463] ? wakeup_source_sysfs_add+0x5a/0x2e0 [ 24.740670][ T463] kmalloc_trace+0x29/0xb0 [ 24.745077][ T463] wakeup_source_sysfs_add+0x5a/0x2e0 [ 24.750436][ T463] wakeup_source_register+0x1a5/0x3d0 [ 24.755797][ T463] ep_create_wakeup_source+0x167/0x530 [ 24.761246][ T463] ? ep_get_upwards_depth_proc+0x1b0/0x1b0 [ 24.767055][ T463] ? __kasan_slab_alloc+0x72/0x80 [ 24.772069][ T463] ? __cfi__raw_spin_lock+0x10/0x10 [ 24.777249][ T463] ? ep_insert+0x4b4/0x14c0 [ 24.781739][ T463] ep_insert+0xce2/0x14c0 [ 24.786056][ T463] ? ep_loop_check+0x80/0x80 [ 24.790630][ T463] ? mutex_lock+0x93/0x1b0 [ 24.795029][ T463] ? security_capable+0x99/0xc0 [ 24.799865][ T463] do_epoll_ctl+0x878/0xdc0 [ 24.804374][ T463] __x64_sys_epoll_ctl+0x162/0x1b0 [ 24.809470][ T463] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 24.815087][ T463] ? fpregs_restore_userregs+0x128/0x260 [ 24.820727][ T463] ? switch_fpu_return+0xe/0x10 [ 24.825823][ T463] x64_sys_call+0x839/0x9a0 [ 24.830311][ T463] do_syscall_64+0x4c/0xa0 [ 24.834709][ T463] ? clear_bhb_loop+0x30/0x80 [ 24.839370][ T463] ? clear_bhb_loop+0x30/0x80 [ 24.844030][ T463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 24.849914][ T463] RIP: 0033:0x7f096a59f559 [ 24.854329][ T463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.873935][ T463] RSP: 002b:00007f096b4ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 24.882344][ T463] RAX: ffffffffffffffda RBX: 00007f096a825fa0 RCX: 00007f096a59f559 [ 24.890304][ T463] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000005 [ 24.898262][ T463] RBP: 00007f096a636b20 R08: 0000000000000000 R09: 0000000000000000 [ 24.906220][ T463] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 24.914181][ T463] R13: 00007f096a826038 R14: 00007f096a825fa0 R15: 00007ffd47e34938 [ 24.922144][ T463] [ 24.934187][ T467] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 24.944780][ T467] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 24.946075][ T471] FAULT_INJECTION: forcing a failure. [ 24.946075][ T471] name failslab, interval 1, probability 0, space 0, times 0 [ 24.954371][ T465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 24.969587][ T471] CPU: 0 PID: 471 Comm: syz.0.56 Not tainted syzkaller #0 [ 24.981300][ T471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.991355][ T471] Call Trace: [ 24.994628][ T471] [ 24.997558][ T471] __dump_stack+0x21/0x24 [ 25.001873][ T471] dump_stack_lvl+0x110/0x170 [ 25.006527][ T471] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.011531][ T471] ? unwind_get_return_address+0x4d/0x90 [ 25.017174][ T471] dump_stack+0x15/0x24 [ 25.021347][ T471] should_fail_ex+0x3bf/0x510 [ 25.026032][ T471] __should_failslab+0xac/0xf0 [ 25.028813][ T465] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.030804][ T471] should_failslab+0x9/0x20 [ 25.048205][ T471] __kmem_cache_alloc_node+0x3d/0x2d0 [ 25.050731][ T467] EXT4-fs (loop2): orphan cleanup on readonly fs [ 25.053606][ T471] ? sock_kmalloc+0x99/0xf0 [ 25.053629][ T471] ? sock_kmalloc+0x99/0xf0 [ 25.053642][ T471] __kmalloc+0xa4/0x1e0 [ 25.060759][ T467] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.55: bad orphan inode 15 [ 25.064435][ T471] sock_kmalloc+0x99/0xf0 [ 25.064455][ T471] __ipv6_sock_mc_join+0x2fe/0x600 [ 25.069279][ T467] ext4_test_bit(bit=14, block=18) = 1 [ 25.073072][ T471] ipv6_sock_mc_join+0x27/0x30 [ 25.073095][ T471] ipv6_mcast_join_leave+0x19f/0x230 [ 25.073113][ T471] ? compat_ipv6_mcast_join_leave+0x230/0x230 [ 25.073133][ T471] ? __cfi_mutex_lock+0x10/0x10 [ 25.073154][ T471] do_ipv6_setsockopt+0x8e4/0x3bd0 [ 25.073172][ T471] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 25.073188][ T471] ? save_fpregs_to_fpstate+0x199/0x220 [ 25.073207][ T471] ? __kasan_check_write+0x14/0x20 [ 25.073224][ T471] ? __switch_to+0x56f/0x1070 [ 25.073244][ T471] ? __cfi___switch_to+0x10/0x10 [ 25.073262][ T471] ? _raw_spin_unlock+0x4c/0x70 [ 25.073278][ T471] ? finish_task_switch+0x16b/0x7c0 [ 25.073297][ T471] ? switch_mm_irqs_off+0x2fb/0x960 [ 25.083691][ T467] is_bad_inode(inode)=0 [ 25.087393][ T471] ? __schedule+0xcbb/0x1700 [ 25.092612][ T467] NEXT_ORPHAN(inode)=1023 [ 25.097819][ T471] ? avc_has_perm_noaudit+0x390/0x490 [ 25.097841][ T471] ? memcpy+0x56/0x70 [ 25.102792][ T467] max_ino=32 [ 25.107835][ T471] ? avc_has_perm_noaudit+0x30a/0x490 [ 25.114042][ T467] i_nlink=0 [ 25.118698][ T471] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 25.124603][ T467] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.55: bg 0: block 440: padding at end of block bitmap is not set [ 25.129301][ T471] ? futex_unqueue+0x132/0x160 [ 25.135167][ T467] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 25.139903][ T471] ? avc_has_perm+0x163/0x250 [ 25.144889][ T467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 25.149463][ T471] ? __cfi_futex_wait+0x10/0x10 [ 25.149487][ T471] ? __cfi_avc_has_perm+0x10/0x10 [ 25.168806][ T476] FAULT_INJECTION: forcing a failure. [ 25.168806][ T476] name failslab, interval 1, probability 0, space 0, times 0 [ 25.173361][ T471] ? selinux_socket_setsockopt+0x282/0x360 [ 25.173388][ T471] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 25.173408][ T471] ipv6_setsockopt+0x59/0x1a0 [ 25.283598][ T471] tcp_setsockopt+0xeb/0x100 [ 25.288183][ T471] sock_common_setsockopt+0xb1/0xc0 [ 25.293372][ T471] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 25.299252][ T471] __sys_setsockopt+0x2ff/0x4e0 [ 25.304092][ T471] ? __cfi___sys_setsockopt+0x10/0x10 [ 25.309452][ T471] ? __this_cpu_preempt_check+0x13/0x20 [ 25.314987][ T471] ? xfd_validate_state+0x70/0x150 [ 25.320181][ T471] ? __kasan_check_write+0x14/0x20 [ 25.325281][ T471] ? fpregs_restore_userregs+0x128/0x260 [ 25.330902][ T471] __x64_sys_setsockopt+0xbf/0xd0 [ 25.335923][ T471] x64_sys_call+0x124/0x9a0 [ 25.340437][ T471] do_syscall_64+0x4c/0xa0 [ 25.344853][ T471] ? clear_bhb_loop+0x30/0x80 [ 25.349531][ T471] ? clear_bhb_loop+0x30/0x80 [ 25.354211][ T471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.360097][ T471] RIP: 0033:0x7f02d879f559 [ 25.364495][ T471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.384089][ T471] RSP: 002b:00007f02d95e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 25.392495][ T471] RAX: ffffffffffffffda RBX: 00007f02d8a25fa0 RCX: 00007f02d879f559 [ 25.400457][ T471] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000003 [ 25.408420][ T471] RBP: 00007f02d8836b20 R08: 0000000000000088 R09: 0000000000000000 [ 25.416409][ T471] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000000 [ 25.424386][ T471] R13: 00007f02d8a26038 R14: 00007f02d8a25fa0 R15: 00007ffcb422b9e8 [ 25.432362][ T471] [ 25.435375][ T476] CPU: 1 PID: 476 Comm: syz.3.59 Not tainted syzkaller #0 [ 25.442502][ T476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.452562][ T476] Call Trace: [ 25.455841][ T476] [ 25.458761][ T476] __dump_stack+0x21/0x24 [ 25.463077][ T476] dump_stack_lvl+0x110/0x170 [ 25.467734][ T476] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.472742][ T476] dump_stack+0x15/0x24 [ 25.476877][ T476] should_fail_ex+0x3bf/0x510 [ 25.481533][ T476] ? __kernfs_new_node+0xe1/0x670 [ 25.486538][ T476] __should_failslab+0xac/0xf0 [ 25.491286][ T476] should_failslab+0x9/0x20 [ 25.495770][ T476] kmem_cache_alloc+0x3b/0x320 [ 25.500519][ T476] __kernfs_new_node+0xe1/0x670 [ 25.505351][ T476] ? __kasan_check_write+0x14/0x20 [ 25.510447][ T476] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 25.516325][ T476] ? kernfs_new_node+0x260/0x260 [ 25.521245][ T476] ? stack_trace_save+0xa6/0xf0 [ 25.526079][ T476] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 25.531867][ T476] ? __stack_depot_save+0x44d/0x490 [ 25.537050][ T476] kernfs_new_node+0x150/0x260 [ 25.541798][ T476] kernfs_create_dir_ns+0x47/0x130 [ 25.546892][ T476] sysfs_create_dir_ns+0x128/0x290 [ 25.551986][ T476] ? __kasan_check_write+0x14/0x20 [ 25.557078][ T476] ? _raw_spin_lock+0x94/0xf0 [ 25.561735][ T476] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 25.567357][ T476] kobject_add_internal+0x718/0xc20 [ 25.572541][ T476] kobject_add+0x165/0x230 [ 25.576939][ T476] ? __cfi_kobject_add+0x10/0x10 [ 25.581859][ T476] ? __kasan_check_write+0x14/0x20 [ 25.586954][ T476] ? kobject_init+0x83/0x1d0 [ 25.591532][ T476] get_device_parent+0x3a6/0x410 [ 25.596458][ T476] device_add+0x308/0xec0 [ 25.600782][ T476] wakeup_source_sysfs_add+0x1f7/0x2e0 [ 25.606228][ T476] wakeup_source_register+0x1a5/0x3d0 [ 25.611595][ T476] ep_create_wakeup_source+0x167/0x530 [ 25.617043][ T476] ? ep_get_upwards_depth_proc+0x1b0/0x1b0 [ 25.622834][ T476] ? __kasan_slab_alloc+0x72/0x80 [ 25.627845][ T476] ? __cfi_mutex_unlock+0x10/0x10 [ 25.632851][ T476] ? ep_insert+0x210/0x14c0 [ 25.637340][ T476] ep_insert+0xce2/0x14c0 [ 25.641655][ T476] ? ep_loop_check+0x80/0x80 [ 25.646227][ T476] ? mutex_lock+0x93/0x1b0 [ 25.650625][ T476] ? ep_get_upwards_depth_proc+0x11b/0x1b0 [ 25.656415][ T476] do_epoll_ctl+0x878/0xdc0 [ 25.660904][ T476] __x64_sys_epoll_ctl+0x162/0x1b0 [ 25.666007][ T476] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 25.671624][ T476] ? fpregs_restore_userregs+0x128/0x260 [ 25.677239][ T476] ? switch_fpu_return+0xe/0x10 [ 25.682070][ T476] x64_sys_call+0x839/0x9a0 [ 25.686558][ T476] do_syscall_64+0x4c/0xa0 [ 25.690953][ T476] ? clear_bhb_loop+0x30/0x80 [ 25.695613][ T476] ? clear_bhb_loop+0x30/0x80 [ 25.700275][ T476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.706151][ T476] RIP: 0033:0x7fcbf959f559 [ 25.710546][ T476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.730134][ T476] RSP: 002b:00007fcbfa4e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 25.738531][ T476] RAX: ffffffffffffffda RBX: 00007fcbf9825fa0 RCX: 00007fcbf959f559 [ 25.746493][ T476] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 25.754460][ T476] RBP: 00007fcbf9636b20 R08: 0000000000000000 R09: 0000000000000000 [ 25.762423][ T476] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 25.770380][ T476] R13: 00007fcbf9826038 R14: 00007fcbf9825fa0 R15: 00007fff666d5908 [ 25.778341][ T476] [ 25.784201][ T289] EXT4-fs (loop2): unmounting filesystem. [ 25.791008][ T287] EXT4-fs (loop1): unmounting filesystem. [ 25.791434][ T476] kobject_add_internal failed for wakeup (error: -12 parent: virtual) [ 25.822916][ T482] netlink: 92 bytes leftover after parsing attributes in process `syz.0.62'. [ 25.850050][ T482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 25.875083][ T482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.62'. [ 25.884142][ T482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.62'. [ 25.955453][ T514] loop4: detected capacity change from 0 to 512 [ 26.048597][ T521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 26.062567][ T521] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.108106][ T521] device bridge_slave_1 left promiscuous mode [ 26.114256][ T521] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.478810][ T561] tmpfs: Unknown parameter 'casefold' [ 26.675964][ T587] netlink: 23 bytes leftover after parsing attributes in process `syz.3.107'. [ 26.768194][ T598] EXT4-fs: Ignoring removed nobh option [ 26.775299][ T598] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 26.827419][ T598] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #3: comm syz.4.111: corrupted inode contents [ 26.844778][ T598] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #3: comm syz.4.111: mark_inode_dirty error [ 26.860248][ T598] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #3: comm syz.4.111: corrupted inode contents [ 26.874270][ T598] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.111: mark_inode_dirty error [ 26.885850][ T598] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.111: Failed to acquire dquot type 0 [ 26.897606][ T598] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.111: corrupted inode contents [ 26.910880][ T598] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #16: comm syz.4.111: mark_inode_dirty error [ 26.924004][ T598] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.111: corrupted inode contents [ 26.936024][ T598] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.111: mark_inode_dirty error [ 26.954603][ T598] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.111: corrupted inode contents [ 26.958258][ T626] EXT4-fs: Ignoring removed mblk_io_submit option [ 26.975552][ T626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 26.976341][ T620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.996654][ T598] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 27.001641][ T620] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.017450][ T598] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.111: corrupted inode contents [ 27.029389][ T626] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.124: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 27.039453][ T598] EXT4-fs error (device loop4): ext4_truncate:4327: inode #16: comm syz.4.111: mark_inode_dirty error [ 27.052495][ T626] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.124: couldn't read orphan inode 11 (err -117) [ 27.064657][ T598] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 27.080231][ T598] EXT4-fs (loop4): 1 truncate cleaned up [ 27.084469][ T626] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 27.086061][ T598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.095295][ T288] EXT4-fs (loop3): unmounting filesystem. [ 27.103777][ T598] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.136214][ T598] syz.4.111 (598) used greatest stack depth: 22080 bytes left [ 27.147256][ T626] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.124: Invalid block bitmap block 0 in block_group 0 [ 27.162092][ T626] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.124: Failed to acquire dquot type 0 [ 27.173850][ T290] EXT4-fs (loop4): unmounting filesystem. [ 27.195369][ T291] EXT4-fs (loop0): unmounting filesystem. [ 27.241082][ T650] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 27.255847][ T648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.265366][ T650] EXT4-fs (loop4): orphan cleanup on readonly fs [ 27.275292][ T648] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.134: bad inode number: 12 [ 27.289999][ T650] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.135: bad orphan inode 15 [ 27.300265][ T648] EXT4-fs (loop1): Remounting filesystem read-only [ 27.310157][ T650] ext4_test_bit(bit=14, block=18) = 1 [ 27.310431][ T648] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.134: bad inode number: 12 [ 27.317778][ T650] is_bad_inode(inode)=0 [ 27.336095][ T648] EXT4-fs (loop1): Remounting filesystem read-only [ 27.339574][ T650] NEXT_ORPHAN(inode)=1023 [ 27.349493][ T650] max_ino=32 [ 27.353423][ T650] i_nlink=0 [ 27.353611][ T287] EXT4-fs (loop1): unmounting filesystem. [ 27.366357][ T672] FAULT_INJECTION: forcing a failure. [ 27.366357][ T672] name failslab, interval 1, probability 0, space 0, times 0 [ 27.379259][ T672] CPU: 0 PID: 672 Comm: syz.3.144 Not tainted syzkaller #0 [ 27.386464][ T672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 27.396512][ T672] Call Trace: [ 27.399771][ T672] [ 27.402685][ T672] __dump_stack+0x21/0x24 [ 27.407023][ T672] dump_stack_lvl+0x110/0x170 [ 27.411689][ T672] ? __cfi_dump_stack_lvl+0x8/0x8 [ 27.416697][ T672] dump_stack+0x15/0x24 [ 27.420844][ T672] should_fail_ex+0x3bf/0x510 [ 27.425500][ T672] ? dst_alloc+0x16a/0x1e0 [ 27.429898][ T672] __should_failslab+0xac/0xf0 [ 27.431640][ T650] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #15: comm syz.4.135: corrupted xattr block 19 [ 27.434646][ T672] should_failslab+0x9/0x20 [ 27.434668][ T672] kmem_cache_alloc+0x3b/0x320 [ 27.434691][ T672] dst_alloc+0x16a/0x1e0 [ 27.434712][ T672] ip_route_output_key_hash_rcu+0x13f8/0x2160 [ 27.434734][ T672] ip_route_output_flow+0x143/0x300 [ 27.434760][ T672] ? __cfi_ip_route_output_flow+0x10/0x10 [ 27.434778][ T672] ? percpu_counter_add_batch+0x13c/0x160 [ 27.434797][ T672] ? selinux_sk_getsecid+0x28/0xb0 [ 27.461599][ T650] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 27.466241][ T672] ip_route_newports+0x115/0x1a0 [ 27.472471][ T650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 27.477106][ T672] tcp_v4_connect+0xc34/0x1760 [ 27.514923][ T672] ? __cfi_tcp_v4_connect+0x10/0x10 [ 27.520108][ T672] ? __kasan_check_write+0x14/0x20 [ 27.525197][ T672] ? _raw_spin_lock_bh+0x94/0xf0 [ 27.530118][ T672] __inet_stream_connect+0x267/0xe80 [ 27.535385][ T672] ? __local_bh_enable_ip+0x58/0x80 [ 27.540563][ T672] ? _raw_spin_unlock_bh+0x50/0x60 [ 27.545649][ T672] ? lock_sock_nested+0x212/0x290 [ 27.550650][ T672] ? __cfi___inet_stream_connect+0x10/0x10 [ 27.556431][ T672] inet_stream_connect+0x62/0xa0 [ 27.561348][ T672] ? __cfi_inet_stream_connect+0x10/0x10 [ 27.566957][ T672] __sys_connect+0x3da/0x460 [ 27.571530][ T672] ? __cfi___sys_connect+0x10/0x10 [ 27.576625][ T672] ? fpregs_restore_userregs+0x128/0x260 [ 27.582242][ T672] __x64_sys_connect+0x7a/0x90 [ 27.586993][ T672] x64_sys_call+0x88d/0x9a0 [ 27.591507][ T672] do_syscall_64+0x4c/0xa0 [ 27.595900][ T672] ? clear_bhb_loop+0x30/0x80 [ 27.600554][ T672] ? clear_bhb_loop+0x30/0x80 [ 27.605223][ T672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.611097][ T672] RIP: 0033:0x7fcbf959f559 [ 27.615488][ T672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.635071][ T672] RSP: 002b:00007fcbfa4e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 27.643461][ T672] RAX: ffffffffffffffda RBX: 00007fcbf9825fa0 RCX: 00007fcbf959f559 [ 27.651422][ T672] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000004 [ 27.659388][ T672] RBP: 00007fcbf9636b20 R08: 0000000000000000 R09: 0000000000000000 [ 27.667350][ T672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.675300][ T672] R13: 00007fcbf9826038 R14: 00007fcbf9825fa0 R15: 00007fff666d5908 [ 27.683256][ T672] [ 27.703619][ T290] EXT4-fs (loop4): unmounting filesystem. [ 27.745225][ T698] set_capacity_and_notify: 7 callbacks suppressed [ 27.745248][ T698] loop1: detected capacity change from 0 to 512 [ 27.752297][ T701] loop4: detected capacity change from 0 to 512 [ 27.777798][ T698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.788208][ T698] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.798043][ T707] loop0: detected capacity change