last executing test programs: 20.680978302s ago: executing program 1 (id=339): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000400)='configfs\x00', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = open(&(0x7f0000000dc0)='.\x00', 0x101100, 0x102) getdents(r2, &(0x7f0000000e00)=""/184, 0xb8) 20.461183748s ago: executing program 1 (id=345): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x5a6b, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)="9c", 0x1}], 0x1, 0x8) 20.36299455s ago: executing program 1 (id=346): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)='F', 0x1}], 0x1}}], 0x1, 0x24004c41) ppoll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) 20.204333614s ago: executing program 1 (id=349): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@dioread_nolock}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000000180)="$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") open(&(0x7f0000000700)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000740)=@loop={'/dev/loop', 0x0}, &(0x7f0000000780)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000007c0)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x1, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff01000000000000000e00000000001d00", [0x4]}) r1 = open(&(0x7f0000001100)='.\x00', 0x8000, 0x112) getdents(r1, 0x0, 0x0) getdents(r1, 0x0, 0x0) 19.848187332s ago: executing program 1 (id=354): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x84, 0x100000}, 0x20) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 19.712215726s ago: executing program 1 (id=358): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @void}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 19.670603877s ago: executing program 32 (id=358): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @void}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4.56128377s ago: executing program 4 (id=579): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 3.682717312s ago: executing program 4 (id=597): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x3c}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f0000001900"}) r2 = syz_open_pts(r1, 0x40000) r3 = dup3(r2, r1, 0x0) splice(r3, 0x0, r0, 0x0, 0x3, 0x0) 2.772267593s ago: executing program 4 (id=610): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000180)={0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4e23, @multicast2}, 0x10) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, r0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008044, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 2.627938457s ago: executing program 4 (id=613): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newsa={0x140, 0x10, 0x633, 0x70bd2c, 0x2, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {@in=@empty, 0xfffffffd, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0xfffffffffffffffd, 0x9}, {0x0, 0xfffffffc}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x140}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000500)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000004900)={&(0x7f0000004940)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x40000) sendmmsg(r1, &(0x7f0000000640), 0x800001d, 0x0) 2.49005409s ago: executing program 4 (id=618): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) connect$inet(r1, &(0x7f00000007c0)={0x2, 0x15, @loopback}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000800)="b1", 0x1, 0x1, 0x0, 0x0) 1.944010343s ago: executing program 3 (id=627): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000030000000317c8c53adb1b8cb300000000000001"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f"], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.852570685s ago: executing program 5 (id=629): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x21}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.797746606s ago: executing program 5 (id=631): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x2, &(0x7f00000001c0), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000000cc0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000d00)) timer_settime(0x0, 0x0, &(0x7f0000000d80)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x3, 0x1, &(0x7f0000000dc0)=[{0x0, 0x22, 0x116094000, 0x41000000}], 0x0) 1.007930705s ago: executing program 2 (id=632): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2886}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x1cf94b1f273faa1b}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x2400c000) connect$inet(r0, 0x0, 0x0) 1.007677415s ago: executing program 3 (id=633): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x4000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(0x0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000240)="0429", 0xffeb, 0x4044020, &(0x7f0000000340)={0x2, 0xfffd, @remote}, 0x10) 1.007509195s ago: executing program 4 (id=634): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r1 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x0) splice(r0, 0x0, r1, 0x0, 0x400c5, 0x5) 990.174836ms ago: executing program 0 (id=643): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 950.713117ms ago: executing program 3 (id=635): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004005) setns(0xc9, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="14000000140001032db57000fedbdf250c"], 0x20}}, 0x20008080) 753.997122ms ago: executing program 3 (id=637): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8) 753.132302ms ago: executing program 2 (id=648): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000005c0)={0x0, 0x4, 0x9, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000600)='cpu.pressure\x00', 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 712.765303ms ago: executing program 5 (id=638): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x18, 0x32, 0x301, 0x70bd2c, 0xfffffffe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 627.622185ms ago: executing program 2 (id=639): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x720, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x3}, 0x10bcc8, 0x1224, 0x2, 0x8, 0x8, 0x20005, 0x40, 0x0, 0x0, 0x0, 0x27fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000002c0)='9', 0x1) unshare(0x6a060680) 518.735197ms ago: executing program 5 (id=640): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x38}}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x20) 398.17329ms ago: executing program 0 (id=641): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/15, 0xf}], 0x1}, 0x9}], 0x1, 0x10100, 0x0) 345.166952ms ago: executing program 2 (id=642): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB='+cpu'], 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x48) 341.803262ms ago: executing program 3 (id=644): syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffff7, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x180, 0x0, 0x0) 293.520793ms ago: executing program 0 (id=645): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x4000000000006, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x6, 0x4, 0x2}]}]}, 0xfc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000018c0)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 293.302813ms ago: executing program 5 (id=646): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000700)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x80000) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/240, 0xf0}], 0x1}, 0x30}], 0x1, 0x20002, 0x0) 246.518604ms ago: executing program 3 (id=656): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 220.458555ms ago: executing program 5 (id=647): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write$P9_RWRITE(r2, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x5}, 0xb) write$P9_RREADDIR(r2, 0x0, 0x0) 219.691055ms ago: executing program 0 (id=659): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x218, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x50]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bind$x25(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000080)=0x10) 183.185336ms ago: executing program 0 (id=649): r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000180)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 72.024698ms ago: executing program 2 (id=650): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000500)=0x2, 0x4) connect$rxrpc(r2, &(0x7f0000000540)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000005c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r1, &(0x7f0000000600)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 34.383339ms ago: executing program 2 (id=651): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0xa0200) dup3(r1, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000480)={0xa0000016}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000004c0)={0x2000000b}) 0s ago: executing program 0 (id=652): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x6, &(0x7f0000000480)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000004c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000500)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x112013, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000001340)={0x1, &(0x7f0000001380)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) perf_event_open(&(0x7f00000013c0)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x80000009, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, @perf_bp={0x0, 0x3}, 0x1b7cccd97f7f386a, 0x2, 0x11000, 0x1, 0x1, 0x1, 0x7, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000001440)={0x7ff, 0xfffffffe, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): LAN 0 to HW filter on device team0 [ 35.532543][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.552011][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.553442][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.553470][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.580900][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.580950][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.608994][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.624935][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.624977][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.642009][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.651393][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.651481][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.669763][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.669806][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.682819][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.682927][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.924624][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.935538][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.983260][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.015793][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.076619][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.148840][ T3305] veth0_vlan: entered promiscuous mode [ 36.154351][ T3305] veth1_vlan: entered promiscuous mode [ 36.194357][ T3305] veth0_macvtap: entered promiscuous mode [ 36.208314][ T3298] veth0_vlan: entered promiscuous mode [ 36.221933][ T3305] veth1_macvtap: entered promiscuous mode [ 36.223747][ T3298] veth1_vlan: entered promiscuous mode [ 36.225132][ T3304] veth0_vlan: entered promiscuous mode [ 36.244702][ T3304] veth1_vlan: entered promiscuous mode [ 36.260608][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.275689][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.311099][ T3298] veth0_macvtap: entered promiscuous mode [ 36.312592][ T3304] veth0_macvtap: entered promiscuous mode [ 36.329893][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 36.329986][ T29] audit: type=1400 audit(1792546690.408:149): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.vjNAMz/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.330012][ T29] audit: type=1400 audit(1792546690.408:150): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.330670][ T29] audit: type=1400 audit(1792546690.408:151): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.vjNAMz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.331461][ T29] audit: type=1400 audit(1792546690.408:152): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.332258][ T29] audit: type=1400 audit(1792546690.408:153): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.vjNAMz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.332749][ T29] audit: type=1400 audit(1792546690.408:154): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.vjNAMz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.333069][ T3299] veth0_vlan: entered promiscuous mode [ 36.333823][ T29] audit: type=1400 audit(1792546690.408:155): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.340576][ T54] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.340876][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.341029][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.341254][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.342870][ T29] audit: type=1400 audit(1792546690.418:156): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.343562][ T29] audit: type=1400 audit(1792546690.418:157): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=4900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.372246][ T3304] veth1_macvtap: entered promiscuous mode [ 36.381311][ T3298] veth1_macvtap: entered promiscuous mode [ 36.393209][ T3303] veth0_vlan: entered promiscuous mode [ 36.395275][ T3299] veth1_vlan: entered promiscuous mode [ 36.436327][ T3303] veth1_vlan: entered promiscuous mode [ 36.443750][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.449961][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.473624][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.488826][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.556888][ T285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.557333][ T285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.616769][ T285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.617344][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.637679][ T3305] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.658219][ T3299] veth0_macvtap: entered promiscuous mode [ 36.705354][ T3299] veth1_macvtap: entered promiscuous mode [ 36.727843][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.728238][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.728276][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.728379][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.729163][ T3303] veth0_macvtap: entered promiscuous mode [ 36.737659][ T29] audit: type=1400 audit(1792546690.808:158): avc: denied { read } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.763561][ T3303] veth1_macvtap: entered promiscuous mode [ 36.802700][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.813754][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.840003][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.869837][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.966854][ T54] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.966899][ T54] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.966948][ T54] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.967057][ T54] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.967091][ T54] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.967197][ T54] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.967271][ T54] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.967302][ T54] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.182161][ T3532] FAULT_INJECTION: forcing a failure. [ 37.182161][ T3532] name failslab, interval 1, probability 0, space 0, times 1 [ 37.182325][ T3532] CPU: 1 UID: 0 PID: 3532 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.182359][ T3532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 37.182386][ T3532] Call Trace: [ 37.182395][ T3532] [ 37.182411][ T3532] __dump_stack+0x1d/0x30 [ 37.182521][ T3532] dump_stack_lvl+0x95/0xd0 [ 37.182544][ T3532] dump_stack+0x15/0x1b [ 37.182569][ T3532] should_fail_ex+0x262/0x280 [ 37.182610][ T3532] should_failslab+0x8c/0xb0 [ 37.182738][ T3532] __kvmalloc_node_noprof+0x14f/0x5b0 [ 37.182769][ T3532] ? nf_hook_entries_grow+0x1cb/0x460 [ 37.182805][ T3532] ? nf_hook_entries_grow+0x1cb/0x460 [ 37.182880][ T3532] nf_hook_entries_grow+0x1cb/0x460 [ 37.182913][ T3532] ? xt_find_target+0x204/0x240 [ 37.182942][ T3532] ? should_fail_ex+0xdb/0x280 [ 37.182984][ T3532] __nf_register_net_hook+0x187/0x480 [ 37.183017][ T3532] nf_register_net_hook+0x88/0x130 [ 37.183067][ T3532] nf_register_net_hooks+0x44/0x150 [ 37.183105][ T3532] xt_register_table+0x3aa/0x530 [ 37.183141][ T3532] ip6t_register_table+0xd9/0x180 [ 37.183227][ T3532] ip6table_mangle_table_init+0x4d/0x70 [ 37.183253][ T3532] xt_find_table_lock+0x1a5/0x2c0 [ 37.183288][ T3532] do_ip6t_get_ctl+0x540/0xcb0 [ 37.183359][ T3532] ? irqentry_exit+0x58f/0x610 [ 37.183380][ T3532] ? should_fail_ex+0xdb/0x280 [ 37.183435][ T3532] ? __futex_wait+0x244/0x2a0 [ 37.183525][ T3532] nf_getsockopt+0x190/0x1b0 [ 37.183563][ T3532] ipv6_getsockopt+0x170/0x1e0 [ 37.183640][ T3532] udpv6_getsockopt+0xa5/0x230 [ 37.183670][ T3532] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 37.183713][ T3532] sock_common_getsockopt+0x60/0x70 [ 37.183790][ T3532] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 37.183853][ T3532] do_sock_getsockopt+0x2f5/0x570 [ 37.183886][ T3532] __x64_sys_getsockopt+0x11d/0x1a0 [ 37.183985][ T3532] x64_sys_call+0x1032/0x2550 [ 37.184011][ T3532] do_syscall_64+0x112/0x360 [ 37.184063][ T3532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.184150][ T3532] RIP: 0033:0x7f063ffaf559 [ 37.184172][ T3532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.184192][ T3532] RSP: 002b:00007f063ea07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 37.184223][ T3532] RAX: ffffffffffffffda RBX: 00007f0640235fa0 RCX: 00007f063ffaf559 [ 37.184237][ T3532] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000005 [ 37.184253][ T3532] RBP: 00007f0640046b20 R08: 0000200000000c00 R09: 0000000000000000 [ 37.184272][ T3532] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 37.184290][ T3532] R13: 00007f0640236038 R14: 00007f0640235fa0 R15: 00007ffc3c4129e8 [ 37.184316][ T3532] [ 37.485407][ T3537] netlink: 'syz.4.10': attribute type 3 has an invalid length. [ 37.485429][ T3537] netlink: 'syz.4.10': attribute type 1 has an invalid length. [ 37.485468][ T3537] netlink: 198012 bytes leftover after parsing attributes in process `syz.4.10'. [ 37.616175][ T3549] ip_tables: iptables: counters copy to user failed while replacing table [ 37.920370][ T9] Process accounting resumed [ 37.943169][ T3567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 38.464278][ T3577] loop4: detected capacity change from 0 to 512 [ 38.513199][ T3577] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.26: bg 0: block 385: padding at end of block bitmap is not set [ 38.513459][ T3577] loop4: lost filesystem error report for type 5 error -117 [ 38.514703][ T3577] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 38.514924][ T3577] loop4: lost filesystem error report for type 5 error -117 [ 38.516263][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 38.516304][ C0] EXT4-fs (loop4): initial error at time 1792546692: ext4_validate_block_bitmap:445 [ 38.516333][ C0] EXT4-fs (loop4): last error at time 1792546692: ext4_mb_clear_bb:6680 [ 38.587597][ T3577] EXT4-fs (loop4): 2 truncates cleaned up [ 38.610673][ T3577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.684051][ T3577] syz.4.26 (3577) used greatest stack depth: 10568 bytes left [ 38.696953][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.806546][ T3587] capability: warning: `syz.4.29' uses 32-bit capabilities (legacy support in use) [ 38.807418][ T3587] cgroup: Setting release_agent not allowed [ 38.978934][ T3600] FAULT_INJECTION: forcing a failure. [ 38.978934][ T3600] name failslab, interval 1, probability 0, space 0, times 0 [ 38.979058][ T3600] CPU: 1 UID: 0 PID: 3600 Comm: syz.2.34 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.979086][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 38.979098][ T3600] Call Trace: [ 38.979104][ T3600] [ 38.979111][ T3600] __dump_stack+0x1d/0x30 [ 38.979136][ T3600] dump_stack_lvl+0x95/0xd0 [ 38.979233][ T3600] dump_stack+0x15/0x1b [ 38.979301][ T3600] should_fail_ex+0x262/0x280 [ 38.979341][ T3600] ? inotify_handle_inode_event+0x127/0x3c0 [ 38.979418][ T3600] should_failslab+0x8c/0xb0 [ 38.979493][ T3600] __kmalloc_noprof+0xb6/0x4b0 [ 38.979539][ T3600] ? inotify_handle_inode_event+0x127/0x3c0 [ 38.979723][ T3600] ? refcount_dec_and_lock+0xff/0x170 [ 38.979802][ T3600] inotify_handle_inode_event+0x127/0x3c0 [ 38.979876][ T3600] inotify_ignored_and_remove_idr+0x29/0x60 [ 38.979917][ T3600] inotify_freeing_mark+0x1d/0x30 [ 38.979958][ T3600] ? __pfx_inotify_freeing_mark+0x10/0x10 [ 38.980122][ T3600] fsnotify_clear_marks_by_group+0x3be/0x4b0 [ 38.980156][ T3600] ? __pfx_inotify_release+0x10/0x10 [ 38.980256][ T3600] fsnotify_destroy_group+0x53/0x180 [ 38.980297][ T3600] ? __pfx_inotify_release+0x10/0x10 [ 38.980323][ T3600] inotify_release+0x1f/0x30 [ 38.980347][ T3600] __fput+0x286/0x610 [ 38.980521][ T3600] fput_close_sync+0xad/0x190 [ 38.980557][ T3600] __x64_sys_close+0x55/0xf0 [ 38.980595][ T3600] x64_sys_call+0x812/0x2550 [ 38.980681][ T3600] do_syscall_64+0x112/0x360 [ 38.980708][ T3600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.980737][ T3600] RIP: 0033:0x7f04b678f559 [ 38.980764][ T3600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.980813][ T3600] RSP: 002b:00007f04b51df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 38.980843][ T3600] RAX: ffffffffffffffda RBX: 00007f04b6a15fa0 RCX: 00007f04b678f559 [ 38.980862][ T3600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 38.980879][ T3600] RBP: 00007f04b6826b20 R08: 0000000000000000 R09: 0000000000000000 [ 38.980896][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.980913][ T3600] R13: 00007f04b6a16038 R14: 00007f04b6a15fa0 R15: 00007ffe8ebc66c8 [ 38.980938][ T3600] [ 39.268734][ T3611] FAULT_INJECTION: forcing a failure. [ 39.268734][ T3611] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.268763][ T3611] CPU: 1 UID: 0 PID: 3611 Comm: syz.4.38 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.268821][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 39.268839][ T3611] Call Trace: [ 39.268848][ T3611] [ 39.268862][ T3611] __dump_stack+0x1d/0x30 [ 39.268889][ T3611] dump_stack_lvl+0x95/0xd0 [ 39.268977][ T3611] dump_stack+0x15/0x1b [ 39.269054][ T3611] should_fail_ex+0x262/0x280 [ 39.269086][ T3611] should_fail+0xb/0x20 [ 39.269116][ T3611] should_fail_usercopy+0x1a/0x20 [ 39.269157][ T3611] _copy_from_user+0x1c/0xb0 [ 39.269278][ T3611] get_itimerspec64+0x4c/0x1b0 [ 39.269312][ T3611] __x64_sys_timer_settime+0x9a/0x160 [ 39.269408][ T3611] x64_sys_call+0x158e/0x2550 [ 39.269435][ T3611] do_syscall_64+0x112/0x360 [ 39.269530][ T3611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.269555][ T3611] RIP: 0033:0x7f063ffaf559 [ 39.269570][ T3611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.269655][ T3611] RSP: 002b:00007f063ea07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 39.269688][ T3611] RAX: ffffffffffffffda RBX: 00007f0640235fa0 RCX: 00007f063ffaf559 [ 39.269705][ T3611] RDX: 00002000000004c0 RSI: 236bd4336e4642df RDI: 0000000000000000 [ 39.269718][ T3611] RBP: 00007f0640046b20 R08: 0000000000000000 R09: 0000000000000000 [ 39.269732][ T3611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.269749][ T3611] R13: 00007f0640236038 R14: 00007f0640235fa0 R15: 00007ffc3c4129e8 [ 39.269798][ T3611] [ 39.680231][ T3605] loop0: detected capacity change from 0 to 1024 [ 39.713950][ T3605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.714247][ T3605] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 39.714340][ T3605] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.749720][ T3605] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.750039][ T3605] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 40.267382][ T3632] loop4: detected capacity change from 0 to 1024 [ 40.297841][ T3632] EXT4-fs: Ignoring removed bh option [ 40.305518][ T3632] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.317610][ T3632] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 40.317737][ T3632] System zones: 0-1, 3-12 [ 40.324240][ T3632] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #3: block 1: comm syz.4.47: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.324494][ T3632] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 40.324900][ T3632] EXT4-fs (loop4): Remounting filesystem read-only [ 40.325773][ T3632] EXT4-fs (loop4): 1 orphan inode deleted [ 40.331187][ T3632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.498212][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.531208][ T3656] printk: console [ttyS0] disabled [ 40.557974][ T3656] printk: console [ttyS0] enabled [ 40.601114][ T3659] loop4: detected capacity change from 0 to 1764 [ 40.601859][ T3659] ISOFS: Unable to identify CD-ROM format. [ 40.651815][ T12] IPVS: starting estimator thread 0... [ 40.738292][ T3666] IPVS: using max 2304 ests per chain, 115200 per kthread [ 40.852607][ T3679] loop1: detected capacity change from 0 to 2048 [ 40.867912][ T3679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.917296][ T3678] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 40.917377][ T3678] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.917472][ T3678] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.917472][ T3678] [ 40.917532][ T3678] EXT4-fs (loop1): Total free blocks count 0 [ 40.917543][ T3678] EXT4-fs (loop1): Free/Dirty block details [ 40.917559][ T3678] EXT4-fs (loop1): free_blocks=66060288 [ 40.917570][ T3678] EXT4-fs (loop1): dirty_blocks=32 [ 40.917580][ T3678] EXT4-fs (loop1): Block reservation details [ 40.917589][ T3678] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 40.919895][ T3678] syz.1.65 (3678) used greatest stack depth: 10528 bytes left [ 40.956127][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.098444][ T3695] syzkaller1: entered promiscuous mode [ 41.098468][ T3695] syzkaller1: entered allmulticast mode [ 41.191274][ T3703] FAULT_INJECTION: forcing a failure. [ 41.191274][ T3703] name failslab, interval 1, probability 0, space 0, times 0 [ 41.191304][ T3703] CPU: 1 UID: 0 PID: 3703 Comm: syz.3.74 Not tainted syzkaller #0 PREEMPT(lazy) [ 41.191339][ T3703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 41.191360][ T3703] Call Trace: [ 41.191369][ T3703] [ 41.191377][ T3703] __dump_stack+0x1d/0x30 [ 41.191446][ T3703] dump_stack_lvl+0x95/0xd0 [ 41.191469][ T3703] dump_stack+0x15/0x1b [ 41.191494][ T3703] should_fail_ex+0x262/0x280 [ 41.191534][ T3703] ? security_inode_alloc+0x37/0x100 [ 41.191616][ T3703] should_failslab+0x8c/0xb0 [ 41.191683][ T3703] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 41.191726][ T3703] ? security_inode_alloc+0x37/0x100 [ 41.191760][ T3703] security_inode_alloc+0x37/0x100 [ 41.191845][ T3703] inode_init_always_gfp+0x495/0x4e0 [ 41.191879][ T3703] ? __pfx_proc_alloc_inode+0x10/0x10 [ 41.191917][ T3703] alloc_inode+0x58/0x170 [ 41.191966][ T3703] new_inode+0x1d/0xe0 [ 41.192033][ T3703] proc_get_inode+0x21/0x370 [ 41.192120][ T3703] proc_lookup_de+0x196/0x240 [ 41.192150][ T3703] proc_tgid_net_lookup+0x43/0xf0 [ 41.192224][ T3703] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 41.192271][ T3703] lookup_open+0x6ee/0x1010 [ 41.192362][ T3703] path_openat+0x492/0x11c0 [ 41.192398][ T3703] do_file_open+0x16c/0x290 [ 41.192511][ T3703] ? __pfx_kfree_link+0x10/0x10 [ 41.192546][ T3703] do_sys_openat2+0xa1/0x140 [ 41.192585][ T3703] __x64_sys_openat+0xf2/0x120 [ 41.192681][ T3703] x64_sys_call+0x1f72/0x2550 [ 41.192706][ T3703] do_syscall_64+0x112/0x360 [ 41.192736][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.192794][ T3703] RIP: 0033:0x7f97044cfd8e [ 41.192810][ T3703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.192873][ T3703] RSP: 002b:00007f9702f5eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 41.192901][ T3703] RAX: ffffffffffffffda RBX: 00007f9702f5f6c0 RCX: 00007f97044cfd8e [ 41.193000][ T3703] RDX: 0000000000000002 RSI: 00007f9702f5ef90 RDI: ffffffffffffff9c [ 41.193019][ T3703] RBP: 00007f97045a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 