last executing test programs: 2m9.119690468s ago: executing program 1 (id=320): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000740)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000007c0)) 2m8.977083102s ago: executing program 1 (id=322): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000002c0)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rmdir(&(0x7f0000000040)='./bus\x00') 2m8.743785627s ago: executing program 1 (id=323): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x4008054) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="4005", @ANYRES16=r2], 0x87) 2m8.6135544s ago: executing program 1 (id=325): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x21081e, &(0x7f0000000600)={[{@block_validity}, {@nogrpid}, {@quota}]}, 0x1, 0x526, &(0x7f0000000a00)="$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") recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0, 0x0) truncate(&(0x7f0000000f40)='./file1\x00', 0x3000000) r1 = openat(r0, &(0x7f0000000f80)='./file1\x00', 0xaa402, 0x37) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x4c142, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) 2m7.723626881s ago: executing program 1 (id=332): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x101400, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000540)={0x21, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 'rr\x00', 0xfd3cff7c46f1f0dc, 0x5, 0x3d}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000180)={{0x3, 0x0, 0x3}, 0x3, 0x58b1, 0xffffffffffffffff}) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000440)="7796b096378ac187158dd5039a6861923e18d4c54c6a9d58d54afd39303399f250552b8aec6853f4056d8188b03ece9bf28f1db883d0cba60296a6fbc8620aacd0ab7b7a44960d3a286e03ebae5f6260de9ff080d41a22daa87514e1f61db202d44aa0d4c62559b395f668934093ef3c46629f8cf1599740dd3cedbd822322", 0x7f, r3) syz_clone(0x8800b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2m7.270548752s ago: executing program 1 (id=337): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="323030b078b2b8a4683030303030302032000096bcf27bb8be1a0fd6dd07498500060800090000000000000000000000007166e69f2092ff037298fe9c000000006bd62838c9b09a86188d6ebab5fe3d0900002fea2e33e90b522deeb8008bab682b65828d7fa7630a94d73fcd8e25859ed4d9482369ed6ef3d1b20648963368a977b07d8546", 0x86) 1m51.592987927s ago: executing program 32 (id=337): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="323030b078b2b8a4683030303030302032000096bcf27bb8be1a0fd6dd07498500060800090000000000000000000000007166e69f2092ff037298fe9c000000006bd62838c9b09a86188d6ebab5fe3d0900002fea2e33e90b522deeb8008bab682b65828d7fa7630a94d73fcd8e25859ed4d9482369ed6ef3d1b20648963368a977b07d8546", 0x86) 2.798407523s ago: executing program 2 (id=2104): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r4, &(0x7f0000000740)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000019740)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019800), 0x2400, 0x0) semget(0x0, 0x1, 0x101) sched_setaffinity(0x0, 0x8, &(0x7f0000019840)=0x2) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019900)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f0000032900)='smaps\x00') pread64(r6, &(0x7f0000032940)=""/102400, 0x19000, 0xffffffff8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 2.347646234s ago: executing program 2 (id=2107): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000880), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000008c0)=0xce0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000ffdbc6250100000008000100", @ANYRES32=r4, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 1.828453617s ago: executing program 5 (id=2109): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0), 0x0) 1.752934099s ago: executing program 5 (id=2110): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x1, 0x700, 0xf6, 0x3, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x67, 0x0, 0x40, 0x4, 0x0, @empty, @empty}}}}) 1.752470529s ago: executing program 2 (id=2112): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000900)='ns/ipc\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.749262608s ago: executing program 4 (id=2113): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x571, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f00000000c0)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd40}, 0x2141) 1.68597282s ago: executing program 4 (id=2118): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r4, &(0x7f0000000740)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000019740)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019800), 0x2400, 0x0) semget(0x0, 0x1, 0x101) sched_setaffinity(0x0, 0x8, &(0x7f0000019840)=0x2) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019900)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f0000032900)='smaps\x00') pread64(r6, &(0x7f0000032940)=""/102400, 0x19000, 0xffffffff8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 1.554465653s ago: executing program 0 (id=2119): syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)={0x24, r1, 0x1, 0x0, 0xfffffffe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}]]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x8014}, 0x44001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="5766b1b827f6003300", 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000017c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a010800000000000000a16a00000908000240000000030900010073797a310000000040000000030a01030000000000000000020000060900010073797a31001aca000900030073797a30000000001400048008000140000000030800024000000064140000001100010000000000000000000000000a232ba04e694a24248afc4887354f8a4a99533a3697"], 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001140), 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) listen(r3, 0x5) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) 1.554342373s ago: executing program 5 (id=2120): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0), 0x0) 1.554117643s ago: executing program 3 (id=2121): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7c101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0xd, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.553955973s ago: executing program 5 (id=2122): r0 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000001bc0)='GPL\x00', 0x5, 0x252, &(0x7f0000001c00)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x1c1b41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002040)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000020c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002100)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000002140)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2266"], 0x66) 1.452652806s ago: executing program 4 (id=2123): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000880), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000008c0)=0xce0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000ffdbc6250100000008000100", @ANYRES32=r4, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 1.404482287s ago: executing program 4 (id=2124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x7, &(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000001740)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000001780)=r1, 0x156) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x8, 0x0, 0x0, 0x0, 0x35a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x500, 0x2}, 0x1265, 0x0, 0xa52c, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0xdf, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001140)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x3, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000012c0), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0x13, 0x0, &(0x7f00000013c0)="b44f9f2663d7fa0660339f5aba11f37e1d52a0", 0x0, 0x600, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.26477289s ago: executing program 2 (id=2125): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r0 = perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2108, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x5, 0xb, &(0x7f0000001400)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.233806571s ago: executing program 0 (id=2126): socketpair(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2108, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x5, 0xb, &(0x7f0000001400)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.094518114s ago: executing program 3 (id=2127): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.094428234s ago: executing program 3 (id=2128): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x571, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f00000000c0)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd40}, 0x2141) 1.078885904s ago: executing program 3 (id=2129): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x35, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35020008df8e61740b7cf2d4e499d58654a4cf0fa0ce1f8300000000000000000000000000c700"}, 0xd8) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000007c0)=0x4, 0x5e) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x14, &(0x7f0000000840)=[{&(0x7f0000000880)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000008c0)=0xc, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001a40)={0x0, @remote}, &(0x7f0000001a80)=0xc) shutdown(r0, 0x1) 998.849476ms ago: executing program 3 (id=2130): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x2e, 0xb56cea99d7d0f667]}}, 0x0, 0x34, 0x0, 0x0, 0x7}, 0x28) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0xffffff6a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x0, &(0x7f0000000300)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x7) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000004c0)=[{{&(0x7f0000000500)={0xa, 0x4e20, 0x7fff, @mcast1, 0x56}, 0x1c, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x54) sendmmsg$unix(r5, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000600), 0x80) sendmsg$key(r6, &(0x7f0000000640)={0x500, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f00000007c0), 0x0, 0x0) sendfile(r1, r7, 0x0, 0x20000000002) sendto$inet6(0xffffffffffffffff, &(0x7f0000000740)="ead28c458dce", 0x6, 0x400, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 298.588433ms ago: executing program 4 (id=2131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d00)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x1f, 0xf, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1e032800008c71ef288563"], 0xffdd) 298.398823ms ago: executing program 5 (id=2132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)=r3) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 298.192793ms ago: executing program 4 (id=2133): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000080)=0x4a3, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000100), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000000180), 0x3fffdf2, 0x45833af92e4b39ff, 0x0) 298.084083ms ago: executing program 0 (id=2134): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000880), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000008c0)=0xce0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000ffdbc6250100000008000100", @ANYRES32=r4, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 290.604803ms ago: executing program 2 (id=2135): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000900)='ns/ipc\x00') perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 265.900043ms ago: executing program 0 (id=2136): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) 221.016595ms ago: executing program 5 (id=2137): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000240)=0x1007e, 0x11fb96e13838704f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0xf501, r0}, 0x38) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x7, r0}, 0x38) 220.330755ms ago: executing program 0 (id=2138): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x30}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x29}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000400000098"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc9}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6af}, 0x2000, 0x0, 0x0, 0x7, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000640)) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000006c0)={'wg2\x00', 0x400}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000940)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth1_to_team\x00', @multicast}) 122.119137ms ago: executing program 2 (id=2139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="230000000800000002130000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002cc0), &(0x7f0000002d00), 0x1103, r0}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002d40)={{r0, 0xffffffffffffffff}, &(0x7f0000002d80), &(0x7f0000002dc0)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002e40), &(0x7f0000002e80), 0x531c, r1}, 0x38) 87.613378ms ago: executing program 3 (id=2140): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0], &(0x7f0000000500)='GPL\x00', 0x4, 0x1002, &(0x7f0000000540)=""/4098}, 0x94) 0s ago: executing program 0 (id=2141): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 0000000000 r/w without journal. Quota mode: writeback. [ 74.264733][ T4391] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.589861][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.662608][ T4408] loop3: detected capacity change from 0 to 512 [ 74.740709][ T4411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 74.790907][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 74.790929][ T28] audit: type=1400 audit(1792575512.001:420): avc: denied { map } for pid=4405 comm="syz.0.272" path="socket:[7565]" dev="sockfs" ino=7565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.791009][ T28] audit: type=1400 audit(1792575512.001:421): avc: denied { read accept } for pid=4405 comm="syz.0.272" path="socket:[7565]" dev="sockfs" ino=7565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.914793][ T4408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.928383][ T4408] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.974396][ T28] audit: type=1400 audit(1792575512.181:422): avc: denied { write } for pid=4407 comm="syz.3.269" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.216644][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.705344][ T4423] loop3: detected capacity change from 0 to 512 [ 75.723990][ T4423] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 76.017301][ T28] audit: type=1400 audit(1792575513.231:423): avc: denied { append } for pid=4421 comm="syz.3.276" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.022431][ T28] audit: type=1400 audit(1792575513.231:424): avc: denied { map } for pid=4421 comm="syz.3.276" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.327676][ T4432] loop2: detected capacity change from 0 to 8192 [ 76.393045][ T4435] loop1: detected capacity change from 0 to 8192 [ 76.849209][ T4460] loop4: detected capacity change from 0 to 512 [ 76.862933][ T4460] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 76.862952][ T4460] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.862974][ T4460] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 77.337780][ T4462] loop3: detected capacity change from 0 to 512 [ 77.386666][ T4462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.386910][ T4462] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.433940][ T28] audit: type=1400 audit(1792575514.641:425): avc: denied { write } for pid=4461 comm="syz.3.288" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.458559][ T28] audit: type=1400 audit(1792575514.671:426): avc: denied { write } for pid=4461 comm="syz.3.288" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.527336][ T4460] loop4: detected capacity change from 0 to 512 [ 77.553019][ T4460] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.287: iget: bad extended attribute block 6 [ 77.553054][ T4460] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.553197][ T4460] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.287: couldn't read orphan inode 15 (err -117) [ 77.553257][ T4460] loop4: lost filesystem error report for type 5 error -117 [ 77.553953][ T4460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.746215][ T4474] loop1: detected capacity change from 0 to 128 [ 77.766739][ T4474] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.768482][ T4474] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.774276][ T28] audit: type=1400 audit(1792575514.981:427): avc: denied { write } for pid=4473 comm="syz.1.291" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.835932][ T28] audit: type=1400 audit(1792575515.051:428): avc: denied { unmount } for pid=4459 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.855564][ T4476] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.122259][ T4476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.203689][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.299736][ T4481] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 78.486750][ T4495] loop0: detected capacity change from 0 to 8192 [ 78.633488][ T28] audit: type=1400 audit(1792575515.781:429): avc: denied { write } for pid=4473 comm="syz.1.291" name="encrypted_dir" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 78.685024][ T4500] bridge0: port 3(dummy0) entered blocking state [ 78.685323][ T4500] bridge0: port 3(dummy0) entered disabled state [ 78.685885][ T4500] dummy0: entered allmulticast mode [ 78.687466][ T4500] dummy0: entered promiscuous mode [ 78.688151][ T4500] bridge0: port 3(dummy0) entered blocking state [ 78.688244][ T4500] bridge0: port 3(dummy0) entered forwarding state [ 78.767953][ T4495] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.198339][ T28] audit: type=1400 audit(1792575517.411:430): avc: denied { mount } for pid=4517 comm="syz.0.303" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 80.698252][ T4526] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 80.812127][ T4540] loop3: detected capacity change from 0 to 128 [ 80.816031][ T4540] FAT-fs (loop3): data area starts beyond volume (33 > 0) [ 80.816053][ T4540] FAT-fs (loop3): Can't find a valid FAT filesystem [ 80.867679][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.000584][ T4544] bridge0: port 3(dummy0) entered blocking state [ 81.000625][ T4544] bridge0: port 3(dummy0) entered disabled state [ 81.000934][ T4544] dummy0: entered allmulticast mode [ 81.001437][ T4544] dummy0: entered promiscuous mode [ 81.001777][ T4544] bridge0: port 3(dummy0) entered blocking state [ 81.001919][ T4544] bridge0: port 3(dummy0) entered forwarding state [ 82.023071][ T28] audit: type=1400 audit(1792575519.231:431): avc: denied { create } for pid=4551 comm="syz.1.313" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.095711][ T28] audit: type=1400 audit(1792575519.301:432): avc: denied { unlink } for pid=3302 comm="syz-executor" name="file0" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.104706][ T28] audit: type=1400 audit(1792575519.311:433): avc: denied { write } for pid=4553 comm="syz.3.319" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.157663][ T4558] FAULT_INJECTION: forcing a failure. [ 82.157663][ T4558] name failslab, interval 1, probability 0, space 0, times 0 [ 82.157700][ T4558] CPU: 0 UID: 0 PID: 4558 Comm: syz.1.320 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.157802][ T4558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.157820][ T4558] Call Trace: [ 82.157827][ T4558] [ 82.157834][ T4558] __dump_stack+0x1d/0x30 [ 82.157859][ T4558] dump_stack_lvl+0x95/0xd0 [ 82.157888][ T4558] dump_stack+0x15/0x1b [ 82.157918][ T4558] should_fail_ex+0x262/0x280 [ 82.158018][ T4558] ? security_file_alloc+0x32/0xf0 [ 82.158055][ T4558] should_failslab+0x8c/0xb0 [ 82.158154][ T4558] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 82.158249][ T4558] ? security_file_alloc+0x32/0xf0 [ 82.158271][ T4558] security_file_alloc+0x32/0xf0 [ 82.158353][ T4558] init_file+0x5b/0x1b0 [ 82.158376][ T4558] alloc_empty_file+0x85/0x1e0 [ 82.158437][ T4558] path_openat+0x50/0x11c0 [ 82.158497][ T4558] do_file_open+0x16c/0x290 [ 82.158642][ T4558] do_sys_openat2+0xa1/0x140 [ 82.158741][ T4558] __x64_sys_openat+0xf2/0x120 [ 82.158798][ T4558] x64_sys_call+0x1f72/0x2550 [ 82.158838][ T4558] do_syscall_64+0x112/0x360 [ 82.158877][ T4558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.158907][ T4558] RIP: 0033:0x7f8339dafd8e [ 82.158928][ T4558] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 82.159021][ T4558] RSP: 002b:00007f833883eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.159046][ T4558] RAX: ffffffffffffffda RBX: 00007f833883f6c0 RCX: 00007f8339dafd8e [ 82.159092][ T4558] RDX: 0000000000000002 RSI: 00007f833883ef90 RDI: ffffffffffffff9c [ 82.159173][ T4558] RBP: 00007f8339e86b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.159186][ T4558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.159198][ T4558] R13: 00007f833a076038 R14: 00007f833a075fa0 R15: 00007ffdf7902158 [ 82.159244][ T4558] [ 82.297667][ T28] audit: type=1326 audit(1792575519.511:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.1.322" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8339def559 code=0x7ffc0000 [ 82.299789][ T28] audit: type=1326 audit(1792575519.511:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.1.322" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8339def559 code=0x7ffc0000 [ 82.313224][ T28] audit: type=1326 audit(1792575519.511:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.1.322" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8339def559 code=0x7ffc0000 [ 82.313607][ T28] audit: type=1326 audit(1792575519.511:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.1.322" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8339def559 code=0x7ffc0000 [ 82.314327][ T28] audit: type=1326 audit(1792575519.511:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.1.322" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8339dee3c7 code=0x7ffc0000 [ 82.314728][ T28] audit: type=1326 audit(1792575519.511:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.1.322" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8339def559 code=0x7ffc0000 [ 82.536692][ T4572] loop2: detected capacity change from 0 to 128 [ 82.557342][ T4572] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.557537][ T4572] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.613640][ T4577] loop1: detected capacity change from 0 to 512 [ 82.657545][ T4577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.657629][ T4577] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.215729][ T4602] SELinux: ebitmap start bit (4294967295) is not a multiple of the map unit size (64) [ 83.215813][ T4602] SELinux: invalid class [ 83.217104][ T4602] SELinux: failed to load policy [ 83.538280][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.635555][ T4607] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.520334][ T4629] loop3: detected capacity change from 0 to 256 [ 84.546780][ T4629] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.559709][ T4630] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 84.559775][ T4630] FAT-fs (loop3): Filesystem has been set read-only [ 84.716408][ T4635] loop0: detected capacity change from 0 to 512 [ 84.733245][ T4635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.733314][ T4635] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.801713][ T4642] loop3: detected capacity change from 0 to 512 [ 84.826631][ T4642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.826701][ T4642] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.910615][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.092678][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.773565][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.874845][ T4667] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.892055][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 85.892071][ T28] audit: type=1400 audit(1792575523.101:459): avc: denied { write } for pid=4666 comm="syz.0.349" name="instances" dev="tracefs" ino=1351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.892174][ T28] audit: type=1400 audit(1792575523.101:460): avc: denied { add_name } for pid=4666 comm="syz.0.349" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.893084][ T28] audit: type=1400 audit(1792575523.101:461): avc: denied { create } for pid=4666 comm="syz.0.349" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 86.645025][ T4686] loop0: detected capacity change from 0 to 128 [ 86.654715][ T4686] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.654906][ T4686] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.667224][ T28] audit: type=1400 audit(1792575523.871:462): avc: denied { write } for pid=4685 comm="syz.0.355" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.508917][ T28] audit: type=1400 audit(1792575524.721:463): avc: denied { write } for pid=4685 comm="syz.0.355" name="encrypted_dir" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.540984][ T28] audit: type=1326 audit(1792575524.751:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.3.360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bf44f559 code=0x7ffc0000 [ 87.541206][ T28] audit: type=1326 audit(1792575524.751:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.3.360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bf44f559 code=0x7ffc0000 [ 87.541242][ T28] audit: type=1326 audit(1792575524.751:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.3.360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bf44f559 code=0x7ffc0000 [ 87.541341][ T28] audit: type=1326 audit(1792575524.751:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.3.360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8bf44f559 code=0x7ffc0000 [ 87.541378][ T28] audit: type=1326 audit(1792575524.751:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.3.360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bf44f559 code=0x7ffc0000 [ 87.671089][ T4708] loop3: detected capacity change from 0 to 8192 [ 87.719511][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.868659][ T4725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 88.617972][ T4738] loop2: detected capacity change from 0 to 128 [ 88.696754][ T4738] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.698313][ T4738] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.746703][ T4745] loop7: detected capacity change from 0 to 7 [ 88.746974][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.747014][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 88.747084][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.747114][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 88.747146][ T4745] loop7: unable to read partition table [ 88.747164][ T4745] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 88.812169][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.812215][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 88.813111][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.813159][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 88.813279][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.813338][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 88.813501][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.813536][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 88.813731][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.813758][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 88.948095][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.948128][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 88.948248][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.948301][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 88.948327][ T4745] loop7: unable to read partition table [ 89.962198][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.111554][ T4777] loop0: detected capacity change from 0 to 2048 [ 90.138612][ T4780] loop3: detected capacity change from 0 to 8192 [ 91.715134][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 91.715156][ T28] audit: type=1400 audit(1792575528.901:490): avc: denied { bind } for pid=4832 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.715183][ T28] audit: type=1400 audit(1792575528.901:491): avc: denied { listen } for pid=4832 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.715279][ T28] audit: type=1400 audit(1792575528.901:492): avc: denied { connect } for pid=4832 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.715305][ T28] audit: type=1400 audit(1792575528.901:493): avc: denied { write } for pid=4832 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.715361][ T28] audit: type=1400 audit(1792575528.901:494): avc: denied { accept } for pid=4832 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.715471][ T28] audit: type=1400 audit(1792575528.901:495): avc: denied { read } for pid=4832 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.750490][ T4864] loop2: detected capacity change from 0 to 8192 [ 92.819372][ T4873] FAULT_INJECTION: forcing a failure. [ 92.819372][ T4873] name failslab, interval 1, probability 0, space 0, times 0 [ 92.819441][ T4873] CPU: 0 UID: 0 PID: 4873 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(lazy) [ 92.819476][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.819494][ T4873] Call Trace: [ 92.819504][ T4873] [ 92.819515][ T4873] __dump_stack+0x1d/0x30 [ 92.819594][ T4873] dump_stack_lvl+0x95/0xd0 [ 92.819698][ T4873] dump_stack+0x15/0x1b [ 92.819718][ T4873] should_fail_ex+0x262/0x280 [ 92.819753][ T4873] ? security_file_alloc+0x32/0xf0 [ 92.819843][ T4873] should_failslab+0x8c/0xb0 [ 92.819889][ T4873] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 92.819964][ T4873] ? security_file_alloc+0x32/0xf0 [ 92.819991][ T4873] security_file_alloc+0x32/0xf0 [ 92.820013][ T4873] init_file+0x5b/0x1b0 [ 92.820044][ T4873] alloc_empty_file+0x85/0x1e0 [ 92.820134][ T4873] path_openat+0x50/0x11c0 [ 92.820224][ T4873] do_file_open+0x16c/0x290 [ 92.820283][ T4873] do_sys_openat2+0xa1/0x140 [ 92.820325][ T4873] __x64_sys_openat+0xf2/0x120 [ 92.820401][ T4873] x64_sys_call+0x1f72/0x2550 [ 92.820440][ T4873] do_syscall_64+0x112/0x360 [ 92.820477][ T4873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.820518][ T4873] RIP: 0033:0x7fb8bf44f559 [ 92.820534][ T4873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.820591][ T4873] RSP: 002b:00007fb8bde9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.820620][ T4873] RAX: ffffffffffffffda RBX: 00007fb8bf6d5fa0 RCX: 00007fb8bf44f559 [ 92.820655][ T4873] RDX: 0000000000002401 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 92.820675][ T4873] RBP: 00007fb8bf4e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 92.820752][ T4873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.820765][ T4873] R13: 00007fb8bf6d6038 R14: 00007fb8bf6d5fa0 R15: 00007ffe56067c68 [ 92.820789][ T4873] [ 93.008476][ T4875] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.039413][ T4875] bridge_slave_1 (unregistering): left allmulticast mode [ 93.039467][ T4875] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.156543][ T4879] xt_connbytes: Forcing CT accounting to be enabled [ 93.157076][ T28] audit: type=1400 audit(1792575530.371:496): avc: denied { bind } for pid=4878 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.157158][ T28] audit: type=1400 audit(1792575530.371:497): avc: denied { name_bind } for pid=4878 comm="syz.3.424" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 93.157292][ T28] audit: type=1400 audit(1792575530.371:498): avc: denied { node_bind } for pid=4878 comm="syz.3.424" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 93.157546][ T28] audit: type=1400 audit(1792575530.371:499): avc: denied { write } for pid=4878 comm="syz.3.424" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.458309][ T4941] Illegal XDP return value 4941 on prog (id 38) dev syz_tun, expect packet loss! [ 97.276413][ T4934] loop3: detected capacity change from 0 to 8192 [ 97.294850][ T4934] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.778505][ T4963] loop3: detected capacity change from 0 to 764 [ 98.895995][ T4980] netlink: 6 bytes leftover after parsing attributes in process `syz.2.462'. [ 99.910487][ T4998] netlink: 56 bytes leftover after parsing attributes in process `syz.0.470'. [ 99.996007][ T4980] bridge0: port 3(dummy0) entered disabled state [ 99.996116][ T4980] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.996282][ T4980] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.149781][ T4980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.165544][ T4980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.295141][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.295325][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.295418][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.295460][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.430733][ T4995] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.374976][ T28] audit: type=1400 audit(1792575538.571:500): avc: denied { bind } for pid=5041 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.375084][ T28] audit: type=1400 audit(1792575538.581:501): avc: denied { create } for pid=5041 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 101.658683][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.911638][ T5044] bridge_slave_0: left allmulticast mode [ 101.911666][ T5044] bridge_slave_0: left promiscuous mode [ 101.911797][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.952296][ T5044] team0: Port device bridge_slave_0 added [ 101.958894][ T38] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.032382][ T38] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.071115][ T5047] loop2: detected capacity change from 0 to 8192 [ 102.129506][ T38] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.162083][ T5064] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.191863][ T38] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.322854][ T5081] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5081 comm=syz.3.496 [ 102.355813][ T5083] syz.3.497 uses obsolete (PF_INET,SOCK_PACKET) [ 102.356427][ T28] audit: type=1400 audit(1792575539.571:502): avc: denied { bind } for pid=5082 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.409226][ T38] dummy0: left allmulticast mode [ 102.409282][ T38] dummy0: left promiscuous mode [ 102.409462][ T38] bridge0: port 3(dummy0) entered disabled state [ 102.410690][ T38] bridge_slave_1: left allmulticast mode [ 102.410716][ T38] bridge_slave_1: left promiscuous mode [ 102.410807][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.411527][ T38] bridge_slave_0: left allmulticast mode [ 102.411549][ T38] bridge_slave_0: left promiscuous mode [ 102.411694][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.539457][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.541368][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.543290][ T38] bond0 (unregistering): Released all slaves [ 102.574766][ T28] audit: type=1400 audit(1792575539.781:503): avc: denied { read } for pid=3023 comm="dhcpcd" name="n26" dev="tmpfs" ino=1890 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.597298][ T28] audit: type=1400 audit(1792575539.781:504): avc: denied { open } for pid=3023 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=1890 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.597333][ T28] audit: type=1400 audit(1792575539.791:505): avc: denied { getattr } for pid=3023 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=1890 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.619755][ T4995] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.619941][ T4995] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.620140][ T4995] bridge_slave_0: entered allmulticast mode [ 102.626853][ T4995] bridge_slave_0: entered promiscuous mode [ 102.651442][ T4995] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.651575][ T4995] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.651814][ T4995] bridge_slave_1: entered allmulticast mode [ 102.658563][ T4995] bridge_slave_1: entered promiscuous mode [ 102.741885][ T5098] loop3: detected capacity change from 0 to 512 [ 102.846679][ T4995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.867033][ T5099] ip6gre1: entered promiscuous mode [ 102.867057][ T5099] ip6gre1: entered allmulticast mode [ 102.902873][ T4995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.917978][ T38] hsr_slave_0: left promiscuous mode [ 102.919974][ T38] hsr_slave_1: left promiscuous mode [ 102.920460][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.920478][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.922589][ T28] audit: type=1400 audit(1792575540.131:506): avc: denied { write } for pid=5100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.922627][ T28] audit: type=1400 audit(1792575540.131:507): avc: denied { create } for pid=5100 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.923986][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.923999][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.924044][ T28] audit: type=1400 audit(1792575540.131:508): avc: denied { write } for pid=5100 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1925 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.924080][ T28] audit: type=1400 audit(1792575540.131:509): avc: denied { append } for pid=5100 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1925 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.975834][ T38] veth1_macvtap: left promiscuous mode [ 102.975908][ T38] veth0_macvtap: left promiscuous mode [ 102.976137][ T38] veth1_vlan: left promiscuous mode [ 102.976287][ T38] veth0_vlan: left promiscuous mode [ 103.153196][ T5134] netlink: 5 bytes leftover after parsing attributes in process `syz.3.513'. [ 103.178042][ T38] team0 (unregistering): Port device team_slave_1 removed [ 103.182349][ T38] team0 (unregistering): Port device team_slave_0 removed [ 103.296421][ T4995] team0: Port device team_slave_0 added [ 103.298245][ T4995] team0: Port device team_slave_1 added [ 103.320315][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 103.412881][ T4995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.412897][ T4995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.413275][ T4995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.423073][ T4995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.423120][ T4995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.423205][ T4995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.556585][ T4995] hsr_slave_0: entered promiscuous mode [ 103.568388][ T4995] hsr_slave_1: entered promiscuous mode [ 103.575542][ T4995] debugfs: 'hsr0' already exists in 'hsr' [ 103.575634][ T4995] Cannot create hsr debugfs directory [ 103.648872][ T5150] loop3: detected capacity change from 0 to 8192 [ 103.652365][ T5150] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.991334][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 104.033249][ T4995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.043055][ T4995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.055881][ T4995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.062646][ T4995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.090320][ T4995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.093934][ T4995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.094864][ T4995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.119802][ T4995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.141576][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 104.234078][ T5204] loop3: detected capacity change from 0 to 128 [ 104.240096][ T4995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.262802][ T4995] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.273278][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.273385][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.371782][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.371824][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.602379][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 104.739893][ T4995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.867320][ T5266] loop3: detected capacity change from 0 to 8192 [ 104.868178][ T5266] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.916448][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 105.087283][ T5288] FAULT_INJECTION: forcing a failure. [ 105.087283][ T5288] name failslab, interval 1, probability 0, space 0, times 0 [ 105.087384][ T5288] CPU: 0 UID: 0 PID: 5288 Comm: syz.3.544 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.087415][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.087432][ T5288] Call Trace: [ 105.087440][ T5288] [ 105.087450][ T5288] __dump_stack+0x1d/0x30 [ 105.087484][ T5288] dump_stack_lvl+0x95/0xd0 [ 105.087551][ T5288] dump_stack+0x15/0x1b [ 105.087646][ T5288] should_fail_ex+0x262/0x280 [ 105.087688][ T5288] ? prepare_creds+0x38/0x550 [ 105.087727][ T5288] should_failslab+0x8c/0xb0 [ 105.087792][ T5288] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 105.087902][ T5288] ? prepare_creds+0x38/0x550 [ 105.087955][ T5288] ? __se_sys_futex+0x2f6/0x370 [ 105.087997][ T5288] prepare_creds+0x38/0x550 [ 105.088064][ T5288] __sys_setuid+0x65/0x300 [ 105.088110][ T5288] __x64_sys_setuid+0x1e/0x30 [ 105.088150][ T5288] x64_sys_call+0x1e96/0x2550 [ 105.088197][ T5288] do_syscall_64+0x112/0x360 [ 105.088229][ T5288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.088253][ T5288] RIP: 0033:0x7fb8bf44f559 [ 105.088342][ T5288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.088361][ T5288] RSP: 002b:00007fb8bde9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 105.088382][ T5288] RAX: ffffffffffffffda RBX: 00007fb8bf6d5fa0 RCX: 00007fb8bf44f559 [ 105.088401][ T5288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 105.088418][ T5288] RBP: 00007fb8bf4e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 105.088434][ T5288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.088485][ T5288] R13: 00007fb8bf6d6038 R14: 00007fb8bf6d5fa0 R15: 00007ffe56067c68 [ 105.088510][ T5288] [ 105.284186][ T4995] veth0_vlan: entered promiscuous mode [ 105.295538][ T4995] veth1_vlan: entered promiscuous mode [ 105.354337][ T4995] veth0_macvtap: entered promiscuous mode [ 105.371153][ T4995] veth1_macvtap: entered promiscuous mode [ 105.389438][ T4995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.403379][ T4995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.435097][ T3774] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.435226][ T3774] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.435268][ T3774] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.435323][ T3774] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.651705][ T5320] loop5: detected capacity change from 0 to 8192 [ 106.674412][ T5320] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.862066][ T5357] loop2: detected capacity change from 0 to 256 [ 106.865274][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 106.865290][ T28] audit: type=1400 audit(1792575544.071:526): avc: denied { read } for pid=5354 comm="syz.3.564" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.865323][ T28] audit: type=1400 audit(1792575544.081:527): avc: denied { open } for pid=5354 comm="syz.3.564" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.076133][ T28] audit: type=1400 audit(1792575544.291:528): avc: denied { write } for pid=5378 comm="syz.4.574" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.076736][ T28] audit: type=1400 audit(1792575544.291:529): avc: denied { read } for pid=5378 comm="syz.4.574" path="socket:[9598]" dev="sockfs" ino=9598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.270431][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.582'. [ 108.277680][ T5404] bridge0: port 3(dummy0) entered blocking state [ 108.277766][ T5404] bridge0: port 3(dummy0) entered disabled state [ 108.277976][ T5404] dummy0: entered allmulticast mode [ 108.279183][ T5404] dummy0: entered promiscuous mode [ 108.279854][ T5404] bridge0: port 3(dummy0) entered blocking state [ 108.279937][ T5404] bridge0: port 3(dummy0) entered forwarding state [ 108.303118][ T28] audit: type=1400 audit(1792575545.511:530): avc: denied { ioctl } for pid=5403 comm="syz.2.583" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.465022][ T28] audit: type=1400 audit(1792575545.671:531): avc: denied { name_connect } for pid=5406 comm="syz.3.584" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 109.368256][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.372081][ T5445] bridge_slave_0: left allmulticast mode [ 109.372106][ T5445] bridge_slave_0: left promiscuous mode [ 109.372290][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.403924][ T5445] team0: Port device bridge_slave_0 added [ 109.441470][ T5451] ip_tables: iptables: counters copy to user failed while