last executing test programs: 2m18.699811373s ago: executing program 32 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xe5093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 2m1.709570904s ago: executing program 33 (id=410): pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x84000) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x30}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc00) close_range(r0, 0xffffffffffffffff, 0x0) 1m49.711088321s ago: executing program 34 (id=581): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000080), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r2, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 1m46.778544714s ago: executing program 35 (id=605): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x7) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x3, 0x7, "00fa9a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) 1m39.27133278s ago: executing program 36 (id=685): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x1, 0x0, 0x20, 0x66, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010102, @local, {[@rr={0x7, 0x3, 0x2}]}}, @info_request={0xf, 0x0, 0x0, 0x401}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1m39.117539954s ago: executing program 37 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1f}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x3c}}, 0x0) 1m16.000509056s ago: executing program 38 (id=1042): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000040)='./bus\x00', 0xe0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./bus\x00', 0x0, 0x1042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x183a00, 0x118) read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51) 1m4.96676895s ago: executing program 1 (id=1238): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000300e00000020000000000000000000000000000000000000000000000000000003bbcd68600000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1m4.934729161s ago: executing program 1 (id=1239): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x0, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.084548392s ago: executing program 1 (id=1253): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000040), 0x1, 0x4e6, &(0x7f0000000240)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/19, &(0x7f0000000240)=0x14) 1m3.968124005s ago: executing program 1 (id=1257): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000680)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@quiet}, {@numtail}, {@fat=@usefree}, {@uni_xlate}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_winnt}, {@fat=@errors_remount}, {@shortname_lower}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x81001) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) 1m3.702307392s ago: executing program 1 (id=1260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) 1m3.422548718s ago: executing program 1 (id=1264): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000280)={0x12, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) 1m3.389161289s ago: executing program 39 (id=1264): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000280)={0x12, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) 59.210565732s ago: executing program 4 (id=1334): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000280)={0x12, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) 59.054748226s ago: executing program 4 (id=1336): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x0, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 58.022110112s ago: executing program 4 (id=1353): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4e142, 0x2e) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x68) 57.920120235s ago: executing program 4 (id=1355): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) chdir(&(0x7f0000000200)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0) chdir(&(0x7f0000000100)='./file0/../file0\x00') 57.820786387s ago: executing program 4 (id=1359): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 57.601495343s ago: executing program 4 (id=1363): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4008, 0x400000, 0x4, 0x3, 0x7, 0x1000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r1, r0, &(0x7f00000000c0)=0xfff, 0x4) 57.545748034s ago: executing program 40 (id=1363): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4008, 0x400000, 0x4, 0x3, 0x7, 0x1000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r1, r0, &(0x7f00000000c0)=0xfff, 0x4) 41.347355705s ago: executing program 9 (id=1649): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10014}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x1, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x6, 0x3, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x3, "5c8dc20000000000fb002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x8, 0x11, 0xf5, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x1, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) 41.186423789s ago: executing program 9 (id=1656): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) 41.101466591s ago: executing program 9 (id=1660): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x6}, 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0x2}], 0x1, 0x40032060, 0x0) 41.066025023s ago: executing program 9 (id=1662): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 40.662564912s ago: executing program 9 (id=1669): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 40.469531117s ago: executing program 9 (id=1674): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10000d, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000001ac0)={0x2, 0xa, 0x9, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x10}}, 0x20000044) 40.415616549s ago: executing program 41 (id=1674): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10000d, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000001ac0)={0x2, 0xa, 0x9, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x10}}, 0x20000044) 38.855214177s ago: executing program 8 (id=1694): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f35383a340838e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b233107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bde7095d6a345badc56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76ea0270e4c10d64cd5a62427264f2377fe763c434708337c8de98f371bb943a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa7ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad046581927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fc83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad83872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02b7fa64b6de3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba300004e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f08df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac3fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2102596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb90372927db6ff959c0837d2e7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d050000008926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023dd0000000400", 0x1000}}, 0x1006) 38.002976378s ago: executing program 8 (id=1705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 37.889465741s ago: executing program 8 (id=1709): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000100001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="14003500626f6e645f736c6176655f30"], 0x58}}, 0x0) 37.458888971s ago: executing program 8 (id=1716): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 37.169918539s ago: executing program 8 (id=1722): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xfd, 0x7ffc0001}]}) semtimedop(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 36.944737035s ago: executing program 8 (id=1727): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x14, 0x9, 0x70bd2c, 0x25dfdbff, {0xd}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x3000000000000, 0x0, 0xca1de99cf558760b}, 0x20044010) 36.805638528s ago: executing program 42 (id=1727): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x14, 0x9, 0x70bd2c, 0x25dfdbff, {0xd}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x3000000000000, 0x0, 0xca1de99cf558760b}, 0x20044010) 32.390711567s ago: executing program 7 (id=1793): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x4}, 0x3086, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3, 0x0, 0x2500}, 0x18) 31.864144291s ago: executing program 7 (id=1801): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa853", 0x1c0}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) 31.723504534s ago: executing program 7 (id=1803): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @rand_addr=0x64010101}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd700004000000050000000600010005000000080009000200000008000b000000000008000c00a82a0000050005001c"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 31.632525646s ago: executing program 7 (id=1806): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000400000000000000"], 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) 31.560479798s ago: executing program 7 (id=1810): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x189042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x41) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r1, &(0x7f0000000000)='./file0\x00', 0x4) 31.459039551s ago: executing program 7 (id=1813): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmsg$nl_route_sched(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 16.338317066s ago: executing program 43 (id=1813): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmsg$nl_route_sched(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 4.086514059s ago: executing program 3 (id=2173): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) write$P9_RATTACH(r1, &(0x7f0000000080)={0xc, 0x69, 0x0, {0x80}}, 0x14) 3.798990996s ago: executing program 3 (id=2181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="2e1221b21ab601c494d3ffff0000963d86dd9d90491c0026060004dbb8a13d6d2183499c3a0a9070ec124555", 0x2c}, {&(0x7f0000000240)="79696e926c4299b1004cd7e1da566282cf60d0981edf3b6733fc75059ac8f1efa749", 0x22}], 0x2) 2.393866311s ago: executing program 3 (id=2203): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}}], 0x1, 0x2040000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) 2.296123953s ago: executing program 3 (id=2193): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.196563256s ago: executing program 5 (id=2195): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0xda2f32cf47045f52, 0x1ff, 0x4, 0x4, 0x4, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x702, 0xe98, 0x0, &(0x7f0000000380)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.160530867s ago: executing program 3 (id=2196): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000000300), 0x1, 0x4a6, &(0x7f0000000540)="$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") symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200, 0xa1) 1.822389825s ago: executing program 3 (id=2199): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x71f2, 0x1000007}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) fcntl$addseals(r0, 0x409, 0xb) 1.21766847s ago: executing program 5 (id=2204): bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e21, @broadcast}}, 0xfff9, 0x4}, 0x90) 1.140614892s ago: executing program 6 (id=2205): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) syz_io_uring_setup(0x4171, &(0x7f0000000180)={0x0, 0x536f, 0x11000, 0x2, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.074276154s ago: executing program 0 (id=2206): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.017695885s ago: executing program 5 (id=2208): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.017221255s ago: executing program 0 (id=2209): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x48441, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 794.48656ms ago: executing program 6 (id=2210): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x7) llistxattr(&(0x7f0000002e00)='./file0\x00', 0x0, 0x0) 730.531602ms ago: executing program 2 (id=2211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)=r2}, 0x20) 729.383582ms ago: executing program 5 (id=2212): socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x7, 0x0, 0x0, 0x1e00}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) 654.146534ms ago: executing program 5 (id=2213): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="08f64fd5250200b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000061005001800128008000100767469000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 651.208564ms ago: executing program 0 (id=2214): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write(0xffffffffffffffff, &(0x7f0000000340)='/]', 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x3, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 638.667614ms ago: executing program 2 (id=2215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r1 = perf_event_open(&(0x7f0000000a00)={0x5, 0x80, 0x0, 0xb, 0x1, 0x0, 0x0, 0x9, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7988fc44, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x108008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/uts\x00') 573.008426ms ago: executing program 6 (id=2216): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf12, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xc931, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230010) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 546.276666ms ago: executing program 0 (id=2217): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'sh\x00', 0x9, 0x80002, 0x64}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 454.508919ms ago: executing program 2 (id=2218): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 448.299639ms ago: executing program 0 (id=2219): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b'], 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x200000000008, 0x0) 440.759709ms ago: executing program 5 (id=2220): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$l2tp6(r1, 0x0, 0x0, 0x20, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 284.512223ms ago: executing program 0 (id=2221): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r2, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x80}}, 0x20000, 0xf401, 0xe457, 0x0, 0x4c, 0x6, 0x2}, 0x9c) 273.076604ms ago: executing program 6 (id=2222): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffc, 0xea, 0x440, 0x3, 0x32, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 251.824614ms ago: executing program 2 (id=2223): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e24, 0x8, @empty}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 109.542168ms ago: executing program 2 (id=2224): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x12}, 0x106414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x67, 0x4, 0x7fff0022}]}) close_range(r1, 0xffffffffffffffff, 0x0) 87.567328ms ago: executing program 6 (id=2225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xd5) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) 44.112839ms ago: executing program 6 (id=2226): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23cf0d8e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001cc0)=""/4109, 0x100d}, {&(0x7f0000004000)=""/4108, 0x100c}], 0x2}, 0x10000) 0s ago: executing program 2 (id=2227): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() setns(0xc9, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/tcp\x00') pread64(r1, &(0x7f0000019040)=""/102399, 0x18fff, 0x4000093) kernel console output (not intermixed with test programs): 90: inode #15: block 3: comm syz.8.1382: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.750427][ T8692] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.1382: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.754388][ T8692] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.1382: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.755164][ T8692] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.1382: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.755664][ T8692] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.1382: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.756311][ T8692] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.1382: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.756923][ T8692] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.1382: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.886185][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.886213][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.886332][ T8603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.931568][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.931589][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.931630][ T8603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.007989][ T8603] hsr_slave_0: entered promiscuous mode [ 124.008505][ T8603] hsr_slave_1: entered promiscuous mode [ 124.008953][ T8603] debugfs: 'hsr0' already exists in 'hsr' [ 124.008973][ T8603] Cannot create hsr debugfs directory [ 124.361935][ T8714] syzkaller0: mtu greater than device maximum [ 124.556387][ T5400] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.647023][ T8726] vcan0 speed is unknown, defaulting to 1000 [ 124.656905][ T8603] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.669055][ T8603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.678063][ T8603] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.689889][ T8603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.698078][ T8603] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.708841][ T8603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.717158][ T8603] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.734422][ T8603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.790883][ T8603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.802177][ T8744] FAULT_INJECTION: forcing a failure. [ 124.802177][ T8744] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.802225][ T8744] CPU: 1 UID: 0 PID: 8744 Comm: syz.0.1393 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.802258][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.802278][ T8744] Call Trace: [ 124.802287][ T8744] [ 124.802297][ T8744] __dump_stack+0x1d/0x30 [ 124.802462][ T8744] dump_stack_lvl+0x95/0xd0 [ 124.802487][ T8744] dump_stack+0x15/0x1b [ 124.802510][ T8744] should_fail_ex+0x262/0x280 [ 124.802612][ T8744] should_fail_alloc_page+0xf2/0x100 [ 124.802647][ T8744] __alloc_frozen_pages_noprof+0x157/0x400 [ 124.802692][ T8744] alloc_pages_mpol+0xaf/0x1d0 [ 124.802779][ T8744] alloc_pages_noprof+0x94/0x140 [ 124.802802][ T8744] anon_pipe_write+0x10a/0x1030 [ 124.802882][ T8744] ? __file_has_perm+0x3d9/0x430 [ 124.802928][ T8744] ? __pfx_anon_pipe_write+0x10/0x10 [ 124.802972][ T8744] vfs_write+0x57f/0x9a0 [ 124.803012][ T8744] ksys_write+0xdc/0x1a0 [ 124.803148][ T8744] __x64_sys_write+0x40/0x50 [ 124.803249][ T8744] x64_sys_call+0x154e/0x2550 [ 124.803336][ T8744] do_syscall_64+0x112/0x360 [ 124.803497][ T8744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.803579][ T8744] RIP: 0033:0x7f729203e159 [ 124.803632][ T8744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.803696][ T8744] RSP: 002b:00007f7290a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.803805][ T8744] RAX: ffffffffffffffda RBX: 00007f72922c5fa0 RCX: 00007f729203e159 [ 124.803857][ T8744] RDX: 00000000ffffff9a RSI: 0000200000000000 RDI: 0000000000000004 [ 124.803942][ T8744] RBP: 00007f72920d5024 R08: 0000000000000000 R09: 0000000000000000 [ 124.803955][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.803968][ T8744] R13: 00007f72922c6038 R14: 00007f72922c5fa0 R15: 00007ffe9fe69348 [ 124.803989][ T8744] [ 124.880870][ T8745] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 124.889918][ T8603] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.941047][ T4758] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.941207][ T4758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.948990][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.949097][ T4755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.240790][ T8778] loop8: detected capacity change from 0 to 512 [ 125.272493][ T8778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.272595][ T8778] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.303615][ T8603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.470995][ T5400] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.547055][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 125.547149][ T29] audit: type=1400 audit(1788470815.500:1237): avc: denied { read } for pid=8810 comm="syz.8.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.758480][ T8603] veth0_vlan: entered promiscuous mode [ 125.773257][ T8603] veth1_vlan: entered promiscuous mode [ 125.814766][ T8603] veth0_macvtap: entered promiscuous mode [ 125.824732][ T8603] veth1_macvtap: entered promiscuous mode [ 125.843079][ T8603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.866008][ T8603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.867092][ T29] audit: type=1400 audit(1788470815.820:1238): avc: denied { write } for pid=8814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.886215][ T8843] vcan0 speed is unknown, defaulting to 1000 [ 125.907574][ T4770] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.907663][ T4770] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.907786][ T4770] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.910966][ T4770] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.973661][ T29] audit: type=1400 audit(1788470815.920:1239): avc: denied { write } for pid=8849 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.190876][ T29] audit: type=1400 audit(1788470816.140:1240): avc: denied { write } for pid=8851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.273394][ T29] audit: type=1400 audit(1788470816.220:1241): avc: denied { write } for pid=8862 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.809844][ T8886] loop0: detected capacity change from 0 to 512 [ 126.844010][ T8886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.844098][ T8886] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.925401][ T29] audit: type=1400 audit(1788470816.880:1242): avc: denied { write } for pid=8865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.951738][ T8174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.952404][ T8869] loop5: detected capacity change from 0 to 256 [ 126.994986][ T8894] loop6: detected capacity change from 0 to 512 [ 127.013444][ T8894] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 127.013650][ T8894] EXT4-fs (loop6): orphan cleanup on readonly fs [ 127.036111][ T8894] Quota error (device loop6): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 127.036171][ T8894] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 127.063240][ T8894] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 127.064292][ T8894] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1418: bg 0: block 15: invalid block bitmap [ 127.064329][ T8894] loop6: lost filesystem error report for type 5 error -117 [ 127.064532][ T8894] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 127.064579][ T8894] loop6: lost filesystem error report for type 5 error -117 [ 127.085134][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 127.085159][ C1] EXT4-fs (loop6): initial error at time 1788470817: ext4_validate_block_bitmap:436 [ 127.085184][ C1] EXT4-fs (loop6): last error at time 1788470817: ext4_mb_clear_bb:6680 [ 127.085399][ T8894] EXT4-fs warning (device loop6): ext4_evict_inode:196: inode #16: comm syz.6.1418: data will be lost [ 127.085513][ T8894] EXT4-fs (loop6): 1 truncate cleaned up [ 127.089408][ T8894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.183548][ T29] audit: type=1400 audit(1788470817.130:1243): avc: denied { write } for pid=8901 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.302094][ T4704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.335070][ T29] audit: type=1400 audit(1788470817.290:1244): avc: denied { getopt } for pid=8903 comm="syz.0.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.403618][ T29] audit: type=1400 audit(1788470817.350:1245): avc: denied { create } for pid=8909 comm="syz.9.1424" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.422903][ T8911] 9p: Unknown Cache mode or invalid value 77777777777777777777 [ 127.614335][ T8932] loop5: detected capacity change from 0 to 256 [ 128.257674][ T8996] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1442'. [ 128.310889][ T9001] loop0: detected capacity change from 0 to 512 [ 128.319021][ T9001] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.347232][ T9001] EXT4-fs (loop0): 1 truncate cleaned up [ 128.348136][ T9001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.363208][ T8986] loop8: detected capacity change from 0 to 128 [ 128.441980][ T9009] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.1443: corrupted xattr entries [ 128.453033][ T8986] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.461481][ T8986] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.525949][ T9011] loop5: detected capacity change from 0 to 2048 [ 128.553291][ T9011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.553349][ T8174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.692101][ T4762] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.721317][ T8603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.296933][ T9030] loop8: detected capacity change from 0 to 512 [ 129.416807][ T9078] loop6: detected capacity change from 0 to 512 [ 129.426074][ T9078] EXT4-fs: Ignoring removed i_version option [ 129.433668][ T9078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.450530][ T9078] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 129.450559][ T9078] loop6: lost filesystem error report for type 5 error -117 [ 129.459677][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 129.459705][ C1] EXT4-fs (loop6): initial error at time 1788470819: ext4_process_orphan:346 [ 129.459755][ C1] EXT4-fs (loop6): last error at time 1788470819: ext4_process_orphan:346 [ 129.509970][ T9078] EXT4-fs (loop6): 2 truncates cleaned up [ 129.510384][ T9078] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.515703][ T9030] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.516026][ T9030] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.559996][ T5400] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.627836][ T4704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.071469][ T9136] netlink: 'syz.6.1469': attribute type 20 has an invalid length. [ 130.071495][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1469'. [ 130.071584][ T9136] netlink: 'syz.6.1469': attribute type 20 has an invalid length. [ 130.071598][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1469'. [ 130.513412][ T9149] loop6: detected capacity change from 0 to 32768 [ 130.540736][ T9165] loop9: detected capacity change from 0 to 128 [ 130.553713][ T9165] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.564828][ T9149] loop6: p1 p3 < > [ 130.602868][ T9165] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.651284][ T4758] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.667540][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 130.667566][ T29] audit: type=1400 audit(1788470820.620:1269): avc: denied { ioctl } for pid=9169 comm="syz.0.1481" path="socket:[23654]" dev="sockfs" ino=23654 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.738917][ T4735] udevd[4735]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 130.747459][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 130.836999][ T51] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.134650][ T9207] loop5: detected capacity change from 0 to 4096 [ 131.144748][ T9207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.161435][ T29] audit: type=1400 audit(1788470821.120:1270): avc: denied { write } for pid=9206 comm="syz.5.1497" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.168715][ T9211] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 131.176233][ T9210] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 131.968485][ T9221] loop9: detected capacity change from 0 to 512 [ 131.987121][ T4946] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 131.987594][ T4946] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 132.005440][ T4946] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 132.005896][ T4946] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 132.005928][ T4946] rtc rtc0: __rtc_set_alarm: err=-22 [ 132.032723][ T9221] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.032860][ T9221] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.060590][ T29] audit: type=1400 audit(1788470822.020:1271): avc: denied { write } for pid=9220 comm="syz.9.1500" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.184372][ T9226] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 132.184531][ T9226] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 132.184607][ T9226] EXT4-fs (loop9): This should not happen!! Data will be lost [ 132.184607][ T9226] [ 132.184664][ T9226] EXT4-fs (loop9): Total free blocks count 0 [ 132.184719][ T9226] EXT4-fs (loop9): Free/Dirty block details [ 132.184796][ T9226] EXT4-fs (loop9): free_blocks=65280 [ 132.184849][ T9226] EXT4-fs (loop9): dirty_blocks=3 [ 132.184890][ T9226] EXT4-fs (loop9): Block reservation details [ 132.184939][ T9226] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 132.269236][ T5830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.281682][ T8603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.399888][ T9239] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.412726][ T29] audit: type=1400 audit(1788470822.370:1272): avc: denied { write } for pid=9238 comm="syz.8.1506" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.501602][ T5400] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.655977][ T3701] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.831779][ T9249] set_capacity_and_notify: 3 callbacks suppressed [ 132.831912][ T9249] loop5: detected capacity change from 0 to 764 [ 132.851744][ T9270] netlink: 'syz.8.1522': attribute type 7 has an invalid length. [ 132.855437][ T9270] netlink: 'syz.8.1522': attribute type 7 has an invalid length. [ 132.855767][ T4752] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.855855][ T4752] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.855926][ T4752] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.855971][ T4752] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.957976][ T9272] syzkaller0: entered promiscuous mode [ 132.958011][ T9272] syzkaller0: entered allmulticast mode [ 132.965187][ T9249] rock: corrupted directory entry. extent=32, offset=0, size=83886085 [ 133.128670][ T29] audit: type=1326 audit(1788470823.080:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.9.1526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f913036e159 code=0x0 [ 133.201022][ T9290] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1528'. [ 133.689077][ T29] audit: type=1400 audit(1788470823.640:1274): avc: denied { unmount } for pid=4704 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 134.078137][ T9356] loop7: detected capacity change from 0 to 16384 [ 134.243696][ T9359] loop7: detected capacity change from 16384 to 0 [ 134.245137][ C1] I/O error, dev loop7, sector 8960 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 134.253648][ T9348] loop5: detected capacity change from 0 to 512 [ 134.458313][ T9348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.458396][ T9348] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.516823][ T8603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.649635][ T29] audit: type=1326 audit(1788470824.600:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.1568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729203e159 code=0x7ffc0000 [ 134.650218][ T29] audit: type=1326 audit(1788470824.600:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.1568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729203e159 