from 0 to 256 [ 27.819500][ T713] loop2: detected capacity change from 0 to 512 [ 27.839138][ T713] EXT4-fs: Ignoring removed oldalloc option [ 27.843455][ T701] EXT4-fs (loop4): 1 truncate cleaned up [ 27.847667][ T713] EXT4-fs: Ignoring removed i_version option [ 27.857397][ T701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 27.857579][ T287] EXT4-fs (loop1): unmounting filesystem. [ 27.866018][ T713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 27.882320][ T713] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.161: invalid indirect mapped block 4294967295 (level 1) [ 27.890235][ T719] device ip6gre1 entered promiscuous mode [ 27.924464][ T723] netlink: 'syz.3.167': attribute type 3 has an invalid length. [ 27.929609][ T713] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.161: invalid indirect mapped block 4294967295 (level 1) [ 27.967502][ T713] EXT4-fs (loop2): 2 truncates cleaned up [ 27.999536][ T713] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.034542][ T713] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1458: inode #12: block 7: comm syz.2.161: path /29/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 28.048567][ T741] loop3: detected capacity change from 0 to 512 [ 28.087623][ T289] EXT4-fs (loop2): unmounting filesystem. [ 28.124967][ T741] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.159803][ T741] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.211181][ T741] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #12: comm syz.3.173: corrupted xattr block 6 [ 28.274876][ T741] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 28.344620][ T608] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 28.380601][ T741] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #12: comm syz.3.173: corrupted xattr block 6 [ 28.428617][ T741] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 28.464926][ T773] device syzkaller0 entered promiscuous mode [ 28.476499][ T288] EXT4-fs (loop3): unmounting filesystem. [ 28.515127][ T783] ip_tables: iptables: counters copy to user failed while replacing table [ 28.603557][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 28.603570][ T28] audit: type=1400 audit(1792947668.099:441): avc: denied { remount } for pid=801 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.611944][ T805] loop1: detected capacity change from 0 to 512 [ 28.629381][ T802] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 28.646924][ T805] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.648147][ T290] EXT4-fs (loop4): unmounting filesystem. [ 28.676026][ T805] EXT4-fs (loop1): 1 truncate cleaned up [ 28.680588][ T28] audit: type=1400 audit(1792947668.169:442): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.684133][ T805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.770251][ T28] audit: type=1400 audit(1792947668.259:443): avc: denied { mounton } for pid=804 comm="syz.1.196" path="/51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/dev" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 28.771554][ T805] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 28.820588][ T28] audit: type=1400 audit(1792947668.259:444): avc: denied { remount } for pid=804 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.877850][ T28] audit: type=1400 audit(1792947668.309:445): avc: denied { read } for pid=818 comm="syz.4.202" name="vsock" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.901514][ T28] audit: type=1400 audit(1792947668.309:446): avc: denied { open } for pid=818 comm="syz.4.202" path="/dev/vsock" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.926804][ T28] audit: type=1400 audit(1792947668.309:447): avc: denied { ioctl } for pid=818 comm="syz.4.202" path="/dev/vsock" dev="devtmpfs" ino=275 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.963120][ T287] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 28.963282][ T28] audit: type=1400 audit(1792947668.369:448): avc: denied { setopt } for pid=831 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 29.033674][ T28] audit: type=1400 audit(1792947668.449:449): avc: denied { map } for pid=836 comm="syz.0.210" path="/39/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=13346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 29.044109][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.081677][ T28] audit: type=1400 audit(1792947668.529:450): avc: denied { rmdir } for pid=287 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.105667][ T287] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.141938][ T856] loop3: detected capacity change from 0 to 512 [ 29.141941][ T860] netlink: 48 bytes leftover after parsing attributes in process `syz.4.222'. [ 29.157382][ T856] EXT4-fs: Ignoring removed nobh option [ 29.169823][ T856] EXT4-fs (loop3): fragment/cluster size (4096) != block size (2048) [ 29.178384][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.201127][ T287] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.222272][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.242244][ T287] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.269785][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.311582][ T868] loop0: detected capacity change from 0 to 512 [ 29.319408][ T868] EXT4-fs: Ignoring removed i_version option [ 29.390690][ T287] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.448032][ T873] loop2: detected capacity change from 0 to 128 [ 29.486361][ T868] EXT4-fs (loop0): 1 orphan inode deleted [ 29.492172][ T868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 29.509009][ T868] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.223: Directory hole found for htree leaf block 0 [ 29.934317][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 30.191185][ T291] EXT4-fs (loop0): unmounting filesystem. [ 30.259563][ T900] loop0: detected capacity change from 0 to 512 [ 30.276905][ T287] EXT4-fs (loop1): unmounting filesystem. [ 30.301686][ T900] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 30.341806][ T900] System zones: 0-2, 18-18, 34-34 [ 30.352205][ T900] EXT4-fs (loop0): 1 