replacing table [ 109.702771][ T5459] loop3: detected capacity change from 0 to 8192 [ 110.240162][ T5450] rxe_eth0 speed is unknown, defaulting to 1000 [ 110.459231][ T5470] FAULT_INJECTION: forcing a failure. [ 110.459231][ T5470] name failslab, interval 1, probability 0, space 0, times 0 [ 110.459264][ T5470] CPU: 1 UID: 0 PID: 5470 Comm: syz.5.608 Not tainted syzkaller #0 PREEMPT(lazy) [ 110.459298][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.459315][ T5470] Call Trace: [ 110.459323][ T5470] [ 110.459333][ T5470] __dump_stack+0x1d/0x30 [ 110.459364][ T5470] dump_stack_lvl+0x95/0xd0 [ 110.459487][ T5470] dump_stack+0x15/0x1b [ 110.459538][ T5470] should_fail_ex+0x262/0x280 [ 110.459569][ T5470] ? alloc_empty_file+0x70/0x1e0 [ 110.459594][ T5470] should_failslab+0x8c/0xb0 [ 110.459637][ T5470] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 110.459698][ T5470] ? alloc_empty_file+0x70/0x1e0 [ 110.459728][ T5470] alloc_empty_file+0x70/0x1e0 [ 110.459758][ T5470] alloc_file_pseudo+0x92/0x120 [ 110.459796][ T5470] sock_alloc_file+0x9c/0x1e0 [ 110.459906][ T5470] __sys_socket+0x118/0x180 [ 110.459933][ T5470] __x64_sys_socket+0x3f/0x50 [ 110.459960][ T5470] x64_sys_call+0x246e/0x2550 [ 110.460080][ T5470] do_syscall_64+0x112/0x360 [ 110.460120][ T5470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.460143][ T5470] RIP: 0033:0x7fc52ba5f559 [ 110.460158][ T5470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.460202][ T5470] RSP: 002b:00007fc52a4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 110.460263][ T5470] RAX: ffffffffffffffda RBX: 00007fc52bce5fa0 RCX: 00007fc52ba5f559 [ 110.460281][ T5470] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 110.460294][ T5470] RBP: 00007fc52baf6b20 R08: 0000000000000000 R09: 0000000000000000 [ 110.460310][ T5470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.460327][ T5470] R13: 00007fc52bce6038 R14: 00007fc52bce5fa0 R15: 00007ffc2e3e9078 [ 110.460354][ T5470] [ 111.080671][ T28] audit: type=1400 audit(1792575548.291:532): avc: denied { write } for pid=5483 comm="syz.2.614" name="arp" dev="proc" ino=4026532750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 111.710539][ T28] audit: type=1400 audit(1792575548.921:533): avc: denied { create } for pid=5508 comm="syz.3.622" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.847609][ T5515] loop2: detected capacity change from 0 to 128 [ 111.876798][ T5515] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.877064][ T5515] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.878862][ T28] audit: type=1400 audit(1792575549.091:534): avc: denied { write } for pid=5514 comm="syz.2.626" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.878897][ T28] audit: type=1400 audit(1792575549.091:535): avc: denied { add_name } for pid=5514 comm="syz.2.626" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.131456][ T28] audit: type=1400 audit(1792575549.341:536): avc: denied { append } for pid=5527 comm="syz.3.628" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.235043][ T28] audit: type=1400 audit(1792575549.431:537): avc: denied { write } for pid=5514 comm="syz.2.626" name="encrypted_dir" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 112.291946][ T28] audit: type=1400 audit(1792575549.501:538): avc: denied { mount } for pid=5541 comm="syz.3.634" name="/" dev="ramfs" ino=9847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 113.164325][ T5566] xt_connbytes: Forcing CT accounting to be enabled [ 113.412623][ T5581] loop3: detected capacity change from 0 to 8192 [ 113.443628][ T5581] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.481630][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.704504][ T5607] FAULT_INJECTION: forcing a failure. [ 113.704504][ T5607] name failslab, interval 1, probability 0, space 0, times 0 [ 113.704572][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: syz.3.659 Not tainted syzkaller #0 PREEMPT(lazy) [ 113.704611][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.704624][ T5607] Call Trace: [ 113.704630][ T5607] [ 113.704637][ T5607] __dump_stack+0x1d/0x30 [ 113.704662][ T5607] dump_stack_lvl+0x95/0xd0 [ 113.704690][ T5607] dump_stack+0x15/0x1b [ 113.704758][ T5607] should_fail_ex+0x262/0x280 [ 113.704801][ T5607] should_failslab+0x8c/0xb0 [ 113.704867][ T5607] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 113.704913][ T5607] ? __d_alloc+0x34/0x320 [ 113.704947][ T5607] ? __d_alloc+0x34/0x320 [ 113.705054][ T5607] ? _raw_spin_lock+0x53/0xa0 [ 113.705088][ T5607] __d_alloc+0x34/0x320 [ 113.705151][ T5607] __d_alloc_parallel+0x4f/0xd80 [ 113.705197][ T5607] ? _raw_spin_unlock+0x9/0x30 [ 113.705232][ T5607] ? __d_add+0x17b/0x1a0 [ 113.705266][ T5607] ? avc_policy_seqno+0x15/0x30 [ 113.705316][ T5607] ? selinux_inode_permission+0x618/0x740 [ 113.705344][ T5607] ? __rcu_read_unlock+0x4e/0x70 [ 113.705507][ T5607] ? __d_lookup+0x30c/0x340 [ 113.705560][ T5607] d_alloc_parallel+0x1f/0x30 [ 113.705599][ T5607] __lookup_slow+0x51/0x200 [ 113.705706][ T5607] lookup_slow+0x42/0x60 [ 113.705744][ T5607] link_path_walk+0x919/0xdd0 [ 113.705803][ T5607] path_openat+0x142/0x11c0 [ 113.705874][ T5607] do_file_open+0x16c/0x290 [ 113.705919][ T5607] do_sys_openat2+0xa1/0x140 [ 113.705951][ T5607] __x64_sys_openat+0xf2/0x120 [ 113.706002][ T5607] x64_sys_call+0x1f72/0x2550 [ 113.706033][ T5607] do_syscall_64+0x112/0x360 [ 113.706073][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.706152][ T5607] RIP: 0033:0x7fb8bf44f559 [ 113.706169][ T5607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.706252][ T5607] RSP: 002b:00007fb8bde9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.706281][ T5607] RAX: ffffffffffffffda RBX: 00007fb8bf6d5fa0 RCX: 00007fb8bf44f559 [ 113.706299][ T5607] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 113.706312][ T5607] RBP: 00007fb8bf4e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 113.706325][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.706339][ T5607] R13: 00007fb8bf6d6038 R14: 00007fb8bf6d5fa0 R15: 00007ffe56067c68 [ 113.706440][ T5607] [ 114.167174][ T5639] FAULT_INJECTION: forcing a failure. [ 114.167174][ T5639] name fail_futex, interval 1, probability 0, space 0, times 1 [ 114.167207][ T5639] CPU: 1 UID: 0 PID: 5639 Comm: syz.0.672 Not tainted syzkaller #0 PREEMPT(lazy) [ 114.167291][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.167305][ T5639] Call Trace: [ 114.167313][ T5639] [ 114.167320][ T5639] __dump_stack+0x1d/0x30 [ 114.167348][ T5639] dump_stack_lvl+0x95/0xd0 [ 114.167403][ T5639] dump_stack+0x15/0x1b [ 114.167426][ T5639] should_fail_ex+0x262/0x280 [ 114.167462][ T5639] should_fail+0xb/0x20 [ 114.167544][ T5639] get_futex_key+0x12c/0xc40 [ 114.167577][ T5639] ? futex_unqueue+0xc5/0xf0 [ 114.167609][ T5639] ? __futex_wait+0x244/0x2a0 [ 114.167634][ T5639] futex_requeue+0x177/0x1450 [ 114.167684][ T5639] ? __pfx_futex_wake_mark+0x10/0x10 [ 114.167713][ T5639] ? futex_wait+0x18f/0x1c0 [ 114.167744][ T5639] do_futex+0x3bf/0x460 [ 114.167805][ T5639] __se_sys_futex+0x2f6/0x370 [ 114.167900][ T5639] ? xfd_validate_state+0x45/0xf0 [ 114.167997][ T5639] __x64_sys_futex+0x78/0x90 [ 114.168032][ T5639] x64_sys_call+0x22e2/0x2550 [ 114.168061][ T5639] do_syscall_64+0x112/0x360 [ 114.168092][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.168179][ T5639] RIP: 0033:0x7fb88f0cf559 [ 114.168265][ T5639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.168285][ T5639] RSP: 002b:00007fb88db1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.168306][ T5639] RAX: ffffffffffffffda RBX: 00007fb88f355fa0 RCX: 00007fb88f0cf559 [ 114.168321][ T5639] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 0000000000000000 [ 114.168334][ T5639] RBP: 00007fb88f166b20 R08: 0000000000000000 R09: 0000000000000001 [ 114.168391][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.168405][ T5639] R13: 00007fb88f356038 R14: 00007fb88f355fa0 R15: 00007ffcd927d5a8 [ 114.168426][ T5639] [ 114.331960][ T5655] ip_tables: iptables: counters copy to user failed while replacing table [ 114.679427][ T5673] loop0: detected capacity change from 0 to 256 [ 114.712607][ T28] audit: type=1400 audit(1792575551.921:539): avc: denied { allowed } for pid=5674 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 114.714779][ T28] audit: type=1400 audit(1792575551.921:540): avc: denied { name_bind } for pid=5676 comm="syz.0.689" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 114.992428][ T28] audit: type=1400 audit(1792575552.201:541): avc: denied { mount } for pid=5709 comm="syz.3.705" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.028571][ T28] audit: type=1400 audit(1792575552.241:542): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.100795][ T5722] FAULT_INJECTION: forcing a failure. [ 115.100795][ T5722] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.100834][ T5722] CPU: 1 UID: 0 PID: 5722 Comm: syz.5.710 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.100870][ T5722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.100933][ T5722] Call Trace: [ 115.100944][ T5722] [ 115.100955][ T5722] __dump_stack+0x1d/0x30 [ 115.101016][ T5722] dump_stack_lvl+0x95/0xd0 [ 115.101050][ T5722] dump_stack+0x15/0x1b [ 115.101098][ T5722] should_fail_ex+0x262/0x280 [ 115.101177][ T5722] should_fail+0xb/0x20 [ 115.101211][ T5722] should_fail_usercopy+0x1a/0x20 [ 115.101258][ T5722] _copy_from_user+0x1c/0xb0 [ 115.101363][ T5722] btf_new_fd+0x218/0x6a0 [ 115.101402][ T5722] bpf_btf_load+0x116/0x130 [ 115.101495][ T5722] __sys_bpf+0xbce/0xc30 [ 115.101541][ T5722] ? do_futex+0x2a0/0x460 [ 115.101624][ T5722] __x64_sys_bpf+0x69/0x80 [ 115.101662][ T5722] x64_sys_call+0xf26/0x2550 [ 115.101766][ T5722] do_syscall_64+0x112/0x360 [ 115.101833][ T5722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.101867][ T5722] RIP: 0033:0x7fc52ba5f559 [ 115.101891][ T5722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.101926][ T5722] RSP: 002b:00007fc52a4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.101958][ T5722] RAX: ffffffffffffffda RBX: 00007fc52bce5fa0 RCX: 00007fc52ba5f559 [ 115.102039][ T5722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 115.102059][ T5722] RBP: 00007fc52baf6b20 R08: 0000000000000000 R09: 0000000000000000 [ 115.102074][ T5722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.102088][ T5722] R13: 00007fc52bce6038 R14: 00007fc52bce5fa0 R15: 00007ffc2e3e9078 [ 115.102111][ T5722] [ 115.548293][ T28] audit: type=1400 audit(1792575552.761:543): avc: denied { write } for pid=5741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.751099][ T5770] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.504577][ T5793] FAULT_INJECTION: forcing a failure. [ 116.504577][ T5793] name failslab, interval 1, probability 0, space 0, times 0 [ 116.504614][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: syz.3.725 Not tainted syzkaller #0 PREEMPT(lazy) [ 116.504640][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.504721][ T5793] Call Trace: [ 116.504730][ T5793] [ 116.504741][ T5793] __dump_stack+0x1d/0x30 [ 116.504836][ T5793] dump_stack_lvl+0x95/0xd0 [ 116.504913][ T5793] dump_stack+0x15/0x1b [ 116.504935][ T5793] should_fail_ex+0x262/0x280 [ 116.504968][ T5793] should_failslab+0x8c/0xb0 [ 116.505046][ T5793] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 116.505093][ T5793] ? sock_alloc_inode+0x36/0xf0 [ 116.505126][ T5793] ? sock_alloc_inode+0x36/0xf0 [ 116.505172][ T5793] ? selinux_socket_create+0xfd/0x180 [ 116.505298][ T5793] ? __pfx_sock_alloc_inode+0x10/0x10 [ 116.505332][ T5793] sock_alloc_inode+0x36/0xf0 [ 116.505429][ T5793] alloc_inode+0x40/0x170 [ 116.505531][ T5793] __sock_create+0x121/0x580 [ 116.505555][ T5793] ? __se_sys_futex+0x2f6/0x370 [ 116.505600][ T5793] ? xfd_validate_state+0x45/0xf0 [ 116.505674][ T5793] __sys_socket+0xaf/0x180 [ 116.505702][ T5793] __x64_sys_socket+0x3f/0x50 [ 116.505730][ T5793] x64_sys_call+0x246e/0x2550 [ 116.505766][ T5793] do_syscall_64+0x112/0x360 [ 116.505798][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.505845][ T5793] RIP: 0033:0x7fb8bf44f559 [ 116.505863][ T5793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.505886][ T5793] RSP: 002b:00007fb8bde9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 116.505993][ T5793] RAX: ffffffffffffffda RBX: 00007fb8bf6d5fa0 RCX: 00007fb8bf44f559 [ 116.506073][ T5793] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 0000000000000002 [ 116.506086][ T5793] RBP: 00007fb8bf4e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 116.506103][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.506195][ T5793] R13: 00007fb8bf6d6038 R14: 00007fb8bf6d5fa0 R15: 00007ffe56067c68 [ 116.506220][ T5793] [ 116.510223][ T5793] socket: no more sockets [ 116.952455][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 116.952474][ T28] audit: type=1400 audit(1792575554.161:551): avc: denied { write } for pid=5814 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.018112][ T28] audit: type=1400 audit(1792575554.231:552): avc: denied { ioctl } for pid=5821 comm="syz.2.732" path="socket:[10176]" dev="sockfs" ino=10176 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.598641][ T5827] FAULT_INJECTION: forcing a failure. [ 117.598641][ T5827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.598680][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz.0.733 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.598714][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.598764][ T5827] Call Trace: [ 117.598773][ T5827] [ 117.598785][ T5827] __dump_stack+0x1d/0x30 [ 117.598818][ T5827] dump_stack_lvl+0x95/0xd0 [ 117.598849][ T5827] dump_stack+0x15/0x1b [ 117.598878][ T5827] should_fail_ex+0x262/0x280 [ 117.598924][ T5827] should_fail+0xb/0x20 [ 117.598960][ T5827] should_fail_usercopy+0x1a/0x20 [ 117.599001][ T5827] _copy_from_iter+0xcc/0xe70 [ 117.599044][ T5827] ? alloc_pages_mpol+0xdf/0x1d0 [ 117.599095][ T5827] copy_page_from_iter+0x15d/0x1f0 [ 117.599142][ T5827] tun_get_user+0x62a/0x28e0 [ 117.599209][ T5827] ? ref_tracker_alloc+0x1eb/0x2f0 [ 117.599250][ T5827] tun_chr_write_iter+0x15a/0x210 [ 117.599357][ T5827] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 117.599397][ T5827] vfs_write+0x57a/0x990 [ 117.599535][ T5827] ksys_write+0xdc/0x1a0 [ 117.599571][ T5827] __x64_sys_write+0x40/0x50 [ 117.599612][ T5827] x64_sys_call+0x154e/0x2550 [ 117.599653][ T5827] do_syscall_64+0x112/0x360 [ 117.599777][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.599808][ T5827] RIP: 0033:0x7fb88f08fd8e [ 117.599830][ T5827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.599854][ T5827] RSP: 002b:00007fb88db1efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.599875][ T5827] RAX: ffffffffffffffda RBX: 00007fb88db1f6c0 RCX: 00007fb88f08fd8e [ 117.599950][ T5827] RDX: 0000000000000046 RSI: 0000200000000200 RDI: 00000000000000c8 [ 117.599969][ T5827] RBP: 00007fb88f166b20 R08: 0000000000000000 R09: 0000000000000000 [ 117.599987][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.600004][ T5827] R13: 00007fb88f356038 R14: 00007fb88f355fa0 R15: 00007ffcd927d5a8 [ 117.600026][ T5827] [ 118.226471][ T28] audit: type=1400 audit(1792575555.441:553): avc: denied { write } for pid=5835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.298546][ T28] audit: type=1400 audit(1792575555.511:554): avc: denied { write } for pid=5859 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.397277][ T5868] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.397727][ T28] audit: type=1400 audit(1792575555.611:555): avc: denied { connect } for pid=5867 comm="syz.3.747" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.497589][ T5872] loop3: detected capacity change from 0 to 8192 [ 119.292505][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.293131][ T5902] bridge_slave_0: left allmulticast mode [ 119.293170][ T5902] bridge_slave_0: left promiscuous mode [ 119.293285][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.490034][ T5908] FAULT_INJECTION: forcing a failure. [ 119.490034][ T5908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.490068][ T5908] CPU: 0 UID: 0 PID: 5908 Comm: syz.5.759 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.490243][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.490262][ T5908] Call Trace: [ 119.490271][ T5908] [ 119.490281][ T5908] __dump_stack+0x1d/0x30 [ 119.490316][ T5908] dump_stack_lvl+0x95/0xd0 [ 119.490348][ T5908] dump_stack+0x15/0x1b [ 119.490438][ T5908] should_fail_ex+0x262/0x280 [ 119.490480][ T5908] should_fail+0xb/0x20 [ 119.490511][ T5908] should_fail_usercopy+0x1a/0x20 [ 119.490544][ T5908] _copy_to_user+0x20/0xa0 [ 119.490626][ T5908] __se_sys_newfstat+0x3dc/0x460 [ 119.490668][ T5908] __x64_sys_newfstat+0x31/0x40 [ 119.490744][ T5908] x64_sys_call+0x1b5f/0x2550 [ 119.490771][ T5908] do_syscall_64+0x112/0x360 [ 119.490830][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.490936][ T5908] RIP: 0033:0x7fc52ba5f559 [ 119.490964][ T5908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.490989][ T5908] RSP: 002b:00007fc52a4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 119.491011][ T5908] RAX: ffffffffffffffda RBX: 00007fc52bce5fa0 RCX: 00007fc52ba5f559 [ 119.491025][ T5908] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 119.491040][ T5908] RBP: 00007fc52baf6b20 R08: 0000000000000000 R09: 0000000000000000 [ 119.491122][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.491140][ T5908] R13: 00007fc52bce6038 R14: 00007fc52bce5fa0 R15: 00007ffc2e3e9078 [ 119.491167][ T5908] [ 120.018840][ T5912] loop3: detected capacity change from 0 to 8192 [ 120.132080][ T5927] loop2: detected capacity change from 0 to 128 [ 120.157026][ T5927] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.157470][ T5927] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.189712][ T28] audit: type=1400 audit(1792575557.411:556): avc: denied { write } for pid=5921 comm="syz.2.763" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.236894][ T5930] loop0: detected capacity change from 0 to 8192 [ 120.244279][ T5930] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.444367][ T28] audit: type=1400 audit(1792575557.651:557): avc: denied { write } for pid=5921 comm="syz.2.763" name="encrypted_dir" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 120.824829][ T5973] loop0: detected capacity change from 0 to 8192 [ 120.829984][ T28] audit: type=1400 audit(1792575558.041:558): avc: denied { getopt } for pid=5984 comm="syz.4.783" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.958959][ T5992] loop5: detected capacity change from 0 to 8192 [ 121.045694][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.080765][ T6009] FAULT_INJECTION: forcing a failure. [ 121.080765][ T6009] name failslab, interval 1, probability 0, space 0, times 0 [ 121.080881][ T6009] CPU: 0 UID: 0 PID: 6009 Comm: syz.2.789 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.080966][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.080984][ T6009] Call Trace: [ 121.080993][ T6009] [ 121.081004][ T6009] __dump_stack+0x1d/0x30 [ 121.081031][ T6009] dump_stack_lvl+0x95/0xd0 [ 121.081053][ T6009] dump_stack+0x15/0x1b [ 121.081107][ T6009] should_fail_ex+0x262/0x280 [ 121.081149][ T6009] ? radix_tree_node_alloc+0xa0/0x200 [ 121.081183][ T6009] should_failslab+0x8c/0xb0 [ 121.081245][ T6009] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 121.081349][ T6009] ? __rcu_read_unlock+0x4e/0x70 [ 121.081383][ T6009] ? radix_tree_node_alloc+0xa0/0x200 [ 121.081415][ T6009] ? pcpu_memcg_post_alloc_hook+0x113/0x190 [ 121.081447][ T6009] radix_tree_node_alloc+0xa0/0x200 [ 121.081501][ T6009] radix_tree_extend+0xb9/0x350 [ 121.081541][ T6009] idr_get_free+0x132/0x560 [ 121.081572][ T6009] idr_alloc_u32+0xe9/0x1a0 [ 121.081625][ T6009] idr_alloc_cyclic+0x7b/0x140 [ 121.081736][ T6009] map_create+0x332/0xfe0 [ 121.081790][ T6009] __sys_bpf+0x99a/0xc30 [ 121.081862][ T6009] ? do_futex+0x2a0/0x460 [ 121.081916][ T6009] __x64_sys_bpf+0x69/0x80 [ 121.081951][ T6009] x64_sys_call+0xf26/0x2550 [ 121.081981][ T6009] do_syscall_64+0x112/0x360 [ 121.082025][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.082072][ T6009] RIP: 0033:0x7fb67710f559 [ 121.082091][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.082110][ T6009] RSP: 002b:00007fb675b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.082219][ T6009] RAX: ffffffffffffffda RBX: 00007fb677395fa0 RCX: 00007fb67710f559 [ 121.082305][ T6009] RDX: 0000000000000048 RSI: 0000200000007380 RDI: 0000000000000000 [ 121.082319][ T6009] RBP: 00007fb6771a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 121.082332][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.082344][ T6009] R13: 00007fb677396038 R14: 00007fb677395fa0 R15: 00007ffe39e2b308 [ 121.082372][ T6009] [ 121.578015][ T6033] FAULT_INJECTION: forcing a failure. [ 121.578015][ T6033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.578127][ T6033] CPU: 1 UID: 0 PID: 6033 Comm: syz.3.798 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.578160][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.578177][ T6033] Call Trace: [ 121.578185][ T6033] [ 121.578194][ T6033] __dump_stack+0x1d/0x30 [ 121.578219][ T6033] dump_stack_lvl+0x95/0xd0 [ 121.578246][ T6033] dump_stack+0x15/0x1b [ 121.578271][ T6033] should_fail_ex+0x262/0x280 [ 121.578340][ T6033] should_fail+0xb/0x20 [ 121.578366][ T6033] should_fail_usercopy+0x1a/0x20 [ 121.578457][ T6033] _copy_to_user+0x20/0xa0 [ 121.578490][ T6033] bpf_verifier_vlog+0x2c5/0x5a0 [ 121.578516][ T6033] btf_verifier_log+0xb2/0xf0 [ 121.578621][ T6033] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 121.578651][ T6033] btf_parse_type_sec+0x6c/0x1520 [ 121.578674][ T6033] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 121.578757][ T6033] ? btf_parse_hdr+0x43a/0x440 [ 121.578778][ T6033] ? btf_parse_str_sec+0x1ae/0x1b0 [ 121.578800][ T6033] btf_new_fd+0x2ec/0x6a0 [ 121.578832][ T6033] bpf_btf_load+0x116/0x130 [ 121.578939][ T6033] __sys_bpf+0xbce/0xc30 [ 121.578977][ T6033] ? do_futex+0x2a0/0x460 [ 121.579101][ T6033] __x64_sys_bpf+0x69/0x80 [ 121.579128][ T6033] x64_sys_call+0xf26/0x2550 [ 121.579161][ T6033] do_syscall_64+0x112/0x360 [ 121.579201][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.579304][ T6033] RIP: 0033:0x7fb8bf44f559 [ 121.579321][ T6033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.579339][ T6033] RSP: 002b:00007fb8bde9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.579425][ T6033] RAX: ffffffffffffffda RBX: 00007fb8bf6d5fa0 RCX: 00007fb8bf44f559 [ 121.579440][ T6033] RDX: 0000000000000028 RSI: 0000200000000400 RDI: 0000000000000012 [ 121.579453][ T6033] RBP: 00007fb8bf4e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 121.579466][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.579519][ T6033] R13: 00007fb8bf6d6038 R14: 00007fb8bf6d5fa0 R15: 00007ffe56067c68 [ 121.579556][ T6033] [ 121.925469][ T6036] loop3: detected capacity change from 0 to 128 [ 121.939559][ T6036] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.942182][ T6036] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.985398][ T28] audit: type=1400 audit(1792575559.201:559): avc: denied { write } for pid=6035 comm="syz.3.799" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.381132][ T6046] loop0: detected capacity change from 0 to 128 [ 122.383254][ T6046] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 122.914194][ T28] audit: type=1400 audit(1792575559.751:560): avc: denied { write } for pid=6035 comm="syz.3.799" name="encrypted_dir" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 123.012170][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.173359][ T6058] team0: Port device bridge_slave_0 removed [ 123.375520][ T6073] ip_tables: iptables: counters copy to user failed while replacing table [ 123.382449][ T6073] raw_sendmsg: syz.3.813 forgot to set AF_INET. Fix it! [ 124.370228][ T6121] Cannot find set identified by id 0 to match [ 124.505866][ T28] audit: type=1400 audit(1792575561.721:561): avc: denied { name_bind } for pid=6135 comm="syz.0.836" src=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 124.535994][ T28] audit: type=1400 audit(1792575561.751:562): avc: denied { read } for pid=6135 comm="syz.0.836" path="socket:[12586]" dev="sockfs" ino=12586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.937533][ T6211] rxe_eth0 speed is unknown, defaulting to 1000 [ 127.018476][ T6239] netlink: 64 bytes leftover after parsing attributes in process `syz.5.878'. [ 127.276293][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.282656][ T6264] bridge_slave_0: left allmulticast mode [ 127.282686][ T6264] bridge_slave_0: left promiscuous mode [ 127.282820][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.313223][ T6263] EXT4-fs: test_dummy_encryption option not supported [ 127.313602][ T6263] EXT4-fs: test_dummy_encryption option not supported [ 128.173582][ T6295] dummy0: left allmulticast mode [ 128.173646][ T6295] dummy0: left promiscuous mode [ 128.173770][ T6295] bridge0: port 3(dummy0) entered disabled state [ 128.198398][ T28] audit: type=1400 audit(1792575565.391:563): avc: denied { create } for pid=6298 comm="syz.0.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 128.253341][ T6295] bridge_slave_1: left allmulticast mode [ 128.294654][ T6295] bridge_slave_1: left promiscuous mode [ 128.294800][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.342826][ T6295] bond0: (slave bond_slave_0): Releasing backup interface [ 128.373728][ T6295] bond0: (slave bond_slave_1): Releasing backup interface [ 128.410216][ T6295] team0: Failed to send options change via netlink (err -105) [ 128.410379][ T6295] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 128.427006][ T6295] team0: Port device team_slave_0 removed [ 128.468300][ T6295] team0: Failed to send options change via netlink (err -105) [ 128.468964][ T6295] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 128.470376][ T6295] team0: Port device team_slave_1 removed [ 128.479895][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.480012][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.429033][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.429082][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.599717][ T6295] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.600037][ T6297] bridge_slave_0: left allmulticast mode [ 129.600061][ T6297] bridge_slave_0: left promiscuous mode [ 129.600198][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.607515][ T6300] team0: Mode changed to "activebackup" [ 130.888179][ T6350] bridge0: port 1(dummy0) entered blocking state [ 130.888210][ T6350] bridge0: port 1(dummy0) entered disabled state [ 130.888834][ T6350] dummy0: entered allmulticast mode [ 130.890796][ T6350] dummy0: entered promiscuous mode [ 130.891299][ T6350] bridge0: port 1(dummy0) entered blocking state [ 130.891408][ T6350] bridge0: port 1(dummy0) entered forwarding state [ 131.980975][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.928'. [ 132.566958][ T28] audit: type=1400 audit(1792575569.771:564): avc: denied { read write } for pid=6379 comm="syz.5.933" name="md0" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.567749][ T28] audit: type=1400 audit(1792575569.771:565): avc: denied { open } for pid=6379 comm="syz.5.933" path="/64/md0" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.701305][ T6380] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.701325][ T6380] block device autoloading is deprecated and will be removed. [ 133.422527][ T6397] netlink: 72 bytes leftover after parsing attributes in process `syz.2.937'. [ 133.631387][ T6407] ip_tables: iptables: counters copy to user failed while replacing table [ 133.798690][ T6422] netlink: 64 bytes leftover after parsing attributes in process `syz.4.949'. [ 133.838671][ T6425] loop5: detected capacity change from 0 to 512 [ 133.858135][ T6425] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.979915][ T6441] x_tables: ip_tables: udp match: only valid for protocol 17 [ 134.081490][ T6450] netlink: 64 bytes leftover after parsing attributes in process `syz.2.962'. [ 134.196312][ T6468] syz.3.970 (6468) used greatest stack depth: 10056 bytes left [ 134.212984][ T28] audit: type=1400 audit(1792575571.421:566): avc: denied { getopt } for pid=6472 comm="syz.3.