41.193034][ T3703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.193054][ T3703] R13: 00007f9704796038 R14: 00007f9704795fa0 R15: 00007fffe0d6bf68 [ 41.193075][ T3703] [ 41.547437][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 41.547452][ T29] audit: type=1400 audit(1792546695.628:249): avc: denied { read } for pid=3707 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 42.072074][ T29] audit: type=1400 audit(1792546696.148:250): avc: denied { perfmon } for pid=3708 comm="syz.4.77" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.103434][ T3716] FAULT_INJECTION: forcing a failure. [ 44.103434][ T3716] name failslab, interval 1, probability 0, space 0, times 0 [ 44.103512][ T3716] CPU: 0 UID: 0 PID: 3716 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT(lazy) [ 44.103543][ T3716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.103556][ T3716] Call Trace: [ 44.103563][ T3716] [ 44.103570][ T3716] __dump_stack+0x1d/0x30 [ 44.103596][ T3716] dump_stack_lvl+0x95/0xd0 [ 44.103664][ T3716] dump_stack+0x15/0x1b [ 44.103684][ T3716] should_fail_ex+0x262/0x280 [ 44.103714][ T3716] ? alloc_fdtable+0x8c/0x1d0 [ 44.103743][ T3716] should_failslab+0x8c/0xb0 [ 44.103789][ T3716] __kmalloc_cache_noprof+0x5d/0x3e0 [ 44.103822][ T3716] ? alloc_fdtable+0x8c/0x1d0 [ 44.103857][ T3716] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 44.103892][ T3716] alloc_fdtable+0x8c/0x1d0 [ 44.103923][ T3716] dup_fd+0x56a/0x5f0 [ 44.104001][ T3716] ? do_futex+0x391/0x460 [ 44.104042][ T3716] __se_sys_close_range+0x1d4/0xa00 [ 44.104081][ T3716] ? __se_sys_futex+0x2f6/0x370 [ 44.104120][ T3716] ? xfd_validate_state+0x45/0xf0 [ 44.104155][ T3716] ? restore_fpregs_from_fpstate+0x61/0x110 [ 44.104217][ T3716] __x64_sys_close_range+0x43/0x50 [ 44.104251][ T3716] x64_sys_call+0x2198/0x2550 [ 44.104333][ T3716] do_syscall_64+0x112/0x360 [ 44.104366][ T3716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.104411][ T3716] RIP: 0033:0x7f970450f559 [ 44.104432][ T3716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.104461][ T3716] RSP: 002b:00007f9702f5f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 44.104490][ T3716] RAX: ffffffffffffffda RBX: 00007f9704795fa0 RCX: 00007f970450f559 [ 44.104509][ T3716] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 44.104609][ T3716] RBP: 00007f97045a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 44.104627][ T3716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.104645][ T3716] R13: 00007f9704796038 R14: 00007f9704795fa0 R15: 00007fffe0d6bf68 [ 44.104668][ T3716] [ 44.179761][ T29] audit: type=1400 audit(1792546698.238:251): avc: denied { watch watch_reads } for pid=3717 comm="syz.4.79" path="/proc/45" dev="proc" ino=3955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 44.275953][ T29] audit: type=1400 audit(1792546698.338:252): avc: denied { bpf } for pid=3722 comm="syz.3.80" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.309223][ T29] audit: type=1400 audit(1792546698.388:253): avc: denied { mount } for pid=3721 comm="syz.4.81" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 44.407003][ T3727] loop0: detected capacity change from 0 to 256 [ 44.407307][ T3727] ======================================================= [ 44.407307][ T3727] WARNING: The mand mount option has been deprecated and [ 44.407307][ T3727] and is ignored by this kernel. Remove the mand [ 44.407307][ T3727] option from the mount to silence this warning. [ 44.407307][ T3727] ======================================================= [ 44.407535][ T3727] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.412794][ T29] audit: type=1400 audit(1792546698.488:254): avc: denied { mount } for pid=3726 comm="syz.0.82" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 44.445447][ T3730] syz.2.83 uses obsolete (PF_INET,SOCK_PACKET) [ 44.469205][ T29] audit: type=1400 audit(1792546698.538:255): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 44.539937][ T29] audit: type=1400 audit(1792546698.618:256): avc: denied { ioctl } for pid=3731 comm="syz.4.84" path="socket:[3999]" dev="sockfs" ino=3999 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.543390][ T3732] netlink: 'syz.4.84': attribute type 4 has an invalid length. [ 44.580812][ T3732] netlink: 'syz.4.84': attribute type 4 has an invalid length. [ 44.724567][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 44.771954][ T3739] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 44.861162][ T29] audit: type=1400 audit(1792546698.938:257): avc: denied { connect } for pid=3722 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.907509][ T3734] loop1: detected capacity change from 0 to 1024 [ 44.925982][ T3734] EXT4-fs: inline encryption not supported [ 44.944062][ T3734] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 44.944781][ T3734] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 44.972816][ T3734] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 44.983152][ T29] audit: type=1400 audit(1792546699.058:258): avc: denied { write } for pid=3742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.003288][ T3734] EXT4-fs (loop1): invalid journal inode [ 45.003756][ T3734] EXT4-fs (loop1): can't get journal size [ 45.051098][ T3734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.143880][ T3763] xt_hashlimit: size too large, truncated to 1048576 [ 45.182660][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.412056][ T3769] loop1: detected capacity change from 0 to 512 [ 45.611790][ T3769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.615504][ T3769] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.851718][ T3808] loop3: detected capacity change from 0 to 164 [ 45.852064][ T3808] iso9660: Unknown parameter '' [ 45.902915][ T3800] loop0: detected capacity change from 0 to 512 [ 45.939205][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.976808][ T3800] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 45.981082][ T3800] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 45.987040][ T3800] System zones: 0-1, 15-15, 18-18, 34-34 [ 45.988266][ T3800] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.993680][ T3800] EXT4-fs error (device loop0): ext4_quota_enable:7266: comm syz.0.103: Bad quota inum: 768, type: 0 [ 45.994139][ T3800] loop0: lost filesystem error report for type 5 error -117 [ 46.006579][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 46.006689][ C0] EXT4-fs (loop0): initial error at time 1792546700: ext4_quota_enable:7266 [ 46.006812][ C0] EXT4-fs (loop0): last error at time 1792546700: ext4_quota_enable:7266 [ 46.010978][ T3800] EXT4-fs warning (device loop0): ext4_enable_quotas:7314: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix. [ 46.011368][ T3800] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 46.021910][ T3800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.335005][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.452360][ T3835] loop4: detected capacity change from 0 to 2048 [ 46.480514][ T3835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.594932][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.624139][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 46.624154][ T29] audit: type=1400 audit(1792546700.698:293): avc: denied { read write } for pid=3838 comm="syz.4.117" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 46.624223][ T29] audit: type=1400 audit(1792546700.698:294): avc: denied { open } for pid=3838 comm="syz.4.117" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 46.694726][ T3840] loop4: detected capacity change from 0 to 1024 [ 46.723288][ T3840] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 46.723332][ T3840] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 46.724060][ T3840] EXT4-fs (loop4): invalid journal inode [ 46.724116][ T3840] EXT4-fs (loop4): can't get journal size [ 46.727907][ T3840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.813238][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.949055][ T29] audit: type=1400 audit(1792546701.028:295): avc: denied { block_suspend } for pid=3848 comm="syz.0.121" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.013374][ T29] audit: type=1400 audit(1792546701.088:296): avc: denied { create } for pid=3850 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.016199][ T29] audit: type=1400 audit(1792546701.088:297): avc: denied { bind } for pid=3850 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.281717][ T29] audit: type=1400 audit(1792546701.358:298): avc: denied { create } for pid=3857 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 47.284109][ T29] audit: type=1400 audit(1792546701.358:299): avc: denied { setopt } for pid=3857 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 47.286710][ T29] audit: type=1400 audit(1792546701.368:300): avc: denied { write } for pid=3857 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 47.349402][ T29] audit: type=1400 audit(1792546701.428:301): avc: denied { watch } for pid=3859 comm="syz.3.127" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 47.349887][ T29] audit: type=1400 audit(1792546701.428:302): avc: denied { bind } for pid=3857 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 47.474132][ T3868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 47.484986][ T54] IPVS: starting estimator thread 0... [ 47.566674][ T3869] IPVS: using max 1776 ests per chain, 88800 per kthread [ 47.604241][ T3874] wireguard0: entered promiscuous mode [ 47.604343][ T3874] wireguard0: entered allmulticast mode [ 48.154934][ T3913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'. [ 48.376666][ T3927] FAULT_INJECTION: forcing a failure. [ 48.376666][ T3927] name failslab, interval 1, probability 0, space 0, times 0 [ 48.376727][ T3927] CPU: 1 UID: 0 PID: 3927 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.376763][ T3927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 48.376836][ T3927] Call Trace: [ 48.376845][ T3927] [ 48.376855][ T3927] __dump_stack+0x1d/0x30 [ 48.376927][ T3927] dump_stack_lvl+0x95/0xd0 [ 48.376968][ T3927] dump_stack+0x15/0x1b [ 48.376997][ T3927] should_fail_ex+0x262/0x280 [ 48.377039][ T3927] ? kstrdup_const+0x3e/0x50 [ 48.377153][ T3927] should_failslab+0x8c/0xb0 [ 48.377192][ T3927] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 48.377239][ T3927] ? kstrdup_const+0x3e/0x50 [ 48.377277][ T3927] kstrdup+0x3e/0xd0 [ 48.377342][ T3927] kstrdup_const+0x3e/0x50 [ 48.377379][ T3927] __kernfs_new_node+0x42/0x440 [ 48.377414][ T3927] ? vsnprintf+0x857/0x8c0 [ 48.377467][ T3927] kernfs_new_node+0x107/0x140 [ 48.377525][ T3927] __kernfs_create_file+0x4b/0x180 [ 48.377560][ T3927] cgroup_addrm_files+0x50e/0x660 [ 48.377692][ T3927] css_populate_dir+0x9f/0x230 [ 48.377726][ T3927] cgroup_apply_control_enable+0x468/0x9c0 [ 48.377795][ T3927] cgroup_mkdir+0xbfd/0xcb0 [ 48.377826][ T3927] ? __pfx_cgroup_mkdir+0x10/0x10 [ 48.377873][ T3927] kernfs_iop_mkdir+0x11e/0x1c0 [ 48.377931][ T3927] vfs_mkdir+0x291/0x3e0 [ 48.377968][ T3927] filename_mkdirat+0x138/0x300 [ 48.378001][ T3927] __se_sys_mkdirat+0x32/0xf0 [ 48.378030][ T3927] __x64_sys_mkdirat+0x43/0x50 [ 48.378058][ T3927] x64_sys_call+0x368/0x2550 [ 48.378160][ T3927] do_syscall_64+0x112/0x360 [ 48.378201][ T3927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.378281][ T3927] RIP: 0033:0x7f103d25f559 [ 48.378304][ T3927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.378330][ T3927] RSP: 002b:00007f103bcb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 48.378384][ T3927] RAX: ffffffffffffffda RBX: 00007f103d4e5fa0 RCX: 00007f103d25f559 [ 48.378404][ T3927] RDX: 00000000000001ff RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 48.378425][ T3927] RBP: 00007f103d2f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 48.378444][ T3927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.378459][ T3927] R13: 00007f103d4e6038 R14: 00007f103d4e5fa0 R15: 00007ffd6dd3f338 [ 48.378523][ T3927] [ 48.380238][ T3927] cgroup: cgroup_addrm_files: failed to add usage_sys, err=-12 [ 48.621554][ T3936] loop3: detected capacity change from 0 to 512 [ 49.043451][ T4012] loop1: detected capacity change from 0 to 1024 [ 49.044874][ T4012] EXT4-fs: inline encryption not supported [ 49.046008][ T4012] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.050114][ T4012] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 1: comm syz.1.150: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.050217][ T4012] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 49.050600][ T4012] EXT4-fs (loop1): Remounting filesystem read-only [ 49.050766][ T4012] EXT4-fs (loop1): 1 orphan inode deleted [ 49.051678][ T4012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.720383][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.797081][ T4091] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.922232][ T4101] netlink: 96 bytes leftover after parsing attributes in process `syz.0.156'. [ 50.262021][ T4118] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 50.272225][ T4130] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 50.272515][ T4128] IPVS: stopping backup sync thread 4130 ... [ 50.314398][ T4118] syz.2.162 (4118) used greatest stack depth: 10440 bytes left [ 50.524906][ T4143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 50.577943][ T3955] IPVS: starting estimator thread 0... [ 50.642811][ T4155] loop4: detected capacity change from 0 to 1024 [ 50.665249][ T4155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.666528][ T4148] IPVS: using max 1728 ests per chain, 86400 per kthread [ 50.692128][ T4162] FAULT_INJECTION: forcing a failure. [ 50.692128][ T4162] name failslab, interval 1, probability 0, space 0, times 0 [ 50.692166][ T4162] CPU: 1 UID: 0 PID: 4162 Comm: syz.0.177 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.692190][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 50.692257][ T4162] Call Trace: [ 50.692266][ T4162] [ 50.692276][ T4162] __dump_stack+0x1d/0x30 [ 50.692310][ T4162] dump_stack_lvl+0x95/0xd0 [ 50.692340][ T4162] dump_stack+0x15/0x1b [ 50.692369][ T4162] should_fail_ex+0x262/0x280 [ 50.692405][ T4162] ? nfs_get_tree+0x8ab/0xc60 [ 50.692432][ T4162] should_failslab+0x8c/0xb0 [ 50.692540][ T4162] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 50.692626][ T4162] ? nfs_get_tree+0x8ab/0xc60 [ 50.692656][ T4162] kmemdup_nul+0x36/0xc0 [ 50.692684][ T4162] nfs_get_tree+0x8ab/0xc60 [ 50.692762][ T4162] vfs_get_tree+0x57/0x1d0 [ 50.692811][ T4162] vfs_cmd_create+0x8a/0x140 [ 50.692849][ T4162] vfs_fsconfig_locked+0x6f/0x210 [ 50.692964][ T4162] __se_sys_fsconfig+0x671/0x7e0 [ 50.693006][ T4162] __x64_sys_fsconfig+0x67/0x80 [ 50.693064][ T4162] x64_sys_call+0xaa0/0x2550 [ 50.693100][ T4162] do_syscall_64+0x112/0x360 [ 50.693137][ T4162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.693178][ T4162] RIP: 0033:0x7f103d25f559 [ 50.693231][ T4162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.693264][ T4162] RSP: 002b:00007f103bcb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 50.693292][ T4162] RAX: ffffffffffffffda RBX: 00007f103d4e5fa0 RCX: 00007f103d25f559 [ 50.693377][ T4162] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 50.693394][ T4162] RBP: 00007f103d2f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 50.693449][ T4162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.693461][ T4162] R13: 00007f103d4e6038 R14: 00007f103d4e5fa0 R15: 00007ffd6dd3f338 [ 50.693481][ T4162] [ 51.080342][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.395530][ T4218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.189'. [ 51.480691][ T4222] netlink: 96 bytes leftover after parsing attributes in process `syz.3.188'. [ 51.691554][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 51.691574][ T29] audit: type=1400 audit(1792546705.768:441): avc: denied { create } for pid=4243 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.692670][ T29] audit: type=1400 audit(1792546705.768:442): avc: denied { write } for pid=4243 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.782881][ T29] audit: type=1400 audit(1792546705.858:443): avc: denied { append } for pid=4260 comm="syz.3.200" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.809097][ T29] audit: type=1400 audit(1792546705.868:444): avc: denied { read } for pid=4260 comm="syz.3.200" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.809205][ T29] audit: type=1400 audit(1792546705.868:445): avc: denied { open } for pid=4260 comm="syz.3.200" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.816358][ T29] audit: type=1400 audit(1792546705.888:446): avc: denied { create } for pid=4260 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.816535][ T29] audit: type=1400 audit(1792546705.888:447): avc: denied { getopt } for pid=4260 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.062730][ T29] audit: type=1326 audit(1792546706.138:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.1.203" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01edb2f559 code=0x7ffc0000 [ 52.096620][ T29] audit: type=1326 audit(1792546706.148:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.1.203" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01edb2f559 code=0x7ffc0000 [ 52.134936][ T29] audit: type=1326 audit(1792546706.208:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.1.203" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01edb2f559 code=0x7ffc0000 [ 52.157190][ T4301] netlink: 96 bytes leftover after parsing attributes in process `syz.2.204'. [ 52.402044][ T4315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.211'. [ 52.873729][ T4333] tipc: Started in network mode [ 52.873766][ T4333] tipc: Node identity 7f000001, cluster identity 4711 [ 52.873975][ T4333] tipc: Enabled bearer , priority 10 [ 52.897666][ T4333] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 52.897745][ T4333] tipc: Enabled bearer , priority 10 [ 53.301903][ T4362] loop4: detected capacity change from 0 to 512 [ 53.331659][ T4362] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 53.334064][ T4362] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.230: iget: bad i_size value: 360287970189639680 [ 53.334099][ T4362] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.334331][ T4362] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.230: couldn't read orphan inode 15 (err -117) [ 53.334360][ T4362] loop4: lost filesystem error report for type 5 error -117 [ 53.335001][ T4362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.345396][ T4343] loop1: detected capacity change from 0 to 512 [ 53.420121][ T4343] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 53.420161][ T4343] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.423941][ T4362] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 53.424204][ T4362] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.230: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 53.432129][ T4343] EXT4-fs (loop1): 1 truncate cleaned up [ 53.445536][ T4343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.512509][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.548826][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.757873][ T4398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'. [ 53.940477][ T4418] batman_adv: batadv0: Adding interface: veth0 [ 53.940497][ T4418] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.940613][ T4418] batman_adv: batadv0: Interface activated: veth0 [ 53.954051][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.954119][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.657585][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.657609][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.658248][ T4418] batman_adv: batadv0: Interface deactivated: veth0 [ 54.658262][ T4418] batman_adv: batadv0: Removing interface: veth0 [ 54.712770][ T3398] tipc: Node number set to 2130706433 [ 54.865662][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.865869][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.866055][ T4507] bridge0: entered allmulticast mode [ 54.906642][ T4507] bridge_slave_1: left allmulticast mode [ 54.906669][ T4507] bridge_slave_1: left promiscuous mode [ 54.906822][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.912931][ T4507] bridge_slave_0: left allmulticast mode [ 54.912998][ T4507] bridge_slave_0: left promiscuous mode [ 54.913094][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.516622][ T4576] loop3: detected capacity change from 0 to 512 [ 55.521057][ T4576] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 55.521078][ T4576] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 55.521314][ T4576] System zones: 0-1, 15-15, 18-18, 34-34 [ 55.521460][ T4576] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.521500][ T4576] EXT4-fs error (device loop3): ext4_quota_enable:7266: comm syz.3.262: Bad quota inum: 768, type: 0 [ 55.521531][ T4576] loop3: lost filesystem error report for type 5 error -117 [ 55.522739][ T4576] EXT4-fs warning (device loop3): ext4_enable_quotas:7314: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix. [ 55.522797][ T4576] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 55.523194][ T4576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.979092][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.012427][ T4637] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 56.026309][ T4639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.266'. [ 56.060402][ T4630] loop1: detected capacity change from 0 to 512 [ 56.082471][ T4630] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 56.082492][ T4630] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 56.110551][ T4630] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.264: bg 0: block 4: invalid block bitmap [ 56.110734][ T4630] loop1: lost filesystem error report for type 5 error -117 [ 56.124887][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 56.124910][ C1] EXT4-fs (loop1): initial error at time 1792546710: ext4_validate_block_bitmap:436 [ 56.124937][ C1] EXT4-fs (loop1): last error at time 1792546710: ext4_validate_block_bitmap:436 [ 56.150826][ T4630] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 56.150926][ T4630] loop1: lost filesystem error report for type 5 error -117 [ 56.159125][ T4630] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.264: invalid indirect mapped block 1 (level 1) [ 56.159281][ T4630] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.165626][ T4630] EXT4-fs (loop1): 1 truncate cleaned up [ 56.175615][ T4630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.308702][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.346913][ T4658] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 56.352700][ T4660] FAULT_INJECTION: forcing a failure. [ 56.352700][ T4660] name failslab, interval 1, probability 0, space 0, times 0 [ 56.352730][ T4660] CPU: 0 UID: 0 PID: 4660 Comm: syz.2.274 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.352759][ T4660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 56.352774][ T4660] Call Trace: [ 56.352781][ T4660] [ 56.352848][ T4660] __dump_stack+0x1d/0x30 [ 56.352877][ T4660] dump_stack_lvl+0x95/0xd0 [ 56.352902][ T4660] dump_stack+0x15/0x1b [ 56.352925][ T4660] should_fail_ex+0x262/0x280 [ 56.352957][ T4660] ? mrp_init_applicant+0x78/0x300 [ 56.353059][ T4660] should_failslab+0x8c/0xb0 [ 56.353096][ T4660] __kmalloc_cache_noprof+0x5d/0x3e0 [ 56.353118][ T4660] ? mrp_init_applicant+0x78/0x300 [ 56.353150][ T4660] mrp_init_applicant+0x78/0x300 [ 56.353221][ T4660] vlan_mvrp_init_applicant+0x1c/0x30 [ 56.353258][ T4660] register_vlan_dev+0x14c/0x470 [ 56.353284][ T4660] vlan_newlink+0x32a/0x370 [ 56.353386][ T4660] ? __pfx_vlan_newlink+0x10/0x10 [ 56.353421][ T4660] rtnl_newlink_create+0x1e4/0x4a0 [ 56.353450][ T4660] rtnl_newlink+0x1255/0x1510 [ 56.353586][ T4660] ? try_charge_memcg+0x269/0xae0 [ 56.353654][ T4660] ? __memcg_slab_free_hook+0x154/0x340 [ 56.353684][ T4660] ? __rcu_read_unlock+0x4e/0x70 [ 56.353775][ T4660] ? avc_has_perm_noaudit+0xac/0x160 [ 56.353809][ T4660] ? cred_has_capability+0x224/0x2a0 [ 56.353899][ T4660] ? selinux_capable+0x31/0x40 [ 56.353981][ T4660] ? security_capable+0x7b/0x90 [ 56.354011][ T4660] ? ns_capable+0x80/0xb0 [ 56.354033][ T4660] ? __pfx_rtnl_newlink+0x10/0x10 [ 56.354089][ T4660] rtnetlink_rcv_msg+0x64b/0x720 [ 56.354129][ T4660] netlink_rcv_skb+0x11e/0x220 [ 56.354152][ T4660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 56.354269][ T4660] rtnetlink_rcv+0x1c/0x30 [ 56.354303][ T4660] netlink_unicast+0x665/0x740 [ 56.354406][ T4660] netlink_sendmsg+0x5ef/0x740 [ 56.354435][ T4660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.354500][ T4660] ____sys_sendmsg+0x532/0x580 [ 56.354575][ T4660] ___sys_sendmsg+0x195/0x1e0 [ 56.354682][ T4660] __x64_sys_sendmsg+0xd4/0x160 [ 56.354718][ T4660] x64_sys_call+0x22ab/0x2550 [ 56.354747][ T4660] do_syscall_64+0x112/0x360 [ 56.354817][ T4660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.354886][ T4660] RIP: 0033:0x7f04b678f559 [ 56.354904][ T4660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.354926][ T4660] RSP: 002b:00007f04b51df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.354949][ T4660] RAX: ffffffffffffffda RBX: 00007f04b6a15fa0 RCX: 00007f04b678f559 [ 56.354966][ T4660] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 56.354980][ T4660] RBP: 00007f04b6826b20 R08: 0000000000000000 R09: 0000000000000000 [ 56.355030][ T4660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.355044][ T4660] R13: 00007f04b6a16038 R14: 00007f04b6a15fa0 R15: 00007ffe8ebc66c8 [ 56.355066][ T4660] [ 56.571759][ T4666] loop1: detected capacity change from 0 to 128 [ 56.588481][ T4666] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 56.593077][ T4666] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.705951][ T4670] netlink: 19 bytes leftover after parsing attributes in process `syz.2.278'. [ 56.715245][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 56.715324][ T29] audit: type=1400 audit(1792546710.788:821): avc: denied { setattr } for pid=4665 comm="syz.1.277" path="/41/file1/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.867988][ T29] audit: type=1400 audit(1792546710.948:822): avc: denied { ioctl } for pid=4665 comm="syz.1.277" path="/41/file1/file1" dev="loop1" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.944053][ T4670] netlink: 19 bytes leftover after parsing attributes in process `syz.2.278'. [ 57.042420][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.152655][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.152876][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.153063][ T4697] bridge0: entered allmulticast mode [ 57.202270][ T4697] bridge_slave_1: left allmulticast mode [ 57.202298][ T4697] bridge_slave_1: left promiscuous mode [ 57.202634][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.225969][ T4697] bridge_slave_0: left allmulticast mode [ 57.225997][ T4697] bridge_slave_0: left promiscuous mode [ 57.226173][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.362303][ T4704] loop4: detected capacity change from 0 to 512 [ 57.382409][ T4704] EXT4-fs (loop4): 1 truncate cleaned up [ 57.382908][ T4704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.404673][ T29] audit: type=1400 audit(1792546711.468:823): avc: denied { create } for pid=4701 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 57.424505][ T29] audit: type=1400 audit(1792546711.488:824): avc: denied { getopt } for pid=4701 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 57.482243][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.538716][ T29] audit: type=1400 audit(1792546711.618:825): avc: denied { mount } for pid=4712 comm="syz.4.290" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 57.557097][ T4713] PM: suspend entry (s2idle) [ 57.557146][ T4713] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 57.557277][ T4713] PM: suspend exit [ 57.606389][ T29] audit: type=1400 audit(1792546711.678:826): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.012540][ T4734] netlink: 32 bytes leftover after parsing attributes in process `syz.0.301'. [ 58.160775][ T29] audit: type=1400 audit(1792546712.238:827): avc: denied { read } for pid=4740 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.174076][ T4746] loop3: detected capacity change from 0 to 164 [ 58.193030][ T29] audit: type=1400 audit(1792546712.268:828): avc: denied { mount } for pid=4745 