code=0x7ffc0000 [ 134.650533][ T29] audit: type=1326 audit(1788470824.600:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.1568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729203e159 code=0x7ffc0000 [ 134.651752][ T29] audit: type=1326 audit(1788470824.600:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.1568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f729203e159 code=0x7ffc0000 [ 135.760351][ T9412] FAULT_INJECTION: forcing a failure. [ 135.760351][ T9412] name failslab, interval 1, probability 0, space 0, times 0 [ 135.760399][ T9412] CPU: 1 UID: 0 PID: 9412 Comm: syz.0.1579 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.760435][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.760453][ T9412] Call Trace: [ 135.760463][ T9412] [ 135.760472][ T9412] __dump_stack+0x1d/0x30 [ 135.760544][ T9412] dump_stack_lvl+0x95/0xd0 [ 135.760572][ T9412] dump_stack+0x15/0x1b [ 135.760601][ T9412] should_fail_ex+0x262/0x280 [ 135.760640][ T9412] should_failslab+0x8c/0xb0 [ 135.760671][ T9412] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 135.760761][ T9412] ? kstrdup_const+0x3e/0x50 [ 135.760786][ T9412] ? kstrdup_const+0x3e/0x50 [ 135.760815][ T9412] kstrdup+0x3e/0xd0 [ 135.760859][ T9412] kstrdup_const+0x3e/0x50 [ 135.760886][ T9412] alloc_vfsmnt+0xe2/0x2f0 [ 135.760920][ T9412] clone_mnt+0x30/0x5d0 [ 135.760954][ T9412] ? copy_tree+0xa3/0x890 [ 135.761069][ T9412] copy_tree+0xb9/0x890 [ 135.761185][ T9412] ? proc_alloc_inum+0x4f/0x70 [ 135.761215][ T9412] ? __ns_common_init+0xd7/0x120 [ 135.761276][ T9412] ? __ns_tree_gen_id+0x48/0x60 [ 135.761322][ T9412] copy_mnt_ns+0x1d2/0x720 [ 135.761358][ T9412] create_new_namespaces+0x7f/0x420 [ 135.761428][ T9412] unshare_nsproxy_namespaces+0x115/0x150 [ 135.761500][ T9412] ksys_unshare+0x42b/0x710 [ 135.761540][ T9412] __x64_sys_unshare+0x1f/0x30 [ 135.761576][ T9412] x64_sys_call+0x1e33/0x2550 [ 135.761647][ T9412] do_syscall_64+0x112/0x360 [ 135.761725][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.761754][ T9412] RIP: 0033:0x7f729203e159 [ 135.761770][ T9412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.761845][ T9412] RSP: 002b:00007f7290a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 135.761956][ T9412] RAX: ffffffffffffffda RBX: 00007f72922c5fa0 RCX: 00007f729203e159 [ 135.761977][ T9412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 135.761995][ T9412] RBP: 00007f72920d5024 R08: 0000000000000000 R09: 0000000000000000 [ 135.762014][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.762093][ T9412] R13: 00007f72922c6038 R14: 00007f72922c5fa0 R15: 00007ffe9fe69348 [ 135.762117][ T9412] [ 135.819203][ T9414] loop9: detected capacity change from 0 to 512 [ 135.861464][ T9414] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.861725][ T9414] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.971138][ T9419] loop6: detected capacity change from 0 to 128 [ 136.077085][ T5830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.202166][ T9441] bonding: bond0 is being deleted... [ 136.214199][ T9441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.224703][ T9441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.234016][ T9441] bond0 (unregistering): Released all slaves [ 136.361581][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 136.361620][ T29] audit: type=1326 audit(1788470826.310:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.8.1596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e714e159 code=0x7ffc0000 [ 136.361666][ T29] audit: type=1326 audit(1788470826.310:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.8.1596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e714e159 code=0x7ffc0000 [ 136.361812][ T29] audit: type=1326 audit(1788470826.310:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.8.1596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e714e159 code=0x7ffc0000 [ 136.361919][ T29] audit: type=1326 audit(1788470826.310:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.8.1596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e714e159 code=0x7ffc0000 [ 136.362074][ T29] audit: type=1326 audit(1788470826.310:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.8.1596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff3e714e159 code=0x7ffc0000 [ 136.362104][ T29] audit: type=1326 audit(1788470826.310:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.8.1596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e714e159 code=0x7ffc0000 [ 136.362193][ T29] audit: type=1326 audit(1788470826.310:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.8.1596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e714e159 code=0x7ffc0000 [ 136.362318][ T29] audit: type=1326 audit(1788470826.310:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.8.1596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e714e159 code=0x7ffc0000 [ 136.362406][ T29] audit: type=1326 audit(1788470826.310:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.8.1596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7ff3e714e159 code=0x7ffc0000 [ 136.395162][ T29] audit: type=1326 audit(1788470826.350:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.8.1596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e714e159 code=0x7ffc0000 [ 136.686025][ T9470] loop9: detected capacity change from 0 to 128 [ 136.693953][ T9470] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.707732][ T9470] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.768785][ T5830] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.824099][ T3710] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.115852][ T9488] loop9: detected capacity change from 0 to 512 [ 137.225014][ T9488] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.1609: bg 0: block 5: invalid block bitmap [ 137.226047][ T9488] loop9: lost filesystem error report for type 5 error -117 [ 137.233590][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 137.233653][ C1] EXT4-fs (loop9): initial error at time 1788470827: ext4_validate_block_bitmap:436 [ 137.233727][ C1] EXT4-fs (loop9): last error at time 1788470827: ext4_validate_block_bitmap:436 [ 137.264348][ T9488] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 137.264428][ T9488] loop9: lost filesystem error report for type 5 error -117 [ 137.274321][ T9488] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1609: invalid indirect mapped block 3 (level 2) [ 137.274566][ T9488] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 137.283169][ T9488] EXT4-fs (loop9): 1 orphan inode deleted [ 137.283232][ T9488] EXT4-fs (loop9): 1 truncate cleaned up [ 137.285766][ T9488] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.392671][ T5830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.623578][ T9523] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1623'. [ 137.805863][ T9534] loop5: detected capacity change from 0 to 128 [ 137.806939][ T9534] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.807442][ T9534] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.958015][ T4755] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.020792][ T9535] loop6: detected capacity change from 0 to 764 [ 138.194698][ T9535] rock: corrupted directory entry. extent=32, offset=0, size=83886085 [ 138.345287][ T9577] loop8: detected capacity change from 0 to 256 [ 138.381610][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1639'. [ 138.460238][ T9590] syzkaller1: entered promiscuous mode [ 138.460272][ T9590] syzkaller1: entered allmulticast mode [ 138.840696][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 138.840745][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1661'. [ 138.861160][ T9646] geneve2: entered promiscuous mode [ 138.861191][ T9646] geneve2: entered allmulticast mode [ 138.888360][ T9650] loop9: detected capacity change from 0 to 512 [ 138.929049][ T9656] FAULT_INJECTION: forcing a failure. [ 138.929049][ T9656] name failslab, interval 1, probability 0, space 0, times 0 [ 138.929091][ T9656] CPU: 1 UID: 0 PID: 9656 Comm: syz.5.1664 Not tainted syzkaller #0 PREEMPT(lazy) [ 138.929205][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.929223][ T9656] Call Trace: [ 138.929233][ T9656] [ 138.929242][ T9656] __dump_stack+0x1d/0x30 [ 138.929277][ T9656] dump_stack_lvl+0x95/0xd0 [ 138.929303][ T9656] dump_stack+0x15/0x1b [ 138.929399][ T9656] should_fail_ex+0x262/0x280 [ 138.929428][ T9656] ? security_inode_alloc+0x37/0x100 [ 138.929511][ T9656] should_failslab+0x8c/0xb0 [ 138.929577][ T9656] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 138.929614][ T9656] ? security_inode_alloc+0x37/0x100 [ 138.929687][ T9656] security_inode_alloc+0x37/0x100 [ 138.929739][ T9656] inode_init_always_gfp+0x495/0x4e0 [ 138.929787][ T9656] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 138.929881][ T9656] alloc_inode+0x58/0x170 [ 138.929961][ T9656] new_inode+0x1d/0xe0 [ 138.929982][ T9656] hugetlbfs_get_inode+0x7b/0x330 [ 138.930028][ T9656] ? xfd_validate_state+0x45/0xf0 [ 138.930067][ T9656] hugetlb_file_setup+0x192/0x3d0 [ 138.930136][ T9656] ksys_mmap_pgoff+0x13f/0x310 [ 138.930178][ T9656] x64_sys_call+0x23b3/0x2550 [ 138.930207][ T9656] do_syscall_64+0x112/0x360 [ 138.930339][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.930427][ T9656] RIP: 0033:0x7ff962d3e159 [ 138.930445][ T9656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.930470][ T9656] RSP: 002b:00007ff961797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 138.930562][ T9656] RAX: ffffffffffffffda RBX: 00007ff962fc5fa0 RCX: 00007ff962d3e159 [ 138.930578][ T9656] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 138.930597][ T9656] RBP: 00007ff962dd5024 R08: ffffffffffffffff R09: 0000000000000000 [ 138.930616][ T9656] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 138.930649][ T9656] R13: 00007ff962fc6038 R14: 00007ff962fc5fa0 R15: 00007ffc64982848 [ 138.930683][ T9656] [ 138.953964][ T9650] loop9: detected capacity change from 512 to 0 [ 138.957784][ T9650] FAT-fs (loop9): Directory bread(block 34) failed [ 138.957860][ T9650] FAT-fs (loop9): Directory bread(block 35) failed [ 138.957910][ T9650] FAT-fs (loop9): Directory bread(block 36) failed [ 138.957971][ T9650] FAT-fs (loop9): Directory bread(block 37) failed [ 138.958055][ T9650] FAT-fs (loop9): Directory bread(block 38) failed [ 138.958102][ T9650] FAT-fs (loop9): Directory bread(block 39) failed [ 138.958120][ T9650] FAT-fs (loop9): Directory bread(block 40) failed [ 138.958137][ T9650] FAT-fs (loop9): Directory bread(block 41) failed [ 138.958234][ T9650] FAT-fs (loop9): Directory bread(block 34) failed [ 138.958354][ T9650] FAT-fs (loop9): Directory bread(block 35) failed [ 139.069025][ T9659] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1665'. [ 139.396565][ T4758] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.397834][ T51] FAT-fs (loop9): bread failed in fat_clusters_flush [ 139.398843][ T7848] FAT-fs (loop9): unable to read boot sector to mark fs as dirty [ 139.455272][ T4758] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.606675][ T4758] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.693100][ T4758] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.837147][ T9691] vcan0 speed is unknown, defaulting to 1000 [ 139.847974][ T4758] bridge_slave_1: left allmulticast mode [ 139.848004][ T4758] bridge_slave_1: left promiscuous mode [ 139.848178][ T4758] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.861097][ T4758] bridge_slave_0: left allmulticast mode [ 139.861184][ T4758] bridge_slave_0: left promiscuous mode [ 139.861536][ T4758] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.065955][ T4758] bond1 (unregistering): (slave geneve2): Releasing active interface [ 140.085072][ T4758] bond1 (unregistering): Released all slaves [ 140.293218][ T9703] loop6: detected capacity change from 0 to 512 [ 140.320458][ T4758] hsr_slave_0: left promiscuous mode [ 140.320839][ T4758] hsr_slave_1: left promiscuous mode [ 140.321260][ T4758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.321895][ T4758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.497356][ T4758] team0 (unregistering): Port device team_slave_1 removed [ 140.501422][ T9703] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1681: bg 0: block 5: invalid block bitmap [ 140.501521][ T9703] loop6: lost filesystem error report for type 5 error -117 [ 140.502465][ T9703] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 140.502499][ T9703] loop6: lost filesystem error report for type 5 error -117 [ 140.503396][ T9703] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1681: invalid indirect mapped block 3 (level 2) [ 140.503492][ T9703] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 140.507510][ T9703] EXT4-fs (loop6): 1 orphan inode deleted [ 140.511105][ T9703] EXT4-fs (loop6): 1 truncate cleaned up [ 140.541387][ T9703] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.557454][ T4758] team0 (unregistering): Port device team_slave_0 removed [ 140.721651][ T4704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.767533][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 140.779229][ T9753] loop8: detected capacity change from 0 to 128 [ 140.787132][ T9753] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.799653][ T9753] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.968594][ T4758] IPVS: stop unused estimator thread 0... [ 141.039171][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.039217][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.039288][ T9691] bridge_slave_0: entered allmulticast mode [ 141.039903][ T9691] bridge_slave_0: entered promiscuous mode [ 141.076810][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.076861][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.077027][ T9691] bridge_slave_1: entered allmulticast mode [ 141.103690][ T9691] bridge_slave_1: entered promiscuous mode [ 141.164057][ T9691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.174820][ T9691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.195827][ T9691] team0: Port device team_slave_0 added [ 141.202548][ T9691] team0: Port device team_slave_1 added [ 141.222156][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.222195][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.222239][ T9691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.269725][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.269751][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.269793][ T9691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.344839][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 141.389680][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 141.389715][ T29] audit: type=1400 audit(1788470831.340:1354): avc: denied { getopt } for pid=9795 comm="syz.5.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.447149][ T9691] hsr_slave_0: entered promiscuous mode [ 141.447755][ T9691] hsr_slave_1: entered promiscuous mode [ 141.448065][ T9691] debugfs: 'hsr0' already exists in 'hsr' [ 141.448084][ T9691] Cannot create hsr debugfs directory [ 141.672352][ T29] audit: type=1400 audit(1788470831.620:1355): avc: denied { write } for pid=9794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.726932][ T29] audit: type=1400 audit(1788470831.680:1356): avc: denied { bind } for pid=9814 comm="syz.5.