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.524824][ T28] audit: type=1400 audit(1792575571.731:567): avc: denied { append } for pid=6482 comm="syz.2.974" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 134.877101][ T6494] netlink: 64 bytes leftover after parsing attributes in process `syz.3.979'. [ 134.958783][ T28] audit: type=1326 audit(1792575572.171:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.5.967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52ba5f559 code=0x7fc00000 [ 135.113405][ T6510] xt_connbytes: Forcing CT accounting to be enabled [ 135.488245][ T6525] netlink: 64 bytes leftover after parsing attributes in process `syz.4.992'. [ 135.520834][ T6526] IPv6: sit1: Disabled Multicast RS [ 135.730552][ T6539] loop2: detected capacity change from 0 to 128 [ 135.868707][ T6552] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1006'. [ 135.885973][ T6540] loop5: detected capacity change from 0 to 8192 [ 136.000334][ T6560] FAULT_INJECTION: forcing a failure. [ 136.000334][ T6560] name failslab, interval 1, probability 0, space 0, times 0 [ 136.000406][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz.0.1009 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.000444][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.000462][ T6560] Call Trace: [ 136.000470][ T6560] [ 136.000479][ T6560] __dump_stack+0x1d/0x30 [ 136.000516][ T6560] dump_stack_lvl+0x95/0xd0 [ 136.000614][ T6560] dump_stack+0x15/0x1b [ 136.000639][ T6560] should_fail_ex+0x262/0x280 [ 136.000697][ T6560] ? sget_fc+0x991/0xfa0 [ 136.000797][ T6560] should_failslab+0x8c/0xb0 [ 136.000845][ T6560] __kmalloc_cache_noprof+0x5d/0x3e0 [ 136.000870][ T6560] ? mutex_unlock+0x4e/0x90 [ 136.000906][ T6560] ? sget_fc+0x991/0xfa0 [ 136.000953][ T6560] sget_fc+0x991/0xfa0 [ 136.001005][ T6560] ? __pfx_kernfs_set_super+0x10/0x10 [ 136.001111][ T6560] ? __pfx_kernfs_test_super+0x10/0x10 [ 136.001144][ T6560] ? __kmalloc_cache_noprof+0x17e/0x3e0 [ 136.001175][ T6560] ? kernfs_get_tree+0x56/0x4a0 [ 136.001210][ T6560] kernfs_get_tree+0xdf/0x4a0 [ 136.001293][ T6560] ? security_capable+0x7b/0x90 [ 136.001357][ T6560] vfs_get_tree+0x57/0x1d0 [ 136.001455][ T6560] do_new_mount+0x288/0x730 [ 136.001480][ T6560] ? security_capable+0x7b/0x90 [ 136.001563][ T6560] path_mount+0x4ad/0xb90 [ 136.001590][ T6560] __se_sys_mount+0x28c/0x2e0 [ 136.001642][ T6560] __x64_sys_mount+0x67/0x80 [ 136.001678][ T6560] x64_sys_call+0xc3b/0x2550 [ 136.001779][ T6560] do_syscall_64+0x112/0x360 [ 136.001833][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.001869][ T6560] RIP: 0033:0x7fb88f0cf559 [ 136.001892][ T6560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.001991][ T6560] RSP: 002b:00007fb88db1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.002032][ T6560] RAX: ffffffffffffffda RBX: 00007fb88f355fa0 RCX: 00007fb88f0cf559 [ 136.002052][ T6560] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000000000000000 [ 136.002073][ T6560] RBP: 00007fb88f166b20 R08: 0000000000000000 R09: 0000000000000000 [ 136.002094][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.002152][ T6560] R13: 00007fb88f356038 R14: 00007fb88f355fa0 R15: 00007ffcd927d5a8 [ 136.002184][ T6560] [ 136.287981][ T6566] loop2: detected capacity change from 0 to 128 [ 136.832051][ T6574] loop0: detected capacity change from 0 to 8192 [ 136.932077][ T6587] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1019'. [ 137.556223][ T6605] loop3: detected capacity change from 0 to 8192 [ 137.656706][ T6613] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1030'. [ 137.870669][ T6626] FAULT_INJECTION: forcing a failure. [ 137.870669][ T6626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.870699][ T6626] CPU: 1 UID: 0 PID: 6626 Comm: syz.0.1035 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.870770][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.870788][ T6626] Call Trace: [ 137.870797][ T6626] [ 137.870808][ T6626] __dump_stack+0x1d/0x30 [ 137.870882][ T6626] dump_stack_lvl+0x95/0xd0 [ 137.870920][ T6626] dump_stack+0x15/0x1b [ 137.870950][ T6626] should_fail_ex+0x262/0x280 [ 137.870992][ T6626] should_fail+0xb/0x20 [ 137.871028][ T6626] should_fail_usercopy+0x1a/0x20 [ 137.871146][ T6626] _copy_from_user+0x1c/0xb0 [ 137.871238][ T6626] generic_map_update_batch+0x460/0x6f0 [ 137.871265][ T6626] ? __pfx_generic_map_update_batch+0x10/0x10 [ 137.871288][ T6626] bpf_map_do_batch+0x25b/0x380 [ 137.871335][ T6626] __sys_bpf+0xa8e/0xc30 [ 137.871371][ T6626] ? do_futex+0x3a0/0x460 [ 137.871521][ T6626] __x64_sys_bpf+0x69/0x80 [ 137.871549][ T6626] x64_sys_call+0xf26/0x2550 [ 137.871575][ T6626] do_syscall_64+0x112/0x360 [ 137.871607][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.871655][ T6626] RIP: 0033:0x7fb88f0cf559 [ 137.871675][ T6626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.871729][ T6626] RSP: 002b:00007fb88db1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.871752][ T6626] RAX: ffffffffffffffda RBX: 00007fb88f355fa0 RCX: 00007fb88f0cf559 [ 137.871772][ T6626] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 137.871787][ T6626] RBP: 00007fb88f166b20 R08: 0000000000000000 R09: 0000000000000000 [ 137.871800][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.871813][ T6626] R13: 00007fb88f356038 R14: 00007fb88f355fa0 R15: 00007ffcd927d5a8 [ 137.871886][ T6626] [ 138.198661][ T6633] capability: warning: `syz.4.1038' uses 32-bit capabilities (legacy support in use) [ 138.303370][ T6639] loop5: detected capacity change from 0 to 8192 [ 138.674007][ T6657] FAULT_INJECTION: forcing a failure. [ 138.674007][ T6657] name failslab, interval 1, probability 0, space 0, times 0 [ 138.674049][ T6657] CPU: 1 UID: 0 PID: 6657 Comm: syz.3.1044 Not tainted syzkaller #0 PREEMPT(lazy) [ 138.674098][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.674111][ T6657] Call Trace: [ 138.674118][ T6657] [ 138.674126][ T6657] __dump_stack+0x1d/0x30 [ 138.674154][ T6657] dump_stack_lvl+0x95/0xd0 [ 138.674242][ T6657] dump_stack+0x15/0x1b [ 138.674272][ T6657] should_fail_ex+0x262/0x280 [ 138.674306][ T6657] ? security_inode_alloc+0x37/0x100 [ 138.674384][ T6657] should_failslab+0x8c/0xb0 [ 138.674429][ T6657] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 138.674462][ T6657] ? security_inode_alloc+0x37/0x100 [ 138.674570][ T6657] security_inode_alloc+0x37/0x100 [ 138.674612][ T6657] inode_init_always_gfp+0x495/0x4e0 [ 138.674643][ T6657] ? __pfx_aio_alloc_inode+0x10/0x10 [ 138.674680][ T6657] alloc_inode+0x58/0x170 [ 138.674780][ T6657] alloc_anon_inode+0x1e/0x170 [ 138.674863][ T6657] aio_setup_ring+0x8b/0x710 [ 138.674890][ T6657] ? ioctx_alloc+0x273/0x480 [ 138.674913][ T6657] ioctx_alloc+0x296/0x480 [ 138.674935][ T6657] __se_sys_io_setup+0x6b/0x1b0 [ 138.675032][ T6657] __x64_sys_io_setup+0x31/0x40 [ 138.675079][ T6657] x64_sys_call+0x1a9f/0x2550 [ 138.675117][ T6657] do_syscall_64+0x112/0x360 [ 138.675269][ T6657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.675300][ T6657] RIP: 0033:0x7fb8bf44f559 [ 138.675321][ T6657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.675345][ T6657] RSP: 002b:00007fb8bde9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 138.675372][ T6657] RAX: ffffffffffffffda RBX: 00007fb8bf6d5fa0 RCX: 00007fb8bf44f559 [ 138.675391][ T6657] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000002278 [ 138.675409][ T6657] RBP: 00007fb8bf4e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 138.675422][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.675436][ T6657] R13: 00007fb8bf6d6038 R14: 00007fb8bf6d5fa0 R15: 00007ffe56067c68 [ 138.675460][ T6657] [ 139.713529][ T6692] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1059'. [ 140.015099][ T6690] loop2: detected capacity change from 0 to 8192 [ 140.082186][ T6709] loop0: detected capacity change from 0 to 764 [ 141.346900][ T23] Process accounting resumed [ 141.386586][ T6738] FAULT_INJECTION: forcing a failure. [ 141.386586][ T6738] name failslab, interval 1, probability 0, space 0, times 0 [ 141.386625][ T6738] CPU: 1 UID: 0 PID: 6738 Comm: syz.2.1071 Not tainted syzkaller #0 PREEMPT(lazy) [ 141.386655][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.386667][ T6738] Call Trace: [ 141.386674][ T6738] [ 141.386681][ T6738] __dump_stack+0x1d/0x30 [ 141.386711][ T6738] dump_stack_lvl+0x95/0xd0 [ 141.386764][ T6738] dump_stack+0x15/0x1b [ 141.386788][ T6738] should_fail_ex+0x262/0x280 [ 141.386820][ T6738] ? resv_map_alloc+0x57/0x190 [ 141.386911][ T6738] should_failslab+0x8c/0xb0 [ 141.386981][ T6738] __kmalloc_cache_noprof+0x5d/0x3e0 [ 141.387010][ T6738] ? resv_map_alloc+0x57/0x190 [ 141.387038][ T6738] resv_map_alloc+0x57/0x190 [ 141.387062][ T6738] hugetlbfs_get_inode+0x67/0x330 [ 141.387177][ T6738] hugetlb_file_setup+0x192/0x3d0 [ 141.387282][ T6738] memfd_alloc_file+0x70/0x300 [ 141.387349][ T6738] __se_sys_memfd_create+0x2e1/0x3c0 [ 141.387382][ T6738] __x64_sys_memfd_create+0x31/0x40 [ 141.387460][ T6738] x64_sys_call+0x1955/0x2550 [ 141.387486][ T6738] do_syscall_64+0x112/0x360 [ 141.387520][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.387543][ T6738] RIP: 0033:0x7fb67710f559 [ 141.387635][ T6738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.387654][ T6738] RSP: 002b:00007fb675b67028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 141.387675][ T6738] RAX: ffffffffffffffda RBX: 00007fb677395fa0 RCX: 00007fb67710f559 [ 141.387694][ T6738] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000000 [ 141.387762][ T6738] RBP: 00007fb6771a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 141.387830][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.387846][ T6738] R13: 00007fb677396038 R14: 00007fb677395fa0 R15: 00007ffe39e2b308 [ 141.387866][ T6738] [ 141.711216][ T6747] FAULT_INJECTION: forcing a failure. [ 141.711216][ T6747] name failslab, interval 1, probability 0, space 0, times 0 [ 141.711254][ T6747] CPU: 0 UID: 0 PID: 6747 Comm: syz.2.1081 Not tainted syzkaller #0 PREEMPT(lazy) [ 141.711287][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.711306][ T6747] Call Trace: [ 141.711315][ T6747] [ 141.711380][ T6747] __dump_stack+0x1d/0x30 [ 141.711469][ T6747] dump_stack_lvl+0x95/0xd0 [ 141.711494][ T6747] dump_stack+0x15/0x1b [ 141.711588][ T6747] should_fail_ex+0x262/0x280 [ 141.711643][ T6747] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 141.711676][ T6747] should_failslab+0x8c/0xb0 [ 141.711713][ T6747] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 141.711773][ T6747] ? v9fs_parse_param+0x75a/0xa10 [ 141.711814][ T6747] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 141.711879][ T6747] kmemdup_nul+0x36/0xc0 [ 141.711992][ T6747] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 141.712030][ T6747] vfs_parse_monolithic_sep+0x16a/0x270 [ 141.712160][ T6747] generic_parse_monolithic+0x24/0x30 [ 141.712189][ T6747] parse_monolithic_mount_data+0x46/0x60 [ 141.712237][ T6747] do_new_mount+0x24e/0x730 [ 141.712279][ T6747] ? security_capable+0x7b/0x90 [ 141.712317][ T6747] path_mount+0x4ad/0xb90 [ 141.712341][ T6747] __se_sys_mount+0x28c/0x2e0 [ 141.712368][ T6747] __x64_sys_mount+0x67/0x80 [ 141.712398][ T6747] x64_sys_call+0xc3b/0x2550 [ 141.712499][ T6747] do_syscall_64+0x112/0x360 [ 141.712545][ T28] audit: type=1400 audit(1792575578.921:569): avc: denied { mounton } for pid=6746 comm="syz.2.1081" path="/198/proc/517/task/518/fail-nth" dev="proc" ino=13203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 141.712596][ T6747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.712626][ T6747] RIP: 0033:0x7fb67710f559 [ 141.712647][ T6747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.712667][ T6747] RSP: 002b:00007fb675b67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 141.712688][ T6747] RAX: ffffffffffffffda RBX: 00007fb677395fa0 RCX: 00007fb67710f559 [ 141.712704][ T6747] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 141.712812][ T6747] RBP: 00007fb6771a6b20 R08: 00002000000002c0 R09: 0000000000000000 [ 141.712830][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.712847][ T6747] R13: 00007fb677396038 R14: 00007fb677395fa0 R15: 00007ffe39e2b308 [ 141.712870][ T6747] [ 142.357143][ T6757] loop3: detected capacity change from 0 to 8192 [ 142.390788][ T6743] Process accounting resumed [ 142.415647][ T28] audit: type=1400 audit(1792575579.631:570): avc: denied { read } for pid=6764 comm="syz.0.1088" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.416480][ T28] audit: type=1400 audit(1792575580.631:571): avc: denied { execute } for pid=6783 comm="syz.5.1093" path="/98/file1" dev="tmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.554973][ T28] audit: type=1400 audit(1792575580.761:572): avc: denied { read write } for pid=6785 comm="syz.0.1096" name="set_event" dev="tracefs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 143.555084][ T28] audit: type=1400 audit(1792575580.761:573): avc: denied { open } for pid=6785 comm="syz.0.1096" path="/202/trace/set_event" dev="tracefs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 143.823109][ T6800] loop0: detected capacity change from 0 to 256 [ 143.867421][ T6801] loop5: detected capacity change from 0 to 256 [ 146.940628][ T28] audit: type=1400 audit(1792575584.151:574): avc: denied { open } for pid=6912 comm="syz.2.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 146.940665][ T28] audit: type=1400 audit(1792575584.151:575): avc: denied { kernel } for pid=6912 comm="syz.2.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.034997][ T28] audit: type=1400 audit(1792575584.241:576): avc: denied { cpu } for pid=6916 comm="syz.0.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.263785][ T6939] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1154'. [ 147.547356][ T28] audit: type=1400 audit(1792575584.761:577): avc: denied { write } for pid=6958 comm="syz.3.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.576777][ T6959] syz.3.1163 (6959) used greatest stack depth: 9888 bytes left [ 147.670865][ T28] audit: type=1400 audit(1792575584.861:578): avc: denied { create } for pid=6972 comm="syz.5.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.700551][ T28] audit: type=1400 audit(1792575584.911:579): avc: denied { name_bind } for pid=6978 comm="syz.3.1172" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 147.804639][ T6987] netlink: 'syz.5.1176': attribute type 17 has an invalid length. [ 147.804664][ T6987] netlink: 'syz.5.1176': attribute type 16 has an invalid length. [ 147.804750][ T6987] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1176'. [ 147.871625][ T6995] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1178'. [ 147.915771][ T28] audit: type=1400 audit(1792575585.131:580): avc: denied { tracepoint } for pid=6990 comm="syz.5.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.982379][ T28] audit: type=1400 audit(1792575585.191:581): avc: denied { create } for pid=6990 comm="syz.5.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.166416][ T28] audit: type=1400 audit(1792575585.381:582): avc: denied { create } for pid=7021 comm="syz.3.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.198466][ T7022] netlink: 'syz.3.1190': attribute type 10 has an invalid length. [ 148.222411][ T7022] bridge0: port 3(dummy0) entered disabled state [ 148.232025][ T7022] dummy0: left allmulticast mode [ 148.232098][ T7022] dummy0: left promiscuous mode [ 148.232415][ T7022] bridge0: port 3(dummy0) entered disabled state [ 149.725142][ T28] audit: type=1400 audit(1792575586.911:583): avc: denied { setopt } for pid=7068 comm="syz.5.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 149.800191][ T7075] netlink: 'syz.2.1209': attribute type 21 has an invalid length. [ 149.800284][ T7075] netlink: 'syz.2.1209': attribute type 4 has an invalid length. [ 149.800315][ T7075] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1209'. [ 152.225455][ T7143] netlink: 'syz.5.1233': attribute type 19 has an invalid length. [ 152.225505][ T7143] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1233'. [ 152.563587][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 152.563603][ T28] audit: type=1400 audit(1792575589.771:585): avc: denied { create } for pid=7144 comm="syz.4.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.563627][ T28] audit: type=1400 audit(1792575589.771:586): avc: denied { write } for pid=7144 comm="syz.4.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.912211][ T28] audit: type=1400 audit(1792575590.121:587): avc: denied { create } for pid=7154 comm="syz.3.