comm="syz.3.306" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 58.216054][ T29] audit: type=1400 audit(1792546712.298:829): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 58.392591][ T29] audit: type=1400 audit(1792546712.468:830): avc: denied { getopt } for pid=4753 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.462154][ T4759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'. [ 58.650779][ T4771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.315'. [ 58.666108][ T4771] bridge0: entered promiscuous mode [ 58.666128][ T4771] bridge0: entered allmulticast mode [ 58.680628][ T4771] team0: Port device bridge0 added [ 58.681977][ T4771] bridge0: port 1(team0) entered blocking state [ 58.682017][ T4771] bridge0: port 1(team0) entered disabled state [ 58.682180][ T4771] team0: entered allmulticast mode [ 58.682199][ T4771] team_slave_0: entered allmulticast mode [ 58.682220][ T4771] team_slave_1: entered allmulticast mode [ 58.683256][ T4771] team0: left allmulticast mode [ 58.683270][ T4771] team_slave_0: left allmulticast mode [ 58.683284][ T4771] team_slave_1: left allmulticast mode [ 58.947571][ T4780] loop1: detected capacity change from 0 to 512 [ 59.093942][ T4780] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.320: invalid indirect mapped block 256 (level 2) [ 59.094032][ T4780] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 59.096273][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 59.096300][ C1] EXT4-fs (loop1): initial error at time 1792546713: ext4_free_branches:1023: inode 11 [ 59.096341][ C1] EXT4-fs (loop1): last error at time 1792546713: ext4_free_branches:1023: inode 11 [ 59.156074][ T4780] EXT4-fs (loop1): 2 truncates cleaned up [ 59.198250][ T4780] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.305109][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 59.348901][ T4804] loop1: detected capacity change from 0 to 512 [ 59.379418][ T4804] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.330: bg 0: block 5: invalid block bitmap [ 59.379448][ T4804] loop1: lost filesystem error report for type 5 error -117 [ 59.379700][ T4804] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 59.379724][ T4804] loop1: lost filesystem error report for type 5 error -117 [ 59.381346][ T4804] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.330: invalid indirect mapped block 3 (level 2) [ 59.381393][ T4804] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 59.382322][ T4804] EXT4-fs (loop1): 1 orphan inode deleted [ 59.382348][ T4804] EXT4-fs (loop1): 1 truncate cleaned up [ 59.382760][ T4804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.565651][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.666878][ T4813] loop1: detected capacity change from 0 to 512 [ 59.674855][ T4813] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 59.696199][ T4813] EXT4-fs (loop1): 1 orphan inode deleted [ 59.696847][ T4813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.697139][ T4813] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.700103][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 59.748557][ T32] EXT4-fs error (device loop1): ext4_release_dquot:7115: comm kworker/u8:1: Failed to release dquot type 1 [ 59.775777][ T4813] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #12: block 13: comm syz.1.333: bad entry in directory: inode out of bounds - offset=24, inode=4294836237, rec_len=16, size=4096 fake=0 [ 59.797205][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 59.817806][ T4815] Zero length message leads to an empty skb [ 59.854709][ T4824] netlink: 168 bytes leftover after parsing attributes in process `syz.4.336'. [ 59.879183][ T4826] loop0: detected capacity change from 0 to 512 [ 59.885489][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.890085][ T4826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.890279][ T4826] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.891866][ T3961] EXT4-fs error (device loop1): ext4_release_dquot:7115: comm kworker/u8:12: Failed to release dquot type 1 [ 59.892043][ T3961] loop1: lost filesystem error report for type 5 error -117 [ 60.002776][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.111497][ T4840] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 60.226142][ T4848] FAULT_INJECTION: forcing a failure. [ 60.226142][ T4848] name failslab, interval 1, probability 0, space 0, times 0 [ 60.226282][ T4848] CPU: 1 UID: 0 PID: 4848 Comm: syz.3.347 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.226364][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.226390][ T4848] Call Trace: [ 60.226400][ T4848] [ 60.226411][ T4848] __dump_stack+0x1d/0x30 [ 60.226482][ T4848] dump_stack_lvl+0x95/0xd0 [ 60.226507][ T4848] dump_stack+0x15/0x1b [ 60.226582][ T4848] should_fail_ex+0x262/0x280 [ 60.226624][ T4848] should_failslab+0x8c/0xb0 [ 60.226713][ T4848] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 60.226747][ T4848] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 60.226783][ T4848] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 60.226852][ T4848] ? resv_map_alloc+0x57/0x190 [ 60.226878][ T4848] hugetlbfs_alloc_inode+0xbc/0x100 [ 60.226919][ T4848] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 60.226982][ T4848] alloc_inode+0x40/0x170 [ 60.227005][ T4848] new_inode+0x1d/0xe0 [ 60.227037][ T4848] hugetlbfs_get_inode+0x7b/0x330 [ 60.227072][ T4848] hugetlb_file_setup+0x1e9/0x3d0 [ 60.227099][ T4848] newseg+0x335/0x670 [ 60.227144][ T4848] ipcget+0x33e/0x4f0 [ 60.227174][ T4848] ? __se_sys_futex+0x2f6/0x370 [ 60.227219][ T4848] ? xfd_validate_state+0x45/0xf0 [ 60.227275][ T4848] __x64_sys_shmget+0xb8/0xe0 [ 60.227392][ T4848] x64_sys_call+0x2001/0x2550 [ 60.227521][ T4848] do_syscall_64+0x112/0x360 [ 60.227586][ T4848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.227689][ T4848] RIP: 0033:0x7f970450f559 [ 60.227737][ T4848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.227760][ T4848] RSP: 002b:00007f9702f5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 60.227781][ T4848] RAX: ffffffffffffffda RBX: 00007f9704795fa0 RCX: 00007f970450f559 [ 60.227795][ T4848] RDX: 0000000000000800 RSI: 000000000000c000 RDI: 0000000000000000 [ 60.227852][ T4848] RBP: 00007f97045a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 60.227870][ T4848] R10: 000020000013c000 R11: 0000000000000246 R12: 0000000000000000 [ 60.227889][ T4848] R13: 00007f9704796038 R14: 00007f9704795fa0 R15: 00007fffe0d6bf68 [ 60.227917][ T4848] [ 60.469735][ T4853] loop1: detected capacity change from 0 to 1024 [ 60.471969][ T4853] EXT4-fs: Ignoring removed oldalloc option [ 60.471990][ T4853] EXT4-fs: Ignoring removed oldalloc option [ 60.494749][ T4851] loop0: detected capacity change from 0 to 128 [ 60.504265][ T4853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.523994][ T4851] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.525282][ T4851] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.594899][ C1] I/O error, dev loop1, sector 32 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 60.595159][ T4861] EXT4-fs error (device loop1): ext4_get_inode_loc:5054: inode #2: block 5: comm syz.1.349: unable to read itable block [ 60.595283][ T4861] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 60.595305][ T4861] EXT4-fs (loop1): I/O error while writing superblock [ 60.595322][ T4861] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: IO failure [ 60.595356][ T4861] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 60.595370][ T4861] EXT4-fs (loop1): I/O error while writing superblock [ 60.595476][ T4861] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #2: comm syz.1.349: mark_inode_dirty error [ 60.595554][ T4861] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 60.595572][ T4861] EXT4-fs (loop1): I/O error while writing superblock [ 60.689504][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.744536][ T4781] bond0: (slave syz_tun): Releasing backup interface [ 60.799430][ T4781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.800170][ T4781] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 60.800192][ T4781] EXT4-fs (loop1): I/O error while writing superblock [ 60.801582][ T4856] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 60.853099][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.910264][ T4877] capability: warning: `syz.3.359' uses deprecated v2 capabilities in a way that may be insecure [ 60.935388][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.006075][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.040648][ T4894] ip6gre1: entered promiscuous mode [ 61.040675][ T4894] ip6gre1: entered allmulticast mode [ 61.060990][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.139795][ T4894] syz.3.364 (4894) used greatest stack depth: 8920 bytes left [ 61.143672][ T4881] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.197209][ T4884] set_capacity_and_notify: 2 callbacks suppressed [ 61.197364][ T4884] loop0: detected capacity change from 0 to 512 [ 61.251246][ T4903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.365'. [ 61.253967][ T51] bridge_slave_1: left allmulticast mode [ 61.253991][ T51] bridge_slave_1: left promiscuous mode [ 61.254191][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.289661][ T51] bridge_slave_0: left allmulticast mode [ 61.289687][ T51] bridge_slave_0: left promiscuous mode [ 61.289833][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.320566][ T4884] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.362: invalid indirect mapped block 256 (level 2) [ 61.320655][ T4884] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.336502][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 61.336580][ C0] EXT4-fs (loop0): initial error at time 1792546715: ext4_free_branches:1023: inode 11 [ 61.336665][ C0] EXT4-fs (loop0): last error at time 1792546715: ext4_free_branches:1023: inode 11 [ 61.369980][ T4884] EXT4-fs (loop0): 2 truncates cleaned up [ 61.375024][ T4884] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.457100][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 61.486126][ T4902] loop4: detected capacity change from 0 to 128 [ 61.529967][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.531635][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.532657][ T51] bond0 (unregistering): Released all slaves [ 61.545874][ T4902] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.562801][ T4902] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.647108][ T4936] FAULT_INJECTION: forcing a failure. [ 61.647108][ T4936] name failslab, interval 1, probability 0, space 0, times 0 [ 61.647143][ T4936] CPU: 1 UID: 0 PID: 4936 Comm: syz.3.371 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.647172][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.647189][ T4936] Call Trace: [ 61.647261][ T4936] [ 61.647270][ T4936] __dump_stack+0x1d/0x30 [ 61.647302][ T4936] dump_stack_lvl+0x95/0xd0 [ 61.647400][ T4936] dump_stack+0x15/0x1b [ 61.647439][ T4936] should_fail_ex+0x262/0x280 [ 61.647493][ T4936] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 61.647528][ T4936] should_failslab+0x8c/0xb0 [ 61.647572][ T4936] __kmalloc_cache_noprof+0x5d/0x3e0 [ 61.647609][ T4936] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 61.647654][ T4936] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 61.647701][ T4936] sctp_association_new+0xdb2/0x1160 [ 61.647818][ T4936] sctp_connect_new_asoc+0x1a8/0x3a0 [ 61.647857][ T4936] __sctp_connect+0x428/0x7a0 [ 61.647961][ T4936] sctp_getsockopt_connectx3+0x269/0x340 [ 61.648027][ T4936] sctp_getsockopt+0x910/0xaa0 [ 61.648135][ T4936] sock_common_getsockopt+0x60/0x70 [ 61.648178][ T4936] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 61.648305][ T4936] do_sock_getsockopt+0x2f5/0x570 [ 61.648344][ T4936] __x64_sys_getsockopt+0x11d/0x1a0 [ 61.648389][ T4936] x64_sys_call+0x1032/0x2550 [ 61.648417][ T4936] do_syscall_64+0x112/0x360 [ 61.648450][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.648473][ T4936] RIP: 0033:0x7f970450f559 [ 61.648531][ T4936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.648555][ T4936] RSP: 002b:00007f9702f5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 61.648594][ T4936] RAX: ffffffffffffffda RBX: 00007f9704795fa0 RCX: 00007f970450f559 [ 61.648613][ T4936] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005 [ 61.648630][ T4936] RBP: 00007f97045a6b20 R08: 0000200000000440 R09: 0000000000000000 [ 61.648647][ T4936] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 61.648665][ T4936] R13: 00007f9704796038 R14: 00007f9704795fa0 R15: 00007fffe0d6bf68 [ 61.648685][ T4936] [ 61.896828][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 61.896847][ T29] audit: type=1400 audit(1792546715.968:881): avc: denied { write } for pid=4941 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.906519][ T51] hsr_slave_0: left promiscuous mode [ 61.913661][ T51] hsr_slave_1: left promiscuous mode [ 61.914772][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.914825][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.937373][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.937532][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.976516][ T51] veth1_macvtap: left promiscuous mode [ 61.976548][ T51] veth0_macvtap: left promiscuous mode [ 61.976620][ T51] veth1_vlan: left promiscuous mode [ 61.976706][ T51] veth0_vlan: left promiscuous mode [ 62.039149][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.060423][ T4950] loop3: detected capacity change from 0 to 128 [ 62.096827][ T4953] loop4: detected capacity change from 0 to 128 [ 62.102267][ T4953] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.103284][ T4953] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.170476][ T3303] EXT4-fs error (device loop4): ext4_lookup:1787: inode #11: comm syz-executor: iget: checksum invalid [ 62.170738][ T3303] EXT4-fs error (device loop4): ext4_lookup:1787: inode #11: comm syz-executor: iget: checksum invalid [ 62.218217][ T51] team0 (unregistering): Port device team_slave_1 removed [ 62.224988][ T51] team0 (unregistering): Port device team_slave_0 removed [ 62.307025][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 62.374330][ T4959] loop3: detected capacity change from 