orphan inode deleted [ 30.357960][ T900] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.371488][ T43] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 1 [ 30.421519][ T900] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.457836][ T291] EXT4-fs (loop0): unmounting filesystem. [ 30.470295][ T43] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 1 [ 30.598284][ T920] EXT4-fs warning (device loop2): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 30.669126][ T921] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.682691][ T921] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.690519][ T921] device bridge_slave_0 entered promiscuous mode [ 30.711625][ T921] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.718671][ T921] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.743420][ T921] device bridge_slave_1 entered promiscuous mode [ 30.905896][ T921] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.912989][ T921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.920256][ T921] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.927291][ T921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.946792][ T934] EXT4-fs: Ignoring removed i_version option [ 31.106929][ T934] EXT4-fs (loop2): 1 orphan inode deleted [ 31.112774][ T934] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 31.130067][ T934] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.250: Directory hole found for htree leaf block 0 [ 31.391127][ T938] device syzkaller0 entered promiscuous mode [ 31.808524][ T289] EXT4-fs (loop2): unmounting filesystem. [ 31.823519][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.859906][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.977050][ T946] device syzkaller0 entered promiscuous mode [ 32.053919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.064515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.124013][ T956] FAULT_INJECTION: forcing a failure. [ 32.124013][ T956] name failslab, interval 1, probability 0, space 0, times 0 [ 32.138907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.158924][ T956] CPU: 0 PID: 956 Comm: syz.2.257 Not tainted syzkaller #0 [ 32.166167][ T956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.176227][ T956] Call Trace: [ 32.179507][ T956] [ 32.182436][ T956] __dump_stack+0x21/0x24 [ 32.186762][ T956] dump_stack_lvl+0x110/0x170 [ 32.191431][ T956] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.196444][ T956] ? __kmalloc+0xb4/0x1e0 [ 32.200762][ T956] ? pkcs1pad_verify+0x44f/0x600 [ 32.205681][ T956] ? x509_check_for_self_signed+0x35e/0x460 [ 32.211562][ T956] ? mpihelp_addmul_1+0x173/0x190 [ 32.216574][ T956] dump_stack+0x15/0x24 [ 32.220710][ T956] should_fail_ex+0x3bf/0x510 [ 32.225367][ T956] __should_failslab+0xac/0xf0 [ 32.230117][ T956] should_failslab+0x9/0x20 [ 32.234602][ T956] __kmem_cache_alloc_node+0x3d/0x2d0 [ 32.239959][ T956] ? mpi_alloc_limb_space+0x2e/0x40 [ 32.245141][ T956] ? mpi_alloc_limb_space+0x2e/0x40 [ 32.250321][ T956] __kmalloc+0xa4/0x1e0 [ 32.254456][ T956] mpi_alloc_limb_space+0x2e/0x40 [ 32.259464][ T956] mpihelp_mul_karatsuba_case+0xdb/0xf50 [ 32.265085][ T956] mpi_powm+0x1269/0x23a0 [ 32.269401][ T956] ? __cfi_mpi_powm+0x10/0x10 [ 32.274060][ T956] ? mpihelp_cmp+0xc0/0xe0 [ 32.278460][ T956] rsa_enc+0x28f/0x3c0 [ 32.282512][ T956] ? __cfi_rsa_enc+0x10/0x10 [ 32.287080][ T956] ? kasan_save_alloc_info+0x1f/0x30 [ 32.292349][ T956] ? memset+0x35/0x40 [ 32.296312][ T956] pkcs1pad_verify+0x44f/0x600 [ 32.301057][ T956] public_key_verify_signature+0x90f/0xd80 [ 32.306848][ T956] ? do_syscall_64+0x4c/0xa0 [ 32.311417][ T956] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.317471][ T956] ? __cfi_public_key_verify_signature+0x10/0x10 [ 32.323788][ T956] ? kasan_save_alloc_info+0x1f/0x30 [ 32.329055][ T956] ? __kasan_kmalloc+0x95/0xb0 [ 32.333805][ T956] x509_check_for_self_signed+0x35e/0x460 [ 32.339513][ T956] x509_cert_parse+0x684/0x8b0 [ 32.344260][ T956] x509_key_preparse+0x63/0x6d0 [ 32.349098][ T956] asymmetric_key_preparse+0xaf/0x100 [ 32.354452][ T956] key_create_or_update+0x43e/0x9f0 [ 32.359631][ T956] ? __cfi_key_create_or_update+0x10/0x10 [ 32.365331][ T956] ? __cfi_lookup_user_key+0x10/0x10 [ 32.370601][ T956] ? __kasan_check_write+0x14/0x20 [ 32.375693][ T956] __se_sys_add_key+0x34b/0x410 [ 32.380529][ T956] ? __x64_sys_add_key+0xd0/0xd0 [ 32.385448][ T956] ? xfd_validate_state+0x70/0x150 [ 32.390545][ T956] ? __kasan_check_write+0x14/0x20 [ 32.395638][ T956] ? fpregs_restore_userregs+0x128/0x260 [ 32.401255][ T956] __x64_sys_add_key+0xbf/0xd0 [ 32.406004][ T956] x64_sys_call+0x6aa/0x9a0 [ 32.410491][ T956] do_syscall_64+0x4c/0xa0 [ 32.414888][ T956] ? clear_bhb_loop+0x30/0x80 [ 32.419552][ T956] ? clear_bhb_loop+0x30/0x80 [ 32.424211][ T956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.430085][ T956] RIP: 0033:0x7fcbc679f559 [ 32.434479][ T956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.454070][ T956] RSP: 002b:00007fcbc768d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 32.462463][ T956] RAX: ffffffffffffffda RBX: 00007fcbc6a25fa0 RCX: 00007fcbc679f559 [ 32.470414][ T956] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 32.478366][ T956] RBP: 00007fcbc6836b20 R08: 0000000020cd5944 R09: 0000000000000000 [ 32.486322][ T956] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 32.494272][ T956] R13: 00007fcbc6a26038 R14: 00007fcbc6a25fa0 R15: 00007ffc8e89f2e8 [ 32.502229][ T956] [ 32.507876][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.521131][ T958] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.256: invalid indirect mapped block 256 (level 2) [ 32.531827][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.541404][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.542977][ T958] EXT4-fs (loop4): 2 truncates cleaned up [ 32.548914][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.562208][ T958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.564115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.579561][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.586627][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.597220][ T953] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 32.616614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.626350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.637635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.655247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.673851][ T323] udevd[323]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Not a directory [ 32.679659][ T966] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.693694][ T323] udevd[323]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 32.710809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.710860][ T290] EXT4-fs (loop4): unmounting filesystem. [ 32.727273][ T559] udevd[559]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 32.727695][ T323] udevd[323]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Not a directory [ 32.741538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.748120][ T323] udevd[323]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 32.756490][ T559] udevd[559]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 32.764473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.780166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.789434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.797592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.817367][ T921] device veth0_vlan entered promiscuous mode [ 32.830891][ T980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 32.841985][ T876] device bridge_slave_0 left promiscuous mode [ 32.848114][ T876] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.856686][ T288] EXT4-fs (loop3): unmounting filesystem. [ 32.865197][ T876] device veth1_macvtap left promiscuous mode [ 32.872219][ T323] udevd[323]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 32.881675][ T876] device veth0_vlan left promiscuous mode [ 32.888513][ T323] udevd[323]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 32.997123][ T921] device veth1_macvtap entered promiscuous mode [ 33.006656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.014996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.023479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.031591][ T988] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 33.049143][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.058813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.069997][ T995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 33.077755][ T999] set_capacity_and_notify: 4 callbacks suppressed [ 33.077769][ T999] loop2: detected capacity change from 0 to 512 [ 33.095497][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.106004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.107916][ T323] udevd[323]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 33.139489][ T323] udevd[323]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 33.145662][ T1006] FAULT_INJECTION: forcing a failure. [ 33.145662][ T1006] name failslab, interval 1, probability 0, space 0, times 0 [ 33.165392][ T289] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 33.175584][ T1006] CPU: 0 PID: 1006 Comm: syz.3.277 Not tainted syzkaller #0 [ 33.182890][ T1006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.192938][ T1006] Call Trace: [ 33.196210][ T1006] [ 33.199137][ T1006] __dump_stack+0x21/0x24 [ 33.203465][ T1006] dump_stack_lvl+0x110/0x170 [ 33.208143][ T1006] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.213163][ T1006] ? __cfi_avc_has_perm+0x10/0x10 [ 33.218186][ T1006] dump_stack+0x15/0x24 [ 33.222338][ T1006] should_fail_ex+0x3bf/0x510 [ 33.227014][ T1006] __should_failslab+0xac/0xf0 [ 33.231784][ T1006] should_failslab+0x9/0x20 [ 33.236290][ T1006] __kmem_cache_alloc_node+0x3d/0x2d0 [ 33.241668][ T1006] ? __request_module+0x2a7/0x910 [ 33.246740][ T1006] ? __request_module+0x2a7/0x910 [ 33.251766][ T1006] kmalloc_trace+0x29/0xb0 [ 33.256180][ T1006] ? nfnetlink_rcv+0x697/0x2360 [ 33.261033][ T1006] __request_module+0x2a7/0x910 [ 33.265886][ T1006] ? __cfi___request_module+0x10/0x10 [ 33.271254][ T1006] ? __copy_skb_header+0x3eb/0x540 [ 33.276372][ T1006] ? __kasan_check_write+0x14/0x20 [ 33.281483][ T1006] ? mutex_unlock+0x8f/0x230 [ 33.286076][ T1006] ? __cfi_mutex_unlock+0x10/0x10 [ 33.291109][ T1006] ? skb_clone+0x21c/0x380 [ 33.295536][ T1006] nfnetlink_rcv+0x697/0x2360 [ 33.300212][ T1006] ? down_read_trylock+0x27f/0x660 [ 33.305336][ T1006] ? __cfi_nfnetlink_rcv+0x10/0x10 [ 33.310451][ T1006] ? selinux_nlmsg_lookup+0x2f9/0x440 [ 33.315828][ T1006] ? exc_page_fault+0x5e/0xb0 [ 33.320518][ T1006] ? selinux_netlink_send+0x75f/0x830 [ 33.325906][ T1006] ? __cfi_selinux_netlink_send+0x10/0x10 [ 33.331538][ T289] FAT-fs (loop2): Filesystem has been set read-only [ 33.331625][ T1006] ? _copy_from_iter+0x574/0xfe0 [ 33.338444][ T289] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 33.343112][ T1006] ? __netlink_lookup+0x387/0x3b0 [ 33.343139][ T1006] netlink_unicast+0x8c1/0xa60 [ 33.343160][ T1006] netlink_sendmsg+0x8b9/0xbd0 [ 33.367505][ T1006] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 33.373839][ T1006] ? __cfi_netlink_sendmsg+0x10/0x10 [ 33.379135][ T1006] ? security_socket_sendmsg+0x93/0xb0 [ 33.384596][ T1006] ? __cfi_netlink_sendmsg+0x10/0x10 [ 33.389888][ T1006] ____sys_sendmsg+0x5fb/0x9c0 [ 33.394649][ T1006] ? __sys_sendmsg_sock+0x40/0x40 [ 33.399672][ T1006] ? import_iovec+0x7c/0xb0 [ 33.404173][ T1006] ___sys_sendmsg+0x2a2/0x360 [ 33.408849][ T1006] ? __sys_sendmsg+0x290/0x290 [ 33.413625][ T1006] ? security_file_alloc+0x33/0x130 [ 33.418823][ T1006] ? percpu_counter_add_batch+0x13c/0x160 [ 33.424546][ T1006] ? __fdget+0x19c/0x220 [ 33.428787][ T1006] __x64_sys_sendmsg+0x20d/0x2e0 [ 33.433726][ T1006] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 33.439188][ T1006] ? __kasan_check_write+0x14/0x20 [ 33.444328][ T1006] ? fpregs_restore_userregs+0x128/0x260 [ 33.449967][ T1006] ? switch_fpu_return+0xe/0x10 [ 33.454820][ T1006] x64_sys_call+0x171/0x9a0 [ 33.459332][ T1006] do_syscall_64+0x4c/0xa0 [ 33.463742][ T1006] ? clear_bhb_loop+0x30/0x80 [ 33.468418][ T1006] ? clear_bhb_loop+0x30/0x80 [ 33.473095][ T1006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.478985][ T1006] RIP: 0033:0x7fcbf959f559 [ 33.483397][ T1006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.503002][ T1006] RSP: 002b:00007fcbfa4e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.511414][ T1006] RAX: ffffffffffffffda RBX: 00007fcbf9825fa0 RCX: 00007fcbf959f559 [ 33.519382][ T1006] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 33.527348][ T1006] RBP: 00007fcbf9636b20 R08: 0000000000000000 R09: 0000000000000000 [ 33.535314][ T1006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.543282][ T1006] R13: 00007fcbf9826038 R14: 00007fcbf9825fa0 R15: 00007fff666d5908 [ 33.551252][ T1006] [ 33.720902][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 33.720915][ T28] audit: type=1400 audit(1792947673.209:525): avc: denied { sqpoll } for pid=1021 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.756026][ T1027] syz.3.288 uses obsolete (PF_INET,SOCK_PACKET) [ 33.828105][ T28] audit: type=1400 audit(1792947673.319:526): avc: denied { mounton } for pid=1032 comm="syz.0.291" path="/proc/126/task" dev="proc" ino=19151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 33.949995][ T1041] loop3: detected capacity change from 0 to 512 [ 33.972395][ T1041] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.293: invalid indirect mapped block 256 (level 2) [ 33.989002][ T1041] EXT4-fs (loop3): 2 truncates cleaned up [ 33.989668][ T28] audit: type=1400 audit(1792947673.489:527): avc: denied { read } for pid=1044 comm="syz.0.295" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.994969][ T1041] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 34.027897][ T28] audit: type=1400 audit(1792947673.489:528): avc: denied { ioctl } for pid=1044 comm="syz.0.295" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.082660][ T288] EXT4-fs (loop3): unmounting filesystem. [ 34.252218][ T876] device bridge_slave_1 left promiscuous mode [ 34.258402][ T876] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.265856][ T876] device bridge_slave_0 left promiscuous mode [ 34.272054][ T876] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.279769][ T876] device bridge_slave_1 left promiscuous mode [ 34.285967][ T876] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.293410][ T876] device bridge_slave_0 left promiscuous mode [ 34.299529][ T876] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.307520][ T876] device veth1_macvtap left promiscuous mode [ 34.313624][ T876] device veth0_vlan left promiscuous mode [ 34.319559][ T876] device veth1_macvtap left promiscuous mode [ 34.325609][ T876] device veth0_vlan left promiscuous mode [ 34.347606][ T28] audit: type=1400 audit(1792947673.839:529): avc: denied { bind } for pid=1054 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.393424][ T28] audit: type=1400 audit(1792947673.879:530): avc: denied { read } for pid=1058 comm="syz.3.300" path="socket:[18128]" dev="sockfs" ino=18128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.456302][ T1059] FAULT_INJECTION: forcing a failure. [ 34.456302][ T1059] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.469490][ T1059] CPU: 1 PID: 1059 Comm: syz.3.300 Not tainted syzkaller #0 [ 34.476778][ T1059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 34.486843][ T1059] Call Trace: [ 34.490102][ T1059] [ 34.493013][ T1059] __dump_stack+0x21/0x24 [ 34.497331][ T1059] dump_stack_lvl+0x110/0x170 [ 34.501981][ T1059] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.506981][ T1059] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 34.513026][ T1059] dump_stack+0x15/0x24 [ 34.517158][ T1059] should_fail_ex+0x3bf/0x510 [ 34.521809][ T1059] should_fail+0xb/0x10 [ 34.525948][ T1059] should_fail_usercopy+0x1a/0x20 [ 34.530956][ T1059] _copy_to_user+0x1e/0x90 [ 34.535368][ T1059] copy_siginfo_to_user+0x28/0xa0 [ 34.540366][ T1059] arch_do_signal_or_restart+0xbf2/0x11c0 [ 34.546064][ T1059] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 34.552190][ T1059] ? __kasan_check_write+0x14/0x20 [ 34.557281][ T1059] ? fput+0x154/0x1a0 [ 34.561238][ T1059] ? __se_sys_splice+0x23c/0x450 [ 34.566158][ T1059] exit_to_user_mode_loop+0x7a/0xb0 [ 34.571335][ T1059] exit_to_user_mode_prepare+0x87/0xd0 [ 34.576783][ T1059] syscall_exit_to_user_mode+0x1a/0x30 [ 34.582236][ T1059] do_syscall_64+0x58/0xa0 [ 34.586640][ T1059] ? clear_bhb_loop+0x30/0x80 [ 34.591300][ T1059] ? clear_bhb_loop+0x30/0x80 [ 34.595964][ T1059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.601840][ T1059] RIP: 0033:0x7fcbf959f557 [ 34.606238][ T1059] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 34.625829][ T1059] RSP: 002b:00007fcbfa4e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 34.634222][ T1059] RAX: 0000000000000113 RBX: 00007fcbf9825fa0 RCX: 00007fcbf959f559 [ 34.642175][ T1059] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 34.650122][ T1059] RBP: 00007fcbf9636b20 R08: 0000000000000006 R09: 0000000000000000 [ 34.658074][ T1059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.666023][ T1059] R13: 00007fcbf9826038 R14: 00007fcbf9825fa0 R15: 00007fff666d5908 [ 34.673978][ T1059] [ 34.701130][ T1065] FAULT_INJECTION: forcing a failure. [ 34.701130][ T1065] name failslab, interval 1, probability 0, space 0, times 0 [ 34.714001][ T1065] CPU: 0 PID: 1065 Comm: syz.4.302 Not tainted syzkaller #0 [ 34.721302][ T1065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 34.721420][ T1066] loop3: detected capacity change from 0 to 512 [ 34.731349][ T1065] Call Trace: [ 34.731359][ T1065] [ 34.731365][ T1065] __dump_stack+0x21/0x24 [ 34.731388][ T1065] dump_stack_lvl+0x110/0x170 [ 34.752740][ T1065] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.757756][ T1065] ? mpihelp_addmul_1+0x173/0x190 [ 34.762773][ T1065] dump_stack+0x15/0x24 [ 34.766905][ T1065] should_fail_ex+0x3bf/0x510 [ 34.771565][ T1065] __should_failslab+0xac/0xf0 [ 34.776313][ T1065] should_failslab+0x9/0x20 [ 34.780795][ T1065] __kmem_cache_alloc_node+0x3d/0x2d0 [ 34.786149][ T1065] ? mpi_alloc_limb_space+0x2e/0x40 [ 