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 153.004594][ T7155] : port 1(ip6gretap0) entered blocking state [ 153.004683][ T7155] : port 1(ip6gretap0) entered disabled state [ 153.004927][ T7155] ip6gretap0: entered allmulticast mode [ 153.023377][ T7155] ip6gretap0: entered promiscuous mode [ 153.066348][ T7181] netlink: 'syz.2.1249': attribute type 29 has an invalid length. [ 153.798727][ T7219] netlink: 16375 bytes leftover after parsing attributes in process `syz.4.1262'. [ 153.819319][ T7221] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1264'. [ 154.145317][ T7232] bridge0: port 1(dummy0) entered blocking state [ 154.148280][ T7232] bridge0: port 1(dummy0) entered disabled state [ 154.153687][ T7232] dummy0: entered allmulticast mode [ 154.192494][ T7232] dummy0: entered promiscuous mode [ 154.874757][ T7266] netlink: 'syz.0.1281': attribute type 10 has an invalid length. [ 154.874878][ T7266] bridge0: port 3(dummy0) entered disabled state [ 154.875015][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.905692][ T7266] bridge0: port 3(dummy0) entered blocking state [ 154.905727][ T7266] bridge0: port 3(dummy0) entered forwarding state [ 154.905837][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.905876][ T7266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.914865][ T7266] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 154.959879][ T7268] ip6gretap0: left allmulticast mode [ 154.959995][ T7268] ip6gretap0: left promiscuous mode [ 154.960152][ T7268] : port 1(ip6gretap0) entered disabled state [ 155.000719][ T7268] dummy0: left allmulticast mode [ 155.000740][ T7268] dummy0: left promiscuous mode [ 155.000889][ T7268] bridge0: port 1(dummy0) entered disabled state [ 155.026700][ T7268] bond0: (slave bond_slave_0): Releasing backup interface [ 155.029414][ T7268] bond0: (slave bond_slave_1): Releasing backup interface [ 155.051093][ T7268] team0: Failed to send options change via netlink (err -105) [ 155.051180][ T7268] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 155.051509][ T7268] team0: Port device team_slave_0 removed [ 155.053776][ T7268] team0: Failed to send options change via netlink (err -105) [ 155.053911][ T7268] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 155.054048][ T7268] team0: Port device team_slave_1 removed [ 155.054803][ T7268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.054817][ T7268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.119363][ T7268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.119405][ T7268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.122442][ T7268] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.263590][ T7271] team0: Failed to send options change via netlink (err -105) [ 155.263614][ T7271] team0: Mode changed to "activebackup" [ 155.817938][ T7313] team0: Unable to change to the same mode the team is in [ 157.674376][ T7343] netlink: 'syz.2.1309': attribute type 29 has an invalid length. [ 160.931719][ T28] audit: type=1400 audit(1792575598.141:588): avc: denied { create } for pid=7408 comm="syz.4.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 160.932806][ T28] audit: type=1400 audit(1792575598.141:589): avc: denied { write } for pid=7408 comm="syz.4.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 160.969073][ T7412] netlink: 'syz.3.1337': attribute type 10 has an invalid length. [ 160.969366][ T7412] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1337'. [ 160.969963][ T7412] veth1_virt_wifi: entered promiscuous mode [ 160.989781][ T7412] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 160.992943][ T7412] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 160.996320][ T7412] veth1_virt_wifi: entered allmulticast mode [ 161.119556][ T7422] netlink: 'syz.4.1336': attribute type 10 has an invalid length. [ 161.135676][ T7412] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 161.135846][ T7412] bridge0: port 1(veth1_virt_wifi) entered forwarding state [ 161.178014][ T7422] team0: Device wg2 is of different type [ 161.189313][ T7412] netlink: 'syz.3.1337': attribute type 10 has an invalid length. [ 161.224178][ T7418] bond0: (slave bridge0): Releasing backup interface [ 161.224933][ T7418] bridge0: port 3(dummy0) entered disabled state [ 161.225010][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.258157][ T7418] dummy0: left allmulticast mode [ 161.258214][ T7418] dummy0: left promiscuous mode [ 161.258345][ T7418] bridge0: port 3(dummy0) entered disabled state [ 161.361426][ T7418] team0: Failed to send options change via netlink (err -105) [ 161.361458][ T7418] team0: Failed to send port change of device bridge_slave_0 via netlink (err -105) [ 161.361626][ T7418] team0: Port device bridge_slave_0 removed [ 161.364264][ T7418] bridge_slave_1: left allmulticast mode [ 161.364354][ T7418] bridge_slave_1: left promiscuous mode [ 161.364499][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.485002][ T7418] bond0: (slave bond_slave_0): Releasing backup interface [ 161.489556][ T7418] bond0: (slave bond_slave_1): Releasing backup interface [ 161.503330][ T7418] team0: Failed to send options change via netlink (err -105) [ 161.503480][ T7418] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 161.503737][ T7418] team0: Port device team_slave_0 removed [ 161.537995][ T7418] team0: Failed to send options change via netlink (err -105) [ 161.552240][ T7418] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 161.552709][ T7418] team0: Port device team_slave_1 removed [ 161.571164][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.571181][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.578763][ T28] audit: type=1400 audit(1792575598.791:590): avc: denied { ioctl } for pid=7436 comm="syz.5.1346" path="/154/md0" dev="tmpfs" ino=836 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.583000][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.583075][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.924972][ T28] audit: type=1400 audit(1792575599.111:591): avc: denied { read } for pid=7440 comm="syz.5.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.114303][ T7418] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 162.136590][ T7444] ¥: port 1(team0) entered blocking state [ 162.136630][ T7444] ¥: port 1(team0) entered disabled state [ 162.136789][ T7444] team0: entered allmulticast mode [ 162.141577][ T7444] team0: entered promiscuous mode [ 162.390071][ T7454] netlink: 'syz.4.1354': attribute type 2 has an invalid length. [ 162.390093][ T7454] netlink: 'syz.4.1354': attribute type 8 has an invalid length. [ 162.390173][ T7454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1354'. [ 162.627189][ T7471] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 162.627208][ T7471] block device autoloading is deprecated and will be removed. [ 162.765601][ T7479] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1361'. [ 162.800804][ T7473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 162.802048][ T28] audit: type=1400 audit(1792575600.011:592): avc: denied { read } for pid=7477 comm="syz.2.1361" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.802078][ T28] audit: type=1400 audit(1792575600.011:593): avc: denied { open } for pid=7477 comm="syz.2.1361" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.078851][ T7487] netlink: 'syz.3.1363': attribute type 10 has an invalid length. [ 163.145923][ T7487] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 163.158772][ T28] audit: type=1400 audit(1792575600.361:594): avc: denied { create } for pid=7486 comm="syz.3.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.341951][ T7492] netlink: 'syz.3.1366': attribute type 19 has an invalid length. [ 163.377019][ T407] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 163.568819][ T7509] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.568841][ T7509] block device autoloading is deprecated and will be removed. [ 163.610731][ T7512] team0: left allmulticast mode [ 163.610809][ T7512] team0: left promiscuous mode [ 163.610998][ T7512] ¥: port 1(team0) entered disabled state [ 163.632004][ T7512] dummy0: left allmulticast mode [ 163.632070][ T7512] dummy0: left promiscuous mode [ 163.632210][ T7512] bridge0: port 1(dummy0) entered disabled state [ 163.687367][ T7512] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.809581][ T7519] netlink: 'syz.5.1376': attribute type 10 has an invalid length. [ 163.809618][ T7519] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1376'. [ 163.809746][ T7519] dummy0: entered promiscuous mode [ 163.809785][ T7519] dummy0: entered allmulticast mode [ 163.827061][ T7519] bridge0: port 1(dummy0) entered blocking state [ 163.827731][ T7519] bridge0: port 1(dummy0) entered disabled state [ 163.865959][ T7519] bridge0: port 1(dummy0) entered blocking state [ 163.866048][ T7519] bridge0: port 1(dummy0) entered forwarding state [ 164.083654][ T7536] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1379'. [ 164.245254][ T7543] md: array md4 already initialised! [ 165.005843][ T7559] netlink: 'syz.5.1391': attribute type 10 has an invalid length. [ 166.041136][ T28] audit: type=1400 audit(1792575603.251:595): avc: denied { read } for pid=7592 comm="syz.2.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 166.755945][ T7610] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1413'. [ 166.788046][ T28] audit: type=1400 audit(1792575604.001:596): avc: denied { read } for pid=7611 comm="syz.3.1414" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 166.788140][ T28] audit: type=1400 audit(1792575604.001:597): avc: denied { open } for pid=7611 comm="syz.3.1414" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 167.975640][ T7649] dummy0: left allmulticast mode [ 167.975700][ T7649] dummy0: left promiscuous mode [ 167.979460][ T7649] bridge0: port 3(dummy0) entered disabled state [ 168.035690][ T7649] bridge_slave_1: left allmulticast mode [ 168.035716][ T7649] bridge_slave_1: left promiscuous mode [ 168.035858][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.064561][ T7649] bond0: (slave bond_slave_0): Releasing backup interface [ 168.095174][ T7649] bond0: (slave bond_slave_1): Releasing backup interface [ 168.125987][ T7649] team0: Failed to send options change via netlink (err -105) [ 168.126368][ T7649] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 168.126508][ T7649] team0: Port device team_slave_0 removed [ 168.202818][ T7649] team0: Failed to send options change via netlink (err -105) [ 168.202911][ T7649] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 168.204637][ T7649] team0: Port device team_slave_1 removed [ 168.230893][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.230961][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.233814][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.261137][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.068352][ T7649] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.114158][ T7666] bridge0: port 2(dummy0) entered blocking state [ 169.114202][ T7666] bridge0: port 2(dummy0) entered disabled state [ 169.114458][ T7666] dummy0: entered allmulticast mode [ 169.116244][ T7666] dummy0: entered promiscuous mode [ 169.545016][ T28] audit: type=1400 audit(1792575606.721:598): avc: denied { read } for pid=7681 comm="syz.5.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.702886][ T7705] netlink: 'syz.5.1445': attribute type 10 has an invalid length. [ 169.778845][ T7701] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.783874][ T28] audit: type=1400 audit(1792575606.991:599): avc: denied { ioctl } for pid=7710 comm="syz.2.1449" path="socket:[16430]" dev="sockfs" ino=16430 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 169.814120][ T7705] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.834159][ T7705] bond0: (slave team0): Enslaving as an active interface with an up link [ 170.164944][ T28] audit: type=1400 audit(1792575607.331:600): avc: denied { ioctl } for pid=7728 comm="syz.3.1457" path="socket:[16464]" dev="sockfs" ino=16464 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.164985][ T28] audit: type=1400 audit(1792575607.371:601): avc: denied { create } for pid=7728 comm="syz.3.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 170.654508][ T7740] team0: Mode changed to "activebackup" [ 171.324959][ T28] audit: type=1400 audit(1792575608.511:602): avc: denied { ioctl } for pid=7763 comm="syz.2.1468" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 171.378262][ T28] audit: type=1400 audit(1792575608.591:603): avc: denied { read } for pid=7766 comm="syz.5.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 172.115591][ T7784] team0: Mode changed to "activebackup" [ 173.615557][ T7863] bridge0: port 1(dummy0) entered blocking state [ 173.615869][ T7863] bridge0: port 1(dummy0) entered disabled state [ 173.616074][ T7863] dummy0: entered allmulticast mode [ 173.616634][ T7863] dummy0: entered promiscuous mode [ 173.616876][ T7863] bridge0: port 1(dummy0) entered blocking state [ 173.616913][ T7863] bridge0: port 1(dummy0) entered forwarding state [ 173.935236][ T7884] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1489'. [ 174.143330][ T7887] bridge0: port 1(dummy0) entered blocking state [ 174.143426][ T7887] bridge0: port 1(dummy0) entered disabled state [ 174.143523][ T7887] dummy0: entered allmulticast mode [ 174.144040][ T7887] dummy0: entered promiscuous mode [ 177.673735][ T8066] dummy0: left allmulticast mode [ 177.674380][ T8066] dummy0: left promiscuous mode [ 177.690163][ T8066] bridge0: port 2(dummy0) entered disabled state [ 178.052781][ T8066] bond0: (slave veth0_to_bond): Releasing backup interface [ 178.104186][ T8066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.104322][ T8068] team0: Unable to change to the same mode the team is in [ 178.350963][ T8079] rxe_eth0 speed is unknown, defaulting to 1000 [ 178.570924][ T8096] dummy0: left allmulticast mode [ 178.570979][ T8096] dummy0: left promiscuous mode [ 178.571210][ T8096] bridge0: port 1(dummy0) entered disabled state [ 178.669011][ T8096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.669109][ T8098] team0: Unable to change to the same mode the team is in [ 179.459672][ T8136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.483609][ T8136] team0: Unable to change to the same mode the team is in [ 179.849915][ T8160] syzkaller0: entered promiscuous mode [ 179.849941][ T8160] syzkaller0: entered allmulticast mode [ 180.567775][ T8197] sock: sock_set_timeout: `syz.4.1610' (pid 8197) tries to set negative timeout [ 180.717467][ T8202] dummy0: left allmulticast mode [ 180.717541][ T8202] dummy0: left promiscuous mode [ 180.717734][ T8202] bridge0: port 1(dummy0) entered disabled state [ 180.832795][ T8202] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.833611][ T8205] team0: Unable to change to the same mode the team is in [ 181.553634][ T8245] syzkaller0: left promiscuous mode [ 181.553700][ T8245] syzkaller0: left allmulticast mode [ 182.023702][ T8260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.042028][ T8263] team0: Unable to change to the same mode the team is in [ 182.876312][ T8292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.876726][ T8293] team0: Unable to change to the same mode the team is in [ 183.196567][ T28] audit: type=1400 audit(1792575620.301:604): avc: denied { relabelfrom } for pid=8298 comm="syz.3.