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.726989][ T29] audit: type=1400 audit(1788470831.680:1357): avc: denied { name_bind } for pid=9814 comm="syz.5.1701" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 141.727029][ T29] audit: type=1400 audit(1788470831.680:1358): avc: denied { node_bind } for pid=9814 comm="syz.5.1701" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 141.838084][ T29] audit: type=1400 audit(1788470831.790:1359): avc: denied { write } for pid=9820 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.935591][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1706'. [ 141.959732][ T29] audit: type=1326 audit(1788470831.910:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.0.1707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729203e159 code=0x7ffc0000 [ 141.964292][ T29] audit: type=1326 audit(1788470831.920:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.0.1707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729203e159 code=0x7ffc0000 [ 141.965243][ T29] audit: type=1326 audit(1788470831.920:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.0.1707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729203e159 code=0x7ffc0000 [ 141.965766][ T29] audit: type=1326 audit(1788470831.920:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.0.1707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729203e159 code=0x7ffc0000 [ 142.120646][ T9836] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1709'. [ 142.120811][ T9836] bond_slave_0: entered promiscuous mode [ 142.120838][ T9836] bond_slave_0: entered allmulticast mode [ 142.203061][ T9841] hub 1-0:1.0: USB hub found [ 142.208232][ T9841] hub 1-0:1.0: 8 ports detected [ 142.357992][ T9691] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 142.370001][ T9691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.370711][ T9691] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 142.388553][ T9691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.389622][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 142.400479][ T9691] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 142.408208][ T9691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.415059][ T9691] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 142.427449][ T9691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.484534][ T9874] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1717'. [ 142.488263][ T9870] loop8: detected capacity change from 0 to 512 [ 142.553810][ T9870] loop8: detected capacity change from 512 to 0 [ 142.558005][ T9870] FAT-fs (loop8): Directory bread(block 34) failed [ 142.558087][ T9870] FAT-fs (loop8): Directory bread(block 35) failed [ 142.558151][ T9870] FAT-fs (loop8): Directory bread(block 36) failed [ 142.558242][ T9870] FAT-fs (loop8): Directory bread(block 37) failed [ 142.558260][ T9870] FAT-fs (loop8): Directory bread(block 38) failed [ 142.558278][ T9870] FAT-fs (loop8): Directory bread(block 39) failed [ 142.558295][ T9870] FAT-fs (loop8): Directory bread(block 40) failed [ 142.558363][ T9870] FAT-fs (loop8): Directory bread(block 41) failed [ 142.558562][ T9870] FAT-fs (loop8): Directory bread(block 34) failed [ 142.558634][ T9870] FAT-fs (loop8): Directory bread(block 35) failed [ 142.737775][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.793020][ T9691] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.815042][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.815090][ T4755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.843575][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.843678][ T4755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.930328][ T4755] FAT-fs (loop8): bread failed in fat_clusters_flush [ 142.932733][ T7557] FAT-fs (loop8): unable to read boot sector to mark fs as dirty [ 142.964349][ T51] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.025488][ T51] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.075755][ T51] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.182447][ T51] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.324002][ T51] bridge_slave_1: left allmulticast mode [ 143.324045][ T51] bridge_slave_1: left promiscuous mode [ 143.324317][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.337132][ T51] bridge_slave_0: left allmulticast mode [ 143.337161][ T51] bridge_slave_0: left promiscuous mode [ 143.337356][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.415335][ T9942] FAULT_INJECTION: forcing a failure. [ 143.415335][ T9942] name failslab, interval 1, probability 0, space 0, times 0 [ 143.415383][ T9942] CPU: 1 UID: 0 PID: 9942 Comm: syz.5.1733 Not tainted syzkaller #0 PREEMPT(lazy) [ 143.415418][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.415512][ T9942] Call Trace: [ 143.415522][ T9942] [ 143.415561][ T9942] __dump_stack+0x1d/0x30 [ 143.415707][ T9942] dump_stack_lvl+0x95/0xd0 [ 143.415795][ T9942] dump_stack+0x15/0x1b [ 143.415832][ T9942] should_fail_ex+0x262/0x280 [ 143.415868][ T9942] ? __kthread_create_on_node+0x80/0x240 [ 143.415932][ T9942] should_failslab+0x8c/0xb0 [ 143.415966][ T9942] __kmalloc_cache_noprof+0x7a/0x400 [ 143.416008][ T9942] ? _raw_spin_unlock_irq+0x9/0x30 [ 143.416051][ T9942] ? __kthread_create_on_node+0x80/0x240 [ 143.416101][ T9942] ? __pfx_vhci_tx_loop+0x10/0x10 [ 143.416144][ T9942] __kthread_create_on_node+0x80/0x240 [ 143.416200][ T9942] ? __pfx_vhci_tx_loop+0x10/0x10 [ 143.416242][ T9942] kthread_create_on_node+0x89/0xc0 [ 143.416431][ T9942] ? __fget_files+0x184/0x1c0 [ 143.416569][ T9942] ? __rcu_read_unlock+0x4e/0x70 [ 143.416705][ T9942] ? fget+0x35/0x40 [ 143.416769][ T9942] attach_store+0x2a7/0x670 [ 143.416896][ T9942] ? __pfx_attach_store+0x10/0x10 [ 143.417054][ T9942] dev_attr_store+0x4a/0x70 [ 143.417213][ T9942] ? __pfx_dev_attr_store+0x10/0x10 [ 143.417339][ T9942] sysfs_kf_write+0xfe/0x120 [ 143.417436][ T9942] ? __pfx_sysfs_kf_write+0x10/0x10 [ 143.417522][ T9942] kernfs_fop_write_iter+0x1d2/0x2e0 [ 143.417597][ T9942] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 143.417753][ T9942] vfs_write+0x57f/0x9a0 [ 143.417874][ T9942] ksys_write+0xdc/0x1a0 [ 143.417970][ T9942] __x64_sys_write+0x40/0x50 [ 143.418063][ T9942] x64_sys_call+0x154e/0x2550 [ 143.418201][ T9942] do_syscall_64+0x112/0x360 [ 143.418331][ T9942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.418407][ T9942] RIP: 0033:0x7ff962cfe98e [ 143.418460][ T9942] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 143.418594][ T9942] RSP: 002b:00007ff961796a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.418659][ T9942] RAX: ffffffffffffffda RBX: 00007ff9617976c0 RCX: 00007ff962cfe98e [ 143.418711][ T9942] RDX: 0000000000000008 RSI: 00007ff961796a90 RDI: 0000000000000006 [ 143.418754][ T9942] RBP: 00007ff962da9070 R08: 0000000000000000 R09: 0000000000000000 [ 143.418806][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 143.418850][ T9942] R13: 00007ff961796a90 R14: 00007ff962fc5fa0 R15: 00007ffc64982848 [ 143.418925][ T9942] [ 143.899936][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.912987][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.923891][ T51] bond0 (unregistering): Released all slaves [ 143.932351][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 143.948056][ T9691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.081166][ T51] hsr_slave_0: left promiscuous mode [ 144.081829][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.101960][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.192439][ T9984] serio: Serial port ptm0 [ 144.261537][ T51] team0 (unregistering): Port device team_slave_1 removed [ 144.273932][ T51] team0 (unregistering): Port device team_slave_0 removed [ 144.399957][ T9937] vcan0 speed is unknown, defaulting to 1000 [ 144.688469][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1755'. [ 144.688497][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1755'. [ 144.688653][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1755'. [ 144.688669][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1755'. [ 144.735983][ T9691] veth0_vlan: entered promiscuous mode [ 144.741833][ T9691] veth1_vlan: entered promiscuous mode [ 144.760836][ T9691] veth0_macvtap: entered promiscuous mode [ 144.765201][ T9691] veth1_macvtap: entered promiscuous mode [ 144.775995][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.785108][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.803571][ T4758] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.804124][ T4758] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.804393][ T4758] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.804516][ T4758] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.009377][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.009423][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.009612][ T9937] bridge_slave_0: entered allmulticast mode [ 145.010213][ T9937] bridge_slave_0: entered promiscuous mode [ 145.020244][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.020350][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.020615][ T9937] bridge_slave_1: entered allmulticast mode [ 145.023266][ T9937] bridge_slave_1: entered promiscuous mode [ 145.108630][ T9937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.125321][ T9937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.139877][T10062] loop6: detected capacity change from 0 to 32768 [ 145.157166][ T9937] team0: Port device team_slave_0 added [ 145.164246][ T9937] team0: Port device team_slave_1 added [ 145.192046][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.192071][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.192117][ T9937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.237610][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.237639][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.237677][ T9937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.241781][T10062] loop6: p1 p3 < > [ 145.350020][ T9937] hsr_slave_0: entered promiscuous mode [ 145.350530][ T9937] hsr_slave_1: entered promiscuous mode [ 145.350791][ T9937] debugfs: 'hsr0' already exists in 'hsr' [ 145.350810][ T9937] Cannot create hsr debugfs directory [ 145.561312][T10116] loop5: detected capacity change from 0 to 1024 [ 145.587435][T10116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.602750][T10116] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 145.627542][T10116] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 145.627586][T10116] EXT4-fs (loop5): This should not happen!! Data will be lost [ 145.627586][T10116] [ 145.627620][T10116] EXT4-fs (loop5): Total free blocks count 0 [ 145.627639][T10116] EXT4-fs (loop5): Free/Dirty block details [ 145.627657][T10116] EXT4-fs (loop5): free_blocks=20480 [ 145.627680][T10116] EXT4-fs (loop5): dirty_blocks=80 [ 145.627698][T10116] EXT4-fs (loop5): Block reservation details [ 145.627759][T10116] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 145.691602][T10126] FAULT_INJECTION: forcing a failure. [ 145.691602][T10126] name failslab, interval 1, probability 0, space 0, times 0 [ 145.691653][T10126] CPU: 0 UID: 0 PID: 10126 Comm: syz.6.1767 Not tainted syzkaller #0 PREEMPT(lazy) [ 145.691688][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.691707][T10126] Call Trace: [ 145.691716][T10126] [ 145.691828][T10126] __dump_stack+0x1d/0x30 [ 145.691864][T10126] dump_stack_lvl+0x95/0xd0 [ 145.691897][T10126] dump_stack+0x15/0x1b [ 145.691927][T10126] should_fail_ex+0x262/0x280 [ 145.691957][T10126] should_failslab+0x8c/0xb0 [ 145.692011][T10126] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 145.692052][T10126] ? lookup_one_qstr_excl+0x160/0x240 [ 145.692087][T10126] ? debugfs_alloc_inode+0x34/0x40 [ 145.692180][T10126] ? debugfs_alloc_inode+0x34/0x40 [ 145.692212][T10126] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 145.692302][T10126] debugfs_alloc_inode+0x34/0x40 [ 145.692325][T10126] alloc_inode+0x40/0x170 [ 145.692455][T10126] new_inode+0x1d/0xe0 [ 145.692531][T10126] debugfs_create_symlink+0x7c/0x150 [ 145.692670][T10126] ref_tracker_dir_symlink+0x1ae/0x2d0 [ 145.692780][T10126] ? __xas_nomem+0x5c/0x290 [ 145.692915][T10126] net_ns_net_init+0x8f/0xa0 [ 145.693001][T10126] ops_init+0x22a/0x2e0 [ 145.693086][T10126] setup_net+0x9f/0x230 [ 145.693155][T10126] copy_net_ns+0x333/0x490 [ 145.693228][T10126] create_new_namespaces+0x1f6/0x420 [ 145.693352][T10126] unshare_nsproxy_namespaces+0x115/0x150 [ 145.693460][T10126] ksys_unshare+0x42b/0x710 [ 145.693574][T10126] __x64_sys_unshare+0x1f/0x30 [ 145.693670][T10126] x64_sys_call+0x1e33/0x2550 [ 145.693817][T10126] do_syscall_64+0x112/0x360 [ 145.693937][T10126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.694020][T10126] RIP: 0033:0x7f2e6f00e159 [ 145.694082][T10126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.694212][T10126] RSP: 002b:00007f2e6da67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 145.694284][T10126] RAX: ffffffffffffffda RBX: 00007f2e6f295fa0 RCX: 00007f2e6f00e159 [ 145.694330][T10126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 145.694380][T10126] RBP: 00007f2e6f0a5024 R08: 0000000000000000 R09: 0000000000000000 [ 145.694423][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.694480][T10126] R13: 00007f2e6f296038 R14: 00007f2e6f295fa0 R15: 00007fff7dd3f858 [ 145.694545][T10126] [ 145.706862][T10115] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 145.720906][T10126] debugfs: out of free dentries, can not create symlink 'netns-13c-4026532921-notrefcnt' [ 145.819646][ T4735] udevd[4735]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 145.836540][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 145.993362][T10126] vcan0 speed is unknown, defaulting to 1000 [ 146.423576][T10185] loop7: detected capacity change from 0 to 736 [ 146.480463][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 146.480493][ T29] audit: type=1400 audit(1788470836.430:1466): avc: denied { watch } for pid=10183 comm="syz.7.1778" path="/11/file0" dev="loop7" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 146.569155][ T29] audit: type=1400 audit(1788470836.520:1467): avc: denied { write } for pid=10182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.613652][ T29] audit: type=1400 audit(1788470836.560:1468): avc: denied { write } for pid=10205 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.763586][ T29] audit: type=1400 audit(1788470836.710:1469): avc: denied { write } for pid=10208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.811699][ T29] audit: type=1400 audit(1788470836.760:1470): avc: denied { write } for pid=10221 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.868071][T10206] loop6: detected capacity change from 0 to 32768 [ 146.926576][T10206] loop6: p1 p3 < > [ 146.933811][ T29] audit: type=1400 audit(1788470836.890:1471): avc: denied { write } for pid=10223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.978932][ T29] audit: type=1400 audit(1788470836.930:1472): avc: denied { write } for pid=10237 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.037824][ T4735] udevd[4735]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 147.039217][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 147.149243][ T29] audit: type=1400 audit(1788470837.100:1473): avc: denied { write } for pid=10239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.213972][ T29] audit: type=1400 audit(1788470837.170:1474): avc: denied { write } for pid=10261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.324596][ T29] audit: type=1400 audit(1788470837.280:1475): avc: denied { write } for pid=10265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.473104][T10027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.475340][ T9937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.494272][ T9937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.495023][ T9937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.518463][ T9937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.531285][ T9937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.545899][ T9937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.553118][ T9937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.563351][ T9937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.588624][T10285] hub 1-0:1.0: USB hub found [ 147.590847][T10285] hub 1-0:1.0: 8 ports detected [ 147.608336][T10290] loop0: detected capacity change from 0 to 1024 [ 147.622031][T10290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.622204][T10290] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.707414][ T9937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.726339][ T9937] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.741199][T10290] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.1795: lblock 0 mapped to illegal pblock 0 (length 6) [ 147.755294][T10290] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 147.755393][T10290] EXT4-fs (loop0): This should not happen!! Data will be lost [ 147.755393][T10290] [ 147.777155][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.777278][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.805464][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.805511][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.817174][ T4758] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 147.829257][ T4758] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 147.829353][ T4758] EXT4-fs (loop0): This should not happen!! Data will be lost [ 147.829353][ T4758] [ 147.872139][ T8174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 147.922440][ T9937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.922478][ T9937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.152180][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 148.218262][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1803'. [ 148.248795][ T9937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.318341][T10352] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1806'. [ 148.457179][ T9937] veth0_vlan: entered promiscuous mode [ 148.471828][ T9937] veth1_vlan: entered promiscuous mode [ 148.516074][ T9937] veth0_macvtap: entered promiscuous mode [ 148.523352][ T9937] veth1_macvtap: entered promiscuous mode [ 148.540485][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 148.561307][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.586138][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.619211][T10387] loop0: detected capacity change from 0 to 512 [ 148.645870][T10387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.646139][T10387] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.670235][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.670653][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.671037][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.671360][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.776481][ T8174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.846172][T10394] loop0: detected capacity change from 0 to 512 [ 148.855574][T10394] EXT4-fs: Ignoring removed bh option [ 148.856375][T10394] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 148.878103][T10394] EXT4-fs (loop0): 1 truncate cleaned up [ 148.878662][T10394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.957308][T10400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1819'. [ 148.959386][ T8174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.090456][T10413] loop2: detected capacity change from 0 to 1024 [ 149.097704][T10413] EXT4-fs: Ignoring removed bh option [ 149.124111][T10413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.172842][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 149.213398][T10425] veth1_to_bond: entered allmulticast mode [ 149.227882][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 149.250455][T10425] veth1_to_bond (unregistering): left allmulticast mode [ 149.264202][ T9937] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.276821][T10422] loop5: detected capacity change from 0 to 128 [ 149.285501][T10425] bond0: (slave bond_slave_1): Releasing backup interface [ 149.439819][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'. [ 149.483601][T10439] hsr_slave_1 (unregistering): left promiscuous mode [ 149.536040][T10445] syz.5.1824: attempt to access beyond end of device [ 149.536040][T10445] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 149.581165][T10449] xfrm0: left promiscuous mode [ 149.646818][T10456] syzkaller1: entered allmulticast mode [ 149.723428][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 149.830933][T10475] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1832'. [ 150.764760][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1838'. [ 150.764797][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1838'. [ 150.768321][T10537] loop0: detected capacity change from 0 to 512 [ 150.769134][T10537] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.813444][T10537] EXT4-fs (loop0): 1 truncate cleaned up [ 150.814425][T10537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.006043][T10561] loop6: detected capacity change from 0 to 256 [ 151.014485][T10561] vfat: Unknown parameter 'git' [ 151.289514][T10571] loop6: detected capacity change from 0 to 4096 [ 151.296622][T10571] EXT4-fs: test_dummy_encryption option not supported [ 151.475892][T10586] pim6reg1: entered promiscuous mode [ 151.475920][T10586] pim6reg1: entered allmulticast mode [ 151.647664][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 151.647697][ T29] audit: type=1400 audit(1788470841.600:1516): avc: denied { write } for pid=10588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.748529][ T29] audit: type=1400 audit(1788470841.700:1517): avc: denied { write } for pid=10599 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.990263][ T8174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.017782][ T29] audit: type=1400 audit(1788470841.970:1518): avc: denied { write } for pid=10601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.078517][T10616] netlink: 'syz.0.1851': attribute type 15 has an invalid length. [ 152.108093][T10616] netlink: 'syz.0.1851': attribute type 15 has an invalid length. [ 152.123615][ T51] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 152.126667][ T4770] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 152.126821][ T4770] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 152.127023][ T4770] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 152.174529][ T29] audit: type=1400 audit(1788470842.120:1519): avc: denied { write } for pid=10619 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.299099][T10632] loop0: detected capacity change from 0 to 1024 [ 152.303316][T10632] EXT4-fs: Ignoring removed bh option [ 152.318340][T10632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.353570][ T29] audit: type=1400 audit(1788470842.300:1520): avc: denied { write } for pid=10625 comm="syz.0.1855" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.353636][ T29] audit: type=1400 audit(1788470842.300:1521): avc: denied { write } for pid=10625 comm="syz.0.1855" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.400595][ T29] audit: type=1400 audit(1788470842.310:1522): avc: denied { write } for pid=10625 comm="syz.0.1855" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 152.472709][ T8174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.565966][ T29] audit: type=1400 audit(1788470842.520:1523): avc: denied { write } for pid=10630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.658816][ T29] audit: type=1400 audit(1788470842.610:1524): avc: denied { write } for pid=10656 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.755661][ T29] audit: type=1400 audit(1788470842.700:1525): avc: denied { read } for pid=10663 comm="syz.0.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.042967][T10689] FAULT_INJECTION: forcing a failure. [ 153.042967][T10689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.043044][T10689] CPU: 1 UID: 0 PID: 10689 Comm: syz.5.1872 Not tainted syzkaller #0 PREEMPT(lazy) [ 153.043080][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.043130][T10689] Call Trace: [ 153.043172][T10689] [ 153.043180][T10689] __dump_stack+0x1d/0x30 [ 153.043208][T10689] dump_stack_lvl+0x95/0xd0 [ 153.043234][T10689] dump_stack+0x15/0x1b [ 153.043263][T10689] should_fail_ex+0x262/0x280 [ 153.043292][T10689] should_fail+0xb/0x20 [ 153.043363][T10689] should_fail_usercopy+0x1a/0x20 [ 153.043394][T10689] _copy_from_user+0x1c/0xb0 [ 153.043421][T10689] bpf_vlog_reverse_ubuf+0x9f/0x360 [ 153.043553][T10689] bpf_vlog_finalize+0x11a/0x200 [ 153.043607][T10689] bpf_log_attr_finalize+0x33/0x100 [ 153.043630][T10689] btf_new_fd+0x34a/0x670 [ 153.043748][T10689] bpf_btf_load+0x116/0x130 [ 153.043786][T10689] __sys_bpf+0xbce/0xc30 [ 153.043831][T10689] __x64_sys_bpf+0x69/0x80 [ 153.043896][T10689] x64_sys_call+0xf26/0x2550 [ 153.043934][T10689] do_syscall_64+0x112/0x360 [ 153.044044][T10689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.044077][T10689] RIP: 0033:0x7ff962d3e159 [ 153.044160][T10689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.044185][T10689] RSP: 002b:00007ff961797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.044212][T10689] RAX: ffffffffffffffda RBX: 00007ff962fc5fa0 RCX: 00007ff962d3e159 [ 153.044234][T10689] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 153.044309][T10689] RBP: 00007ff962dd5024 R08: 0000000000000000 R09: 0000000000000000 [ 153.044368][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.044386][T10689] R13: 00007ff962fc6038 R14: 00007ff962fc5fa0 R15: 00007ffc64982848 [ 153.044413][T10689] [ 153.183143][ T3427] kernel read not supported for file /per_cpu/cpu0/trace_pipe_raw (pid: 3427 comm: kworker/0:4) [ 153.396009][T10705] hub 1-0:1.0: USB hub found [ 153.402238][T10705] hub 1-0:1.0: 8 ports detected [ 155.262238][T10637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.765366][T10810] loop0: detected capacity change from 0 to 1024 [ 155.776578][T10810] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 155.800720][T10810] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.1903: lblock 2 mapped to illegal pblock 2 (length 1) [ 155.800884][T10810] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.803561][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 155.803615][ C0] EXT4-fs (loop0): initial error at time 1788470845: ext4_map_blocks:790: inode 3: block 2 [ 155.803821][ C0] EXT4-fs (loop0): last error at time 1788470845: ext4_map_blocks:790: inode 3: block 2 [ 155.834459][T10810] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.1903: lblock 0 mapped to illegal pblock 48 (length 1) [ 155.834582][T10810] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.835032][T10810] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1903: Failed to acquire dquot type 0 [ 155.835064][T10810] loop0: lost filesystem error report for type 5 error -117 [ 155.867377][T10810] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 155.867911][T10810] loop0: lost filesystem error report for type 5 error -117 [ 155.871213][T10810] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.1903: mark_inode_dirty error [ 155.871323][T10810] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 155.871501][T10810] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 155.871539][T10810] EXT4-fs (loop0): 1 orphan inode deleted [ 155.871944][T10810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.886311][ T51] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 155.924257][ T51] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0 [ 156.010312][ T8174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.012487][ T4762] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 156.012594][ T4762] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.013013][ T4762] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:14: Failed to release dquot type 0 [ 156.013094][ T4762] loop0: lost filesystem error report for type 5 error -117 [ 156.015566][ T8174] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 156.015643][ T8174] loop0: lost filesystem error report for type 5 error -117 [ 156.015969][ T8174] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 156.016031][ T8174] loop0: lost filesystem error report for type 5 error -117 [ 156.016360][ T8174] EXT4-fs error (device loop0): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 156.016432][ T8174] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.016808][ T8174] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 156.016986][ T8174] loop0: lost filesystem error report for type 5 error -117 [ 156.229985][T10823] loop5: detected capacity change from 0 to 512 [ 156.231953][T10823] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.236915][T10823] EXT4-fs (loop5): 1 truncate cleaned up [ 156.237747][T10823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.570917][T10836] netlink: 'syz.0.1912': attribute type 1 has an invalid length. [ 156.598693][T10836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.675858][T10842] loop0: detected capacity change from 0 to 512 [ 156.830674][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 156.830706][ T29] audit: type=1400 audit(1788470846.780:1568): avc: denied { mount } for pid=10846 comm="syz.0.1916" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 156.862083][ T29] audit: type=1400 audit(1788470846.810:1569): avc: denied { watch watch_reads } for pid=10846 comm="syz.0.1916" path="/130/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 156.918757][ T29] audit: type=1400 audit(1788470846.870:1570): avc: denied { unmount } for pid=8174 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 156.971135][T10851] loop0: detected capacity change from 0 to 128 [ 156.980757][T10851] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.993077][T10851] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.007999][ T29] audit: type=1400 audit(1788470846.960:1571): avc: denied { write } for pid=10850 comm="syz.0.1918" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.060183][ T8174] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.082143][ T8603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.153267][ T4762] IPVS: starting estimator thread 0... [ 157.243821][T10857] IPVS: using max 2160 ests per chain, 108000 per kthread [ 157.486559][ T29] audit: type=1326 audit(1788470847.440:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.6.1928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6f00e159 code=0x7ffc0000 [ 157.486606][ T29] audit: type=1326 audit(1788470847.440:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.6.1928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6f00e159 code=0x7ffc0000 [ 157.545275][ T29] audit: type=1326 audit(1788470847.500:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.6.1928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6f00e159 code=0x7ffc0000 [ 157.571437][ T29] audit: type=1326 audit(1788470847.500:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.6.1928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6f00e159 code=0x7ffc0000 [ 157.571506][ T29] audit: type=1326 audit(1788470847.500:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.6.1928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2e6f00e159 code=0x7ffc0000 [ 157.604120][ T29] audit: type=1326 audit(1788470847.560:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.6.1928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6f00e159 code=0x7ffc0000 [ 158.151313][T10880] loop6: detected capacity change from 0 to 256 [ 158.230159][T10890] pim6reg1: entered promiscuous mode [ 158.230191][T10890] pim6reg1: entered allmulticast mode [ 158.254210][ T51] bridge_slave_1: left allmulticast mode [ 158.254260][ T51] bridge_slave_1: left promiscuous mode [ 158.256030][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.278357][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.357663][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.368586][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.379126][ T51] bond0 (unregistering): Released all slaves [ 158.541149][T10903] netlink: 'syz.2.1938': attribute type 49 has an invalid length. [ 158.552940][T10903] bond0: (slave bond_slave_0): Releasing backup interface [ 158.624277][T10903] bond_slave_0: entered promiscuous mode [ 158.624398][T10903] bond_slave_0: entered allmulticast mode [ 158.660260][ T51] hsr_slave_0: left promiscuous mode [ 158.674247][ T51] hsr_slave_1: left promiscuous mode [ 158.674998][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.692174][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.841845][T10918] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 158.943936][ T51] team0 (unregistering): Port device team_slave_1 removed [ 158.965144][ T51] team0 (unregistering): Port device team_slave_0 removed [ 158.985568][T10926] loop5: detected capacity change from 0 to 512 [ 158.994759][T10926] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 159.013146][T10926] EXT4-fs (loop5): 1 truncate cleaned up [ 159.021505][T10926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.084256][ T8603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.113054][T10929] netlink: 'syz.5.1943': attribute type 19 has an invalid length. [ 159.113121][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1943'. [ 159.172461][ T4770] smc: removing ib device syz0 [ 159.289292][T10914] bridge_slave_0: left allmulticast mode [ 159.289360][T10914] bridge_slave_0: left promiscuous mode [ 159.289712][T10914] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.324999][T10914] bridge_slave_1: left allmulticast mode [ 159.325073][T10914] bridge_slave_1: left promiscuous mode [ 159.331800][T10914] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.369186][T10914] bond0: (slave bond_slave_0): Releasing backup interface [ 159.390973][T10914] team0: Port device team_slave_0 removed [ 159.419864][T10914] team0: Port device team_slave_1 removed [ 159.428134][T10914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.428202][T10914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.449159][T10914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.449207][T10914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.493408][T10914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.529492][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 159.572738][T10929] netlink: 'syz.5.1943': attribute type 19 has an invalid length. [ 159.572769][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1943'. [ 159.583034][ T4762] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.586183][ T4762] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.586437][ T4762] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.586808][ T4762] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.639524][T10931] loop0: detected capacity change from 0 to 1024 [ 159.646586][T10931] EXT4-fs: Ignoring removed bh option [ 159.653121][T10931] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 159.702532][T10931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.812833][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 159.812879][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'. [ 159.812937][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 159.888740][ T8174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.918739][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 159.918805][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'. [ 159.918879][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 159.951098][ T4752] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.952053][ T4752] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.969057][ T4752] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.978361][ T4758] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.181710][T10967] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1954'. [ 160.277206][ T4762] IPVS: starting estimator thread 0... [ 160.363621][T10979] IPVS: using max 1680 ests per chain, 84000 per kthread [ 160.647937][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 160.834348][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 160.984517][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 161.182144][T11043] selinux_netlink_send: 7 callbacks suppressed [ 161.182175][T11043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11043 comm=syz.2.1963 [ 161.182226][T11043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11043 comm=syz.2.1963 [ 161.303224][T11054] FAULT_INJECTION: forcing a failure. [ 161.303224][T11054] name failslab, interval 1, probability 0, space 0, times 0 [ 161.303272][T11054] CPU: 0 UID: 0 PID: 11054 Comm: syz.2.1967 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.303307][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.303356][T11054] Call Trace: [ 161.303364][T11054] [ 161.303372][T11054] __dump_stack+0x1d/0x30 [ 161.303403][T11054] dump_stack_lvl+0x95/0xd0 [ 161.303496][T11054] dump_stack+0x15/0x1b [ 161.303525][T11054] should_fail_ex+0x262/0x280 [ 161.303564][T11054] ? do_getname+0x2e/0x1c0 [ 161.303614][T11054] should_failslab+0x8c/0xb0 [ 161.303644][T11054] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 161.303679][T11054] ? do_getname+0x2e/0x1c0 [ 161.303800][T11054] do_getname+0x2e/0x1c0 [ 161.303847][T11054] __se_sys_renameat2+0x38/0x1c0 [ 161.303901][T11054] __x64_sys_renameat2+0x67/0x80 [ 161.303930][T11054] x64_sys_call+0x1f7d/0x2550 [ 161.303968][T11054] do_syscall_64+0x112/0x360 [ 161.304051][T11054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.304075][T11054] RIP: 0033:0x7f85bf6be159 [ 161.304135][T11054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.304162][T11054] RSP: 002b:00007f85be117028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 161.304193][T11054] RAX: ffffffffffffffda RBX: 00007f85bf945fa0 RCX: 00007f85bf6be159 [ 161.304218][T11054] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 161.304236][T11054] RBP: 00007f85bf755024 R08: 0000000000000004 R09: 0000000000000000 [ 161.304257][T11054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.304275][T11054] R13: 00007f85bf946038 R14: 00007f85bf945fa0 R15: 00007ffee4cb9c68 [ 161.304299][T11054] [ 161.509640][T11055] loop6: detected capacity change from 0 to 136 [ 162.063018][T11091] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 162.151436][T11085] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 162.184392][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 162.184430][ T29] audit: type=1400 audit(1788470852.140:1618): avc: denied { read } for pid=2969 comm="acpid" name="event2" dev="devtmpfs" ino=1165 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.184635][ T29] audit: type=1400 audit(1788470852.140:1619): avc: denied { open } for pid=2969 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=1165 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.184893][ T29] audit: type=1400 audit(1788470852.140:1620): avc: denied { ioctl } for pid=2969 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=1165 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.685233][ T29] audit: type=1400 audit(1788470852.640:1621): avc: denied { write } for pid=11101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.789802][T11127] FAULT_INJECTION: forcing a failure. [ 162.789802][T11127] name failslab, interval 1, probability 0, space 0, times 0 [ 162.789873][T11127] CPU: 1 UID: 0 PID: 11127 Comm: syz.2.1986 Not tainted syzkaller #0 PREEMPT(lazy) [ 162.789942][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.789961][T11127] Call Trace: [ 162.789972][T11127] [ 162.789984][T11127] __dump_stack+0x1d/0x30 [ 162.790020][T11127] dump_stack_lvl+0x95/0xd0 [ 162.790070][T11127] dump_stack+0x15/0x1b [ 162.790101][T11127] should_fail_ex+0x262/0x280 [ 162.790186][T11127] ? do_signalfd4+0xe5/0x320 [ 162.790212][T11127] should_failslab+0x8c/0xb0 [ 162.790251][T11127] __kmalloc_cache_noprof+0x7a/0x400 [ 162.790293][T11127] ? do_signalfd4+0xe5/0x320 [ 162.790322][T11127] do_signalfd4+0xe5/0x320 [ 162.790413][T11127] __x64_sys_signalfd+0xbe/0xf0 [ 162.790440][T11127] x64_sys_call+0x115b/0x2550 [ 162.790550][T11127] do_syscall_64+0x112/0x360 [ 162.790701][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.790811][T11127] RIP: 0033:0x7f85bf6be159 [ 162.790873][T11127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.790937][T11127] RSP: 002b:00007f85be117028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 162.791013][T11127] RAX: ffffffffffffffda RBX: 00007f85bf945fa0 RCX: 00007f85bf6be159 [ 162.791058][T11127] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: ffffffffffffffff [ 162.791125][T11127] RBP: 00007f85bf755024 R08: 0000000000000000 R09: 0000000000000000 [ 162.791147][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.791160][T11127] R13: 00007f85bf946038 R14: 00007f85bf945fa0 R15: 00007ffee4cb9c68 [ 162.791260][T11127] [ 163.013258][ T29] audit: type=1400 audit(1788470852.960:1622): avc: denied { write } for pid=11128 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.313908][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'. [ 163.623796][T11154] loop6: detected capacity change from 0 to 512 [ 163.630760][T11154] EXT4-fs: Ignoring removed i_version option [ 163.641018][T11154] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.671654][T11154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.671820][T11154] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.819175][ T4704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.842153][ T361] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.949063][ T361] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.234433][T11161] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.234556][T11161] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.234776][T11161] bridge_slave_0: entered allmulticast mode [ 164.257561][T11161] bridge_slave_0: entered promiscuous mode [ 164.265815][T11161] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.265917][T11161] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.266025][T11161] bridge_slave_1: entered allmulticast mode [ 164.289014][T11161] bridge_slave_1: entered promiscuous mode [ 164.313016][T11161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.324923][T11161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.351726][T11161] team0: Port device team_slave_0 added [ 164.360518][T11161] team0: Port device team_slave_1 added [ 164.382890][T11161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.382932][T11161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.383000][T11161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.419888][T11187] __nla_validate_parse: 1 callbacks suppressed [ 164.419906][T11187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2003'. [ 164.442735][ T361] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.463440][T11161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.463505][T11161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.463640][T11161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.555363][T11161] hsr_slave_0: entered promiscuous mode [ 164.555593][ T29] audit: type=1400 audit(1788470854.510:1623): avc: denied { create } for pid=11195 comm="syz.0.2006" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.585797][T11161] hsr_slave_1: entered promiscuous mode [ 164.596122][ T361] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.729355][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2008'. [ 164.729475][T11205] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.754035][ T361] bridge_slave_1: left allmulticast mode [ 164.754066][ T361] bridge_slave_1: left promiscuous mode [ 164.754213][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.755599][ T361] bridge_slave_0: left allmulticast mode [ 164.755632][ T361] bridge_slave_0: left promiscuous mode [ 164.755923][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.849703][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.861329][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.871361][ T361] bond0 (unregistering): Released all slaves [ 164.883084][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2008'. [ 164.883143][T11205] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.920827][ T361] hsr_slave_0: left promiscuous mode [ 164.926956][ T361] hsr_slave_1: left promiscuous mode [ 164.927957][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.928009][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.936887][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.936940][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.965101][ T361] veth1_macvtap: left promiscuous mode [ 164.965204][ T361] veth0_macvtap: left promiscuous mode [ 164.965347][ T361] veth1_vlan: left promiscuous mode [ 164.965519][ T361] veth0_vlan: left promiscuous mode [ 164.991806][ T29] audit: type=1326 audit(1788470854.940:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.2011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff962d3e159 code=0x7ffc0000 [ 164.991876][ T29] audit: type=1326 audit(1788470854.940:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.2011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff962d3e159 code=0x7ffc0000 [ 165.019158][ T29] audit: type=1326 audit(1788470854.940:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.2011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff962d3e159 code=0x7ffc0000 [ 165.019198][ T29] audit: type=1326 audit(1788470854.940:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.2011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff962d3e159 code=0x7ffc0000 [ 165.128322][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2012'. [ 165.169166][ T361] team0 (unregistering): Port device team_slave_1 removed [ 165.177667][ T361] team0 (unregistering): Port device team_slave_0 removed [ 165.214773][T11209] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2010'. [ 165.246464][T11213] team0 (unregistering): Port device team_slave_0 removed [ 165.263179][T11213] team0 (unregistering): Port device team_slave_1 removed [ 165.458938][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.471460][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.493147][T11233] loop5: detected capacity change from 0 to 256 [ 165.506471][T11233] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.522149][T11233] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.658617][ T3023] 8021q: adding VLAN 0 to HW filter on device eth17 [ 165.713783][T11253] loop2: detected capacity change from 0 to 512 [ 165.722142][T11253] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 165.738387][T11253] EXT4-fs (loop2): 1 truncate cleaned up [ 165.739337][T11253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.775055][T11161] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 165.777910][T11161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.781144][T11161] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 165.792397][T11161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.797273][T11161] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 165.810375][T11161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.817824][T11161] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 165.831770][T11161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.869839][ T9937] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.918774][T11161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.934942][T11161] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.948171][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.948230][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.971106][ T4770] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.971163][ T4770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.012431][T11269] loop2: detected capacity change from 0 to 4096 [ 166.027143][T11269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.121418][T11281] FAULT_INJECTION: forcing a failure. [ 166.121418][T11281] name failslab, interval 1, probability 0, space 0, times 0 [ 166.121477][T11281] CPU: 1 UID: 0 PID: 11281 Comm: syz.0.2028 Not tainted syzkaller #0 PREEMPT(lazy) [ 166.121532][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.121561][T11281] Call Trace: [ 166.121571][T11281] [ 166.121583][T11281] __dump_stack+0x1d/0x30 [ 166.121628][T11281] dump_stack_lvl+0x95/0xd0 [ 166.121659][T11281] dump_stack+0x15/0x1b [ 166.121757][T11281] should_fail_ex+0x262/0x280 [ 166.121789][T11281] ? percpu_ref_init+0x9c/0x250 [ 166.121831][T11281] should_failslab+0x8c/0xb0 [ 166.121934][T11281] __kmalloc_cache_noprof+0x7a/0x400 [ 166.121966][T11281] ? percpu_ref_init+0x33/0x250 [ 166.121999][T11281] ? percpu_ref_init+0x9c/0x250 [ 166.122110][T11281] ? __pfx_free_ioctx_users+0x10/0x10 [ 166.122153][T11281] percpu_ref_init+0x9c/0x250 [ 166.122202][T11281] ioctx_alloc+0x1a0/0x480 [ 166.122294][T11281] __se_sys_io_setup+0x6b/0x1b0 [ 166.122331][T11281] __x64_sys_io_setup+0x31/0x40 [ 166.122367][T11281] x64_sys_call+0x1a9f/0x2550 [ 166.122405][T11281] do_syscall_64+0x112/0x360 [ 166.122489][T11281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.122521][T11281] RIP: 