34.791332][ T1065] ? mpi_alloc_limb_space+0x2e/0x40 [ 34.796511][ T1065] __kmalloc+0xa4/0x1e0 [ 34.800645][ T1065] mpi_alloc_limb_space+0x2e/0x40 [ 34.805649][ T1065] mpihelp_mul_karatsuba_case+0xdb/0xf50 [ 34.811266][ T1065] mpi_powm+0x1269/0x23a0 [ 34.815580][ T1065] ? __cfi_mpi_powm+0x10/0x10 [ 34.820250][ T1065] ? mpihelp_cmp+0xc0/0xe0 [ 34.824662][ T1065] rsa_enc+0x28f/0x3c0 [ 34.828711][ T1065] ? __cfi_rsa_enc+0x10/0x10 [ 34.833282][ T1065] ? kasan_save_alloc_info+0x1f/0x30 [ 34.838547][ T1065] ? memset+0x35/0x40 [ 34.842511][ T1065] pkcs1pad_verify+0x44f/0x600 [ 34.847256][ T1065] public_key_verify_signature+0x90f/0xd80 [ 34.853044][ T1065] ? do_syscall_64+0x4c/0xa0 [ 34.857613][ T1065] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.863660][ T1065] ? __cfi_public_key_verify_signature+0x10/0x10 [ 34.869970][ T1065] ? kasan_save_alloc_info+0x1f/0x30 [ 34.875237][ T1065] ? __kasan_kmalloc+0x95/0xb0 [ 34.879985][ T1065] x509_check_for_self_signed+0x35e/0x460 [ 34.885688][ T1065] x509_cert_parse+0x684/0x8b0 [ 34.890432][ T1065] x509_key_preparse+0x63/0x6d0 [ 34.895263][ T1065] asymmetric_key_preparse+0xaf/0x100 [ 34.900618][ T1065] key_create_or_update+0x43e/0x9f0 [ 34.905796][ T1065] ? __cfi_key_create_or_update+0x10/0x10 [ 34.911496][ T1065] ? __cfi_lookup_user_key+0x10/0x10 [ 34.916776][ T1065] ? __kasan_check_write+0x14/0x20 [ 34.921881][ T1065] __se_sys_add_key+0x34b/0x410 [ 34.926730][ T1065] ? __x64_sys_add_key+0xd0/0xd0 [ 34.931652][ T1065] ? xfd_validate_state+0x70/0x150 [ 34.936755][ T1065] ? __kasan_check_write+0x14/0x20 [ 34.941853][ T1065] ? fpregs_restore_userregs+0x128/0x260 [ 34.947477][ T1065] __x64_sys_add_key+0xbf/0xd0 [ 34.952222][ T1065] x64_sys_call+0x6aa/0x9a0 [ 34.956705][ T1065] do_syscall_64+0x4c/0xa0 [ 34.961104][ T1065] ? clear_bhb_loop+0x30/0x80 [ 34.965769][ T1065] ? clear_bhb_loop+0x30/0x80 [ 34.970430][ T1065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.976307][ T1065] RIP: 0033:0x7f096a59f559 [ 34.980705][ T1065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.000294][ T1065] RSP: 002b:00007f096b4ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 35.008689][ T1065] RAX: ffffffffffffffda RBX: 00007f096a825fa0 RCX: 00007f096a59f559 [ 35.016639][ T1065] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 35.024589][ T1065] RBP: 00007f096a636b20 R08: 000000001327dff4 R09: 0000000000000000 [ 35.032536][ T1065] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 35.040482][ T1065] R13: 00007f096a826038 R14: 00007f096a825fa0 R15: 00007ffd47e34938 [ 35.048432][ T1065] [ 35.055299][ T1066] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 35.065696][ T1066] EXT4-fs error (device loop3): ext4_iget_extra_inode:4765: inode #15: comm syz.3.301: corrupted in-inode xattr [ 35.089836][ T1070] xt_bpf: check failed: parse error [ 35.091183][ T1066] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.301: couldn't read orphan inode 15 (err -117) [ 35.116246][ T1073] loop0: detected capacity change from 0 to 128 [ 35.128977][ T28] audit: type=1400 audit(1792947674.619:531): avc: denied { mount } for pid=1074 comm="syz.4.306" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 35.138646][ T1066] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.161944][ T1073] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.178276][ T1073] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.191985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 35.206665][ T288] EXT4-fs (loop3): unmounting filesystem. [ 35.238512][ T28] audit: type=1400 audit(1792947674.729:532): avc: denied { read } for pid=1072 comm="syz.0.305" path="/61/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.278079][ T28] audit: type=1400 audit(1792947674.759:533): avc: denied { append } for pid=1072 comm="syz.0.305" name="file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.300467][ T28] audit: type=1400 audit(1792947674.759:534): avc: denied { ioctl } for pid=1072 comm="syz.0.305" path="/61/file1/file1" dev="loop0" ino=12 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.325163][ T291] EXT4-fs (loop0): unmounting filesystem. [ 35.354345][ T1079] loop0: detected capacity change from 0 to 512 [ 35.364884][ T1079] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.308: invalid indirect mapped block 256 (level 2) [ 35.378492][ T1079] EXT4-fs (loop0): 2 truncates cleaned up [ 35.384329][ T1079] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.399875][ T291] EXT4-fs (loop0): unmounting filesystem. [ 35.863683][ T1115] loop0: detected capacity change from 0 to 128 [ 35.872087][ T1115] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.881158][ T1115] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.922889][ T291] EXT4-fs (loop0): unmounting filesystem. [ 35.984690][ T1121] loop0: detected capacity change from 0 to 512 [ 36.005271][ T1121] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.321: invalid indirect mapped block 256 (level 2) [ 36.042568][ T1121] EXT4-fs (loop0): 2 truncates cleaned up [ 36.050542][ T1121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.067219][ T291] EXT4-fs (loop0): unmounting filesystem. [ 36.227240][ T1137] capability: warning: `syz.0.326' uses deprecated v2 capabilities in a way that may be insecure [ 36.319717][ T1146] device wireguard0 entered promiscuous mode SYZFAIL: mount(dev) failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=240 state=3 status=67 (errno 32: Broken pipe) [ 39.585431][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 39.585447][ T28] audit: type=1400 audit(1792947679.079:556): avc: denied { write } for pid=265 comm="syz-executor" path="pipe:[14801]" dev="pipefs" ino=14801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 42.841927][ T876] device bridge_slave_1 left promiscuous mode [ 42.848056][ T876] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.855553][ T876] device bridge_slave_0 left promiscuous mode [ 42.861726][ T876] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.869464][ T876] device veth1_macvtap left promiscuous mode [ 42.875531][ T876] device veth0_vlan left promiscuous mode