0 to 512 [ 62.427588][ T4959] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.377: invalid indirect mapped block 256 (level 2) [ 62.427938][ T4959] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.436256][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 62.436280][ C0] EXT4-fs (loop3): initial error at time 1792546716: ext4_free_branches:1023: inode 11 [ 62.436399][ C0] EXT4-fs (loop3): last error at time 1792546716: ext4_free_branches:1023: inode 11 [ 62.438974][ T4959] EXT4-fs (loop3): 2 truncates cleaned up [ 62.442883][ T4959] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.470194][ T4881] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.471838][ T4881] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.471978][ T4881] bridge_slave_0: entered allmulticast mode [ 62.473094][ T4881] bridge_slave_0: entered promiscuous mode [ 62.478730][ T4881] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.478829][ T4881] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.479060][ T4881] bridge_slave_1: entered allmulticast mode [ 62.480242][ T4881] bridge_slave_1: entered promiscuous mode [ 62.515293][ T4881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.521915][ T4881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.541091][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 62.590794][ T4881] team0: Port device team_slave_0 added [ 62.591777][ T4881] team0: Port device team_slave_1 added [ 62.615432][ T4881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.615450][ T4881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.615486][ T4881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.615975][ T4881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.615986][ T4881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.616015][ T4881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.661618][ T51] IPVS: stop unused estimator thread 0... [ 62.727458][ T4881] hsr_slave_0: entered promiscuous mode [ 62.727797][ T4881] hsr_slave_1: entered promiscuous mode [ 62.728020][ T4881] debugfs: 'hsr0' already exists in 'hsr' [ 62.728038][ T4881] Cannot create hsr debugfs directory [ 62.741971][ T29] audit: type=1400 audit(1792546716.818:882): avc: denied { write } for pid=4967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.786825][ T29] audit: type=1400 audit(1792546716.868:883): avc: denied { write } for pid=4983 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.815357][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 62.923350][ T4881] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.925705][ T4881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.927717][ T4881] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.939218][ T4881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.942209][ T4881] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.953824][ T4881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.957532][ T4881] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.965893][ T4881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.991037][ T29] audit: type=1400 audit(1792546717.068:884): avc: denied { write } for pid=4986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.027532][ T29] audit: type=1400 audit(1792546717.108:885): avc: denied { write } for pid=5003 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.053336][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 63.067620][ T4881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.068820][ T4957] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.090482][ T4881] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.093256][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.093292][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.104267][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.104362][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.230779][ T29] audit: type=1400 audit(1792546717.308:886): avc: denied { write } for pid=5008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.275211][ T29] audit: type=1400 audit(1792546717.348:887): avc: denied { write } for pid=5028 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.275335][ T4881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.322080][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 63.423393][ T4881] veth0_vlan: entered promiscuous mode [ 63.425771][ T4881] veth1_vlan: entered promiscuous mode [ 63.443451][ T4881] veth0_macvtap: entered promiscuous mode [ 63.445045][ T4881] veth1_macvtap: entered promiscuous mode [ 63.456196][ T4881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.459368][ T4881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.486501][ T29] audit: type=1400 audit(1792546717.568:888): avc: denied { mounton } for pid=4881 comm="syz-executor" path="/root/syzkaller.RHKf8F/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 63.487846][ T29] audit: type=1400 audit(1792546717.568:889): avc: denied { mounton } for pid=4881 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.488225][ T29] audit: type=1400 audit(1792546717.568:890): avc: denied { mount } for pid=4881 comm="syz-executor" name="/" dev="gadgetfs" ino=4900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.497117][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.502466][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.502803][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.503176][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.692609][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 63.835247][ T5052] loop0: detected capacity change from 0 to 512 [ 63.865695][ T5057] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.875697][ T5052] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 64.014403][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.014431][ T5057] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.014623][ T5057] bridge_slave_0: entered allmulticast mode [ 64.015114][ T5057] bridge_slave_0: entered promiscuous mode [ 64.016736][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.016830][ T5057] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.017039][ T5057] bridge_slave_1: entered allmulticast mode [ 64.018244][ T5057] bridge_slave_1: entered promiscuous mode [ 64.043749][ T5057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.045672][ T5057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.068585][ T5057] team0: Port device team_slave_0 added [ 64.070551][ T5057] team0: Port device team_slave_1 added [ 64.089872][ T5057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.089920][ T5057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.090055][ T5057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.091284][ T5057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.091322][ T5057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.091403][ T5057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.151178][ T5057] hsr_slave_0: entered promiscuous mode [ 64.152383][ T5057] hsr_slave_1: entered promiscuous mode [ 64.152905][ T5057] debugfs: 'hsr0' already exists in 'hsr' [ 64.152947][ T5057] Cannot create hsr debugfs directory [ 64.245900][ T5057] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.310231][ T5057] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.349590][ T5057] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.399571][ T5057] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.459285][ T5057] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.461544][ T5057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.462418][ T5057] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.464600][ T5057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.465390][ T5057] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.469904][ T5057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.471406][ T5057] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.481338][ T5057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.537170][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.537207][ T5057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.537506][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.537539][ T5057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.623350][ T5057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.636122][ T5057] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.647833][ T5095] FAULT_INJECTION: forcing a failure. [ 64.647833][ T5095] name failslab, interval 1, probability 0, space 0, times 0 [ 64.647921][ T5095] CPU: 1 UID: 0 PID: 5095 Comm: syz.3.385 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.647946][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.647961][ T5095] Call Trace: [ 64.647969][ T5095] [ 64.647978][ T5095] __dump_stack+0x1d/0x30 [ 64.648033][ T5095] dump_stack_lvl+0x95/0xd0 [ 64.648059][ T5095] dump_stack+0x15/0x1b [ 64.648159][ T5095] should_fail_ex+0x262/0x280 [ 64.648193][ T5095] ? alloc_vfsmnt+0x5d/0x380 [ 64.648231][ T5095] should_failslab+0x8c/0xb0 [ 64.648300][ T5095] __kmalloc_cache_noprof+0x5d/0x3e0 [ 64.648321][ T5095] ? alloc_vfsmnt+0x5d/0x380 [ 64.648361][ T5095] alloc_vfsmnt+0x5d/0x380 [ 64.648407][ T5095] clone_mnt+0x30/0x610 [ 64.648526][ T5095] ? copy_tree+0xa3/0x8a0 [ 64.648550][ T5095] copy_tree+0xb9/0x8a0 [ 64.648617][ T5095] ? proc_alloc_inum+0x4f/0x70 [ 64.648651][ T5095] ? __ns_common_init+0xd7/0x120 [ 64.648690][ T5095] ? __ns_tree_gen_id+0x48/0x60 [ 64.648715][ T5095] copy_mnt_ns+0x1d8/0x720 [ 64.648797][ T5095] create_new_namespaces+0x7f/0x420 [ 64.648837][ T5095] unshare_nsproxy_namespaces+0x115/0x150 [ 64.648905][ T5095] ksys_unshare+0x3a3/0x690 [ 64.649023][ T5095] __x64_sys_unshare+0x1f/0x30 [ 64.649055][ T5095] x64_sys_call+0x1e33/0x2550 [ 64.649126][ T5095] do_syscall_64+0x112/0x360 [ 64.649172][ T5095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.649197][ T5095] RIP: 0033:0x7f970450f559 [ 64.649293][ T5095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.649314][ T5095] RSP: 002b:00007f9702f5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 64.649372][ T5095] RAX: ffffffffffffffda RBX: 00007f9704795fa0 RCX: 00007f970450f559 [ 64.649389][ T5095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 64.649404][ T5095] RBP: 00007f97045a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 64.649418][ T5095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.649432][ T5095] R13: 00007f9704796038 R14: 00007f9704795fa0 R15: 00007fffe0d6bf68 [ 64.649464][ T5095] [ 65.026934][ T3961] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.030204][ T3961] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.087083][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.087122][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.088911][ T5093] batman_adv: batadv0: Adding interface: syzkaller0 [ 65.088925][ T5093] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.089023][ T5093] batman_adv: batadv0: Interface activated: syzkaller0 [ 65.103975][ T5101] loop5: detected capacity change from 0 to 128 [ 65.158429][ T5101] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 65.161245][ T5101] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.184359][ T5091] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 65.194360][ T5091] batman_adv: batadv0: Removing interface: syzkaller0 [ 65.204842][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.204878][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.262590][ T5107] loop2: detected capacity change from 0 to 128 [ 65.279856][ T5107] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.284410][ T5107] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.376102][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.391517][ T4881] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.462583][ T5122] ip_tables: iptables: counters copy to user failed while replacing table [ 65.529821][ T5130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.399'. [ 65.534838][ T5131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 65.613536][ T5057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.698774][ T5144] device-mapper: table: 252:0: thin-pool: unknown target type [ 65.698841][ T5144] device-mapper: ioctl: error adding target to table [ 65.699144][ T5144] device-mapper: ioctl: The device has no table. [ 65.699312][ T5144] device-mapper: ioctl: The device has no table. [ 65.743340][ T5149] io-wq is not configured for unbound workers [ 65.885663][ T5057] veth0_vlan: entered promiscuous mode [ 65.885911][ T5172] lo: entered allmulticast mode [ 65.895530][ T5057] veth1_vlan: entered promiscuous mode [ 65.910313][ T5171] lo: left allmulticast mode [ 65.925560][ T5057] veth0_macvtap: entered promiscuous mode [ 65.932608][ T5057] veth1_macvtap: entered promiscuous mode [ 65.945009][ T5057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.955715][ T5057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.996409][ T3973] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.998262][ T3961] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.998311][ T3961] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.998397][ T3961] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.009299][ T5177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 66.033231][ T5175] loop2: detected capacity change from 0 to 512 [ 66.068440][ T5175] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 66.172935][ T5181] loop3: detected capacity change from 0 to 8192 [ 66.288082][ T5192] loop4: detected capacity change from 0 to 512 [ 66.347995][ T5192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.348149][ T5192] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.436541][ T5192] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.471580][ T5057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.533880][ T5203] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 66.640124][ T5208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.666413][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 66.666431][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 66.745385][ T5215] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 66.745722][ T5215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 66.937508][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 