0033:0x7f729203e159 [ 166.122622][T11281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.122643][T11281] RSP: 002b:00007f7290a97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 166.122666][T11281] RAX: ffffffffffffffda RBX: 00007f72922c5fa0 RCX: 00007f729203e159 [ 166.122692][T11281] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000008001 [ 166.122711][T11281] RBP: 00007f72920d5024 R08: 0000000000000000 R09: 0000000000000000 [ 166.122730][T11281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.122755][T11281] R13: 00007f72922c6038 R14: 00007f72922c5fa0 R15: 00007ffe9fe69348 [ 166.122819][T11281] [ 166.785453][T11161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.816563][T11327] loop6: detected capacity change from 0 to 128 [ 166.835242][T11327] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.848462][T11327] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.959449][ T4704] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.969717][T11334] syzkaller0: entered promiscuous mode [ 167.061004][ T9937] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.353448][T11161] veth0_vlan: entered promiscuous mode [ 167.384512][T11161] veth1_vlan: entered promiscuous mode [ 167.451136][T11161] veth0_macvtap: entered promiscuous mode [ 167.493007][T11161] veth1_macvtap: entered promiscuous mode [ 167.554883][T11161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.577048][T11161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.597258][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 167.597283][ T29] audit: type=1400 audit(1788470857.550:1690): avc: denied { write } for pid=11352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.614920][ T4770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.615600][ T4770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.615922][ T4752] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.616066][ T4752] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.674141][T11385] loop0: detected capacity change from 0 to 4096 [ 167.695835][T11385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.715170][T11391] loop5: detected capacity change from 0 to 128 [ 167.729501][ T29] audit: type=1400 audit(1788470857.680:1691): avc: denied { write } for pid=11383 comm="syz.0.2053" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.767779][T11391] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.781339][T11391] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.801224][ T29] audit: type=1400 audit(1788470857.750:1692): avc: denied { write } for pid=11390 comm="syz.5.2055" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.885188][ T29] audit: type=1400 audit(1788470857.840:1693): avc: denied { write } for pid=11395 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.953079][ T8603] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.154320][T11411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2058'. [ 168.300603][T11423] netlink: 'syz.6.2061': attribute type 6 has an invalid length. [ 168.331493][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2062'. [ 168.356017][T11426] netlink: 'syz.5.2062': attribute type 2 has an invalid length. [ 168.655232][ T29] audit: type=1400 audit(1788470858.610:1694): avc: denied { write } for pid=11409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.720059][T11451] ip_tables: iptables: counters copy to user failed while replacing table [ 168.750514][ T8174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.802805][ T29] audit: type=1400 audit(1788470858.750:1695): avc: denied { write } for pid=11454 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.899258][T11459] loop5: detected capacity change from 0 to 1024 [ 168.909555][ T29] audit: type=1326 audit(1788470858.860:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11461 comm="syz.6.2074" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6f00e159 code=0x7ffc0000 [ 168.909729][ T29] audit: type=1326 audit(1788470858.860:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11461 comm="syz.6.2074" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6f00e159 code=0x7ffc0000 [ 168.914020][ T29] audit: type=1326 audit(1788470858.860:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11461 comm="syz.6.2074" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2e6f00e159 code=0x7ffc0000 [ 168.919643][ T29] audit: type=1326 audit(1788470858.870:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11461 comm="syz.6.2074" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6f00e159 code=0x7ffc0000 [ 168.944184][T11459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.049276][T11468] loop2: detected capacity change from 0 to 512 [ 169.061586][T11468] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.076427][T11468] EXT4-fs (loop2): 1 truncate cleaned up [ 169.082848][T11472] loop0: detected capacity change from 0 to 256 [ 169.084855][T11468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.230228][ T8603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.315663][T11483] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2078'. [ 169.592573][T11502] loop3: detected capacity change from 0 to 1024 [ 169.622767][T11502] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 169.647948][T11502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.739023][T11161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.766094][T11523] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2090'. [ 169.845862][T11532] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2091'. [ 169.949543][T11532] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.949612][T11532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.117604][ T9937] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.616486][T11584] loop6: detected capacity change from 0 to 512 [ 170.630043][T11584] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 170.644105][T11584] EXT4-fs (loop6): 1 truncate cleaned up [ 170.644952][T11584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.691726][T11586] loop2: detected capacity change from 0 to 512 [ 170.711771][T11586] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 170.713336][T11586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c856e02c, mo2=0002] [ 170.714162][T11586] EXT4-fs (loop2): orphan cleanup on readonly fs [ 170.714214][T11586] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.2103: bad orphan inode 267 [ 170.714408][T11586] loop2: lost filesystem error report for type 5 error -117 [ 170.717549][T11586] EXT4-fs (loop2): Remounting filesystem read-only [ 170.721411][T11586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 170.729671][T11586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 170.916879][ T3023] 8021q: adding VLAN 0 to HW filter on device eth18 [ 171.037886][T11603] FAULT_INJECTION: forcing a failure. [ 171.037886][T11603] name failslab, interval 1, probability 0, space 0, times 0 [ 171.038027][T11603] CPU: 1 UID: 0 PID: 11603 Comm: syz.3.2111 Not tainted syzkaller #0 PREEMPT(lazy) [ 171.038062][T11603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.038078][T11603] Call Trace: [ 171.038087][T11603] [ 171.038097][T11603] __dump_stack+0x1d/0x30 [ 171.038129][T11603] dump_stack_lvl+0x95/0xd0 [ 171.038177][T11603] dump_stack+0x15/0x1b [ 171.038201][T11603] should_fail_ex+0x262/0x280 [ 171.038245][T11603] ? security_inode_alloc+0x37/0x100 [ 171.038272][T11603] should_failslab+0x8c/0xb0 [ 171.038306][T11603] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 171.038401][T11603] ? security_inode_alloc+0x37/0x100 [ 171.038430][T11603] security_inode_alloc+0x37/0x100 [ 171.038502][T11603] inode_init_always_gfp+0x495/0x4e0 [ 171.038543][T11603] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 171.038630][T11603] alloc_inode+0x58/0x170 [ 171.038681][T11603] new_inode+0x1d/0xe0 [ 171.038704][T11603] __debugfs_create_file+0x97/0x2b0 [ 171.038727][T11603] debugfs_create_file_full+0x3f/0x60 [ 171.038790][T11603] ? __pfx_br_dev_setup+0x10/0x10 [ 171.038835][T11603] ref_tracker_dir_debugfs+0x10e/0x220 [ 171.038884][T11603] alloc_netdev_mqs+0x1a9/0xa90 [ 171.038948][T11603] br_add_bridge+0x35/0xc0 [ 171.039074][T11603] br_ioctl_stub+0x3e3/0x8f0 [ 171.039112][T11603] ? ioctl_has_perm+0x273/0x2c0 [ 171.039239][T11603] ? __pfx_br_ioctl_stub+0x10/0x10 [ 171.039288][T11603] sock_ioctl+0x39a/0x610 [ 171.039391][T11603] ? __pfx_sock_ioctl+0x10/0x10 [ 171.039417][T11603] __se_sys_ioctl+0xce/0x140 [ 171.039457][T11603] __x64_sys_ioctl+0x43/0x50 [ 171.039486][T11603] x64_sys_call+0x239d/0x2550 [ 171.039557][T11603] do_syscall_64+0x112/0x360 [ 171.039592][T11603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.039615][T11603] RIP: 0033:0x7fdab427e159 [ 171.039638][T11603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.039663][T11603] RSP: 002b:00007fdab2cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.039690][T11603] RAX: ffffffffffffffda RBX: 00007fdab4505fa0 RCX: 00007fdab427e159 [ 171.039705][T11603] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004 [ 171.039719][T11603] RBP: 00007fdab4315024 R08: 0000000000000000 R09: 0000000000000000 [ 171.039732][T11603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.039749][T11603] R13: 00007fdab4506038 R14: 00007fdab4505fa0 R15: 00007ffde8f38288 [ 171.039770][T11603] [ 171.084418][T11603] debugfs: out of free dentries, can not create file 'netdev@ffff8881321f45e0' [ 171.274731][T11607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.274869][T11607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.327348][T11607] loop0: detected capacity change from 0 to 256 [ 171.364791][T11607] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.369142][T11607] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.525541][T11619] netlink: 'syz.2.2116': attribute type 19 has an invalid length. [ 171.525573][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'. [ 171.573875][T11619] netlink: 'syz.2.2116': attribute type 19 has an invalid length. [ 171.573908][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'. [ 171.616017][ T3023] 8021q: adding VLAN 0 to HW filter on device eth19 [ 171.675095][ T4704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.819210][T11653] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.088450][T11677] set_capacity_and_notify: 1 callbacks suppressed [ 172.088500][T11677] loop3: detected capacity change from 0 to 4096 [ 172.114343][T11677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.461165][T11706] FAULT_INJECTION: forcing a failure. [ 172.461165][T11706] name failslab, interval 1, probability 0, space 0, times 0 [ 172.461226][T11706] CPU: 0 UID: 0 PID: 11706 Comm: syz.2.2133 Not tainted syzkaller #0 PREEMPT(lazy) [ 172.461257][T11706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.461274][T11706] Call Trace: [ 172.461282][T11706] [ 172.461291][T11706] __dump_stack+0x1d/0x30 [ 172.461330][T11706] dump_stack_lvl+0x95/0xd0 [ 172.461412][T11706] dump_stack+0x15/0x1b [ 172.461441][T11706] should_fail_ex+0x262/0x280 [ 172.461479][T11706] should_failslab+0x8c/0xb0 [ 172.461519][T11706] __kvmalloc_node_noprof+0x168/0x5c0 [ 172.461637][T11706] ? io_alloc_cache_init+0x36/0xb0 [ 172.461664][T11706] ? percpu_ref_init+0x9c/0x250 [ 172.461738][T11706] ? io_alloc_cache_init+0x36/0xb0 [ 172.461768][T11706] io_alloc_cache_init+0x36/0xb0 [ 172.461842][T11706] io_ring_ctx_alloc+0x2a6/0x650 [ 172.461886][T11706] io_uring_create+0x4d/0x4f0 [ 172.461925][T11706] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 172.461969][T11706] __x64_sys_io_uring_setup+0x31/0x40 [ 172.462058][T11706] x64_sys_call+0x1fbf/0x2550 [ 172.462095][T11706] do_syscall_64+0x112/0x360 [ 172.462196][T11706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.462259][T11706] RIP: 0033:0x7f85bf6be159 [ 172.462319][T11706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.462346][T11706] RSP: 002b:00007f85be117028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 172.462373][T11706] RAX: ffffffffffffffda RBX: 00007f85bf945fa0 RCX: 00007f85bf6be159 [ 172.462391][T11706] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000f08 [ 172.462405][T11706] RBP: 00007f85bf755024 R08: 0000000000000000 R09: 0000000000000000 [ 172.462430][T11706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.462445][T11706] R13: 00007f85bf946038 R14: 00007f85bf945fa0 R15: 00007ffee4cb9c68 [ 172.462483][T11706] [ 172.679903][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 172.679928][ T29] audit: type=1400 audit(1788470862.630:1734): avc: denied { write } for pid=11690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.736449][ T29] audit: type=1400 audit(1788470862.690:1735): avc: denied { write } for pid=11711 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.967351][T11161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.389323][T11724] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2138'. [ 174.708579][T11636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.806590][T11764] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2152'. [ 174.836446][T11768] pim6reg1: entered promiscuous mode [ 174.836486][T11768] pim6reg1: entered allmulticast mode [ 174.948735][T11783] loop6: detected capacity change from 0 to 1024 [ 174.958496][T11783] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 174.984155][T11783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.026510][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2170'. [ 175.026617][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2170'. [ 175.026656][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2170'. [ 175.094825][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2170'. [ 175.094857][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2170'. [ 175.094894][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2170'. [ 175.134222][ T4704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.204991][ T29] audit: type=1400 audit(1788470865.150:1736): avc: denied { write } for pid=11767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.342815][ T29] audit: type=1400 audit(1788470865.290:1737): avc: denied { write } for pid=11810 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.422785][ T3023] 8021q: adding VLAN 0 to HW filter on device eth20 [ 175.557322][T11822] loop5: detected capacity change from 0 to 512 [ 175.592421][T11822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.592551][T11822] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.634551][ T29] audit: type=1400 audit(1788470865.590:1738): avc: denied { write } for pid=11821 comm="syz.5.2166" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.666835][ T29] audit: type=1400 audit(1788470865.620:1739): avc: denied { write } for pid=11821 comm="syz.5.2166" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.693973][ T29] audit: type=1400 audit(1788470865.650:1740): avc: denied { write } for pid=11821 comm="syz.5.2166" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.723034][ T29] audit: type=1400 audit(1788470865.680:1741): avc: denied { write } for pid=11821 comm="syz.5.2166" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.824370][T11841] netlink: 'syz.0.2174': attribute type 4 has an invalid length. [ 175.861537][ T8603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.890183][ T29] audit: type=1400 audit(1788470865.840:1742): avc: denied { write } for pid=11818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.972961][ T29] audit: type=1400 audit(1788470865.920:1743): avc: denied { write } for pid=11851 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.029753][T11850] IPVS: Scheduler module ip_vs_ not found [ 176.111817][T11861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2177'. [ 176.196380][T11867] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2182'. [ 176.302555][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2183'. [ 177.268289][T11915] loop0: detected capacity change from 0 to 128 [ 177.638827][T11915] syz.0.2185: attempt to access beyond end of device [ 177.638827][T11915] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 177.683969][ T4770] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.684059][ T4770] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.684149][ T4770] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.684261][ T4770] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.775336][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 177.775378][ T29] audit: type=1400 audit(1788470867.730:1750): avc: denied { write } for pid=11924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.808120][T11950] loop3: detected capacity change from 0 to 512 [ 177.832497][T11950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.832706][T11950] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.868259][ T29] audit: type=1400 audit(1788470867.820:1751): avc: denied { write } for pid=11947 comm="syz.3.2196" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.899297][ T29] audit: type=1400 audit(1788470867.850:1752): avc: denied { write } for pid=11947 comm="syz.3.2196" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.928967][ T29] audit: type=1400 audit(1788470867.880:1753): avc: denied { write } for pid=11947 comm="syz.3.2196" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.952409][ T29] audit: type=1400 audit(1788470867.880:1754): avc: denied { write } for pid=11947 comm="syz.3.2196" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.985467][ T29] audit: type=1400 audit(1788470867.940:1755): avc: denied { write } for pid=11957 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.206699][ T9] kernel write not supported for file /input/event0 (pid: 9 comm: kworker/0:0) [ 178.357986][ T29] audit: type=1400 audit(1788470868.310:1756): avc: denied { write } for pid=11964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.453152][ T29] audit: type=1400 audit(1788470868.400:1757): avc: denied { write } for pid=11977 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.611337][T11161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.722713][ T29] audit: type=1400 audit(1788470868.670:1758): avc: denied { write } for pid=11979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.889173][T12009] loop0: detected capacity change from 0 to 256 [ 178.897373][T12009] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.990090][T12009] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 178.990143][T12009] FAT-fs (loop0): Filesystem has been set read-only [ 178.990168][T12009] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 179.081260][ T29] audit: type=1400 audit(1788470869.030:1759): avc: denied { write } for pid=12011 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.285920][T12024] netlink: 'syz.5.2213': attribute type 1 has an invalid length. [ 179.329264][T12024] bond1: entered allmulticast mode [ 179.371783][ T4770] IPVS: starting estimator thread 0... [ 179.378574][T12024] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 179.378608][T12024] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 179.400014][T12024] bond1: (slave vti0): making interface the new active one [ 179.400098][T12024] vti0: entered allmulticast mode [ 179.408141][T12024] bond1: (slave vti0): Enslaving as an active interface with an up link [ 179.484688][T12037] IPVS: using max 2160 ests per chain, 108000 per kthread [ 179.911591][T12001] ================================================================== [ 179.911638][T12001] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 179.911682][T12001] [ 179.911689][T12001] write to 0xffffea0004cc6a58 of 8 bytes by task 11994 on cpu 1: [ 179.911708][T12001] __filemap_remove_folio+0x201/0x2e0 [ 179.911742][T12001] filemap_remove_folio+0x6d/0x1d0 [ 179.911776][T12001] truncate_inode_folio+0x42/0x50 [ 179.911804][T12001] shmem_undo_range+0x27f/0xb60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 179.911831][T12001] shmem_evict_inode+0x12d/0x580 [ 179.911862][T12001] evict+0x2a5/0x510 [ 179.911889][T12001] iput+0x430/0x5a0 [ 179.911907][T12001] dentry_unlink_inode+0x24a/0x260 [ 179.911936][T12001] dentry_kill+0x184/0x500 [ 179.911966][T12001] finish_dput+0x16/0x1d0 [ 179.911986][T12001] dput+0x48/0x50 [ 179.912004][T12001] __fput+0x43e/0x630 [ 179.912024][T12001] ____fput+0x1c/0x30 [ 179.912044][T12001] task_work_run+0x130/0x1a0 [ 179.912070][T12001] exit_to_user_mode_loop+0x1e4/0x8c0 [ 179.912104][T12001] do_syscall_64+0x212/0x360 [ 179.912131][T12001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.912155][T12001] [ 179.912161][T12001] read to 0xffffea0004cc6a58 of 8 bytes by task 12001 on cpu 0: [ 179.912179][T12001] folio_mapping+0xa1/0xe0 [ 179.912202][T12001] move_folios_to_lru+0x227/0x810 [ 179.912225][T12001] evict_folios+0x245c/0x2830 [ 179.912246][T12001] try_to_shrink_lruvec+0x8fd/0xb30 [ 179.912271][T12001] shrink_lruvec+0x252/0x1d40 [ 179.912301][T12001] shrink_node+0x67c/0x2000 [ 179.912327][T12001] do_try_to_free_pages+0x408/0xca0 [ 179.912360][T12001] try_to_free_mem_cgroup_pages+0x201/0x420 [ 179.912394][T12001] mem_cgroup_resize_max+0x13d/0x290 [ 179.912423][T12001] mem_cgroup_write+0x1ad/0x250 [ 179.912446][T12001] cgroup_file_write+0x197/0x350 [ 179.912477][T12001] kernfs_fop_write_iter+0x1d2/0x2e0 [ 179.912498][T12001] vfs_write+0x57f/0x9a0 [ 179.912526][T12001] ksys_write+0xdc/0x1a0 [ 179.912553][T12001] __x64_sys_write+0x40/0x50 [ 179.912582][T12001] x64_sys_call+0x154e/0x2550 [ 179.912610][T12001] do_syscall_64+0x112/0x360 [ 179.912638][T12001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.912662][T12001] [ 179.912666][T12001] value changed: 0xffff888109a15a60 -> 0x0000000000000000 [ 179.912680][T12001] [ 179.912684][T12001] Reported by Kernel Concurrency Sanitizer on: [ 179.912710][T12001] CPU: 0 UID: 0 PID: 12001 Comm: syz.3.2199 Not tainted syzkaller #0 PREEMPT(lazy) [ 179.912738][T12001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.912753][T12001] ================================================================== [ 180.785351][ T4764] bridge_slave_1: left allmulticast mode [ 180.785490][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.802345][ T4764] bridge_slave_0: left allmulticast mode [ 180.802496][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.862510][ T4764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.874319][ T4764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.884328][ T4764] bond0 (unregistering): Released all slaves [ 180.892473][ T4764] bond1 (unregistering): Released all slaves [ 180.941342][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.949234][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.991247][ T4764] team0 (unregistering): Port device team_slave_1 removed [ 180.998633][ T4764] team0 (unregistering): Port device team_slave_0 removed [ 181.228538][ T4764] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.228592][ T4764] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.268224][ T4764] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.268280][ T4764] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.317592][ T4764] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.317657][ T4764] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.367722][ T4764] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.367835][ T4764] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.428317][ T4764] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 181.428411][ T4764] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.487583][ T4764] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 181.487677][ T4764] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.527937][ T4764] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 181.528066][ T4764] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.587382][ T4764] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 181.587437][ T4764] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.689793][ T4764] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.689856][ T4764] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.698924][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 181.727028][ T4764] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.727160][ T4764] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.779927][ T4764] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.779986][ T4764] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.836938][ T4764] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.836999][ T4764] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.882851][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 181.908500][ T4764] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.908572][ T4764] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.946990][ T4764] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.947041][ T4764] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.017486][ T4764] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.017542][ T4764] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.066963][ T4764] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.067025][ T4764] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.079565][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 182.147922][ T4764] bridge_slave_1: left allmulticast mode [ 182.147968][ T4764] bridge_slave_1: left promiscuous mode [ 182.148395][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.160052][ T4764] bridge_slave_0: left allmulticast mode [ 182.160155][ T4764] bridge_slave_0: left promiscuous mode [ 182.160432][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.187569][ T4764] bridge_slave_1: left allmulticast mode [ 182.187654][ T4764] bridge_slave_1: left promiscuous mode [ 182.187802][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.208326][ T4764] bridge_slave_0: left allmulticast mode [ 182.208360][ T4764] bridge_slave_0: left promiscuous mode [ 182.208541][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.451004][ T4764] bridge_slave_1: left allmulticast mode [ 182.451041][ T4764] bridge_slave_1: left promiscuous mode [ 182.451142][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.463045][ T4764] bridge_slave_0: left allmulticast mode [ 182.463111][ T4764] bridge_slave_0: left promiscuous mode [ 182.463383][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.582953][ T4764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.593838][ T4764] bond0 (unregistering): Released all slaves [ 182.620960][ T4764] bond0 (unregistering): Released all slaves [ 182.627511][ T4764] bond1 (unregistering): Released all slaves [ 182.642920][ T4764] bond1 (unregistering): (slave vti0): Releasing backup interface [ 182.642964][ T4764] vti0 (unregistering): left allmulticast mode [ 182.686061][ T4764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.697522][ T4764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.707091][ T4764] bond0 (unregistering): Released all slaves [ 182.711212][ T4764] bond1 (unregistering): Released all slaves [ 182.738463][ T4764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.748444][ T4764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.757907][ T4764] bond0 (unregistering): Released all slaves [ 182.765816][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 182.827000][ T4764] hsr_slave_0: left promiscuous mode [ 182.827477][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.827503][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.828305][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.828348][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.841052][ T4764] hsr_slave_0: left promiscuous mode [ 182.849083][ T4764] hsr_slave_1: left promiscuous mode [ 182.858169][ T4764] hsr_slave_0: left promiscuous mode [ 182.863123][ T4764] hsr_slave_1: left promiscuous mode [ 182.864247][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.864299][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.869370][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.869454][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.885596][ T4764] hsr_slave_0: left promiscuous mode [ 182.895094][ T4764] hsr_slave_1: left promiscuous mode [ 182.896263][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.896381][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.903058][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.903163][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.951895][ T4764] veth1_macvtap: left promiscuous mode [ 182.951982][ T4764] veth0_macvtap: left promiscuous mode [ 182.954271][ T4764] veth1_vlan: left promiscuous mode [ 182.954379][ T4764] veth0_vlan: left promiscuous mode [ 182.973695][ T4764] veth1_vlan: left promiscuous mode [ 182.973747][ T4764] veth0_vlan: left promiscuous mode [ 182.979997][ T4764] veth1_vlan: left promiscuous mode [ 182.980125][ T4764] veth0_vlan: left promiscuous mode [ 182.993343][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 182.993387][ T29] audit: type=1400 audit(1788470872.950:1799): avc: denied { write } for pid=12241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.002965][ T4764] veth1_macvtap: left promiscuous mode [ 183.003047][ T4764] veth0_macvtap: left promiscuous mode [ 183.003250][ T4764] veth1_vlan: left promiscuous mode [ 183.003637][ T4764] veth0_vlan: left promiscuous mode [ 183.058685][ T29] audit: type=1400 audit(1788470873.010:1800): avc: denied { write } for pid=12252 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.303678][ T4764] team0 (unregistering): Port device team_slave_1 removed [ 183.311205][ T4764] team0 (unregistering): Port device team_slave_0 removed [ 183.368144][ T4764] team0 (unregistering): Port device team_slave_1 removed [ 183.375802][ T4764] team0 (unregistering): Port device team_slave_0 removed [ 183.407304][ T3023] 8021q: adding VLAN 0 to HW filter on device eth21 [ 183.491452][ T29] audit: type=1400 audit(1788470873.440:1801): avc: denied { write } for pid=12255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.524677][ T29] audit: type=1400 audit(1788470873.480:1802): avc: denied { write } for pid=12266 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.561857][ T3023] 8021q: adding VLAN 0 to HW filter on device eth22 [ 183.643258][ T29] audit: type=1400 audit(1788470873.590:1803): avc: denied { write } for pid=12269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.677247][ T29] audit: type=1400 audit(1788470873.630:1804): avc: denied { write } for pid=12280 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.706176][ T3023] 8021q: adding VLAN 0 to HW filter on device eth23 [ 183.787015][ T29] audit: type=1400 audit(1788470873.740:1805): avc: denied { write } for pid=12283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.820285][ T29] audit: type=1400 audit(1788470873.770:1806): avc: denied { write } for pid=12294 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.855334][ T3023] 8021q: adding VLAN 0 to HW filter on device eth24 [ 183.936161][ T29] audit: type=1400 audit(1788470873.890:1807): avc: denied { write } for pid=12297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.969626][ T29] audit: type=1400 audit(1788470873.920:1808): avc: denied { write } for pid=12308 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.998973][ T3023] 8021q: adding VLAN 0 to HW filter on device eth25 [ 184.112570][ T3023] 8021q: adding VLAN 0 to HW filter on device eth26 [ 184.224950][ T4764] IPVS: stop unused estimator thread 0... [ 184.231042][ T4764] IPVS: stop unused estimator thread 0... [ 184.237055][ T3023] 8021q: adding VLAN 0 to HW filter on device eth27 [ 184.244529][ T4764] IPVS: stop unused estimator thread 0... [ 184.362001][ T3023] 8021q: adding VLAN 0 to HW filter on device eth28 [ 184.477576][ T3023] 8021q: adding VLAN 0 to HW filter on device eth29 [ 184.590995][ T3023] 8021q: adding VLAN 0 to HW filter on device eth30 [ 184.704082][ T3023] 8021q: adding VLAN 0 to HW filter on device eth31 [ 184.816855][ T3023] 8021q: adding VLAN 0 to HW filter on device eth32 [ 184.931039][ T3023] 8021q: adding VLAN 0 to HW filter on device eth33 [ 185.041817][ T3023] 8021q: adding VLAN 0 to HW filter on device eth34 [ 185.152254][ T3023] 8021q: adding VLAN 0 to HW filter on device eth35 [ 185.266743][ T3023] 8021q: adding VLAN 0 to HW filter on device eth36