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 183.196605][ T28] audit: type=1400 audit(1792575620.301:605): avc: denied { relabelto } for pid=8298 comm="syz.3.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 183.625062][ T8319] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 183.631455][ T8319] team0: Unable to change to the same mode the team is in [ 184.577824][ T8354] bond0: (slave team0): Releasing backup interface [ 184.581722][ T8354] bridge0: port 1(dummy0) entered disabled state [ 184.611305][ T8354] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 184.634036][ T8354] team0: Unable to change to the same mode the team is in [ 185.049157][ T8373] loop3: detected capacity change from 0 to 8192 [ 185.409840][ T8389] sit0: entered promiscuous mode [ 185.409860][ T8389] sit0: entered allmulticast mode [ 186.391528][ T8429] rxe_eth0 speed is unknown, defaulting to 1000 [ 186.759271][ T28] audit: type=1400 audit(1792575623.971:606): avc: denied { attach_queue } for pid=8453 comm="syz.3.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 187.581647][ T8503] bridge0: port 1(dummy0) entered blocking state [ 187.581688][ T8503] bridge0: port 1(dummy0) entered disabled state [ 188.274352][ T8503] dummy0: entered allmulticast mode [ 188.275908][ T8503] dummy0: entered promiscuous mode [ 188.276413][ T8503] bridge0: port 1(dummy0) entered blocking state [ 188.276533][ T8503] bridge0: port 1(dummy0) entered forwarding state [ 188.670143][ T8529] bridge0: port 1(dummy0) entered disabled state [ 188.670361][ T8529] bridge0: entered allmulticast mode [ 188.734969][ T8535] bridge0: port 1(dummy0) entered blocking state [ 188.735044][ T8535] bridge0: port 1(dummy0) entered forwarding state [ 188.735158][ T8535] bridge0: entered promiscuous mode [ 189.225754][ T8540] bridge0: port 1(dummy0) entered blocking state [ 189.225786][ T8540] bridge0: port 1(dummy0) entered disabled state [ 189.226655][ T8540] bridge0: port 1(dummy0) entered blocking state [ 189.226687][ T8540] bridge0: port 1(dummy0) entered forwarding state [ 189.724620][ T8574] syzkaller0: entered promiscuous mode [ 189.724644][ T8574] syzkaller0: entered allmulticast mode [ 190.347613][ T8597] bridge0: port 1(dummy0) entered disabled state [ 190.923665][ T8597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.947658][ T8598] team0: Unable to change to the same mode the team is in [ 191.059064][ T8606] loop3: detected capacity change from 0 to 8192 [ 191.092466][ T28] audit: type=1400 audit(1792575628.301:607): avc: denied { create } for pid=8613 comm="syz.5.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 191.177869][ T8617] rxe_eth0 speed is unknown, defaulting to 1000 [ 191.278980][ T8624] rxe_eth0 speed is unknown, defaulting to 1000 [ 191.439167][ T8631] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.466035][ T8634] team0: Unable to change to the same mode the team is in [ 192.531589][ T28] audit: type=1400 audit(1792575629.741:608): avc: denied { create } for pid=8691 comm="syz.0.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 192.653509][ T8698] bridge0: entered allmulticast mode [ 192.655685][ T8698] bridge0: entered promiscuous mode [ 195.536510][ T8716] syz.2.1806 (8716) used greatest stack depth: 8544 bytes left [ 195.538282][ T8766] bridge0: port 1(dummy0) entered blocking state [ 195.538323][ T8766] bridge0: port 1(dummy0) entered disabled state [ 195.538486][ T8766] dummy0: entered allmulticast mode [ 195.539093][ T8766] dummy0: entered promiscuous mode [ 195.539566][ T8766] bridge0: port 1(dummy0) entered blocking state [ 195.539594][ T8766] bridge0: port 1(dummy0) entered forwarding state [ 196.435534][ T8790] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.439509][ T8790] team0: Unable to change to the same mode the team is in [ 196.604700][ T8802] loop2: detected capacity change from 0 to 8192 [ 196.738470][ T8821] dummy0: left allmulticast mode [ 196.738612][ T8821] dummy0: left promiscuous mode [ 196.738723][ T8821] bridge0: port 1(dummy0) entered disabled state [ 196.841004][ T8821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.851050][ T8827] team0: Unable to change to the same mode the team is in [ 197.623214][ T8855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.643852][ T8865] team0: Unable to change to the same mode the team is in [ 199.221711][ T8906] dummy0: left allmulticast mode [ 199.221735][ T8906] dummy0: left promiscuous mode [ 199.221900][ T8906] bridge0: port 3(dummy0) entered disabled state [ 199.225543][ T8906] bridge_slave_1: left allmulticast mode [ 199.225566][ T8906] bridge_slave_1: left promiscuous mode [ 199.225725][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.228568][ T8906] bond0: (slave bond_slave_0): Releasing backup interface [ 199.229468][ T8906] bond0: (slave bond_slave_1): Releasing backup interface [ 199.230691][ T8906] team0: Port device team_slave_0 removed [ 199.231394][ T8906] team0: Port device team_slave_1 removed [ 199.231598][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.231892][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.232259][ T8906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 199.234215][ T8906] team0: Mode changed to "activebackup" [ 200.750190][ T8941] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.768657][ T8941] team0: Unable to change to the same mode the team is in [ 201.336968][ T8980] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.341002][ T8980] team0: Unable to change to the same mode the team is in [ 202.169945][ T9008] dummy0: left allmulticast mode [ 202.170007][ T9008] dummy0: left promiscuous mode [ 202.170169][ T9008] bridge0: port 1(dummy0) entered disabled state [ 202.231600][ T9008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 202.232389][ T9011] team0: Unable to change to the same mode the team is in [ 202.458438][ T9045] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 202.471082][ T9045] team0: Unable to change to the same mode the team is in [ 202.536808][ T9055] bridge0: port 1(bond0) entered blocking state [ 202.536841][ T9055] bridge0: port 1(bond0) entered disabled state [ 202.536968][ T9055] bond0: entered allmulticast mode [ 202.538110][ T9055] bond0: entered promiscuous mode [ 202.585526][ T9060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1939'. [ 202.585851][ T9060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1939'. [ 202.690512][ T28] audit: type=1400 audit(1792575639.901:609): avc: denied { setopt } for pid=9064 comm="syz.4.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.717698][ T28] audit: type=1400 audit(1792575639.931:610): avc: denied { connect } for pid=9064 comm="syz.4.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.036541][ T28] audit: type=1400 audit(1792575640.251:611): avc: denied { create } for pid=9107 comm="syz.5.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.037079][ T28] audit: type=1400 audit(1792575640.251:612): avc: denied { setopt } for pid=9107 comm="syz.5.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.037114][ T28] audit: type=1400 audit(1792575640.251:613): avc: denied { bind } for pid=9107 comm="syz.5.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.037788][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1956'. [ 203.038502][ T28] audit: type=1400 audit(1792575640.251:614): avc: denied { write } for pid=9107 comm="syz.5.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.298015][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 203.391882][ T9151] loop3: detected capacity change from 0 to 8192 [ 203.517325][ T9182] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 203.635549][ T9186] xt_hashlimit: size too large, truncated to 1048576 [ 203.938351][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'. [ 203.938473][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1991'. [ 203.967994][ T7833] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.968044][ T7833] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.968081][ T7833] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.015089][ T3774] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.232067][ T28] audit: type=1400 audit(1792575641.441:615): avc: denied { setopt } for pid=9236 comm="syz.2.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.234377][ T28] audit: type=1400 audit(1792575641.441:616): avc: denied { ioctl } for pid=9236 comm="syz.2.2001" path="socket:[20195]" dev="sockfs" ino=20195 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.297586][ T9245] netlink: 'syz.0.2002': attribute type 10 has an invalid length. [ 204.314170][ T9245] team0: Port device dummy0 added [ 204.324865][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'. [ 204.472371][ T9266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2010'. [ 204.489431][ T9272] ip_tables: iptables: counters copy to user failed while replacing table [ 204.508796][ T9275] tc_dump_action: action bad kind [ 204.593192][ T9293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2022'. [ 204.655402][ T9303] netlink: 'syz.3.2026': attribute type 1 has an invalid length. [ 204.702061][ T28] audit: type=1400 audit(1792575641.911:617): avc: denied { bind } for pid=9310 comm="syz.2.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 204.702211][ T28] audit: type=1400 audit(1792575641.911:618): avc: denied { connect } for pid=9310 comm="syz.2.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 204.852369][ T9328] ip_tables: iptables: counters copy to user failed while replacing table [ 204.954488][ T9336] xt_hashlimit: size too large, truncated to 1048576 [ 205.197307][ T9350] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2041'. [ 205.487861][ T9372] bridge0: port 1(dummy0) entered blocking state [ 205.487936][ T9372] bridge0: port 1(dummy0) entered disabled state [ 205.488806][ T9372] bridge0: port 1(dummy0) entered blocking state [ 205.488836][ T9372] bridge0: port 1(dummy0) entered forwarding state [ 206.918550][ T9433] xt_hashlimit: size too large, truncated to 1048576 [ 207.024622][ T9428] team0: Port device dummy0 removed [ 207.028570][ T9428] bridge0: port 1(dummy0) entered blocking state [ 207.032517][ T9428] bridge0: port 1(dummy0) entered disabled state [ 207.034329][ T9428] dummy0: entered allmulticast mode [ 207.039341][ T9428] dummy0: entered promiscuous mode [ 207.711466][ T9446] tipc: Enabling of bearer rejected, failed to enable media [ 207.861010][ T9453] ip_tables: iptables: counters copy to user failed while replacing table [ 208.009392][ T9477] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 208.009414][ T9477] netlink: 'syz.4.2088': attribute type 2 has an invalid length. [ 208.050280][ T9483] xt_hashlimit: size too large, truncated to 1048576 [ 208.295932][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 208.296015][ T28] audit: type=1400 audit(1792575645.471:622): avc: denied { ioctl } for pid=9509 comm="syz.3.2101" path="socket:[21536]" dev="sockfs" ino=21536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.296050][ T28] audit: type=1400 audit(1792575645.471:623): avc: denied { read } for pid=9509 comm="syz.3.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.392276][ T9519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9519 comm=syz.0.2105 [ 208.827510][ T9516] bridge0: port 1(dummy0) entered blocking state [ 208.827546][ T9516] bridge0: port 1(dummy0) entered disabled state [ 208.827699][ T9516] dummy0: entered allmulticast mode [ 208.828369][ T9516] dummy0: entered promiscuous mode [ 208.863768][ T9523] netlink: 'syz.0.2106': attribute type 10 has an invalid length. [ 209.380057][ T9523] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.382031][ T9523] bond0: (slave team0): Enslaving as an active interface with an up link [ 209.383518][ T9525] team0: Unable to change to the same mode the team is in [ 209.528440][ T28] audit: type=1400 audit(1792575646.741:624): avc: denied { connect } for pid=9548 comm="syz.0.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.529220][ T28] audit: type=1400 audit(1792575646.741:625): avc: denied { ioctl } for pid=9548 comm="syz.0.2117" path="socket:[21589]" dev="sockfs" ino=21589 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.529650][ T9547] syzkaller0: left promiscuous mode [ 209.529674][ T9547] syzkaller0: left allmulticast mode [ 209.689216][ T9552] bridge0: port 2(dummy0) entered blocking state [ 209.689248][ T9552] bridge0: port 2(dummy0) entered disabled state [ 209.689396][ T9552] dummy0: entered allmulticast mode [ 209.690071][ T9552] dummy0: entered promiscuous mode [ 209.690262][ T9552] bridge0: port 2(dummy0) entered blocking state [ 209.690368][ T9552] bridge0: port 2(dummy0) entered forwarding state [ 209.768830][ T9560] rxe_eth0 speed is unknown, defaulting to 1000 [ 209.769581][ T9565] team0: Unable to change to the same mode the team is in [ 210.907022][ T9602] team0: Unable to change to the same mode the team is in [ 211.026959][ T9614] veth1_to_team: entered promiscuous mode [ 211.027166][ T9614] veth1_to_team: entered allmulticast mode [ 211.175621][ T9618] ================================================================== [ 211.175665][ T9618] BUG: KCSAN: data-race in bpf_obj_memcpy / bpf_obj_memcpy [ 211.175700][ T9618] [ 211.175706][ T9618] write to 0xffff88811c284018 of 4866 bytes by task 9617 on cpu 0: [ 211.175723][ T9618] bpf_obj_memcpy+0x16a/0x190 [ 211.175747][ T9618] rhtab_map_update_elem+0xec/0xf40 [ 211.175773][ T9618] bpf_map_update_value+0x4ee/0x570 [ 211.175800][ T9618] generic_map_update_batch+0x4d7/0x6f0 [ 211.175828][ T9618] bpf_map_do_batch+0x25b/0x380 [ 211.175859][ T9618] __sys_bpf+0xa8e/0xc30 [ 211.175891][ T9618] __x64_sys_bpf+0x69/0x80 [ 211.175920][ T9618] x64_sys_call+0xf26/0x2550 [ 211.175964][ T9618] do_syscall_64+0x112/0x360 [ 211.175997][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.176025][ T9618] [ 211.176033][ T9618] write to 0xffff88811c284018 of 4866 bytes by task 9618 on cpu 1: [ 211.176056][ T9618] bpf_obj_memcpy+0x16a/0x190 [ 211.176089][ T9618] rhtab_map_update_elem+0xec/0xf40 [ 211.176114][ T9618] bpf_map_update_value+0x4ee/0x570 [ 211.176142][ T9618] generic_map_update_batch+0x4d7/0x6f0 [ 211.176171][ T9618] bpf_map_do_batch+0x25b/0x380 [ 211.176213][ T9618] __sys_bpf+0xa8e/0xc30 [ 211.176242][ T9618] __x64_sys_bpf+0x69/0x80 [ 211.176274][ T9618] x64_sys_call+0xf26/0x2550 [ 211.176319][ T9618] do_syscall_64+0x112/0x360 [ 211.176354][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.176384][ T9618] [ 211.176389][ T9618] Reported by Kernel Concurrency Sanitizer on: [ 211.176413][ T9618] CPU: 1 UID: 0 PID: 9618 Comm: syz.2.2139 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.176449][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.176467][ T9618] ==================================================================