66.937526][ T29] audit: type=1400 audit(1792546721.018:975): avc: denied { create } for pid=5222 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.938697][ T5223] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.430'. [ 67.072058][ T5227] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 67.095997][ T5231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 67.259675][ T29] audit: type=1400 audit(1792546721.338:976): avc: denied { bind } for pid=5234 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.511246][ T5242] loop0: detected capacity change from 0 to 8192 [ 67.973423][ T29] audit: type=1400 audit(1792546722.048:977): avc: denied { bind } for pid=5256 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.974679][ T29] audit: type=1400 audit(1792546722.048:978): avc: denied { setopt } for pid=5256 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.975945][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 67.996555][ T5255] loop3: detected capacity change from 0 to 128 [ 68.030385][ T5255] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.031040][ T5255] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.061646][ T29] audit: type=1400 audit(1792546722.138:979): avc: denied { write } for pid=5254 comm="syz.3.442" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.096462][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.142970][ T5262] sctp: [Deprecated]: syz.2.446 (pid 5262) Use of int in max_burst socket option. [ 68.142970][ T5262] Use struct sctp_assoc_value instead [ 68.220484][ T5270] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.226034][ T5268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.255089][ T5268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.278578][ T5272] erspan0: entered promiscuous mode [ 68.280160][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 68.352549][ T5277] FAULT_INJECTION: forcing a failure. [ 68.352549][ T5277] name failslab, interval 1, probability 0, space 0, times 0 [ 68.352630][ T5277] CPU: 0 UID: 0 PID: 5277 Comm: syz.0.451 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.352667][ T5277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.352681][ T5277] Call Trace: [ 68.352688][ T5277] [ 68.352696][ T5277] __dump_stack+0x1d/0x30 [ 68.352742][ T5277] dump_stack_lvl+0x95/0xd0 [ 68.352782][ T5277] dump_stack+0x15/0x1b [ 68.352805][ T5277] should_fail_ex+0x262/0x280 [ 68.352837][ T5277] ? sctp_auth_shkey_create+0x65/0x110 [ 68.352873][ T5277] should_failslab+0x8c/0xb0 [ 68.353053][ T5277] __kmalloc_cache_noprof+0x5d/0x3e0 [ 68.353080][ T5277] ? sctp_auth_shkey_create+0x65/0x110 [ 68.353129][ T5277] sctp_auth_shkey_create+0x65/0x110 [ 68.353215][ T5277] sctp_endpoint_new+0x2cc/0x560 [ 68.353249][ T5277] sctp_clone_sock+0x32c/0xc30 [ 68.353355][ T5277] ? sock_create_lite+0x250/0x290 [ 68.353387][ T5277] sctp_getsockopt_peeloff_common+0x263/0x450 [ 68.353425][ T5277] sctp_getsockopt_peeloff_flags+0xaf/0x180 [ 68.353472][ T5277] sctp_getsockopt+0x353/0xaa0 [ 68.353503][ T5277] sock_common_getsockopt+0x60/0x70 [ 68.353550][ T5277] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 68.353698][ T5277] do_sock_getsockopt+0x2f5/0x570 [ 68.353735][ T5277] __x64_sys_getsockopt+0x11d/0x1a0 [ 68.353782][ T5277] x64_sys_call+0x1032/0x2550 [ 68.353811][ T5277] do_syscall_64+0x112/0x360 [ 68.353928][ T5277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.353960][ T5277] RIP: 0033:0x7f103d25f559 [ 68.354003][ T5277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.354046][ T5277] RSP: 002b:00007f103bcb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 68.354090][ T5277] RAX: ffffffffffffffda RBX: 00007f103d4e5fa0 RCX: 00007f103d25f559 [ 68.354110][ T5277] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 68.354162][ T5277] RBP: 00007f103d2f6b20 R08: 0000200000000340 R09: 0000000000000000 [ 68.354177][ T5277] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 68.354192][ T5277] R13: 00007f103d4e6038 R14: 00007f103d4e5fa0 R15: 00007ffd6dd3f338 [ 68.354215][ T5277] [ 68.625760][ T5291] netlink: 'syz.3.457': attribute type 1 has an invalid length. [ 68.639949][ T5291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.660556][ T5291] bond1: (slave geneve2): making interface the new active one [ 68.662516][ T5291] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 68.735957][ T5294] : port 1(bond0) entered blocking state [ 68.735996][ T5294] : port 1(bond0) entered disabled state [ 68.736107][ T5294] bond0: entered allmulticast mode [ 68.736136][ T5294] bond_slave_0: entered allmulticast mode [ 68.736155][ T5294] bond_slave_1: entered allmulticast mode [ 68.748659][ T5294] bond0: entered promiscuous mode [ 68.748735][ T5294] bond_slave_0: entered promiscuous mode [ 68.748924][ T5294] bond_slave_1: entered promiscuous mode [ 68.803291][ T5298] team1: entered promiscuous mode [ 68.803330][ T5298] team1: entered allmulticast mode [ 68.803546][ T5298] 8021q: adding VLAN 0 to HW filter on device team1 [ 68.881162][ T5305] loop0: detected capacity change from 0 to 256 [ 68.911317][ T5305] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.934460][ T5305] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 68.934493][ T5305] FAT-fs (loop0): Filesystem has been set read-only [ 68.939654][ T29] audit: type=1400 audit(1792546723.018:980): avc: denied { unmount } for pid=5304 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.962297][ T5305] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 69.013262][ T29] audit: type=1400 audit(1792546723.088:981): avc: denied { getopt } for pid=5314 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.061050][ T5309] loop5: detected capacity change from 0 to 8192 [ 69.098197][ T5321] syzkaller0: entered promiscuous mode [ 69.098217][ T5321] syzkaller0: entered allmulticast mode [ 69.294436][ T29] audit: type=1326 audit(1792546723.368:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.0.467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103d25f559 code=0x7ffc0000 [ 69.294477][ T29] audit: type=1326 audit(1792546723.368:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.0.467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103d25f559 code=0x7ffc0000 [ 69.294794][ T29] audit: type=1326 audit(1792546723.368:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.0.467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103d25f559 code=0x7ffc0000 [ 69.743989][ T5372] FAULT_INJECTION: forcing a failure. [ 69.743989][ T5372] name failslab, interval 1, probability 0, space 0, times 0 [ 69.744092][ T5372] CPU: 1 UID: 0 PID: 5372 Comm: syz.4.476 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.744125][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 69.744143][ T5372] Call Trace: [ 69.744151][ T5372] [ 69.744161][ T5372] __dump_stack+0x1d/0x30 [ 69.744210][ T5372] dump_stack_lvl+0x95/0xd0 [ 69.744239][ T5372] dump_stack+0x15/0x1b [ 69.744260][ T5372] should_fail_ex+0x262/0x280 [ 69.744292][ T5372] ? alloc_mnt_ns+0x75/0x250 [ 69.744352][ T5372] should_failslab+0x8c/0xb0 [ 69.744400][ T5372] __kmalloc_cache_noprof+0x5d/0x3e0 [ 69.744452][ T5372] ? alloc_mnt_ns+0x75/0x250 [ 69.744486][ T5372] alloc_mnt_ns+0x75/0x250 [ 69.744574][ T5372] copy_mnt_ns+0x13b/0x720 [ 69.744606][ T5372] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 69.744658][ T5372] ? create_new_namespaces+0x38/0x420 [ 69.744777][ T5372] create_new_namespaces+0x7f/0x420 [ 69.744826][ T5372] unshare_nsproxy_namespaces+0x115/0x150 [ 69.744941][ T5372] ksys_unshare+0x3a3/0x690 [ 69.744986][ T5372] __x64_sys_unshare+0x1f/0x30 [ 69.745066][ T5372] x64_sys_call+0x1e33/0x2550 [ 69.745099][ T5372] do_syscall_64+0x112/0x360 [ 69.745138][ T5372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.745164][ T5372] RIP: 0033:0x7f4395c0f559 [ 69.745227][ T5372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.745247][ T5372] RSP: 002b:00007f439465f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 69.745268][ T5372] RAX: ffffffffffffffda RBX: 00007f4395e95fa0 RCX: 00007f4395c0f559 [ 69.745283][ T5372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a060680 [ 69.745295][ T5372] RBP: 00007f4395ca6b20 R08: 0000000000000000 R09: 0000000000000000 [ 69.745309][ T5372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.745354][ T5372] R13: 00007f4395e96038 R14: 00007f4395e95fa0 R15: 00007ffcd37335b8 [ 69.745381][ T5372] [ 69.811466][ T5375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.013983][ T5381] loop2: detected capacity change from 0 to 512 [ 70.341518][ T5397] ./dev/sda1: Can't lookup blockdev [ 70.369869][ T5383] loop4: detected capacity change from 0 to 512 [ 70.451288][ T5383] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 70.479788][ T5403] loop2: detected capacity change from 0 to 8192 [ 70.617198][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.617419][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.672453][ T5420] __nla_validate_parse: 4 callbacks suppressed [ 70.672559][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 70.672573][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 70.679812][ T5413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.685547][ T5413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.765754][ T5416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.779587][ T5421] macvlan2: entered promiscuous mode [ 70.779609][ T5421] macvlan2: entered allmulticast mode [ 70.816433][ T32] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.816859][ T32] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.816905][ T32] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.816950][ T32] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.821076][ T5428] FAULT_INJECTION: forcing a failure. [ 70.821076][ T5428] name failslab, interval 1, probability 0, space 0, times 0 [ 70.821111][ T5428] CPU: 1 UID: 0 PID: 5428 Comm: syz.4.495 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.821144][ T5428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.821161][ T5428] Call Trace: [ 70.821167][ T5428] [ 70.821176][ T5428] __dump_stack+0x1d/0x30 [ 70.821273][ T5428] dump_stack_lvl+0x95/0xd0 [ 70.821302][ T5428] dump_stack+0x15/0x1b [ 70.821334][ T5428] should_fail_ex+0x262/0x280 [ 70.821451][ T5428] ? sctp_auth_shkey_create+0x65/0x110 [ 70.821506][ T5428] should_failslab+0x8c/0xb0 [ 70.821554][ T5428] __kmalloc_cache_noprof+0x5d/0x3e0 [ 70.821608][ T5428] ? sctp_auth_shkey_create+0x65/0x110 [ 70.821652][ T5428] sctp_auth_shkey_create+0x65/0x110 [ 70.821692][ T5428] sctp_endpoint_new+0x2cc/0x560 [ 70.821730][ T5428] sctp_clone_sock+0x32c/0xc30 [ 70.821804][ T5428] ? sock_create_lite+0x250/0x290 [ 70.821828][ T5428] sctp_getsockopt_peeloff_common+0x263/0x450 [ 70.821865][ T5428] sctp_getsockopt_peeloff_flags+0xaf/0x180 [ 70.821953][ T5428] sctp_getsockopt+0x353/0xaa0 [ 70.821986][ T5428] sock_common_getsockopt+0x60/0x70 [ 70.822070][ T5428] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 70.822116][ T5428] do_sock_getsockopt+0x2f5/0x570 [ 70.822159][ T5428] __x64_sys_getsockopt+0x11d/0x1a0 [ 70.822199][ T5428] x64_sys_call+0x1032/0x2550 [ 70.822309][ T5428] do_syscall_64+0x112/0x360 [ 70.822343][ T5428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.822373][ T5428] RIP: 0033:0x7f4395c0f559 [ 70.822396][ T5428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.822434][ T5428] RSP: 002b:00007f439465f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 70.822461][ T5428] RAX: ffffffffffffffda RBX: 00007f4395e95fa0 RCX: 00007f4395c0f559 [ 70.822558][ T5428] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 70.822576][ T5428] RBP: 00007f4395ca6b20 R08: 0000200000000340 R09: 0000000000000000 [ 70.822594][ T5428] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 70.822623][ T5428] R13: 00007f4395e96038 R14: 00007f4395e95fa0 R15: 00007ffcd37335b8 [ 70.822649][ T5428] [ 71.444246][ T5451] loop2: detected capacity change from 0 to 8192 [ 71.577745][ T5449] loop3: detected capacity change from 0 to 512 [ 71.642492][ T5449] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 71.739716][ T5457] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.967444][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 71.967463][ T29] audit: type=1400 audit(1792546726.048:1020): avc: denied { create } for pid=5471 comm="syz.5.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.976505][ T29] audit: type=1326 audit(1792546726.048:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.5.514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09d03f559 code=0x7ffc0000 [ 71.976620][ T29] audit: type=1326 audit(1792546726.048:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.5.514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09d03f559 code=0x7ffc0000 [ 71.976744][ T29] audit: type=1326 audit(1792546726.048:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.5.514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09d03f559 code=0x7ffc0000 [ 71.976832][ T29] audit: type=1326 audit(1792546726.048:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.5.514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09d03f559 code=0x7ffc0000 [ 71.976925][ T29] audit: type=1326 audit(1792546726.048:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.5.514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fc09d03f559 code=0x7ffc0000 [ 71.977015][ T29] audit: type=1326 audit(1792546726.048:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.5.514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09d03f559 code=0x7ffc0000 [ 71.977171][ T29] audit: type=1326 audit(1792546726.048:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.5.514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09d03f559 code=0x7ffc0000 [ 71.977257][ T29] audit: type=1326 audit(1792546726.048:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.5.514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09d03f559 code=0x7ffc0000 [ 72.042832][ T29] audit: type=1326 audit(1792546726.108:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.5.514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc09d03f559 code=0x7ffc0000 [ 72.755006][ T5521] loop4: detected capacity change from 0 to 512 [ 72.781849][ T5521] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.531: iget: bad i_size value: 38620345925642 [ 72.781886][ T5521] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.782054][ T5521] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.531: couldn't read orphan inode 15 (err -117) [ 72.782087][ T5521] loop4: lost filesystem error report for type 5 error -117 [ 72.782702][ T5521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.891754][ T5057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.027607][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.027767][ T5527] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.111552][ T5527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.114903][ T5527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.164611][ T5536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'. [ 73.167136][ T32] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.170698][ T51] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.170912][ T51] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.171036][ T51] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.180698][ T5543] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.330878][ T5551] loop4: detected capacity change from 0 to 736 [ 73.503661][ T5548] loop5: detected capacity change from 0 to 512 [ 73.616713][ T5548] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 73.688275][ T5553] pim6reg: entered allmulticast mode [ 73.703995][ T5553] pim6reg: left allmulticast mode [ 73.842165][ T5566] process 'syz.5.546' launched '/dev/fd/5' with NULL argv: empty string added [ 73.900386][ T5564] loop3: detected capacity change from 0 to 128 [ 73.973088][ T5578] loop5: detected capacity change from 0 to 128 [ 74.077473][ T5564] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.080290][ T5564] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.110489][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 74.110571][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 74.179113][ T5600] loop2: detected capacity change from 0 to 128 [ 74.184588][ T5600] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.185075][ T5600] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.234895][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.693886][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.600443][ T5674] loop5: detected capacity change from 0 to 512 [ 75.624146][ T5674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.624217][ T5674] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.865413][ T4881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.053969][ T5715] netlink: 'syz.0.581': attribute type 1 has an invalid length. [ 76.075951][ T5715] bond2: entered promiscuous mode [ 76.076125][ T5715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.116057][ T5715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 76.135162][ T5715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.135740][ T5715] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 76.135763][ T5715] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 76.170685][ T5715] bond2: (slave wireguard0): making interface the new active one [ 76.170712][ T5715] wireguard0: entered promiscuous mode [ 76.175952][ T5715] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 76.442844][ T5735] loop3: detected capacity change from 0 to 512 [ 76.461437][ T5735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.461559][ T5735] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.597367][ T5735] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 76.721493][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.769215][ T5755] netlink: 2724 bytes leftover after parsing attributes in process `syz.2.592'. [ 76.769250][ T5755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.592'. [ 76.769290][ T5755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.592'. [ 76.808236][ T5759] netlink: 'syz.3.594': attribute type 1 has an invalid length. [ 76.814991][ T5759] bond2: entered promiscuous mode [ 76.815095][ T5759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.830091][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 76.863623][ T5759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.864196][ T5759] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 76.864222][ T5759] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 76.883551][ T5759] bond2: (slave wireguard0): making interface the new active one [ 76.883576][ T5759] wireguard0: entered promiscuous mode [ 76.908638][ T5759] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 76.989171][ T5768] : port 1(bond0) entered blocking state [ 76.989211][ T5768] : port 1(bond0) entered disabled state [ 76.989359][ T5768] bond0: entered allmulticast mode [ 76.989376][ T5768] bond_slave_0: entered allmulticast mode [ 76.989393][ T5768] bond_slave_1: entered allmulticast mode [ 76.990389][ T5768] bond0: entered promiscuous mode [ 76.990474][ T5768] bond_slave_0: entered promiscuous mode [ 76.990715][ T5768] bond_slave_1: entered promiscuous mode [ 77.083480][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 77.382290][ T5838] loop5: detected capacity change from 0 to 1024 [ 77.394619][ T5838] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 77.412142][ T5838] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.606: lblock 2 mapped to illegal pblock 2 (length 1) [ 77.412190][ T5838] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 77.412371][ T5838] __quota_error: 622 callbacks suppressed [ 77.412388][ T5838] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 77.412411][ T5838] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.606: lblock 0 mapped to illegal pblock 48 (length 1) [ 77.412526][ T5838] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 77.412913][ T5838] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 77.412934][ T5838] EXT4-fs error (device loop5): ext4_acquire_dquot:7079: comm syz.5.606: Failed to acquire dquot type 0 [ 77.413034][ T5838] loop5: lost filesystem error report for type 5 error -117 [ 77.413342][ T5838] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 77.413365][ T5838] loop5: lost filesystem error report for type 5 error -117 [ 77.413523][ T5838] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.606: mark_inode_dirty error [ 77.413601][ T5838] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.414833][ T5838] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 77.414875][ T5838] EXT4-fs (loop5): 1 orphan inode deleted [ 77.415464][ T5838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.430900][ T285] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.440365][ T285] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 77.440389][ T285] EXT4-fs error (device loop5): ext4_release_dquot:7115: comm kworker/u8:5: Failed to release dquot type 0 [ 77.646074][ T4881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.660061][ T4881] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 77.660100][ T4881] loop5: lost filesystem error report for type 5 error -117 [ 77.660541][ T4881] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 77.660565][ T4881] loop5: lost filesystem error report for type 5 error -117 [ 77.660868][ T4881] EXT4-fs error (device loop5): ext4_quota_off:7363: inode #3: comm syz-executor: mark_inode_dirty error [ 77.660912][ T4881] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 77.661418][ T4881] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 77.661443][ T4881] loop5: lost filesystem error report for type 5 error -117 [ 78.083384][ T5870] ip_tables: iptables: counters copy to user failed while replacing table [ 78.161721][ T5876] netlink: 'syz.3.620': attribute type 4 has an invalid length. [ 78.204310][ T5876] netlink: 'syz.3.620': attribute type 4 has an invalid length. [ 78.223617][ T5876] lo: entered allmulticast mode [ 78.296058][ T29] audit: type=1400 audit(1792546732.368:1652): avc: denied { tracepoint } for pid=5880 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 78.313465][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.622'. [ 78.342239][ T5881] team1: entered promiscuous mode [ 78.342271][ T5881] team1: entered allmulticast mode [ 78.342491][ T5881] 8021q: adding VLAN 0 to HW filter on device team1 [ 78.393510][ T5883] syzkaller0: entered promiscuous mode [ 78.393605][ T5883] syzkaller0: entered allmulticast mode [ 78.703161][ T29] audit: type=1400 audit(1792546732.778:1653): avc: denied { write } for pid=5899 comm="syz.5.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 78.829195][ T5904] loop5: detected capacity change from 0 to 128 [ 78.916761][ T5904] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.948558][ T5904] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.549162][ T5909] netlink: 'syz.2.632': attribute type 1 has an invalid length. [ 79.566595][ T5914] ip_tables: iptables: counters copy to user failed while replacing table [ 79.568796][ T5914] raw_sendmsg: syz.3.633 forgot to set AF_INET. Fix it! [ 79.623486][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'. [ 79.623730][ T5909] bond1: entered promiscuous mode [ 79.623915][ T5909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.652570][ T5917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.653330][ T5917] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 79.653356][ T5917] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 79.675002][ T5917] bond1: (slave wireguard0): making interface the new active one [ 79.675146][ T5917] wireguard0: entered promiscuous mode [ 79.684015][ T5917] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 79.848577][ T5925] pimreg: entered allmulticast mode [ 79.859810][ T4881] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.883180][ T5925] xt_ecn: cannot match TCP bits for non-tcp packets [ 79.946352][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.638'. [ 79.979062][ T5931] FAULT_INJECTION: forcing a failure. [ 79.979062][ T5931] name failslab, interval 1, probability 0, space 0, times 0 [ 79.979090][ T5931] CPU: 1 UID: 0 PID: 5931 Comm: syz.2.639 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.979126][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.979138][ T5931] Call Trace: [ 79.979175][ T5931] [ 79.979185][ T5931] __dump_stack+0x1d/0x30 [ 79.979218][ T5931] dump_stack_lvl+0x95/0xd0 [ 79.979343][ T5931] dump_stack+0x15/0x1b [ 79.979370][ T5931] should_fail_ex+0x262/0x280 [ 79.979404][ T5931] ? alloc_mnt_ns+0x75/0x250 [ 79.979427][ T5931] should_failslab+0x8c/0xb0 [ 79.979510][ T5931] __kmalloc_cache_noprof+0x5d/0x3e0 [ 79.979532][ T5931] ? alloc_mnt_ns+0x75/0x250 [ 79.979582][ T5931] alloc_mnt_ns+0x75/0x250 [ 79.979608][ T5931] copy_mnt_ns+0x13b/0x720 [ 79.979631][ T5931] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 79.979689][ T5931] ? create_new_namespaces+0x38/0x420 [ 79.979764][ T5931] create_new_namespaces+0x7f/0x420 [ 79.979819][ T5931] unshare_nsproxy_namespaces+0x115/0x150 [ 79.979857][ T5931] ksys_unshare+0x3a3/0x690 [ 79.979921][ T5931] __x64_sys_unshare+0x1f/0x30 [ 79.979951][ T5931] x64_sys_call+0x1e33/0x2550 [ 79.980000][ T5931] do_syscall_64+0x112/0x360 [ 79.980031][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.980056][ T5931] RIP: 0033:0x7f04b678f559 [ 79.980074][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.980140][ T5931] RSP: 002b:00007f04b51df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 79.980164][ T5931] RAX: ffffffffffffffda RBX: 00007f04b6a15fa0 RCX: 00007f04b678f559 [ 79.980180][ T5931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a060680 [ 79.980195][ T5931] RBP: 00007f04b6826b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.980210][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.980223][ T5931] R13: 00007f04b6a16038 R14: 00007f04b6a15fa0 R15: 00007ffe8ebc66c8 [ 79.980255][ T5931] [ 80.263217][ T5941] netlink: 'syz.0.645': attribute type 1 has an invalid length. [ 80.276715][ T5941] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.297479][ T5941] bond3: (slave geneve2): making interface the new active one [ 80.298886][ T5941] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 80.343533][ T5949] ip_tables: iptables: counters copy to user failed while replacing table [ 80.455612][ T29] audit: type=1400 audit(1792546734.528:1654): avc: denied { write } for pid=5956 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.462468][ T29] audit: type=1400 audit(1792546734.538:1655): avc: denied { setopt } for pid=5956 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.463228][ T29] audit: type=1400 audit(1792546734.538:1656): avc: denied { connect } for pid=5956 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.941715][ T5912] ================================================================== [ 80.941764][ T5912] BUG: KCSAN: data-race in pipe_lock / pipe_release [ 80.941810][ T5912] [ 80.941819][ T5912] read-write to 0xffff88812966a564 of 4 bytes by task 5911 on cpu 0: [ 80.941841][ T5912] pipe_release+0x16a/0x1d0 [ 80.941868][ T5912] __fput+0x286/0x610 [ 80.941901][ T5912] fput_close_sync+0xad/0x190 [ 80.941935][ T5912] filp_close_sync+0x27/0x40 [ 80.941967][ T5912] __se_sys_close_range+0x915/0xa00 [ 80.941993][ T5912] __x64_sys_close_range+0x43/0x50 [ 80.942025][ T5912] x64_sys_call+0x2198/0x2550 [ 80.942061][ T5912] do_syscall_64+0x112/0x360 [ 80.942097][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.942127][ T5912] [ 80.942146][ T5912] read to 0xffff88812966a564 of 4 bytes by task 5912 on cpu 1: [ 80.942175][ T5912] pipe_lock+0x17/0x50 [ 80.942218][ T5912] iter_file_splice_write+0x11f/0xa60 [ 80.942264][ T5912] do_splice+0x823/0xf80 [ 80.942295][ T5912] __se_sys_splice+0x26c/0x3a0 [ 80.942341][ T5912] __x64_sys_splice+0x78/0x90 [ 80.942368][ T5912] x64_sys_call+0x1797/0x2550 [ 80.942393][ T5912] do_syscall_64+0x112/0x360 [ 80.942423][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.942444][ T5912] [ 80.942448][ T5912] value changed: 0x00000002 -> 0x00000001 [ 80.942458][ T5912] [ 80.942462][ T5912] Reported by Kernel Concurrency Sanitizer on: [ 80.942472][ T5912] CPU: 1 UID: 0 PID: 5912 Comm: syz.4.634 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.942495][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.942510][ T5912] ==================================================================